$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa File: b47cdbbc-0606-4824-b468-103bd1f5711b.roa (raw, json) Hash identifier: MPKAEQILOHqHzX4TR0l/Lxf8MiRxxlS2ovctLLhHAFc= Subject key identifier: 7A:84:BB:77:CF:AF:58:E9:41:F9:E9:53:39:A3:DD:D8:75:A6:F3:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 711F9DB7A23B7C2D8308A0B9727832FB14E47C12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa Signing time: Fri 11 Jul 2025 00:40:24 +0000 ROA not before: Fri 11 Jul 2025 00:40:24 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1f:9d:b7:a2:3b:7c:2d:83:08:a0:b9:72:78:32:fb:14:e4:7c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:40:24 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=5a5c9f620b2982736243965324d67e9dff0f7ed19997699948b4fc93ea4edfee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:3b:4e:f5:a0:e7:81:48:6b:4b:9f:f2:2c: eb:63:7a:83:c1:c8:37:18:c7:8c:3f:fc:ec:e2:d0: d1:e2:f1:b1:49:92:d5:4e:3b:66:3e:ba:2b:50:37: 7e:f1:0f:73:4b:2d:cb:12:2c:e1:51:97:3f:69:8d: 41:c6:4e:2a:68:ca:9c:d6:cb:29:10:eb:d3:c0:28: 42:b2:4a:9d:43:d2:52:43:f2:b3:68:3a:9d:d1:16: 51:5c:84:65:c8:43:2a:6e:f4:9b:ee:2a:0c:1f:48: 8b:10:92:db:83:da:b2:ed:79:7d:69:14:4a:19:32: 95:2b:ed:9a:ad:33:88:10:47:a0:a0:89:9d:d4:aa: ba:d2:f5:0b:1d:06:d3:a6:64:c4:93:9a:1d:07:8a: 09:c6:4a:2b:2d:53:75:4f:45:53:a2:88:80:aa:8f: cb:0d:ed:29:41:46:18:7e:e7:47:aa:49:d7:a5:0d: 0a:cb:11:60:8d:52:9e:b4:6b:67:9a:04:2d:16:3a: 0b:07:40:17:46:d0:34:a0:5a:35:50:08:f0:76:b8: 6f:27:20:96:86:72:c0:97:33:e3:7d:88:6c:b3:05: ab:4a:7f:96:71:cb:57:87:42:8c:93:b4:fb:ef:f1: 00:3e:ac:07:12:9f:f5:ce:f6:de:8d:0f:d7:f3:26: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:BB:77:CF:AF:58:E9:41:F9:E9:53:39:A3:DD:D8:75:A6:F3:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.199.0/24 Signature Algorithm: sha256WithRSAEncryption d7:b7:d6:0e:37:24:01:8d:e3:e5:6a:00:e9:d9:79:05:da:85: b0:a5:11:cf:ad:e6:1e:a7:8e:23:8d:cb:e3:8e:73:49:08:c4: cf:ab:4a:e9:8b:43:d8:57:c6:5e:ec:4b:63:0c:25:7a:65:5c: 65:ef:e9:aa:c3:e2:dd:63:9e:82:a2:2d:33:c3:64:b2:0c:97: a0:10:22:dd:74:c6:62:86:81:b2:5c:ad:04:95:ec:ad:d6:2f: e9:40:bd:e3:8a:63:4c:dc:f5:69:ec:10:bf:fb:92:37:57:a3: 11:87:1c:5e:09:2e:f0:8f:58:ca:f7:0f:32:78:ab:d9:eb:32: fe:d2:48:9d:14:2a:fc:51:cb:fe:0b:01:e3:29:a7:1b:fb:83: 9f:00:2c:4c:53:e8:e2:59:73:7f:00:74:63:5b:44:c7:a2:11: 3e:ea:f6:36:c7:0a:9b:f7:9a:32:52:84:0e:20:78:15:f1:6f: ae:21:6c:4f:c3:36:a3:d4:5e:d2:5c:ec:10:42:fa:7c:13:f8: 25:a9:8b:5f:98:36:c3:1d:99:36:d7:4d:2f:8a:7c:78:17:a5: f7:3d:1a:44:ce:9c:4c:32:a4:b0:e1:92:36:13:5a:86:0f:39: 81:3e:37:84:31:79:25:11:bf:53:68:47:02:a6:83:12:2f:4c: 83:fc:3a:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcR+dt6I7fC2DCKC5cngy+xTkfBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MDI0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTVjOWY2MjBiMjk4MjczNjI0Mzk2NTMyNGQ2N2U5ZGZm MGY3ZWQxOTk5NzY5OTk0OGI0ZmM5M2VhNGVkZmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpfjtO9aDngUhrS5/yLOtjeoPByDcYx4w//Ozi0NHi8bFJ ktVOO2Y+uitQN37xD3NLLcsSLOFRlz9pjUHGTipoypzWyykQ69PAKEKySp1D0lJD 8rNoOp3RFlFchGXIQypu9JvuKgwfSIsQktuD2rLteX1pFEoZMpUr7ZqtM4gQR6Cg iZ3UqrrS9QsdBtOmZMSTmh0HignGSistU3VPRVOiiICqj8sN7SlBRhh+50eqSdel DQrLEWCNUp60a2eaBC0WOgsHQBdG0DSgWjVQCPB2uG8nIJaGcsCXM+N9iGyzBatK f5Zxy1eHQoyTtPvv8QA+rAcSn/XO9t6ND9fzJlxHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeoS7d8+vWOlB+elTOaPd2HWm85cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0N2NkYmJjLTA2MDYtNDgyNC1iNDY4LTEwM2JkMWY1NzExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFAMcwDQYJKoZIhvcNAQELBQADggEBANe31g43JAGN4+VqAOnZeQXahbCl Ec+t5h6njiONy+OOc0kIxM+rSumLQ9hXxl7sS2MMJXplXGXv6arD4t1jnoKiLTPD ZLIMl6AQIt10xmKGgbJcrQSV7K3WL+lAveOKY0zc9WnsEL/7kjdXoxGHHF4JLvCP WMr3DzJ4q9nrMv7SSJ0UKvxRy/4LAeMppxv7g58ALExT6OJZc38AdGNbRMeiET7q 9jbHCpv3mjJShA4geBXxb64hbE/DNqPUXtJc7BBC+nwT+CWpi1+YNsMdmTbXTS+K fHgXpfc9GkTOnEwypLDhkjYTWoYPOYE+N4QxeSURv1NoRwKmgxIvTIP8Oqg= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:44 2025 by rpki-client