$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa File: c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa (raw, json) Hash identifier: QM/hoJYBHPh3jnusVme8r2As97HnZ5rXsdpWiB7k6tc= Subject key identifier: 0E:E8:23:FF:A4:8E:05:38:5E:03:11:A5:BE:5F:07:D0:E3:B1:C0:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B72AE6308CDF2C915B474A6C59820D6C9246156 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa Signing time: Tue 22 Jul 2025 00:31:17 +0000 ROA not before: Tue 22 Jul 2025 00:31:17 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.203.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:72:ae:63:08:cd:f2:c9:15:b4:74:a6:c5:98:20:d6:c9:24:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:31:17 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=46ee66204541d50df66cf048f07ee3f9660eee9bc5817655adc4701f257fcc06, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:b1:7b:fd:d0:68:2e:83:a4:06:b2:87:b1: ce:8e:3d:c7:db:ac:77:cd:15:c5:28:e6:16:48:12: 52:bd:b6:d9:ae:3b:52:32:51:64:d9:42:a1:e5:24: c2:bc:6e:13:d7:a9:19:3d:dc:2e:1f:f8:a0:ec:3f: 8f:e8:52:d8:a0:66:62:cb:a2:ae:a8:65:71:d4:ff: 72:9b:ce:27:83:0e:6f:a8:b5:37:84:e5:42:72:a0: 5a:29:c2:4e:77:15:56:1e:bc:a8:b8:85:39:52:86: 72:5b:3b:bd:c0:51:d2:8c:74:6f:8f:33:15:fc:08: cf:6e:64:55:99:f5:ef:40:0b:19:d7:00:1c:b2:d2: 30:c8:bc:0c:b3:3b:9f:e7:bf:98:6c:bc:e4:0b:ef: 7c:df:4a:1a:0a:e7:66:3d:be:d4:92:9b:7b:2c:16: bd:0f:75:64:14:cb:b5:3d:6e:c0:42:7d:38:d4:7d: 84:6e:77:d6:45:99:e2:c5:1d:d1:2b:ff:94:a5:5b: 41:51:e5:37:e3:63:ec:b0:4d:61:ce:ff:0b:08:77: 0b:e3:77:86:b4:22:e7:56:76:c4:12:23:7b:68:2a: c6:0a:f7:ad:18:05:85:56:63:78:ec:23:2a:84:69: ca:de:11:a2:15:72:ad:a6:dd:e0:21:56:59:48:cf: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E8:23:FF:A4:8E:05:38:5E:03:11:A5:BE:5F:07:D0:E3:B1:C0:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.203.128.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:db:d3:a4:f7:00:3a:43:dd:d9:84:0a:e2:a4:be:55:e6:da: 87:2f:13:0d:e7:10:32:1d:21:f8:64:4d:9c:fe:aa:88:5c:66: d0:b2:bf:f0:1f:39:78:06:47:b0:24:d2:4d:1b:f9:90:e4:ce: 17:a5:c5:fc:f0:99:f3:cc:fb:ad:92:99:cb:c0:9b:65:de:3b: 52:40:78:5b:10:85:0e:53:ec:89:13:81:97:21:30:50:12:da: a2:e9:b5:b7:a4:d8:23:89:0a:2d:67:ab:fb:36:d9:90:f5:ed: 2e:11:0a:d0:3a:52:16:97:95:85:a6:fa:d9:c9:02:6a:da:b5: 8c:32:a9:ec:f9:79:12:72:fb:1f:07:38:82:08:66:51:89:33: 29:4f:a9:22:26:8c:ac:a2:0c:97:a4:d6:17:6b:06:b4:7d:a0: 84:b0:5e:7c:50:55:5c:7c:6f:95:01:00:4a:3e:0e:96:c2:e3: da:ef:51:74:7e:16:da:08:7d:18:a7:2d:dd:f8:9b:ec:a8:24: 6f:3c:d4:c7:1c:e2:f7:7b:fd:a3:9b:a5:c0:93:d6:ae:7f:54: 55:b6:a1:08:2c:94:4c:79:7a:65:d1:ba:86:f2:5b:d8:62:d9: f7:91:35:f3:55:af:21:ba:8e:5d:9a:b9:e5:35:e8:9f:f5:a7: ff:f4:5b:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO3KuYwjN8skVtHSmxZgg1skkYVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAzMTE3WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmVlNjYyMDQ1NDFkNTBkZjY2Y2YwNDhmMDdlZTNmOTY2 MGVlZTliYzU4MTc2NTVhZGM0NzAxZjI1N2ZjYzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJLF7/dBoLoOkBrKHsc6OPcfbrHfNFcUo5hZIElK9ttmu O1IyUWTZQqHlJMK8bhPXqRk93C4f+KDsP4/oUtigZmLLoq6oZXHU/3KbzieDDm+o tTeE5UJyoFopwk53FVYevKi4hTlShnJbO73AUdKMdG+PMxX8CM9uZFWZ9e9ACxnX AByy0jDIvAyzO5/nv5hsvOQL73zfShoK52Y9vtSSm3ssFr0PdWQUy7U9bsBCfTjU fYRud9ZFmeLFHdEr/5SlW0FR5TfjY+ywTWHO/wsIdwvjd4a0IudWdsQSI3toKsYK 960YBYVWY3jsIyqEacreEaIVcq2m3eAhVllIz6g9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDugj/6SOBTheAxGlvl8H0OOxwIIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3M2I5YjA3LTZjMzItNDdlZi04NDI0LTM1ZjcxMjZhNWZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEsy4AwDQYJKoZIhvcNAQELBQADggEBAG/b06T3ADpD3dmECuKkvlXm2ocv Ew3nEDIdIfhkTZz+qohcZtCyv/AfOXgGR7Ak0k0b+ZDkzhelxfzwmfPM+62SmcvA m2XeO1JAeFsQhQ5T7IkTgZchMFAS2qLptbek2COJCi1nq/s22ZD17S4RCtA6UhaX lYWm+tnJAmratYwyqez5eRJy+x8HOIIIZlGJMylPqSImjKyiDJek1hdrBrR9oISw XnxQVVx8b5UBAEo+DpbC49rvUXR+FtoIfRinLd34m+yoJG881Mcc4vd7/aObpcCT 1q5/VFW2oQgslEx5emXRuobyW9hi2feRNfNVryG6jl2aueU16J/1p//0W9I= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:52 2025 by rpki-client