$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa File: aa263b29-04bf-4248-9100-8a58567a24ba.roa (raw, json) Hash identifier: yWEFbwUIvEGKvqGNTRn2wDYUHL2sXp2vbl1d3gWxAL0= Subject key identifier: 9E:D9:66:D8:40:7E:23:07:72:44:4D:4E:DF:B0:B6:A9:FB:18:CA:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 363B99BD571AE18FEF9402946D7CFF9F4BDF5D4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa Signing time: Fri 11 Jul 2025 00:40:12 +0000 ROA not before: Fri 11 Jul 2025 00:40:12 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3b:99:bd:57:1a:e1:8f:ef:94:02:94:6d:7c:ff:9f:4b:df:5d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:40:12 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=d25381e625765e12135d4cf3891ac5e4db9ae3490469e3ebc4c8580bc7e755de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:31:13:03:3f:54:5a:c1:3c:0a:82:a1:80: 4a:86:57:d9:41:eb:15:94:4c:5f:78:9c:cd:c8:09: a3:85:af:3b:8d:e4:43:7b:c7:f0:09:07:8e:90:a2: 05:27:59:0f:33:60:55:c1:66:2e:58:82:cb:af:6c: af:24:48:51:10:70:9a:2f:ef:8c:4e:50:62:ce:f6: 29:d5:5f:d7:68:c1:14:f3:22:9d:80:86:06:d6:5c: 99:d0:cd:35:91:82:77:d4:9e:04:ec:1f:6d:c7:5c: 68:93:92:63:1e:e6:42:9d:06:12:a2:a3:f0:8b:09: 71:ea:1d:16:27:23:b4:2f:92:f3:01:2c:91:c9:41: 9d:af:32:65:f2:73:cc:6b:5a:92:bb:6d:fe:ca:75: 57:e3:89:71:db:f8:66:93:c5:b2:16:7a:74:25:2d: e0:ed:d7:4f:ef:41:fe:68:77:df:36:5b:40:7e:d4: 97:b3:b8:92:6c:67:e6:c7:8f:dd:71:2d:5f:00:85: eb:08:73:a9:5b:1b:a6:13:1d:19:fb:ea:2d:89:b3: 18:63:79:a5:e1:d3:a6:77:a4:9d:12:9a:c9:13:c2: a3:c8:21:0c:c1:7a:d1:81:41:ec:cd:47:77:17:ca: f3:c4:8f:01:f5:95:dd:8d:71:95:86:2b:27:78:d0: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D9:66:D8:40:7E:23:07:72:44:4D:4E:DF:B0:B6:A9:FB:18:CA:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.255.0/24 Signature Algorithm: sha256WithRSAEncryption 66:14:cc:cf:2a:4f:4b:0f:18:36:12:1a:15:20:2d:bf:b3:02: e3:23:80:0d:11:4e:de:dd:57:a2:b5:06:5a:cb:ce:49:57:4c: f9:eb:eb:53:4c:02:5d:f6:c9:0c:88:44:ef:b7:51:95:1f:dc: c8:4a:0a:53:11:40:78:95:f3:e8:6c:16:ce:bf:c7:7b:4f:aa: cc:63:d0:19:20:5e:cb:15:9f:eb:4e:b6:7e:b7:6d:0c:29:e9: 24:1f:92:e2:c7:b8:fe:37:ef:d7:b7:ba:ab:e8:53:05:b4:cb: 82:ab:38:9d:f7:1c:e3:8a:4c:60:a0:76:01:dd:98:7d:02:23: 66:23:ea:a8:5f:46:0e:b0:75:ba:44:35:5c:ee:7e:18:a2:75: 54:1e:1b:2e:27:2e:ac:3a:fc:da:a4:8c:df:47:b0:f8:a9:5e: d4:15:cc:2e:c7:da:45:4d:c9:29:9b:e3:76:2f:cf:72:c6:bf: 24:db:01:ee:e1:7e:12:ac:13:10:e4:c7:ac:4f:34:08:a2:ab: c5:7b:ad:72:70:a4:ab:e5:fb:d4:d1:54:08:b0:de:f8:99:3a: b6:77:44:21:e3:95:d5:0f:9e:4c:60:cc:ff:0e:aa:0f:43:f7: 12:73:72:ed:6c:eb:d3:41:18:ea:3d:c0:df:41:65:1d:73:02: d1:cf:bf:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNjuZvVca4Y/vlAKUbXz/n0vfXUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MDEyWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjUzODFlNjI1NzY1ZTEyMTM1ZDRjZjM4OTFhYzVlNGRi OWFlMzQ5MDQ2OWUzZWJjNGM4NTgwYmM3ZTc1NWRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiITETAz9UWsE8CoKhgEqGV9lB6xWUTF94nM3ICaOFrzuN 5EN7x/AJB46QogUnWQ8zYFXBZi5YgsuvbK8kSFEQcJov74xOUGLO9inVX9dowRTz Ip2AhgbWXJnQzTWRgnfUngTsH23HXGiTkmMe5kKdBhKio/CLCXHqHRYnI7QvkvMB LJHJQZ2vMmXyc8xrWpK7bf7KdVfjiXHb+GaTxbIWenQlLeDt10/vQf5od982W0B+ 1JezuJJsZ+bHj91xLV8AhesIc6lbG6YTHRn76i2JsxhjeaXh06Z3pJ0SmskTwqPI IQzBetGBQezNR3cXyvPEjwH1ld2NcZWGKyd40DtBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUntlm2EB+IwdyRE1O37C2qfsYyowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhMjYzYjI5LTA0YmYtNDI0OC05MTAwLThhNTg1NjdhMjRiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA4v8wDQYJKoZIhvcNAQELBQADggEBAGYUzM8qT0sPGDYSGhUgLb+zAuMj gA0RTt7dV6K1BlrLzklXTPnr61NMAl32yQyIRO+3UZUf3MhKClMRQHiV8+hsFs6/ x3tPqsxj0BkgXssVn+tOtn63bQwp6SQfkuLHuP4379e3uqvoUwW0y4KrOJ33HOOK TGCgdgHdmH0CI2Yj6qhfRg6wdbpENVzufhiidVQeGy4nLqw6/NqkjN9HsPipXtQV zC7H2kVNySmb43Yvz3LGvyTbAe7hfhKsExDkx6xPNAiiq8V7rXJwpKvl+9TRVAiw 3viZOrZ3RCHjldUPnkxgzP8Oqg9D9xJzcu1s69NBGOo9wN9BZR1zAtHPv4I= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:51 2025 by rpki-client