$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa File: af900127-3eb4-4d06-8238-aace9fc915bf.roa (raw, json) Hash identifier: HMZcl5rIH76EDLEqpja6p3NdSPrn2iRK0WxqiOd1+gQ= Subject key identifier: 79:BD:99:8E:85:13:EA:69:E0:4D:11:57:A0:2F:F7:14:64:29:50:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F151E10284EF690B51AB36A8A378B5C503561D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa Signing time: Fri 18 Jul 2025 00:41:46 +0000 ROA not before: Fri 18 Jul 2025 00:41:46 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.237.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:15:1e:10:28:4e:f6:90:b5:1a:b3:6a:8a:37:8b:5c:50:35:61:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:41:46 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=516277c623ee3df0cbb7fd98f08967942a45cc6c9af679e8cc5bc9438b129a05, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:0c:1a:cd:e8:93:5e:c5:42:7e:f2:1c:18: 47:ac:a9:6b:55:73:66:73:d0:64:fd:ed:e7:f0:3b: 4b:e9:61:2f:c5:b2:3e:df:fd:f4:84:53:6e:09:e8: fe:51:d5:38:f7:fa:47:90:94:b7:de:ae:06:cc:46: e5:81:da:2b:81:fd:0d:a7:bf:02:2f:4c:69:5a:9e: 91:ad:17:5b:0a:b7:38:0a:b5:40:65:a4:b0:f3:e9: d5:ac:8a:94:61:85:e2:08:17:fb:0d:f1:7c:38:3f: ff:85:d0:6e:dc:78:9a:f0:a4:83:41:1d:1d:f5:6d: 1e:cd:6d:bd:15:e1:0f:9d:37:71:69:0e:cd:f7:e7: cd:56:2b:6f:fe:5d:cf:47:0e:58:06:57:8b:78:6e: 70:88:d4:01:de:86:81:e1:3f:f0:4a:a6:00:c1:f3: 2e:ee:f6:c4:22:af:e1:ac:6d:05:58:bb:15:f6:ca: 8c:be:44:fa:4c:dc:af:bd:38:a8:97:88:f4:59:0c: a3:5f:57:bd:6b:b7:ce:47:56:ee:7d:77:53:42:5b: b7:be:f0:3b:c0:a2:a6:6e:1f:1f:4e:05:3a:88:a6: 38:db:7e:dc:bb:19:c4:59:fd:86:09:45:85:d3:b5: 5c:e2:0e:3e:fb:c1:0e:ba:d7:a4:ec:45:f6:3d:6e: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:99:8E:85:13:EA:69:E0:4D:11:57:A0:2F:F7:14:64:29:50:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.237.192.0/18 Signature Algorithm: sha256WithRSAEncryption 30:2b:0b:f4:d1:8b:d1:15:9a:06:72:af:f6:12:6b:c9:dd:f6: 1b:df:82:ee:9d:43:32:0d:46:f0:08:0b:e5:6c:ee:6f:b4:03: 55:3e:62:4f:2e:54:c9:d7:b6:16:28:70:b0:a4:18:c5:b4:15: 40:c7:c4:d4:50:be:ec:76:29:22:4a:45:e0:14:9e:27:44:f0: a5:c5:c9:bd:3b:e7:67:76:e2:62:cf:5b:e6:11:18:26:91:1b: f6:5a:57:83:0e:01:69:db:a2:0b:cd:0a:13:ce:d0:f3:1f:50: e2:92:f0:e7:4c:be:94:63:4b:51:73:c6:17:78:dc:19:74:1c: 12:77:87:0f:2d:d6:2b:96:de:c2:b2:ba:25:43:9c:19:e0:39: 32:2a:f2:8f:c8:29:c4:99:81:d5:37:92:a1:86:bd:b8:2e:0f: 37:44:2f:40:97:ae:03:40:02:31:51:42:87:81:ec:f9:d4:f1: 90:36:92:61:a9:33:e9:0d:4d:fe:61:3f:2a:51:94:e3:a0:f2: fe:02:61:04:2f:fd:d3:10:9d:e3:ed:07:3e:e0:b7:e4:50:5d: 8a:7f:dd:bd:96:1b:6f:03:fb:7f:65:93:75:2d:6a:0e:91:19: 85:01:1b:65:a7:43:57:e2:d0:3e:b3:0c:26:20:64:2a:44:49: 64:f4:f7:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHxUeEChO9pC1GrNqijeLXFA1YdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDA0MTQ2WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTYyNzdjNjIzZWUzZGYwY2JiN2ZkOThmMDg5Njc5NDJh NDVjYzZjOWFmNjc5ZThjYzViYzk0MzhiMTI5YTA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXBQwazeiTXsVCfvIcGEesqWtVc2Zz0GT97efwO0vpYS/F sj7f/fSEU24J6P5R1Tj3+keQlLfergbMRuWB2iuB/Q2nvwIvTGlanpGtF1sKtzgK tUBlpLDz6dWsipRhheIIF/sN8Xw4P/+F0G7ceJrwpINBHR31bR7Nbb0V4Q+dN3Fp Ds33581WK2/+Xc9HDlgGV4t4bnCI1AHehoHhP/BKpgDB8y7u9sQir+GsbQVYuxX2 yoy+RPpM3K+9OKiXiPRZDKNfV71rt85HVu59d1NCW7e+8DvAoqZuHx9OBTqIpjjb fty7GcRZ/YYJRYXTtVziDj77wQ6616TsRfY9bkr/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeb2ZjoUT6mngTRFXoC/3FGQpUHcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmOTAwMTI3LTNlYjQtNGQwNi04MjM4LWFhY2U5ZmM5MTViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG7cAwDQYJKoZIhvcNAQELBQADggEBADArC/TRi9EVmgZyr/YSa8nd9hvf gu6dQzINRvAIC+Vs7m+0A1U+Yk8uVMnXthYocLCkGMW0FUDHxNRQvux2KSJKReAU nidE8KXFyb0752d24mLPW+YRGCaRG/ZaV4MOAWnbogvNChPO0PMfUOKS8OdMvpRj S1Fzxhd43Bl0HBJ3hw8t1iuW3sKyuiVDnBngOTIq8o/IKcSZgdU3kqGGvbguDzdE L0CXrgNAAjFRQoeB7PnU8ZA2kmGpM+kNTf5hPypRlOOg8v4CYQQv/dMQnePtBz7g t+RQXYp/3b2WG28D+39lk3Utag6RGYUBG2WnQ1fi0D6zDCYgZCpESWT094Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:24 2025 by rpki-client