$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa File: b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa (raw, json) Hash identifier: 3v0+5FRFkhXH91RlkMgcO1PbCdtIwc+dm74d5jiqHcg= Subject key identifier: 4A:A1:33:B4:4E:E9:EF:D3:7E:1B:8A:24:6D:CD:1F:26:E2:DD:A4:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 762060D7C1A98291F0736260816EABE90661BFB0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa Signing time: Sat 19 Jul 2025 00:41:17 +0000 ROA not before: Sat 19 Jul 2025 00:41:17 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:20:60:d7:c1:a9:82:91:f0:73:62:60:81:6e:ab:e9:06:61:bf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:41:17 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=4832f5cac51ce8264e088de274bebface4787aeff2241b7baf6b3b04cb25252f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:5a:e5:42:ba:aa:45:0c:76:0d:bf:78:b5: 65:da:a3:30:1c:f0:0b:f1:b8:60:72:7c:8f:ed:f6: 18:28:9b:45:f3:f9:b2:6c:61:a7:a9:61:86:9c:0b: 17:93:d5:ab:67:96:e9:1f:0e:a9:bb:15:a9:33:f4: 47:8b:1b:90:fe:14:44:a7:91:88:28:62:72:87:55: 53:67:d1:6d:94:98:a9:15:15:5f:ad:89:d9:77:84: 2e:51:18:5e:e6:6d:0e:49:1b:0e:83:a8:75:e9:d7: f2:ab:6a:92:21:48:16:4d:27:1f:68:a5:ee:ff:4a: 3b:30:8c:07:f6:3c:44:c6:7c:f6:1a:bb:4e:ef:a8: fa:a0:ce:15:15:73:fa:f5:07:b9:ed:51:f8:c8:7f: 3e:01:0b:4e:34:8d:86:6d:2a:7a:91:bb:fc:b8:0f: aa:02:f6:b9:7b:0e:f4:58:82:80:31:57:60:b1:9d: c4:48:2f:8d:43:83:ed:44:a8:23:b1:f6:4d:b1:25: 92:1e:ed:0d:63:ee:ad:f0:ae:af:4b:0e:9d:0e:1b: 02:e5:2a:c9:2d:f2:92:c6:71:98:3c:79:09:ad:d0: e2:08:d9:48:72:40:48:96:9c:67:8d:bd:23:35:7a: 4d:19:1e:ff:75:25:6d:62:0d:70:c5:18:f2:d5:02: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A1:33:B4:4E:E9:EF:D3:7E:1B:8A:24:6D:CD:1F:26:E2:DD:A4:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.160.0/21 Signature Algorithm: sha256WithRSAEncryption b0:f5:c1:46:d8:ca:f7:63:a2:77:04:cd:ab:a3:21:91:03:f8: 50:53:8c:eb:7b:cf:46:50:3e:e2:e8:a9:6a:17:a6:16:21:0c: 37:ef:cd:32:ab:64:e8:e7:de:eb:d3:54:e9:0e:cb:db:68:ce: fd:e5:57:9d:f2:db:66:bf:06:a4:1d:a7:04:18:ec:8d:61:78: 29:c6:96:fb:e9:92:08:7f:da:41:a4:34:60:ad:5d:97:83:be: d5:92:52:26:7e:bb:37:18:fa:49:ff:69:54:90:1e:9c:4d:79: de:b4:b9:36:6a:b9:1e:65:b0:1b:8c:7b:23:71:a1:eb:83:72: 10:e0:9f:95:1b:b5:d0:7c:e9:20:22:32:a4:c3:af:c0:76:07: d0:2a:69:de:3d:6c:e0:2e:c6:3c:7b:bf:2b:51:12:c7:93:26: c9:f4:2d:fd:da:44:76:b4:92:ae:87:ae:dd:51:91:27:35:88: bf:b7:03:89:b5:75:47:7d:f6:68:db:0b:77:41:e8:03:da:0f: 13:57:92:a9:cd:55:34:96:e3:88:a9:4c:0a:8b:6c:cc:a1:aa: d1:94:eb:0f:58:4a:9b:03:e6:37:34:60:1e:0c:da:a0:61:ca: 7c:7c:4c:6d:74:91:30:c5:66:9e:ab:a7:89:c5:02:6a:ca:a2: 37:10:d7:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdiBg18GpgpHwc2JggW6r6QZhv7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MTE3WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODMyZjVjYWM1MWNlODI2NGUwODhkZTI3NGJlYmZhY2U0 Nzg3YWVmZjIyNDFiN2JhZjZiM2IwNGNiMjUyNTJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPa1rlQrqqRQx2Db94tWXaozAc8AvxuGByfI/t9hgom0Xz +bJsYaepYYacCxeT1atnlukfDqm7Fakz9EeLG5D+FESnkYgoYnKHVVNn0W2UmKkV FV+tidl3hC5RGF7mbQ5JGw6DqHXp1/KrapIhSBZNJx9ope7/SjswjAf2PETGfPYa u07vqPqgzhUVc/r1B7ntUfjIfz4BC040jYZtKnqRu/y4D6oC9rl7DvRYgoAxV2Cx ncRIL41Dg+1EqCOx9k2xJZIe7Q1j7q3wrq9LDp0OGwLlKskt8pLGcZg8eQmt0OII 2UhyQEiWnGeNvSM1ek0ZHv91JW1iDXDFGPLVAmkXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSqEztE7p79N+G4okbc0fJuLdpEMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1NGU2OGVjLTJlZjAtNDU0Ni04Y2ZmLWUwMTFjOWY0MmZiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36AwDQYJKoZIhvcNAQELBQADggEBALD1wUbYyvdjoncEzaujIZED+FBT jOt7z0ZQPuLoqWoXphYhDDfvzTKrZOjn3uvTVOkOy9tozv3lV53y22a/BqQdpwQY 7I1heCnGlvvpkgh/2kGkNGCtXZeDvtWSUiZ+uzcY+kn/aVSQHpxNed60uTZquR5l sBuMeyNxoeuDchDgn5UbtdB86SAiMqTDr8B2B9Aqad49bOAuxjx7vytREseTJsn0 Lf3aRHa0kq6Hrt1RkSc1iL+3A4m1dUd99mjbC3dB6APaDxNXkqnNVTSW44ipTAqL bMyhqtGU6w9YSpsD5jc0YB4M2qBhynx8TG10kTDFZp6rp4nFAmrKojcQ1/A= -----END CERTIFICATE-----Generated at Mon Jul 21 23:37:16 2025 by rpki-client