$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa File: 84098119-db6f-400e-8b50-d3b7152181be.roa (raw, json) Hash identifier: SUegSUSL2lDwhWaTIr2q6Lb7caxr8uhNB/PPcB7X+SI= Subject key identifier: 8E:CB:5E:F3:7B:48:45:E1:76:D3:E6:1A:B0:3F:0B:96:90:A8:3D:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A02D710D50F4DCD18BCB99594DF49DDF1195F13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa Signing time: Sat 19 Jul 2025 00:01:01 +0000 ROA not before: Sat 19 Jul 2025 00:01:01 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 166.108.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:02:d7:10:d5:0f:4d:cd:18:bc:b9:95:94:df:49:dd:f1:19:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:01 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=bdceda314f3f4c5ee707db069444761918fd42fa157037a61f414079e385c56a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:6f:57:3e:87:4d:d0:07:d4:ac:53:a0:e8: d5:06:fc:03:43:a5:53:78:06:4f:a3:f3:68:23:d2: 2d:99:b5:20:71:99:93:c3:20:58:2b:29:54:69:11: 68:c6:86:56:a2:6f:4b:48:22:fc:f2:3c:96:5c:8e: f0:91:93:5c:ad:71:e4:76:e2:2c:21:4e:46:08:8e: a3:42:2b:6c:f8:08:1d:6e:66:e4:b7:62:51:5d:8f: 4d:ab:0f:b3:83:c9:e5:e6:40:1e:f6:5f:7e:96:16: d8:f6:eb:1b:f5:d5:b5:82:79:16:5c:7f:20:f8:31: 5a:e3:d6:b0:25:dc:5d:d7:64:8a:35:70:c8:7d:4f: 11:8f:22:c0:4b:a0:97:60:37:e3:de:22:94:41:12: 7a:17:ea:88:11:aa:8f:cc:92:4e:8d:bc:50:4f:22: be:df:c8:71:9d:f2:a2:3b:6c:9f:ee:90:ca:4d:57: 2d:3f:4f:1e:43:8f:6b:32:6a:15:49:e0:ad:2e:25: 43:f5:bc:0a:b5:e8:f3:f9:f7:9d:09:68:35:ae:81: 8a:9e:71:ad:e9:2a:50:d5:ef:f5:09:67:77:a0:85: c6:c4:fc:47:c9:a7:dc:35:7e:16:05:6a:f3:70:20: b6:81:04:ff:b8:b1:f2:3d:a2:92:c4:39:e2:cf:e2: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:5E:F3:7B:48:45:E1:76:D3:E6:1A:B0:3F:0B:96:90:A8:3D:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.108.0.0/19 Signature Algorithm: sha256WithRSAEncryption 21:fc:99:55:a4:ae:ef:78:e9:a5:6d:be:cf:be:05:09:f8:de: 3b:cc:53:2c:6c:53:43:bb:57:83:66:d7:ec:05:6b:7a:2c:98: 21:34:b2:18:f1:15:32:7b:0f:c4:60:51:9d:97:5b:c9:04:c7: e1:54:2e:91:35:77:37:d4:9b:af:43:d2:3c:50:1b:63:06:c1: 43:ed:a7:b0:d8:28:fa:ae:27:8c:80:28:89:65:3b:41:dd:b6: 5a:b7:1f:ae:7c:4a:d9:e4:d0:3f:b1:5f:d4:eb:46:9f:60:2b: df:d5:22:cd:30:4a:1e:1b:81:f1:57:45:5a:d6:34:c7:64:93: c8:ba:dd:c4:10:93:ca:b3:3a:5f:f5:da:1e:09:6f:78:3c:f9: ae:3c:90:b5:1d:aa:a2:70:53:02:54:c1:05:39:5f:7d:45:e4: 9f:f1:ff:22:6d:33:e2:56:ab:3b:3c:73:33:dc:af:d8:12:11: 67:02:8d:de:71:fc:82:9a:df:5f:a9:85:9a:54:e1:6c:dd:b4: a3:08:0c:59:0d:e2:96:9c:35:86:0a:33:09:1b:9b:92:c1:bf: a3:9c:c8:95:57:56:68:e1:bd:df:6b:85:35:d9:ba:82:bd:1c: 02:1e:79:ea:73:f7:9b:9c:7a:42:9b:5d:3d:96:04:3a:c0:46: 43:ea:a1:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWgLXENUPTc0YvLmVlN9J3fEZXxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTAxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGNlZGEzMTRmM2Y0YzVlZTcwN2RiMDY5NDQ0NzYxOTE4 ZmQ0MmZhMTU3MDM3YTYxZjQxNDA3OWUzODVjNTZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa8W9XPodN0AfUrFOg6NUG/ANDpVN4Bk+j82gj0i2ZtSBx mZPDIFgrKVRpEWjGhlaib0tIIvzyPJZcjvCRk1ytceR24iwhTkYIjqNCK2z4CB1u ZuS3YlFdj02rD7ODyeXmQB72X36WFtj26xv11bWCeRZcfyD4MVrj1rAl3F3XZIo1 cMh9TxGPIsBLoJdgN+PeIpRBEnoX6ogRqo/Mkk6NvFBPIr7fyHGd8qI7bJ/ukMpN Vy0/Tx5Dj2syahVJ4K0uJUP1vAq16PP5950JaDWugYqeca3pKlDV7/UJZ3eghcbE /EfJp9w1fhYFavNwILaBBP+4sfI9opLEOeLP4qO5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjste83tIReF20+YasD8LlpCoPZgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0MDk4MTE5LWRiNmYtNDAwZS04YjUwLWQzYjcxNTIxODFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWmbAAwDQYJKoZIhvcNAQELBQADggEBACH8mVWkru946aVtvs++BQn43jvM UyxsU0O7V4Nm1+wFa3osmCE0shjxFTJ7D8RgUZ2XW8kEx+FULpE1dzfUm69D0jxQ G2MGwUPtp7DYKPquJ4yAKIllO0Hdtlq3H658Stnk0D+xX9TrRp9gK9/VIs0wSh4b gfFXRVrWNMdkk8i63cQQk8qzOl/12h4Jb3g8+a48kLUdqqJwUwJUwQU5X31F5J/x /yJtM+JWqzs8czPcr9gSEWcCjd5x/IKa31+phZpU4WzdtKMIDFkN4pacNYYKMwkb m5LBv6OcyJVXVmjhvd9rhTXZuoK9HAIeeepz95ucekKbXT2WBDrARkPqofY= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:55 2025 by rpki-client