$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa File: acc7b570-fe00-44a4-ab2f-06f3e8044509.roa (raw, json) Hash identifier: bpwfdVIRQKuKnHIkFqhTgJSaojjuW0367qxQBu61Fjo= Subject key identifier: 0B:58:52:CD:59:54:8A:36:64:F8:63:5C:23:A8:6B:F6:CA:89:D9:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C3B1413642B84EBFBAECF812CB0FA755A63F6EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa Signing time: Sat 19 Jul 2025 00:01:51 +0000 ROA not before: Sat 19 Jul 2025 00:01:51 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.248.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3b:14:13:64:2b:84:eb:fb:ae:cf:81:2c:b0:fa:75:5a:63:f6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:51 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=bd3a94168d44bd3008ff7f8c70ae0da5eda125adb4ac337aae52ff9d6d051085, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:29:95:b0:f3:40:5c:9e:89:fc:3c:ee:5a: fa:b8:f0:9e:36:69:0f:26:8f:28:88:59:1e:e8:8e: f2:83:5a:24:ce:f7:04:42:6c:76:76:d6:29:99:4b: 90:b0:d1:fe:37:01:f7:7e:1d:30:14:43:0a:f2:0c: f9:a6:da:8e:32:18:85:65:5a:02:69:e8:06:da:98: bf:eb:29:04:11:19:3d:d1:6d:65:04:3d:13:d9:89: d0:19:21:3e:a7:4e:43:f4:c5:9c:08:e2:18:fd:3f: b4:6c:c9:b4:1a:ae:93:b0:41:0d:1a:9b:ee:22:79: 2f:51:86:8d:cc:84:58:7d:03:a8:6c:20:39:86:ba: 8e:48:45:8f:11:ae:d8:9d:80:a6:46:e2:aa:27:14: 96:6a:19:e6:91:d6:d3:5f:2c:6d:e6:b1:b0:1b:23: 74:c2:4f:f2:be:59:88:2c:d9:7a:af:24:2e:3c:71: f5:57:56:a7:37:96:29:d3:eb:df:0e:bd:77:bb:f3: b7:dd:e8:d2:f7:3e:58:8a:3d:1e:1d:09:08:d8:ce: 7e:f2:98:b5:20:85:d7:8f:5c:8d:49:cf:0c:85:ce: 82:f5:7e:8b:9a:02:1f:89:fd:79:de:b1:d9:85:6b: ec:dd:2a:85:88:62:5b:6c:60:85:ea:34:91:56:95: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:58:52:CD:59:54:8A:36:64:F8:63:5C:23:A8:6B:F6:CA:89:D9:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.248.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:ba:93:da:40:b6:6c:e3:21:38:d8:7c:e8:87:02:d2:df:fd: 9c:86:6d:1b:96:5c:a9:0d:d9:15:6c:57:73:33:53:9e:f5:97: 33:ef:51:a0:60:4a:5b:1c:27:b0:18:90:ef:46:64:e9:60:e6: 03:e5:5c:ae:a9:99:7d:05:e0:cf:be:84:13:cc:14:d3:4b:4c: ea:d0:e3:1d:7d:31:b3:0d:e7:6e:2d:37:a2:d7:21:60:79:97: 93:08:25:ea:03:42:4f:51:ff:88:d1:1a:2d:37:f7:ed:8b:0a: 27:e4:ca:b0:c7:e9:5c:6d:f6:9f:60:ac:0a:a5:5f:f0:db:7d: 73:cc:e0:39:39:dc:c2:e0:95:4a:40:e0:f0:9d:d7:1f:61:e7: 77:34:b5:1a:f2:e1:c1:1b:0a:05:10:1d:49:64:d6:75:33:0f: 28:48:d3:ac:19:88:5b:e7:5f:34:92:61:54:b1:bf:b3:99:96: a1:3d:ae:c3:f1:a8:56:71:3e:9b:25:bd:0a:66:ae:ab:c9:8c: b4:29:b3:12:e4:61:ef:ea:54:ef:77:6b:56:3d:b7:3d:fc:6d: 2f:92:eb:a1:83:1a:e9:7a:39:5e:f7:0c:39:5f:47:8d:5d:c8: e8:39:38:ad:38:b4:25:b4:69:fe:04:01:e0:28:6f:26:5b:77: ee:e8:9f:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDDsUE2QrhOv7rs+BLLD6dVpj9uwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTUxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDNhOTQxNjhkNDRiZDMwMDhmZjdmOGM3MGFlMGRhNWVk YTEyNWFkYjRhYzMzN2FhZTUyZmY5ZDZkMDUxMDg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGAymVsPNAXJ6J/DzuWvq48J42aQ8mjyiIWR7ojvKDWiTO 9wRCbHZ21imZS5Cw0f43Afd+HTAUQwryDPmm2o4yGIVlWgJp6AbamL/rKQQRGT3R bWUEPRPZidAZIT6nTkP0xZwI4hj9P7RsybQarpOwQQ0am+4ieS9Rho3MhFh9A6hs IDmGuo5IRY8RrtidgKZG4qonFJZqGeaR1tNfLG3msbAbI3TCT/K+WYgs2XqvJC48 cfVXVqc3linT698OvXe787fd6NL3PliKPR4dCQjYzn7ymLUghdePXI1JzwyFzoL1 fouaAh+J/XnesdmFa+zdKoWIYltsYIXqNJFWldafAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC1hSzVlUijZk+GNcI6hr9sqJ2U4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjYzdiNTcwLWZlMDAtNDRhNC1hYjJmLTA2ZjNlODA0NDUwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbY+IAwDQYJKoZIhvcNAQELBQADggEBAEu6k9pAtmzjITjYfOiHAtLf/ZyG bRuWXKkN2RVsV3MzU571lzPvUaBgSlscJ7AYkO9GZOlg5gPlXK6pmX0F4M++hBPM FNNLTOrQ4x19MbMN524tN6LXIWB5l5MIJeoDQk9R/4jRGi039+2LCifkyrDH6Vxt 9p9grAqlX/DbfXPM4Dk53MLglUpA4PCd1x9h53c0tRry4cEbCgUQHUlk1nUzDyhI 06wZiFvnXzSSYVSxv7OZlqE9rsPxqFZxPpslvQpmrqvJjLQpsxLkYe/qVO93a1Y9 tz38bS+S66GDGul6OV73DDlfR41dyOg5OK04tCW0af4EAeAobyZbd+7ony0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:27 2025 by rpki-client