$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa File: 9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa (raw, json) Hash identifier: U+TaZ9jtmQQP/hK+5NasZf4UN3PDVeN68EWKwAXJZH4= Subject key identifier: 3A:7C:FB:07:A4:E3:09:0C:CD:07:FF:CB:4A:76:79:0A:9E:BE:37:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37155D5ED8994AFC0631AAA846D95371B5B5B645 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa Signing time: Wed 23 Jul 2025 00:30:27 +0000 ROA not before: Wed 23 Jul 2025 00:30:27 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.177.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:15:5d:5e:d8:99:4a:fc:06:31:aa:a8:46:d9:53:71:b5:b5:b6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:27 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=c3849e007c97f2c624a4ed280cf0af5f3cdabfe57a0dd4e48cbe3823631ad7e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:4e:26:bc:b0:ba:24:fc:a2:64:35:ee:37: f6:74:e9:b2:7d:6a:43:e0:a4:65:72:72:e7:5c:20: 04:42:77:e8:f8:80:af:e4:ad:4b:89:68:9a:d4:b8: db:4d:7c:55:10:f5:b5:00:2c:69:63:00:6c:09:6c: 6b:b3:aa:01:dc:44:d1:45:9a:0f:73:09:fe:a1:19: 08:4d:77:2f:03:cd:d9:18:8d:fd:d8:55:bb:33:a2: 03:76:ad:43:5c:c7:a9:1d:b8:e0:82:a0:f8:b5:70: 18:b0:40:d4:21:6b:e0:5b:e7:76:09:e4:bd:5c:94: cf:27:cb:b7:c7:62:68:5e:0e:08:6b:60:9a:ff:07: fb:cc:72:b7:29:24:69:a0:58:62:02:e7:e2:01:86: 1c:73:e1:83:52:8f:86:1a:3d:c2:08:ff:d6:dc:b5: 15:ee:4e:6e:0f:c2:0a:a6:c6:75:c8:c7:4a:68:35: f5:00:7e:5b:01:de:2a:8a:09:c6:8b:cc:9f:a6:bc: fa:8e:71:35:2d:cd:b9:73:62:19:fb:92:1b:67:4b: 42:4c:09:b5:96:7e:83:37:fc:33:cb:73:5e:88:69: 17:95:a7:23:72:7e:85:a0:89:00:55:ac:7d:f4:ab: d5:f2:07:70:0d:42:ba:d4:39:41:e3:ac:c6:01:62: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:FB:07:A4:E3:09:0C:CD:07:FF:CB:4A:76:79:0A:9E:BE:37:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.24.0/21 Signature Algorithm: sha256WithRSAEncryption c5:b8:67:b0:6f:23:ae:2d:a4:56:13:60:65:94:0f:51:b8:d3: e2:75:40:cf:68:fe:fd:e8:9b:7d:b9:11:37:c5:00:9c:9e:40: d1:0e:77:85:1d:a0:9b:6e:ab:d9:55:84:f1:4f:d9:50:68:6a: cb:2b:2f:2a:20:e0:53:35:00:25:14:88:c5:06:7f:18:bf:df: db:6b:d3:11:35:23:09:0e:7c:25:09:39:30:29:95:6f:e6:6a: 98:ce:4d:de:62:29:6d:15:e1:6e:14:30:0b:b3:0a:28:3b:c2: 94:e0:16:85:b9:08:c1:b6:da:0c:05:9f:c7:40:d3:ad:97:16: e8:19:71:de:f7:19:9f:f0:1c:a4:77:bf:97:ce:72:cd:94:2a: 8a:5b:1a:05:cc:4a:80:b6:3c:f0:58:75:d1:95:09:92:d5:14: b9:22:6f:22:4d:fe:b2:37:c2:19:c3:49:0f:8f:0f:52:eb:09: 68:24:36:27:25:e8:6c:91:ae:07:28:66:b4:9e:88:e0:57:7a: f9:f0:28:2a:fe:bf:8c:fb:3d:5c:3d:09:96:da:fe:05:8a:a9: 5b:ab:70:0f:3e:98:c4:40:15:52:42:bf:ae:79:3c:84:e0:3d: 4d:28:2a:a1:ce:c2:a5:ae:ab:48:7b:82:85:c4:2e:b9:e5:23: 12:80:c7:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNxVdXtiZSvwGMaqoRtlTcbW1tkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAzMDI3WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzg0OWUwMDdjOTdmMmM2MjRhNGVkMjgwY2YwYWY1ZjNj ZGFiZmU1N2EwZGQ0ZTQ4Y2JlMzgyMzYzMWFkN2UzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKdE4mvLC6JPyiZDXuN/Z06bJ9akPgpGVycudcIARCd+j4 gK/krUuJaJrUuNtNfFUQ9bUALGljAGwJbGuzqgHcRNFFmg9zCf6hGQhNdy8DzdkY jf3YVbszogN2rUNcx6kduOCCoPi1cBiwQNQha+Bb53YJ5L1clM8ny7fHYmheDghr YJr/B/vMcrcpJGmgWGIC5+IBhhxz4YNSj4YaPcII/9bctRXuTm4PwgqmxnXIx0po NfUAflsB3iqKCcaLzJ+mvPqOcTUtzblzYhn7khtnS0JMCbWWfoM3/DPLc16IaReV pyNyfoWgiQBVrH30q9XyB3ANQrrUOUHjrMYBYr61AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOnz7B6TjCQzNB//LSnZ5Cp6+N9owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4MjdlY2QzLTc1Y2UtNDQ5ZS05OTMwLWM0ZDIzN2IyZTJmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPRsRgwDQYJKoZIhvcNAQELBQADggEBAMW4Z7BvI64tpFYTYGWUD1G40+J1 QM9o/v3om325ETfFAJyeQNEOd4UdoJtuq9lVhPFP2VBoassrLyog4FM1ACUUiMUG fxi/39tr0xE1IwkOfCUJOTAplW/mapjOTd5iKW0V4W4UMAuzCig7wpTgFoW5CMG2 2gwFn8dA062XFugZcd73GZ/wHKR3v5fOcs2UKopbGgXMSoC2PPBYddGVCZLVFLki byJN/rI3whnDSQ+PD1LrCWgkNicl6GyRrgcoZrSeiOBXevnwKCr+v4z7PVw9CZba /gWKqVurcA8+mMRAFVJCv655PITgPU0oKqHOwqWuq0h7goXELrnlIxKAxyk= -----END CERTIFICATE-----Generated at Thu Jul 24 12:05:48 2025 by rpki-client