$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa File: abb7a40f-6237-40f4-a2b2-34645feeb43a.roa (raw, json) Hash identifier: lasAUHWflH6J8g/KFEW2FiHyqwJHLyEqc6LOG2j9gpE= Subject key identifier: 94:99:51:D7:62:B7:65:18:09:5E:F7:30:0C:9E:3D:DF:1D:52:1E:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E4B91BD12A9B3A2B5DB2BA3000F5B946428A0B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa Signing time: Mon 21 Jul 2025 15:30:14 +0000 ROA not before: Mon 21 Jul 2025 15:30:14 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.184.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4b:91:bd:12:a9:b3:a2:b5:db:2b:a3:00:0f:5b:94:64:28:a0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:30:14 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=775b02b36b365d887580f47c5a7c419f57f2a7ff5ab34907752a769bf3cf22bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:5a:59:39:1c:c4:39:8f:9e:d8:8a:2b:e3: 1c:65:68:f6:98:61:0a:97:08:4e:66:a5:76:bc:c3: a3:36:ef:3c:0c:19:82:03:e4:80:e9:42:04:2e:28: 27:65:14:0d:4d:03:cb:3b:f0:01:e1:53:2c:b2:18: 03:f1:90:9e:2d:f7:1d:d3:fa:c0:1f:22:14:90:7a: dc:c4:95:d4:07:b8:2c:cc:72:50:65:8e:8c:e3:72: 2c:30:65:0e:d6:21:c3:ec:43:72:d8:ba:57:62:a0: 76:0b:a7:a0:17:02:bf:88:36:5e:1f:7b:88:4e:8c: 34:87:04:53:89:bf:f1:b3:bd:f2:bd:59:e7:f2:aa: 0f:0d:14:2c:2a:17:04:45:ec:1b:d7:1b:78:a4:23: 08:4b:ba:40:0d:1a:fc:44:49:8a:41:27:fe:99:e7: fc:dd:08:3e:9f:c6:fa:0e:ec:74:6c:a7:c2:4e:1a: a1:7d:0d:5d:e9:9c:fc:51:17:f7:f1:f9:9d:a4:d5: b1:d2:c0:0d:67:c5:cf:77:82:fb:b0:24:c4:af:15: 02:15:ba:9d:4f:f4:92:aa:4b:5c:9b:fa:a0:1a:a1: 1e:9b:87:c4:4b:30:f4:4d:c1:16:0f:a2:b9:39:22: 00:51:cc:9e:a0:63:ee:be:4c:48:db:92:fd:f3:84: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:99:51:D7:62:B7:65:18:09:5E:F7:30:0C:9E:3D:DF:1D:52:1E:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.184.96.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:a2:8b:87:e3:d5:c5:1f:e6:b3:70:09:fa:c3:87:25:b5:cc: c6:eb:60:3f:e5:77:a3:76:7e:70:44:0b:b9:09:b7:0c:21:e1: 73:57:e2:50:a4:e0:a6:05:66:df:de:89:b0:b4:14:1c:12:e8: e1:20:09:d4:78:5b:4b:30:85:a9:c4:ff:af:16:39:4a:34:c0: 85:36:4f:8f:41:ef:cb:d6:7b:2b:59:2f:7d:1d:95:3f:95:63: a9:f3:cd:41:b7:10:9b:ab:d3:99:40:60:4a:f8:5c:19:3c:6a: e6:78:b2:12:e7:09:69:30:2e:83:3e:e2:1e:d2:6b:57:2e:21: 04:a7:e5:85:21:b0:93:49:3c:16:d9:32:40:7c:c5:8f:40:50: 60:80:d9:f5:a0:81:c3:36:53:96:b3:80:77:b4:9d:36:45:0c: 65:ed:d2:79:a5:d0:9e:d9:56:75:29:46:13:00:41:53:67:e7: a4:4f:73:9a:73:92:95:f4:f2:6f:fc:f8:93:4c:f0:65:52:84: e1:21:99:94:b5:96:88:39:e8:86:fb:7f:7e:46:76:c0:f3:e5: ea:82:51:70:48:cc:b4:d0:3b:fe:36:cf:82:8a:24:0b:fb:ec: 22:28:7d:60:54:05:eb:88:3f:d3:f2:5c:0c:25:4a:07:6c:d5: d7:b6:34:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPkuRvRKps6K12yujAA9blGQooLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTUzMDE0WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzViMDJiMzZiMzY1ZDg4NzU4MGY0N2M1YTdjNDE5ZjU3 ZjJhN2ZmNWFiMzQ5MDc3NTJhNzY5YmYzY2YyMmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5oVpZORzEOY+e2Ior4xxlaPaYYQqXCE5mpXa8w6M27zwM GYID5IDpQgQuKCdlFA1NA8s78AHhUyyyGAPxkJ4t9x3T+sAfIhSQetzEldQHuCzM clBljozjciwwZQ7WIcPsQ3LYuldioHYLp6AXAr+INl4fe4hOjDSHBFOJv/GzvfK9 Wefyqg8NFCwqFwRF7BvXG3ikIwhLukANGvxESYpBJ/6Z5/zdCD6fxvoO7HRsp8JO GqF9DV3pnPxRF/fx+Z2k1bHSwA1nxc93gvuwJMSvFQIVup1P9JKqS1yb+qAaoR6b h8RLMPRNwRYPork5IgBRzJ6gY+6+TEjbkv3zhAEXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlJlR12K3ZRgJXvcwDJ493x1SHvEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiYjdhNDBmLTYyMzctNDBmNC1hMmIyLTM0NjQ1ZmVlYjQzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXNuGAwDQYJKoZIhvcNAQELBQADggEBAA6ii4fj1cUf5rNwCfrDhyW1zMbr YD/ld6N2fnBEC7kJtwwh4XNX4lCk4KYFZt/eibC0FBwS6OEgCdR4W0swhanE/68W OUo0wIU2T49B78vWeytZL30dlT+VY6nzzUG3EJur05lAYEr4XBk8auZ4shLnCWkw LoM+4h7Sa1cuIQSn5YUhsJNJPBbZMkB8xY9AUGCA2fWggcM2U5azgHe0nTZFDGXt 0nml0J7ZVnUpRhMAQVNn56RPc5pzkpX08m/8+JNM8GVShOEhmZS1log56Ib7f35G dsDz5eqCUXBIzLTQO/42z4KKJAv77CIofWBUBeuIP9PyXAwlSgds1de2NEU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:23 2025 by rpki-client