$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa File: b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa (raw, json) Hash identifier: 3QDL1lMIlgFJsdFyt19JxdqP28yHcDlIrhsoQ9/cRBA= Subject key identifier: 20:10:88:CC:0C:5D:A2:55:01:56:F2:CC:6E:61:C0:E5:98:00:6D:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74A8420395E90022F4E47AA631B079935A2520F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa Signing time: Fri 11 Jul 2025 15:00:22 +0000 ROA not before: Fri 11 Jul 2025 15:00:22 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a8:42:03:95:e9:00:22:f4:e4:7a:a6:31:b0:79:93:5a:25:20:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 15:00:22 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=8531b1d0ee6792eb9be9eda428fe3fbd0b85229d2ee3e000ad5360fbe96bee11, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:c9:31:27:5c:85:86:e8:3d:f4:29:d7:51: 18:86:6d:53:80:fa:45:97:f0:1e:54:8a:88:e3:ee: 5e:ec:61:dd:2f:b1:07:b9:45:f2:52:be:c4:01:a0: 1e:25:ff:cc:1a:de:4a:3b:6c:44:5e:28:1a:b9:58: 06:cc:56:2a:66:a8:a1:6c:1d:ac:58:ef:88:f5:84: 54:82:76:83:eb:96:f1:fb:46:59:ad:08:80:45:4f: 81:1b:a9:72:72:3c:4c:6e:08:37:03:ae:8c:ff:4b: 4f:bc:3a:73:d5:83:bf:66:60:5d:39:a3:1d:90:f7: 6d:ba:45:6d:ee:81:e3:0c:ff:3e:1e:5a:e0:ae:ee: 93:6e:a1:24:92:37:ce:12:50:ae:82:1a:4a:4d:a6: 9e:86:ca:f2:bb:ae:4a:30:2d:f4:91:eb:97:e9:6d: 65:0a:ec:8a:97:a7:cb:09:e9:66:dc:c7:a8:4c:37: 3e:be:11:19:45:73:ea:13:88:0c:62:bb:f2:6a:67: 5a:dc:48:93:ff:58:e2:08:64:92:37:db:d8:4d:2e: 59:60:aa:67:12:e2:e3:e7:85:f2:5b:ed:9b:c5:82: 7c:9e:8e:f8:c8:68:92:62:8b:e7:b6:74:d0:13:70: 13:47:70:d2:84:37:73:3f:f7:50:1f:ff:82:66:bc: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:10:88:CC:0C:5D:A2:55:01:56:F2:CC:6E:61:C0:E5:98:00:6D:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.158.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:c4:1f:25:89:de:3d:c6:96:ad:15:b7:38:79:55:dc:cc:5e: fe:eb:10:f1:54:66:79:0c:f7:69:30:6d:ab:be:4e:d5:53:1f: 76:ae:79:d1:e8:18:3c:97:4d:c7:8a:6b:d1:cd:70:24:95:56: f6:63:f4:24:8d:59:7e:83:0a:34:f8:e0:41:14:0c:64:8a:45: 31:23:d8:d2:7b:c3:4f:ff:98:ca:90:a7:87:2c:d5:ac:29:7f: 16:9d:ad:be:d1:1b:ba:21:d4:9e:ba:8c:6a:aa:a8:78:81:7c: 8c:2d:ca:1d:d1:d2:29:2f:50:a2:3c:3c:62:8d:9f:15:c5:95: 2d:d7:ee:6d:9f:24:f8:d3:04:e3:d2:97:98:ca:ec:91:c6:4a: e9:3a:91:8e:e6:0e:01:9c:64:6f:98:17:d2:bb:14:15:a0:e3: 5b:2a:60:ce:de:2e:33:5b:d3:f7:d8:38:47:0c:97:93:ee:ee: 07:0d:f6:48:5d:b6:87:73:4c:3b:cf:d9:87:6d:20:03:5a:b1: a5:35:94:5a:63:05:f4:74:4f:c2:41:a0:cf:cc:9f:07:29:ce: a4:04:3e:4f:db:e3:ff:a5:94:06:fd:31:8e:7e:c0:b7:15:dc: 19:17:77:2d:bd:e6:03:d7:94:6b:ad:a7:fa:a0:28:42:c5:1d: 2f:80:b2:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdKhCA5XpACL05HqmMbB5k1olIPQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMTUwMDIyWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTMxYjFkMGVlNjc5MmViOWJlOWVkYTQyOGZlM2ZiZDBi ODUyMjlkMmVlM2UwMDBhZDUzNjBmYmU5NmJlZTExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKtMkxJ1yFhug99CnXURiGbVOA+kWX8B5Uiojj7l7sYd0v sQe5RfJSvsQBoB4l/8wa3ko7bEReKBq5WAbMVipmqKFsHaxY74j1hFSCdoPrlvH7 RlmtCIBFT4EbqXJyPExuCDcDroz/S0+8OnPVg79mYF05ox2Q9226RW3ugeMM/z4e WuCu7pNuoSSSN84SUK6CGkpNpp6GyvK7rkowLfSR65fpbWUK7IqXp8sJ6Wbcx6hM Nz6+ERlFc+oTiAxiu/JqZ1rcSJP/WOIIZJI329hNLllgqmcS4uPnhfJb7ZvFgnye jvjIaJJii+e2dNATcBNHcNKEN3M/91Af/4JmvGY/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIBCIzAxdolUBVvLMbmHA5ZgAbUswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzZDI3MDE4LTA4Y2ItNGExYy05OTkxLWIxYWE0Y2ZkM2E3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUp4wDQYJKoZIhvcNAQELBQADggEBAJ/EHyWJ3j3Glq0Vtzh5VdzMXv7r EPFUZnkM92kwbau+TtVTH3auedHoGDyXTceKa9HNcCSVVvZj9CSNWX6DCjT44EEU DGSKRTEj2NJ7w0//mMqQp4cs1awpfxadrb7RG7oh1J66jGqqqHiBfIwtyh3R0ikv UKI8PGKNnxXFlS3X7m2fJPjTBOPSl5jK7JHGSuk6kY7mDgGcZG+YF9K7FBWg41sq YM7eLjNb0/fYOEcMl5Pu7gcN9khdtodzTDvP2YdtIANasaU1lFpjBfR0T8JBoM/M nwcpzqQEPk/b4/+llAb9MY5+wLcV3BkXdy295gPXlGutp/qgKELFHS+Asi0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:03 2025 by rpki-client