$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa File: 8b480af6-a872-4019-ac1d-12c2bcff44e8.roa (raw, json) Hash identifier: GYygM5ss+AOJANEu045u2yajIDx6miwMznPQ/nAhZps= Subject key identifier: 1C:DE:91:79:EA:C3:F4:3A:68:F6:9F:40:23:C5:76:74:6B:36:70:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 431ADB760540E001D3F0DCEACA2E77832A0BC904 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa Signing time: Sat 19 Jul 2025 00:21:55 +0000 ROA not before: Sat 19 Jul 2025 00:21:55 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1a:db:76:05:40:e0:01:d3:f0:dc:ea:ca:2e:77:83:2a:0b:c9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:21:55 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=516362fc52a84179115449f50ec9f39190faf52f3748d719dcb9bd6128abb5a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:84:d0:1d:d5:27:c6:45:f5:01:bc:13:67: 49:e2:47:bd:8b:5c:61:a2:87:1b:5a:52:68:c5:e4: 5b:97:99:8e:90:f9:76:01:82:40:09:ae:09:7b:7c: 4b:f7:13:93:62:60:94:ca:28:28:cd:0c:1b:56:4a: 37:a8:e0:e3:da:40:a3:93:1b:82:66:b8:66:7f:e5: e6:87:b9:25:60:d2:49:d6:4f:69:3d:68:26:15:84: 3c:b2:f7:6f:e3:ea:5e:15:bd:e8:92:f1:e8:ef:21: ee:a3:83:ca:a7:73:ad:8f:cc:08:a8:2c:3e:1a:3f: b4:1e:43:7b:8a:6a:ba:a6:55:28:c4:d8:0d:64:9a: 64:2c:4f:6a:38:ab:5f:85:1e:38:9c:d5:d2:f3:59: 31:75:cf:f3:b3:13:55:6f:72:ea:c8:58:a4:c2:10: 0b:5d:0c:08:64:fb:f1:30:1f:d3:0f:50:68:3e:b5: 81:aa:b0:5e:41:27:8d:8d:bd:9c:5f:aa:3b:ee:31: 56:1f:43:2d:35:9e:fc:6f:5b:df:59:25:92:6d:0d: 3c:b5:84:4e:25:0c:fc:fb:3f:6e:99:a4:fd:d9:78: 0d:5a:a9:4c:8f:01:7b:3e:60:d6:8d:56:10:bc:45: 2b:a2:80:ac:b0:34:d9:66:9b:99:7f:6f:4b:5d:c9: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:91:79:EA:C3:F4:3A:68:F6:9F:40:23:C5:76:74:6B:36:70:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:60:2d:14:e5:c0:c5:04:fa:22:8e:ee:01:53:47:12:f0:9b: 11:62:b1:ad:d2:b5:a0:b5:fb:be:68:4f:1f:bb:c3:de:57:6a: 3b:16:75:46:a1:45:a1:ab:a4:71:ea:ab:e4:a7:01:c8:89:af: c4:33:cd:9b:00:06:40:8a:01:dc:91:a0:5c:62:7f:1a:fd:a3: 2f:36:ef:66:f1:cb:f6:cd:ec:3e:65:4b:41:f7:6b:55:82:4b: 5c:d3:c1:19:d4:e9:92:db:34:76:97:ad:5b:b3:7b:4c:32:fe: 1e:89:ed:7b:fd:ed:38:dc:2c:96:de:cc:6c:94:08:95:45:91: 7a:aa:f0:bc:16:8b:22:2f:78:ea:58:f9:fc:7e:c2:dc:b7:0b: a9:e1:5f:8f:9b:4b:07:49:e2:ab:b9:33:85:ec:8e:f6:25:a0: 8d:c0:bc:d0:ee:53:03:71:f0:7b:c0:55:60:35:ad:9b:c9:47: f5:43:df:9b:51:c0:36:59:01:8a:36:6b:5d:ea:7c:37:a9:19: 1c:48:2c:aa:1f:ce:22:25:3a:e7:11:38:04:4d:d9:85:22:49: 6c:22:e5:95:32:46:7e:99:d1:bb:58:af:1d:d9:a2:3c:f2:47: 7e:1a:e4:0c:14:39:d2:da:d5:1c:ce:c8:fa:de:4e:e4:b2:ff: c1:6d:74:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQxrbdgVA4AHT8Nzqyi53gyoLyQQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMTU1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTYzNjJmYzUyYTg0MTc5MTE1NDQ5ZjUwZWM5ZjM5MTkw ZmFmNTJmMzc0OGQ3MTlkY2I5YmQ2MTI4YWJiNWEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDitYTQHdUnxkX1AbwTZ0niR72LXGGihxtaUmjF5FuXmY6Q +XYBgkAJrgl7fEv3E5NiYJTKKCjNDBtWSjeo4OPaQKOTG4JmuGZ/5eaHuSVg0knW T2k9aCYVhDyy92/j6l4VveiS8ejvIe6jg8qnc62PzAioLD4aP7QeQ3uKarqmVSjE 2A1kmmQsT2o4q1+FHjic1dLzWTF1z/OzE1VvcurIWKTCEAtdDAhk+/EwH9MPUGg+ tYGqsF5BJ42NvZxfqjvuMVYfQy01nvxvW99ZJZJtDTy1hE4lDPz7P26ZpP3ZeA1a qUyPAXs+YNaNVhC8RSuigKywNNlmm5l/b0tdyaUdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHN6ReerD9Dpo9p9AI8V2dGs2cPMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNDgwYWY2LWE4NzItNDAxOS1hYzFkLTEyYzJiY2ZmNDRlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2ITANBgkqhkiG9w0BAQsFAAOCAQEAkmAtFOXAxQT6Io7uAVNHEvCbEWKx rdK1oLX7vmhPH7vD3ldqOxZ1RqFFoaukceqr5KcByImvxDPNmwAGQIoB3JGgXGJ/ Gv2jLzbvZvHL9s3sPmVLQfdrVYJLXNPBGdTpkts0dpetW7N7TDL+Honte/3tONws lt7MbJQIlUWReqrwvBaLIi946lj5/H7C3LcLqeFfj5tLB0niq7kzheyO9iWgjcC8 0O5TA3Hwe8BVYDWtm8lH9UPfm1HANlkBijZrXep8N6kZHEgsqh/OIiU65xE4BE3Z hSJJbCLllTJGfpnRu1ivHdmiPPJHfhrkDBQ50trVHM7I+t5O5LL/wW10PA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:01 2025 by rpki-client