$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa File: 957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa (raw, json) Hash identifier: CFu/i0vi+eHWjGQ1nFqQj7y40VYQzv/0fLXrbh+jIv4= Subject key identifier: DA:B7:78:DB:E3:A0:DB:7B:D5:5D:CE:36:37:02:61:B0:69:2E:E9:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 043814FD957C4C49DE078313D9F9AE86C657A529 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa Signing time: Fri 18 Jul 2025 00:11:57 +0000 ROA not before: Fri 18 Jul 2025 00:11:57 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.164.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:38:14:fd:95:7c:4c:49:de:07:83:13:d9:f9:ae:86:c6:57:a5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:11:57 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=1484bd6b45f4a40db7b2b3682dba943c7e15351ab75067cf799ea23b02e83676, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:8a:a2:68:b7:c0:73:2c:36:1c:77:b8:c5: 63:e1:76:0d:16:fb:65:50:1d:53:e4:43:44:f5:51: 89:f5:22:b4:d3:51:02:c5:b5:05:07:93:3e:48:02: 18:4f:d4:35:61:95:d8:ca:c9:7b:48:08:9e:ad:43: 7b:f9:53:ae:3d:f1:9c:6c:71:17:17:21:94:99:50: 79:b5:af:ea:4a:4c:a5:9a:1a:e5:e7:bf:e9:39:d5: 7c:d2:2a:c8:87:85:1f:00:1e:b1:4e:07:1f:4f:b0: 99:34:78:69:98:ef:ad:a5:a9:79:c0:aa:62:cd:08: 8a:90:ef:9a:c2:47:b5:b8:7d:18:69:a3:d7:1e:0a: 10:b1:49:03:04:24:f8:8a:68:93:04:09:c0:3c:35: 17:89:41:d0:46:8b:cf:f6:35:f3:cf:a6:c0:f0:64: d6:9c:11:67:57:c3:9b:6f:2b:82:4c:97:ef:56:cb: f9:43:f6:08:25:c6:90:66:f1:f6:9d:80:cb:30:76: 3b:d0:2a:f0:3e:57:81:e7:d6:e1:dd:c6:31:cc:fd: d9:a5:e7:5c:70:2a:49:15:14:08:d1:f0:4f:7e:d4: 21:65:bd:28:22:11:8c:b1:51:42:9b:f1:cf:85:4d: 44:8a:2f:6c:ee:37:6c:77:bd:fa:87:f5:c2:1b:73: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:78:DB:E3:A0:DB:7B:D5:5D:CE:36:37:02:61:B0:69:2E:E9:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.164.64.0/18 Signature Algorithm: sha256WithRSAEncryption be:77:27:89:7a:69:ec:6d:82:fc:75:5c:f2:fb:fc:f7:6d:e9: c0:51:52:77:7b:75:b7:5f:44:0f:79:99:f0:c9:74:46:75:72: b0:13:e9:c2:a7:40:d3:14:3a:73:a4:f1:40:af:ef:df:21:54: a9:f6:57:ab:40:99:34:f4:2e:1c:2f:7f:0b:03:db:41:94:c7: 15:d7:69:b3:b2:0b:96:a9:c3:b0:2b:d8:ab:9c:b6:fe:33:1f: 3b:e9:93:22:6b:c1:d2:e9:f4:0f:79:94:e8:47:74:dd:76:2e: 00:3b:3e:f3:68:f4:3c:66:6f:be:4d:09:d5:56:82:51:2c:b7: 57:4c:21:ab:47:5c:f6:ac:f5:51:06:f4:45:b4:9f:b5:11:6f: ef:45:29:84:44:d5:c4:5e:83:8d:7e:93:4e:48:d7:28:b4:f6: 8b:8b:c1:cb:14:80:22:b5:ab:c8:e7:cc:4a:06:88:c7:9d:33: a3:7e:91:0e:ff:ac:04:52:08:2c:fb:91:d3:4b:25:51:f0:ff: 84:98:0a:98:51:29:10:44:4c:42:b8:4b:77:d5:61:40:98:ab: 0b:32:9f:7c:82:50:58:f4:cd:91:ce:cf:9f:79:cd:fe:83:86: 0b:d3:e4:76:47:45:02:3b:88:6a:f6:e1:11:3c:10:13:54:f6: a4:df:3f:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBDgU/ZV8TEneB4MT2fmuhsZXpSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAxMTU3WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDg0YmQ2YjQ1ZjRhNDBkYjdiMmIzNjgyZGJhOTQzYzdl MTUzNTFhYjc1MDY3Y2Y3OTllYTIzYjAyZTgzNjc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuoIqiaLfAcyw2HHe4xWPhdg0W+2VQHVPkQ0T1UYn1IrTT UQLFtQUHkz5IAhhP1DVhldjKyXtICJ6tQ3v5U6498ZxscRcXIZSZUHm1r+pKTKWa GuXnv+k51XzSKsiHhR8AHrFOBx9PsJk0eGmY762lqXnAqmLNCIqQ75rCR7W4fRhp o9ceChCxSQMEJPiKaJMECcA8NReJQdBGi8/2NfPPpsDwZNacEWdXw5tvK4JMl+9W y/lD9gglxpBm8fadgMswdjvQKvA+V4Hn1uHdxjHM/dml51xwKkkVFAjR8E9+1CFl vSgiEYyxUUKb8c+FTUSKL2zuN2x3vfqH9cIbc8SFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2rd42+Og23vVXc42NwJhsGku6ZswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1N2VhN2M2LTMwOTAtNDM4Mi05ZWY1LTI0YmZiOTM5MGNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRpEAwDQYJKoZIhvcNAQELBQADggEBAL53J4l6aextgvx1XPL7/Pdt6cBR Und7dbdfRA95mfDJdEZ1crAT6cKnQNMUOnOk8UCv798hVKn2V6tAmTT0LhwvfwsD 20GUxxXXabOyC5apw7Ar2Kuctv4zHzvpkyJrwdLp9A95lOhHdN12LgA7PvNo9Dxm b75NCdVWglEst1dMIatHXPas9VEG9EW0n7URb+9FKYRE1cReg41+k05I1yi09ouL wcsUgCK1q8jnzEoGiMedM6N+kQ7/rARSCCz7kdNLJVHw/4SYCphRKRBETEK4S3fV YUCYqwsyn3yCUFj0zZHOz595zf6DhgvT5HZHRQI7iGr24RE8EBNU9qTfP7I= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:35 2025 by rpki-client