$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b18b21ad-4915-4e1b-b1b2-4c7435def663.roa File: b18b21ad-4915-4e1b-b1b2-4c7435def663.roa (raw, json) Hash identifier: qJxuP7lL5Ra/bK+fo2EXbulz9+Y7Qrvabj5JB2uTEBU= Subject key identifier: ED:2C:FE:81:B8:3C:E4:D9:F8:5D:C4:97:29:3D:5A:78:E7:A9:14:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33F99351588402FAA727494CECBB14108DB3B51B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b18b21ad-4915-4e1b-b1b2-4c7435def663.roa Signing time: Wed 09 Jul 2025 00:41:25 +0000 ROA not before: Wed 09 Jul 2025 00:41:25 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.236.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f9:93:51:58:84:02:fa:a7:27:49:4c:ec:bb:14:10:8d:b3:b5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:41:25 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=d4472840789946f81f4d5393236d2ab69dc3b573b0ee54925a22daaf55637aee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:c2:ab:54:c0:81:55:3a:34:49:c5:25:11: 99:00:3e:c8:f8:a7:bc:71:33:13:6e:d3:ea:d5:99: 1f:37:99:c8:38:72:ad:df:29:87:6f:2a:e1:85:30: ec:1f:c4:ed:8d:9a:99:84:1d:b0:99:ea:af:b5:6c: 5e:96:9b:87:fe:a3:26:68:02:0b:80:d7:fd:74:64: 25:4a:df:02:9f:a4:7c:6f:ca:3d:e2:25:3e:d4:73: 53:43:6d:68:00:15:e0:32:83:af:a3:e4:87:6a:c9: f6:03:e7:07:17:9a:1d:75:b1:32:10:80:2d:b7:a0: f6:6a:58:56:af:e6:6b:4b:8d:99:a4:1b:d5:74:bc: c7:a7:5c:28:b1:83:11:65:a5:89:b3:a9:44:25:8d: 0e:5c:07:0f:ab:22:5c:ed:6f:a8:db:5d:2b:05:20: 60:ee:8c:47:14:13:6d:76:d8:43:3f:a3:0e:f8:c4: 75:f5:b5:c1:8c:c3:19:27:02:42:50:b9:77:32:a2: 52:29:df:68:cb:b3:f1:34:59:0b:17:3e:69:23:09: 3e:7c:e7:76:52:c8:78:3f:f4:16:46:e3:5d:26:96: d6:d9:74:d5:78:4c:6d:68:a7:05:ec:c7:75:53:0b: bf:26:06:61:36:1c:14:61:18:22:60:00:65:9c:39: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:FE:81:B8:3C:E4:D9:F8:5D:C4:97:29:3D:5A:78:E7:A9:14:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b18b21ad-4915-4e1b-b1b2-4c7435def663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.236.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2c:af:21:d5:35:a3:69:f4:d9:41:dd:01:2d:7d:c4:f3:d4:77: 5a:58:19:2a:4d:be:77:ca:40:17:dd:15:10:71:6a:f7:f9:00: c8:11:40:d7:b6:12:73:05:75:10:0c:12:a6:4b:be:15:cf:81: 86:da:da:61:8e:ec:b3:83:ee:de:1c:54:67:05:78:b8:e1:51: ba:28:4a:d3:6e:9b:16:99:0e:ef:78:ee:fb:61:5e:0c:78:62: 7d:a1:5b:9b:7f:a9:26:c4:77:28:2c:24:f8:14:68:9e:6d:54: b1:a7:5a:2e:09:1f:2c:fb:d6:00:7c:66:c0:f8:be:d8:b2:21: 03:5c:b3:41:67:64:b5:3d:a3:3f:e4:68:a8:96:63:44:81:79: e6:53:67:bd:a5:eb:a1:e0:3c:74:69:94:f6:4a:0d:87:64:0a: fc:d5:65:3f:39:47:72:0a:96:2c:d2:fd:43:d2:ac:88:e0:01: 31:76:08:ef:5e:ed:26:c6:40:d7:44:78:45:6e:37:25:74:65: 30:7e:87:ae:65:9d:35:ac:1b:3e:56:ce:fa:bc:ed:84:f6:09: af:ac:e1:13:68:de:fc:73:46:49:f6:b9:c0:55:91:3d:a8:ea: 74:c3:0b:24:d6:2a:b6:53:01:e0:d7:e8:41:e9:2e:7d:0f:ef: 86:09:5c:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM/mTUViEAvqnJ0lM7LsUEI2ztRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA0MTI1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDQ3Mjg0MDc4OTk0NmY4MWY0ZDUzOTMyMzZkMmFiNjlk YzNiNTczYjBlZTU0OTI1YTIyZGFhZjU1NjM3YWVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3OcKrVMCBVTo0ScUlEZkAPsj4p7xxMxNu0+rVmR83mcg4 cq3fKYdvKuGFMOwfxO2NmpmEHbCZ6q+1bF6Wm4f+oyZoAguA1/10ZCVK3wKfpHxv yj3iJT7Uc1NDbWgAFeAyg6+j5IdqyfYD5wcXmh11sTIQgC23oPZqWFav5mtLjZmk G9V0vMenXCixgxFlpYmzqUQljQ5cBw+rIlztb6jbXSsFIGDujEcUE2122EM/ow74 xHX1tcGMwxknAkJQuXcyolIp32jLs/E0WQsXPmkjCT5853ZSyHg/9BZG410mltbZ dNV4TG1opwXsx3VTC78mBmE2HBRhGCJgAGWcOecbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7Sz+gbg85Nn4XcSXKT1aeOepFN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxOGIyMWFkLTQ5MTUtNGUxYi1iMWIyLTRjNzQzNWRlZjY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEg7DANBgkqhkiG9w0BAQsFAAOCAQEALK8h1TWjafTZQd0BLX3E89R3WlgZ Kk2+d8pAF90VEHFq9/kAyBFA17YScwV1EAwSpku+Fc+BhtraYY7ss4Pu3hxUZwV4 uOFRuihK026bFpkO73ju+2FeDHhifaFbm3+pJsR3KCwk+BRonm1UsadaLgkfLPvW AHxmwPi+2LIhA1yzQWdktT2jP+RoqJZjRIF55lNnvaXroeA8dGmU9koNh2QK/NVl PzlHcgqWLNL9Q9KsiOABMXYI717tJsZA10R4RW43JXRlMH6HrmWdNawbPlbO+rzt hPYJr6zhE2je/HNGSfa5wFWRPajqdMMLJNYqtlMB4NfoQekufQ/vhglc2g== -----END CERTIFICATE-----Generated at Tue Jul 22 04:54:44 2025 by rpki-client