$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa File: 93717bbd-2280-4d38-95e7-0e0e917814f8.roa (raw, json) Hash identifier: tTm5xo+eGJoHyOQ/tJ1h0G6baQ+VzBXNZnvo6+lXmv0= Subject key identifier: BB:EE:71:E8:5C:F8:82:ED:B0:86:47:4F:1D:C2:2A:DE:8B:FD:F8:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E06435695987B13E56142FF8F5A8D95AEABF5FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa Signing time: Fri 18 Jul 2025 00:41:38 +0000 ROA not before: Fri 18 Jul 2025 00:41:38 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.66.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:06:43:56:95:98:7b:13:e5:61:42:ff:8f:5a:8d:95:ae:ab:f5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:41:38 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=97b936721d3f6dd4c43e4b5a64b73d9bcd0f2fb7942d98df8e5f62a26834fba5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:0a:03:f0:2a:1d:98:5d:97:13:d2:86:e3: 18:78:2c:46:1c:da:44:27:97:e8:cc:10:f9:ae:a7: a6:75:ca:7d:f1:57:73:45:c6:70:b3:e6:c8:b9:4a: a3:3e:73:b4:05:12:b8:7b:2d:e9:68:a1:2a:0b:9b: 85:91:67:3a:da:6a:08:6b:15:8d:98:a4:d3:6b:91: 23:2c:69:f3:03:3f:cd:73:83:85:44:80:97:f7:f6: c7:f6:96:88:1e:69:59:f7:f9:b7:4e:e9:60:71:00: cb:9f:48:90:cc:b3:c5:5d:51:f8:ad:41:71:ab:d8: 4f:42:03:27:0c:39:49:7e:73:5b:9d:f1:fd:9f:f3: ef:04:8b:97:ae:81:87:59:c7:31:3e:d9:e0:07:1f: 15:26:04:09:cb:09:3d:5b:fc:a7:0e:3d:9a:9a:a6: 95:ff:6e:57:21:bb:e4:ed:a6:34:60:f9:66:26:47: cc:6d:e9:c1:3b:9e:14:ff:ef:f2:8b:31:25:9e:5b: 2c:fd:86:fd:16:67:36:61:90:28:0d:2b:32:62:3e: 6e:d6:13:ca:d1:37:90:01:8a:16:6d:d3:9c:5a:28: da:3f:35:4a:66:fd:41:1c:53:5c:7b:e3:2d:36:22: 93:71:dc:a0:01:1e:ba:3c:11:2b:78:0c:70:3b:bd: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EE:71:E8:5C:F8:82:ED:B0:86:47:4F:1D:C2:2A:DE:8B:FD:F8:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption cb:8c:ce:b8:ed:69:6a:cc:8b:2d:fb:f1:3e:03:f8:c2:ca:01: ba:81:1d:6f:10:1f:e9:fb:d0:2c:a3:6f:f9:85:42:f0:59:2c: 2a:76:7d:5c:f7:bf:b3:4d:85:10:33:90:c7:dd:e5:e5:0a:cd: 99:99:da:bd:2a:b7:70:49:45:57:7c:2c:dd:bb:bc:6d:63:69: e1:7b:17:44:40:49:35:67:75:25:f8:cc:28:2f:e8:d4:39:59: e9:03:ad:5b:58:08:34:4a:92:95:12:34:b8:3d:cf:3f:a0:cb: c2:c9:cc:f4:f5:65:dd:9b:c2:4f:78:1e:7e:18:8a:f7:50:61: 7e:8b:d0:14:a9:ad:fb:37:5e:56:36:a7:b8:97:13:a2:5d:df: c7:ff:01:e8:4a:f8:7a:80:51:0f:09:69:ee:fc:cd:15:d1:45: e2:2a:ab:0e:69:48:44:d4:99:13:dc:2a:14:73:a3:90:5d:fe: 8e:b3:44:f9:98:1f:34:1c:bf:bf:74:6a:07:26:ce:5a:20:8f: a1:0c:c2:d6:92:54:13:4a:e4:e2:0e:e7:9f:91:f9:1a:5f:22: a3:0e:d1:35:91:cf:cd:e5:99:2d:ba:7f:66:5f:39:9e:a6:a7: 41:22:f1:3e:b7:56:70:64:f2:d8:2f:73:f5:25:13:d7:fc:be: 2a:14:ff:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXgZDVpWYexPlYUL/j1qNla6r9f4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDA0MTM4WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2I5MzY3MjFkM2Y2ZGQ0YzQzZTRiNWE2NGI3M2Q5YmNk MGYyZmI3OTQyZDk4ZGY4ZTVmNjJhMjY4MzRmYmE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsvwoD8CodmF2XE9KG4xh4LEYc2kQnl+jMEPmup6Z1yn3x V3NFxnCz5si5SqM+c7QFErh7LelooSoLm4WRZzraaghrFY2YpNNrkSMsafMDP81z g4VEgJf39sf2logeaVn3+bdO6WBxAMufSJDMs8VdUfitQXGr2E9CAycMOUl+c1ud 8f2f8+8Ei5eugYdZxzE+2eAHHxUmBAnLCT1b/KcOPZqappX/blchu+TtpjRg+WYm R8xt6cE7nhT/7/KLMSWeWyz9hv0WZzZhkCgNKzJiPm7WE8rRN5ABihZt05xaKNo/ NUpm/UEcU1x74y02IpNx3KABHro8ESt4DHA7vd3bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu+5x6Fz4gu2whkdPHcIq3ov9+EYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNzE3YmJkLTIyODAtNGQzOC05NWU3LTBlMGU5MTc4MTRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAREQnAwDQYJKoZIhvcNAQELBQADggEBAMuMzrjtaWrMiy378T4D+MLKAbqB HW8QH+n70Cyjb/mFQvBZLCp2fVz3v7NNhRAzkMfd5eUKzZmZ2r0qt3BJRVd8LN27 vG1jaeF7F0RASTVndSX4zCgv6NQ5WekDrVtYCDRKkpUSNLg9zz+gy8LJzPT1Zd2b wk94Hn4YivdQYX6L0BSprfs3XlY2p7iXE6Jd38f/AehK+HqAUQ8Jae78zRXRReIq qw5pSETUmRPcKhRzo5Bd/o6zRPmYHzQcv790agcmzlogj6EMwtaSVBNK5OIO55+R +RpfIqMO0TWRz83lmS26f2ZfOZ6mp0Ei8T63VnBk8tgvc/UlE9f8vioU/1g= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:10 2025 by rpki-client