$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa File: 815dbd30-4974-4c77-9a27-6ac45a9fb646.roa (raw, json) Hash identifier: KuXBKQS5jmF5O3LSBd4aWlKfRLRug//Vzbao4/SG50o= Subject key identifier: 79:1B:45:65:9C:26:A2:DF:B2:F9:BC:9B:F8:4E:2D:36:8A:DF:99:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B868EE93D89B496128D76E3C802628EA1B20487 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa Signing time: Mon 14 Jul 2025 15:02:12 +0000 ROA not before: Mon 14 Jul 2025 15:02:12 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 22394 IP address blocks: 162.208.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:86:8e:e9:3d:89:b4:96:12:8d:76:e3:c8:02:62:8e:a1:b2:04:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:02:12 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=19ad426bc9f4290d995db27a785f049b8ca7ea9326750017b34ae945671fe57a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:3a:02:0f:20:28:0b:63:78:47:8f:f0:04: ee:a0:d6:5e:7b:2c:15:c0:5b:77:3b:aa:b3:4b:6e: 7f:84:29:19:0f:1a:aa:3e:ab:21:9d:ba:64:86:88: dc:8d:42:12:6a:c2:bc:c3:15:68:71:ee:31:ff:0f: de:db:a7:60:85:63:aa:92:6f:33:e4:79:16:5a:04: 92:37:b8:fb:a3:c6:c7:c1:97:f2:fd:ac:d7:02:38: 08:8a:fb:a1:0a:47:8b:19:ef:4b:e5:4c:e0:f6:00: ba:be:24:aa:04:b1:0c:79:3b:37:ca:57:fb:78:49: 60:2c:7e:7f:1f:72:e6:f7:05:df:9e:ae:5c:0d:6c: c2:01:02:7f:d8:87:97:17:35:be:7a:4a:51:fd:25: 47:55:4b:90:72:99:a8:af:b7:e4:31:7e:36:82:a4: 7e:08:64:93:66:0a:b0:ef:d4:cd:a3:26:3e:f8:f4: 6b:8c:92:f7:90:98:4a:f3:81:18:22:7a:e5:9b:e1: 3c:e5:0b:12:94:f6:f9:7a:b2:23:d4:af:29:8a:4a: 32:b8:97:b8:54:70:3c:84:f1:2a:48:0d:d7:82:7d: b0:5a:86:f4:a3:a3:37:e2:db:2e:5c:7a:ef:e7:05: c0:68:b9:c8:58:11:94:3d:16:ea:63:82:1f:e5:21: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:45:65:9C:26:A2:DF:B2:F9:BC:9B:F8:4E:2D:36:8A:DF:99:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.208.122.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b8:94:df:cf:c0:36:b4:0c:c9:d5:a0:da:9e:f5:a2:21:24: 42:1f:ea:8a:38:6f:f8:b0:5a:65:17:6a:41:c8:9c:f0:ae:81: 37:0f:f5:b4:20:97:b9:94:96:0e:ae:cc:48:cb:2a:69:21:7c: f3:07:24:50:d9:9f:af:a9:91:ea:fd:c6:24:50:c8:27:b8:bd: c2:5f:53:85:3e:57:40:af:6c:41:13:45:8f:11:0d:ab:9e:db: 8d:a1:91:b5:0d:be:aa:2c:32:7e:99:62:aa:f2:b8:56:50:dc: 65:d0:63:de:e7:19:b4:be:04:89:f8:41:16:f1:ff:6e:10:f8: d8:ae:8d:12:da:2c:bd:27:4f:02:6d:46:70:5c:73:5e:3d:a8: ea:8d:3a:fd:ec:56:cb:db:10:8d:57:cb:8b:f1:e7:ab:1a:7e: 6b:84:ed:4c:cc:4a:72:2d:d6:11:a0:e0:5d:6e:50:56:c1:27: 35:30:ed:c6:5f:1a:0b:46:25:c5:df:09:8e:68:a7:3f:23:cb: e2:c3:40:00:c4:ef:38:f4:70:de:b6:0a:56:3a:6f:29:aa:ce: 70:d5:06:21:ff:60:27:7b:62:ff:15:7e:17:d4:57:42:69:b9: fe:d7:af:c1:75:fc:82:2e:05:b2:0a:fc:b2:e7:a6:e9:08:9c: 5a:73:78:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG4aO6T2JtJYSjXbjyAJijqGyBIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMjEyWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWFkNDI2YmM5ZjQyOTBkOTk1ZGIyN2E3ODVmMDQ5Yjhj YTdlYTkzMjY3NTAwMTdiMzRhZTk0NTY3MWZlNTdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoDzoCDyAoC2N4R4/wBO6g1l57LBXAW3c7qrNLbn+EKRkP Gqo+qyGdumSGiNyNQhJqwrzDFWhx7jH/D97bp2CFY6qSbzPkeRZaBJI3uPujxsfB l/L9rNcCOAiK+6EKR4sZ70vlTOD2ALq+JKoEsQx5OzfKV/t4SWAsfn8fcub3Bd+e rlwNbMIBAn/Yh5cXNb56SlH9JUdVS5Bymaivt+QxfjaCpH4IZJNmCrDv1M2jJj74 9GuMkveQmErzgRgieuWb4TzlCxKU9vl6siPUrymKSjK4l7hUcDyE8SpIDdeCfbBa hvSjozfi2y5ceu/nBcBouchYEZQ9Fupjgh/lIcIxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeRtFZZwmot+y+byb+E4tNorfmRIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNWRiZDMwLTQ5NzQtNGM3Ny05YTI3LTZhYzQ1YTlmYjY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi0HowDQYJKoZIhvcNAQELBQADggEBAKS4lN/PwDa0DMnVoNqe9aIhJEIf 6oo4b/iwWmUXakHInPCugTcP9bQgl7mUlg6uzEjLKmkhfPMHJFDZn6+pker9xiRQ yCe4vcJfU4U+V0CvbEETRY8RDaue242hkbUNvqosMn6ZYqryuFZQ3GXQY97nGbS+ BIn4QRbx/24Q+NiujRLaLL0nTwJtRnBcc149qOqNOv3sVsvbEI1Xy4vx56safmuE 7UzMSnIt1hGg4F1uUFbBJzUw7cZfGgtGJcXfCY5opz8jy+LDQADE7zj0cN62ClY6 bymqznDVBiH/YCd7Yv8VfhfUV0Jpuf7Xr8F1/IIuBbIK/LLnpukInFpzeHk= -----END CERTIFICATE-----Generated at Mon Jul 21 13:05:22 2025 by rpki-client