$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa File: 90a34226-8954-43ec-a5aa-84840736f53b.roa (raw, json) Hash identifier: RLOrSY/vEcWGACaAWHIU4bI1bW0k1mFJ8TOe5xZ5sJo= Subject key identifier: AA:11:9D:00:42:F2:15:3A:85:50:90:11:12:55:48:8E:2C:57:2F:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26A1C2F97D46A534CF77EDF99E6EF55C04FFE16C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa Signing time: Wed 09 Jul 2025 00:50:24 +0000 ROA not before: Wed 09 Jul 2025 00:50:24 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.248.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a1:c2:f9:7d:46:a5:34:cf:77:ed:f9:9e:6e:f5:5c:04:ff:e1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:50:24 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=6e513467629776cf5810e7b8a055cf21a740130d056e43201cfcb1fd0a3893c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:91:a5:41:bd:9c:9b:6b:7c:d3:61:e6:b4: e3:95:9b:cd:03:2e:de:b0:d2:a1:77:7c:f6:20:ac: 8b:e7:1d:a1:39:a6:6c:b3:6c:ee:6b:a6:29:46:06: e5:2c:1a:fb:ac:ab:33:41:6a:f3:0b:aa:e6:c6:d4: 81:9c:36:a6:3e:87:f3:ef:53:79:7a:00:5a:61:6e: ea:73:27:e1:e1:d2:21:86:be:8d:45:0e:ee:43:19: b6:b4:43:b8:96:aa:c8:c4:dd:9a:a0:e9:f2:b5:a7: e0:c4:5a:09:08:38:ae:74:ad:25:70:fd:19:c8:e7: 2d:7a:68:65:fd:14:97:5e:84:28:89:9d:49:cb:d8: e6:90:23:e4:0e:52:91:2d:0e:39:12:29:5e:e8:ad: 19:91:fd:d0:06:c1:db:8a:92:4c:27:b9:36:5e:68: bd:07:36:e1:d0:f9:ce:05:c3:d3:ff:39:5a:a1:40: 96:21:d2:56:e3:69:f1:94:08:84:4f:0a:ec:b2:07: fa:25:aa:6b:36:63:fc:c2:e8:a2:ac:d0:24:6a:9f: 5d:78:7b:9f:1f:6b:07:bd:dd:d5:d5:ec:eb:4d:30: 02:55:a5:28:4a:cd:fe:95:85:e7:73:c1:6a:13:19: b1:86:88:fc:ca:4b:b3:58:49:17:56:df:fa:d3:12: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:9D:00:42:F2:15:3A:85:50:90:11:12:55:48:8E:2C:57:2F:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.248.100.0/23 Signature Algorithm: sha256WithRSAEncryption 38:c2:6c:14:65:27:f9:d2:af:d5:36:fd:d2:2d:1c:4d:f6:20: b7:43:7b:47:1f:a5:f2:36:b3:1a:cf:ab:3c:84:4a:1c:6c:c6: 38:90:a7:26:bf:2f:81:e0:0d:c6:f6:6b:b3:8f:f4:a9:09:05: ea:de:fb:a8:ca:a2:00:d2:8c:b7:14:e3:f9:32:61:4d:6a:42: 47:1c:55:5f:db:75:30:0b:bb:4d:51:b7:c9:27:b1:bf:cb:48: 4e:8f:ea:68:b7:31:31:90:60:48:5b:7f:90:04:4c:5f:3d:a7: 8f:4f:5e:29:61:ee:13:b5:79:e2:4b:24:96:c6:76:9d:65:3a: 1c:70:94:bc:f8:c3:fb:c5:f2:5c:e1:26:6a:a9:8c:14:bb:00: 79:fb:2c:43:7a:cc:44:ae:ae:0e:08:2a:db:03:fc:8c:7d:7c: f9:5a:46:06:e2:7f:0b:cc:9a:01:50:62:3d:5d:ae:95:56:fe: 67:fc:a7:77:1b:32:46:32:5b:b2:f1:05:eb:37:e8:b9:43:29: 64:ad:23:8d:d2:cc:a3:32:96:4d:b7:79:b1:c2:39:3b:b8:40: f1:7d:a3:2c:81:f0:3d:c6:c7:20:59:80:c1:c4:84:eb:3a:25: 11:6a:a6:db:db:6f:63:75:23:08:b2:5a:69:a4:61:a4:5d:eb: 5e:27:68:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJqHC+X1GpTTPd+35nm71XAT/4WwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MDI0WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTUxMzQ2NzYyOTc3NmNmNTgxMGU3YjhhMDU1Y2YyMWE3 NDAxMzBkMDU2ZTQzMjAxY2ZjYjFmZDBhMzg5M2M4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChHZGlQb2cm2t802HmtOOVm80DLt6w0qF3fPYgrIvnHaE5 pmyzbO5rpilGBuUsGvusqzNBavMLqubG1IGcNqY+h/PvU3l6AFphbupzJ+Hh0iGG vo1FDu5DGba0Q7iWqsjE3Zqg6fK1p+DEWgkIOK50rSVw/RnI5y16aGX9FJdehCiJ nUnL2OaQI+QOUpEtDjkSKV7orRmR/dAGwduKkkwnuTZeaL0HNuHQ+c4Fw9P/OVqh QJYh0lbjafGUCIRPCuyyB/olqms2Y/zC6KKs0CRqn114e58fawe93dXV7OtNMAJV pShKzf6VhedzwWoTGbGGiPzKS7NYSRdW3/rTEgEPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqhGdAELyFTqFUJARElVIjixXL7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwYTM0MjI2LTg5NTQtNDNlYy1hNWFhLTg0ODQwNzM2ZjUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEs+GQwDQYJKoZIhvcNAQELBQADggEBADjCbBRlJ/nSr9U2/dItHE32ILdD e0cfpfI2sxrPqzyEShxsxjiQpya/L4HgDcb2a7OP9KkJBere+6jKogDSjLcU4/ky YU1qQkccVV/bdTALu01Rt8knsb/LSE6P6mi3MTGQYEhbf5AETF89p49PXilh7hO1 eeJLJJbGdp1lOhxwlLz4w/vF8lzhJmqpjBS7AHn7LEN6zESurg4IKtsD/Ix9fPla RgbifwvMmgFQYj1drpVW/mf8p3cbMkYyW7LxBes36LlDKWStI43SzKMylk23ebHC OTu4QPF9oyyB8D3GxyBZgMHEhOs6JRFqptvbb2N1IwiyWmmkYaRd614naJs= -----END CERTIFICATE-----Generated at Tue Jul 22 12:05:04 2025 by rpki-client