$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa File: c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa (raw, json) Hash identifier: b4t5l9kpML0pQT3PjtjVIT6nw94fkzqIPqmHBsD/NQE= Subject key identifier: 49:73:84:36:7C:C9:FE:C2:BF:6D:82:F8:C5:52:F3:EB:EA:7B:20:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65B74C213D5F426A3F1902808AE2ECAE924842AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa Signing time: Sat 19 Jul 2025 00:01:35 +0000 ROA not before: Sat 19 Jul 2025 00:01:35 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 199.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b7:4c:21:3d:5f:42:6a:3f:19:02:80:8a:e2:ec:ae:92:48:42:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:35 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=05bbb9c58872aeaf32f807008ac0facd88ed40a8f35776dedd650876dd66c8b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:6d:a9:da:d3:14:c9:44:e7:a8:89:9e:8f: c1:b8:53:dc:de:dd:bd:60:6a:34:9e:f9:cd:f8:5d: 97:58:c0:e8:ef:d3:f1:a2:4a:25:b7:a0:1b:7b:42: 80:b8:5c:10:2c:5d:2c:6d:43:9d:70:57:88:e5:46: 4b:43:fd:6a:75:95:52:1b:68:1b:20:bb:a0:20:95: 6e:df:6b:99:a3:ba:41:80:92:3f:4f:69:63:2c:55: 6e:93:4d:6f:4d:b5:6a:57:b4:5c:49:c6:d8:7c:69: 91:1a:97:5d:f1:ba:47:1b:16:54:c6:9c:9b:f3:27: ad:9c:48:23:f7:99:a4:e3:f3:ba:a5:72:f7:32:55: 5c:17:a9:2b:96:e8:e8:5b:5b:52:4c:9f:73:f6:38: 9f:7b:39:0e:3f:6a:92:08:79:b8:8d:6d:39:fd:74: 2d:47:e2:83:1f:44:ba:71:a6:69:65:19:54:91:d9: 8a:6a:be:0f:60:81:2e:37:87:8f:ca:4b:55:46:1d: 96:4e:06:2e:b8:01:1d:8d:49:65:26:45:dc:0c:19: 6e:1d:f1:40:7a:88:9c:08:2c:37:20:9a:6a:e3:0a: ed:54:aa:69:ba:68:b4:9f:94:e9:38:9a:f4:20:55: 92:1f:23:e2:7f:7c:f8:18:0b:a1:9c:91:a8:f7:cd: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:84:36:7C:C9:FE:C2:BF:6D:82:F8:C5:52:F3:EB:EA:7B:20:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption d0:5a:3d:fd:70:f3:dd:48:d8:70:59:a0:55:40:11:72:56:a6: 42:c1:be:2f:68:26:1c:ee:46:c7:6a:8e:63:0b:4c:b8:50:d2: 15:e5:76:2c:9f:8f:ea:82:c4:00:ac:89:93:2c:e5:95:27:d2: f5:fa:a7:3d:0d:d5:3d:81:de:e4:12:b8:27:24:1e:77:6a:0b: 2a:72:81:99:89:9b:4b:23:13:3c:f8:d6:12:fb:1c:9f:03:0c: 59:84:12:3e:d7:a4:14:35:86:d0:7e:7b:06:08:76:f8:d2:cb: e8:00:5b:90:db:c6:6b:2d:f1:4a:f4:89:a7:0a:66:7a:a6:5f: e1:cf:9f:15:e5:cb:83:08:e2:7f:20:5c:5b:03:6d:f0:0e:35: 49:2c:a0:a1:ba:97:c6:ed:85:4c:18:1d:15:91:3e:fe:ef:20: bc:9a:3f:19:de:d2:9d:94:75:92:26:80:1c:e0:b0:31:5f:78: 69:22:e6:55:9b:14:f1:b6:c6:b3:70:9c:72:76:02:74:05:3f: 29:38:50:07:7e:05:30:46:fa:6d:05:42:f7:e7:3e:7d:30:91: 5b:66:17:3f:8b:d2:99:34:fd:12:97:00:be:97:af:07:3f:44: 68:6e:9d:e7:4e:da:bf:66:3b:8e:ca:26:5e:53:d9:8e:2d:67: d3:5b:69:11 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZbdMIT1fQmo/GQKAiuLsrpJIQq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTM1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWJiYjljNTg4NzJhZWFmMzJmODA3MDA4YWMwZmFjZDg4 ZWQ0MGE4ZjM1Nzc2ZGVkZDY1MDg3NmRkNjZjOGI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmvW2p2tMUyUTnqImej8G4U9ze3b1gajSe+c34XZdYwOjv 0/GiSiW3oBt7QoC4XBAsXSxtQ51wV4jlRktD/Wp1lVIbaBsgu6AglW7fa5mjukGA kj9PaWMsVW6TTW9NtWpXtFxJxth8aZEal13xukcbFlTGnJvzJ62cSCP3maTj87ql cvcyVVwXqSuW6OhbW1JMn3P2OJ97OQ4/apIIebiNbTn9dC1H4oMfRLpxpmllGVSR 2Ypqvg9ggS43h4/KS1VGHZZOBi64AR2NSWUmRdwMGW4d8UB6iJwILDcgmmrjCu1U qmm6aLSflOk4mvQgVZIfI+J/fPgYC6Gckaj3zc77AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSXOENnzJ/sK/bYL4xVLz6+p7IGkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4Mjk2YjBkLWNiY2YtNDRhMi04ODZhLTAxMTJkMjJiZjNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDHSDANBgkqhkiG9w0BAQsFAAOCAQEA0Fo9/XDz3UjYcFmgVUARclamQsG+ L2gmHO5Gx2qOYwtMuFDSFeV2LJ+P6oLEAKyJkyzllSfS9fqnPQ3VPYHe5BK4JyQe d2oLKnKBmYmbSyMTPPjWEvscnwMMWYQSPtekFDWG0H57Bgh2+NLL6ABbkNvGay3x SvSJpwpmeqZf4c+fFeXLgwjifyBcWwNt8A41SSygobqXxu2FTBgdFZE+/u8gvJo/ Gd7SnZR1kiaAHOCwMV94aSLmVZsU8bbGs3CccnYCdAU/KThQB34FMEb6bQVC9+c+ fTCRW2YXP4vSmTT9EpcAvpevBz9EaG6d507av2Y7jsomXlPZji1n01tpEQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:31 2025 by rpki-client