$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa File: 8f71b618-591d-482a-9df3-5520aa5a280d.roa (raw, json) Hash identifier: 18q6QVkspFYAD8YF6WhjW7v7V6x//nbGxreIlJjzCUo= Subject key identifier: 75:D2:9E:23:E4:2E:20:10:65:9B:6F:00:16:88:03:6F:C0:C6:77:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C511A1BB4D04DD665402D4FF80B416DF2496A71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa Signing time: Sat 12 Jul 2025 00:30:24 +0000 ROA not before: Sat 12 Jul 2025 00:30:24 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:51:1a:1b:b4:d0:4d:d6:65:40:2d:4f:f8:0b:41:6d:f2:49:6a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:30:24 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=ffd217416905815d64bb8b6ae2d69b89967634000b8d56f9580d004094fab4b8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:ca:cc:04:03:bc:f4:3e:bc:d1:83:4f:b2: ef:69:7c:87:5d:4b:3c:5f:4f:3e:d3:58:df:b4:f7: e9:01:5f:35:6d:66:25:ce:2f:e0:9f:e1:b7:1b:1a: cd:9c:cc:f0:d3:b6:7b:3c:ec:6f:ec:c2:a0:48:03: c7:2c:ee:f5:ed:70:d0:be:cd:8b:46:ac:81:42:cd: fa:4a:55:aa:ca:b4:ef:7e:26:91:9c:59:7a:2d:1b: 1f:28:93:5e:6e:26:68:1e:a2:ff:f9:b5:ee:ae:97: c4:c9:c6:cd:37:2c:51:36:14:cc:e0:7d:8f:36:24: 0d:6b:ba:77:9e:85:8c:fd:3e:0b:75:23:69:b4:32: b3:c6:39:5c:6e:0b:40:2d:ee:12:0a:a5:95:c8:e5: e7:92:b0:d8:a7:ae:17:81:bd:40:37:8f:32:dc:d9: 4a:7a:6e:64:9c:2e:44:16:6b:77:14:eb:2c:4d:9d: cb:03:72:e4:ea:09:1f:f2:ec:a1:a2:5d:2e:ae:ac: 29:90:8f:82:cb:62:c4:77:f8:b5:dd:1f:ca:43:a7: 8e:bd:2c:f3:0a:09:53:69:35:0a:34:ee:fc:0a:4d: 60:34:d1:f0:2b:14:6c:e3:4c:70:af:b2:b4:b5:59: df:a6:79:97:f0:98:e7:80:03:61:dd:26:ef:7a:e5: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D2:9E:23:E4:2E:20:10:65:9B:6F:00:16:88:03:6F:C0:C6:77:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.32.0/19 Signature Algorithm: sha256WithRSAEncryption 99:58:b4:13:e9:3c:40:c9:8e:21:cd:64:a4:36:7f:63:3b:be: 72:16:30:c8:4b:d4:a2:2b:6b:9c:d4:79:21:f2:cb:2d:d9:d6: e4:b6:3f:08:62:47:3c:bd:23:da:c2:37:8d:97:fb:4a:da:d2: 75:e9:c3:f2:6e:64:e8:eb:fc:43:e1:87:77:78:6a:5d:07:a8: c6:99:3c:f6:74:da:eb:4c:15:51:d6:0f:75:cf:4d:ad:66:95: 69:74:01:b5:c5:96:36:fd:a9:78:cf:ac:46:a8:d2:a7:cb:02: 1a:b6:f9:d3:20:81:4d:6b:95:84:c6:45:cd:68:e7:2b:08:a6: ae:b6:74:75:ca:4c:4b:a6:4f:30:f9:09:1e:9a:b8:1f:2c:f0: dc:98:a9:6c:22:2e:6e:0d:79:9d:9b:94:53:a6:54:9c:e1:2d: 9b:8f:5a:1c:9b:ae:19:14:56:22:00:7e:1e:f9:8f:85:8c:7a: b1:99:2b:be:6d:ef:1c:66:9c:51:b7:20:ff:69:ee:6f:f1:8f: d1:10:09:7e:00:e9:15:41:0b:6e:c8:78:a6:03:0d:41:cd:51: 5e:46:9a:b5:e2:70:92:12:85:0e:79:6f:d8:34:a9:e3:a6:52: ba:e7:76:3a:c7:33:2b:b6:0a:dc:a7:76:17:33:c4:3d:ca:9a: 6d:9d:e7:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTFEaG7TQTdZlQC1P+AtBbfJJanEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAzMDI0WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmQyMTc0MTY5MDU4MTVkNjRiYjhiNmFlMmQ2OWI4OTk2 NzYzNDAwMGI4ZDU2Zjk1ODBkMDA0MDk0ZmFiNGI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB3MrMBAO89D680YNPsu9pfIddSzxfTz7TWN+09+kBXzVt ZiXOL+Cf4bcbGs2czPDTtns87G/swqBIA8cs7vXtcNC+zYtGrIFCzfpKVarKtO9+ JpGcWXotGx8ok15uJmgeov/5te6ul8TJxs03LFE2FMzgfY82JA1runeehYz9Pgt1 I2m0MrPGOVxuC0At7hIKpZXI5eeSsNinrheBvUA3jzLc2Up6bmScLkQWa3cU6yxN ncsDcuTqCR/y7KGiXS6urCmQj4LLYsR3+LXdH8pDp469LPMKCVNpNQo07vwKTWA0 0fArFGzjTHCvsrS1Wd+meZfwmOeAA2HdJu965SCHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUddKeI+QuIBBlm28AFogDb8DGd48wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmNzFiNjE4LTU5MWQtNDgyYS05ZGYzLTU1MjBhYTVhMjgwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjNiAwDQYJKoZIhvcNAQELBQADggEBAJlYtBPpPEDJjiHNZKQ2f2M7vnIW MMhL1KIra5zUeSHyyy3Z1uS2PwhiRzy9I9rCN42X+0ra0nXpw/JuZOjr/EPhh3d4 al0HqMaZPPZ02utMFVHWD3XPTa1mlWl0AbXFljb9qXjPrEao0qfLAhq2+dMggU1r lYTGRc1o5ysIpq62dHXKTEumTzD5CR6auB8s8NyYqWwiLm4NeZ2blFOmVJzhLZuP WhybrhkUViIAfh75j4WMerGZK75t7xxmnFG3IP9p7m/xj9EQCX4A6RVBC27IeKYD DUHNUV5GmrXicJIShQ55b9g0qeOmUrrndjrHMyu2CtyndhczxD3Kmm2d52k= -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:08 2025 by rpki-client