$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa File: b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa (raw, json) Hash identifier: XhP2XBEoCeo05d+CKQqFwYUVdsSC8em0yhhgyCa3JzY= Subject key identifier: 01:74:E8:DD:C8:D0:67:B7:BB:20:BB:7B:33:D6:4B:6F:91:3D:5B:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AE1E9559AAAB712689946A1AFDE0B0FBBE0422C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa Signing time: Sat 19 Jul 2025 00:50:21 +0000 ROA not before: Sat 19 Jul 2025 00:50:21 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.78.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e1:e9:55:9a:aa:b7:12:68:99:46:a1:af:de:0b:0f:bb:e0:42:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:50:21 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=0021a1f4c73c6cc5bcbd349d4c04ba71430dd77fe6fd594118b1713863449b7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:b3:9d:ba:40:22:ff:64:ee:d7:34:14:f8: fb:21:f9:2f:a0:51:93:0d:86:de:ad:45:2c:7e:cf: f0:da:09:ed:93:86:fc:d0:2f:a3:fc:0b:a7:30:9c: 40:b6:4e:3c:a3:66:73:d7:30:36:7b:67:36:53:51: d2:a2:9b:ee:92:04:2d:cc:e7:00:c6:8a:15:08:2e: 12:6d:91:b9:80:33:61:a7:99:3f:65:26:15:8a:30: f9:ce:7a:ac:d0:a9:61:be:5d:9f:59:fd:04:42:f1: 8b:e0:18:6e:76:fe:10:89:e4:05:ec:45:f1:70:27: e1:81:81:3a:b6:41:5c:94:2a:d9:e2:35:67:39:42: 4d:ca:cc:cc:87:2a:e6:48:3c:21:e9:e4:5a:4b:97: 4a:74:18:d5:f2:4f:77:08:5d:20:74:95:3e:92:ea: d0:fd:55:e3:9c:46:0c:12:8f:a2:62:91:4f:ea:ec: 26:9d:a9:cb:5e:21:3a:53:8a:8a:c3:f5:9f:01:fb: a0:65:1f:e3:6f:64:22:e9:c7:8e:e7:af:1a:ed:18: cc:ce:27:22:f1:e9:89:64:87:27:79:b7:17:d4:69: 97:c4:e1:48:24:19:bb:71:6f:3c:41:7c:07:10:19: 1a:9b:3d:fc:9a:1b:2d:82:ea:d2:3f:4c:a1:20:86: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:E8:DD:C8:D0:67:B7:BB:20:BB:7B:33:D6:4B:6F:91:3D:5B:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.78.192.0/22 Signature Algorithm: sha256WithRSAEncryption aa:72:ee:7a:d7:40:50:ca:ae:5c:45:fc:ea:32:1f:b3:f1:ff: 16:8b:0b:19:bc:67:a8:c6:e7:56:ea:f2:aa:89:e4:8a:2f:6e: c0:23:85:97:04:c3:cb:d2:92:34:d4:2f:2b:68:bb:00:2b:a8: 61:b3:3c:81:46:0f:f4:0c:5d:c3:c6:af:c8:5d:4b:12:b2:95: 43:7e:62:00:e4:18:e2:85:68:e9:95:77:27:1c:0f:34:62:62: 26:54:a4:80:13:c7:7d:fa:09:dc:6a:0d:9f:da:e6:6c:8b:8d: 4e:21:22:d1:64:cd:f3:55:df:3d:48:d1:25:2f:5b:fd:15:f2: 3a:d4:80:86:4c:f0:1e:79:88:87:f2:09:63:a2:d3:63:df:d4: 1f:dd:84:76:8e:52:0c:86:18:3a:d3:f9:43:db:2a:ef:71:cd: ed:c8:83:a5:da:fa:f3:4d:e8:dc:29:2d:60:07:03:69:e7:8b: 99:98:72:ac:b4:77:d2:86:b3:c7:2a:51:c4:59:3d:e2:be:c8: ee:7b:78:71:48:5a:c5:e4:ff:02:bd:44:12:3a:d9:bb:cf:82: 2b:96:11:13:38:06:ee:91:4a:40:5b:a1:ff:ec:2c:21:c8:e0: 1b:19:e0:3f:b3:52:fa:fa:1f:13:dc:b6:d4:09:23:1e:9c:d8: 81:3b:3d:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUauHpVZqqtxJomUahr94LD7vgQiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA1MDIxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDIxYTFmNGM3M2M2Y2M1YmNiZDM0OWQ0YzA0YmE3MTQz MGRkNzdmZTZmZDU5NDExOGIxNzEzODYzNDQ5YjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8V7OdukAi/2Tu1zQU+Psh+S+gUZMNht6tRSx+z/DaCe2T hvzQL6P8C6cwnEC2TjyjZnPXMDZ7ZzZTUdKim+6SBC3M5wDGihUILhJtkbmAM2Gn mT9lJhWKMPnOeqzQqWG+XZ9Z/QRC8YvgGG52/hCJ5AXsRfFwJ+GBgTq2QVyUKtni NWc5Qk3KzMyHKuZIPCHp5FpLl0p0GNXyT3cIXSB0lT6S6tD9VeOcRgwSj6JikU/q 7CadqcteITpTiorD9Z8B+6BlH+NvZCLpx47nrxrtGMzOJyLx6Ylkhyd5txfUaZfE 4UgkGbtxbzxBfAcQGRqbPfyaGy2C6tI/TKEghi/lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAXTo3cjQZ7e7ILt7M9ZLb5E9WxkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyZWMwY2YzLTQ5NGQtNGQ4NS05Y2FkLWEwMTE1MWM1NDI0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjTsAwDQYJKoZIhvcNAQELBQADggEBAKpy7nrXQFDKrlxF/OoyH7Px/xaL Cxm8Z6jG51bq8qqJ5IovbsAjhZcEw8vSkjTULytouwArqGGzPIFGD/QMXcPGr8hd SxKylUN+YgDkGOKFaOmVdyccDzRiYiZUpIATx336CdxqDZ/a5myLjU4hItFkzfNV 3z1I0SUvW/0V8jrUgIZM8B55iIfyCWOi02Pf1B/dhHaOUgyGGDrT+UPbKu9xze3I g6Xa+vNN6NwpLWAHA2nni5mYcqy0d9KGs8cqUcRZPeK+yO57eHFIWsXk/wK9RBI6 2bvPgiuWERM4Bu6RSkBbof/sLCHI4BsZ4D+zUvr6HxPcttQJIx6c2IE7PXU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:11 2025 by rpki-client