$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa File: c15493d7-7585-4637-a264-dc1a788dad6d.roa (raw, json) Hash identifier: 6UAcU1t6OYSToxJyMaS9f686zgPB2lEFqevKnlVdzHo= Subject key identifier: 38:89:15:0A:98:AA:FA:0F:F2:5E:89:B0:76:C1:B5:1F:F0:65:BB:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FEFFD6000E7EFFC0A9BB9C7F9792A06FEE2FA5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa Signing time: Sat 19 Jul 2025 00:10:15 +0000 ROA not before: Sat 19 Jul 2025 00:10:15 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.73.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ef:fd:60:00:e7:ef:fc:0a:9b:b9:c7:f9:79:2a:06:fe:e2:fa:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:10:15 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=56c172725afe2e488fea8cf794e244b41aaacee694c66f14eddc9cf2b9859fcd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:66:c1:b7:92:e7:e8:35:69:c4:53:94:06: 38:c2:53:02:8a:70:b2:53:cd:ca:4d:38:99:77:22: 36:f2:17:a6:58:4f:32:25:b5:79:2c:a1:9a:4d:aa: 2d:1d:94:1b:5e:d2:1b:a2:8d:e0:42:bd:be:4d:63: 0b:41:cd:c2:60:17:53:26:7d:d4:b6:23:84:83:89: 53:68:85:c6:8a:70:b5:d7:2f:3c:fc:39:32:d8:95: 0b:a7:86:73:d5:bb:c7:57:3d:50:60:17:d3:17:e0: 33:35:64:b8:2e:bd:47:30:c2:7e:1c:27:68:6c:2e: 48:e4:f5:c3:cc:94:ab:94:26:71:29:95:a2:b4:53: 14:72:d5:7f:b6:90:30:64:d1:fb:b0:b1:6c:f2:60: 83:d4:1f:2d:46:c2:67:98:33:17:c8:ea:66:27:8d: f2:96:45:0d:d8:e0:6b:ee:17:ab:67:c2:8c:91:15: 7f:71:1d:66:bb:ef:5d:7e:bf:00:43:e6:74:96:0e: d0:e1:fb:e1:f7:ef:c2:c9:26:84:3b:e6:c9:8f:ad: b0:d7:ba:85:e2:8a:9d:9e:f4:65:de:3b:35:65:7d: bc:c0:9f:98:7c:85:18:5f:db:59:7f:57:21:4b:73: 1b:db:5a:8d:2e:fd:27:77:29:17:95:74:2a:48:e8: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:15:0A:98:AA:FA:0F:F2:5E:89:B0:76:C1:B5:1F:F0:65:BB:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.73.0.0/18 Signature Algorithm: sha256WithRSAEncryption d2:8b:fa:a5:8b:e8:f5:78:6e:78:d2:c2:3c:98:46:52:59:f3: 8b:b1:7f:64:d3:7d:f2:f3:f7:e6:46:45:6e:d1:a1:14:75:99: 06:ca:55:a0:5c:ba:c4:47:01:bc:6d:7b:67:49:98:be:39:e0: 84:4b:bb:09:7b:97:a5:5b:a7:5f:40:88:66:9a:ec:96:f9:96: 03:46:ac:b3:28:03:ba:6c:a1:ec:b3:e8:c0:df:81:c5:91:77: 8a:46:5d:b7:8b:35:1f:56:58:9d:dd:95:1a:a0:65:4f:93:ab: 16:60:23:4b:3c:d2:48:8c:88:81:b3:29:ee:03:e5:83:c8:3a: 74:ab:f5:8c:98:00:1d:a6:0f:ad:dc:2d:b7:16:ca:4b:2d:6f: e2:b2:0e:bc:5e:68:da:dd:5a:01:e4:eb:26:5e:cd:e4:dd:43: 6a:f7:cf:9a:43:4c:a3:bc:39:b8:80:2e:cb:31:07:06:4f:b1: 32:ac:0a:03:87:9b:96:e0:d3:26:63:ed:23:31:6b:f2:c0:e5: 47:d0:c1:fe:ea:38:ee:68:c3:64:ae:2f:e0:8d:57:b5:be:29: 19:8f:06:3a:03:55:98:81:7c:15:c5:bb:b2:a7:1c:a6:d9:5f: d5:74:fd:ec:53:46:24:e5:e8:12:92:80:2c:28:2a:27:d3:00: 53:d3:48:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL+/9YADn7/wKm7nH+XkqBv7i+l8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAxMDE1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmMxNzI3MjVhZmUyZTQ4OGZlYThjZjc5NGUyNDRiNDFh YWFjZWU2OTRjNjZmMTRlZGRjOWNmMmI5ODU5ZmNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDjmbBt5Ln6DVpxFOUBjjCUwKKcLJTzcpNOJl3IjbyF6ZY TzIltXksoZpNqi0dlBte0huijeBCvb5NYwtBzcJgF1MmfdS2I4SDiVNohcaKcLXX Lzz8OTLYlQunhnPVu8dXPVBgF9MX4DM1ZLguvUcwwn4cJ2hsLkjk9cPMlKuUJnEp laK0UxRy1X+2kDBk0fuwsWzyYIPUHy1GwmeYMxfI6mYnjfKWRQ3Y4GvuF6tnwoyR FX9xHWa7711+vwBD5nSWDtDh++H378LJJoQ75smPrbDXuoXiip2e9GXeOzVlfbzA n5h8hRhf21l/VyFLcxvbWo0u/Sd3KReVdCpI6PPxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOIkVCpiq+g/yXomwdsG1H/Blu+IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNTQ5M2Q3LTc1ODUtNDYzNy1hMjY0LWRjMWE3ODhkYWQ2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYSQAwDQYJKoZIhvcNAQELBQADggEBANKL+qWL6PV4bnjSwjyYRlJZ84ux f2TTffLz9+ZGRW7RoRR1mQbKVaBcusRHAbxte2dJmL454IRLuwl7l6Vbp19AiGaa 7Jb5lgNGrLMoA7psoeyz6MDfgcWRd4pGXbeLNR9WWJ3dlRqgZU+TqxZgI0s80kiM iIGzKe4D5YPIOnSr9YyYAB2mD63cLbcWykstb+KyDrxeaNrdWgHk6yZezeTdQ2r3 z5pDTKO8ObiALssxBwZPsTKsCgOHm5bg0yZj7SMxa/LA5UfQwf7qOO5ow2SuL+CN V7W+KRmPBjoDVZiBfBXFu7KnHKbZX9V0/exTRiTl6BKSgCwoKifTAFPTSNg= -----END CERTIFICATE-----Generated at Thu Jul 24 08:30:21 2025 by rpki-client