$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa File: c9379183-2f78-494b-8d27-201a280c0f46.roa (raw, json) Hash identifier: +JhkYoGZpYIC9WSiF9oUNnOonbIuKfJIcyC8qVu4fdY= Subject key identifier: DC:7D:F1:6F:A0:3C:91:00:88:C3:A9:68:FD:06:5B:3A:DC:AF:5D:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 055C45EFC72FA9155034AC38D91DEF5D6637F5A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa Signing time: Fri 18 Jul 2025 00:00:22 +0000 ROA not before: Fri 18 Jul 2025 00:00:22 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:45:ef:c7:2f:a9:15:50:34:ac:38:d9:1d:ef:5d:66:37:f5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:22 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=dc1e7993386eae118f44ba9b2689ade29d313bfcf53daf919ff1da7ffe1f07fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:c6:d7:6f:a7:af:d2:79:99:b8:e6:26:9c: 57:52:34:46:d7:2b:9a:2c:00:9a:3a:70:15:89:fc: 58:36:9c:6c:85:50:4f:45:fe:8e:f0:f1:8f:2c:1f: e3:ae:a0:ca:45:56:9f:40:df:1a:e6:c5:2b:b6:b2: a9:e2:4d:59:72:40:ec:6b:fc:04:04:b6:6c:99:9e: 96:58:a7:3e:1c:06:94:9e:bd:be:cf:fd:ff:d6:5e: ce:77:34:94:b4:a6:21:f7:df:e3:1d:46:f1:b5:57: 29:91:82:75:9f:13:76:3e:9e:d7:3e:bf:44:3f:64: 3d:25:86:f5:df:74:6a:bf:06:6d:73:5c:06:36:c1: ed:c2:40:1b:09:fb:23:cd:f5:da:aa:c8:83:00:2f: 09:81:6a:e8:13:09:3f:fe:c7:e2:68:7e:23:f2:5a: 39:1c:3b:2e:3c:81:8d:7a:7e:a2:ec:c1:79:59:8b: 8b:1b:1e:e5:23:52:01:d4:67:d0:77:98:b6:20:ad: 9e:08:d4:1c:6c:08:90:e3:ec:79:15:c0:42:1d:32: 4a:d6:9d:55:85:79:d7:d4:eb:46:2d:02:6c:d4:56: 03:2e:9b:72:34:a7:0c:a4:13:60:4e:ad:d9:80:b8: d7:ec:a8:51:1d:d6:f3:64:af:6e:90:7a:0b:85:43: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7D:F1:6F:A0:3C:91:00:88:C3:A9:68:FD:06:5B:3A:DC:AF:5D:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.127.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9e:9c:48:56:fd:00:a5:b5:1c:2d:c3:13:56:5e:b0:51:e7:c1: 0b:b3:8a:07:a9:8a:e4:93:9f:c5:ba:04:69:9b:7b:c4:ea:73: 61:f3:bd:48:4a:5e:ac:24:69:3d:fe:75:c7:a6:ca:5e:57:ff: d6:d4:a3:63:af:f4:38:e6:6d:9e:f5:6d:af:68:91:e7:f3:31: d7:71:9b:74:bd:bb:3e:00:ad:15:73:ed:81:b6:88:37:cb:b7: 47:c6:b0:fa:1b:2e:0b:ab:b0:62:2e:91:0f:8a:36:09:29:05: 89:7f:9b:cd:6f:3f:11:e5:56:f4:c4:3e:d7:bd:0d:51:93:93: 7a:7c:5a:7f:d9:05:81:03:54:b8:b5:45:c1:e9:66:76:43:1d: 1c:d2:6c:b5:6a:6b:d6:c6:84:58:f0:f1:79:39:c5:ef:ce:45: 67:3d:64:3a:2f:40:58:09:24:90:1c:00:59:e9:9a:68:21:e3: 42:df:a0:32:54:d2:88:50:0f:cb:00:83:bf:f3:ec:11:ac:f4: 4a:f8:33:41:f7:0d:14:c5:f3:cb:32:95:12:20:7a:18:19:16: d2:6c:ac:37:83:c3:05:cd:23:79:98:0f:f2:df:70:1a:a4:b3: 80:ec:f1:2e:6e:99:49:1d:44:9e:4f:98:16:7d:1f:8e:8b:49: 08:30:87:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBVxF78cvqRVQNKw42R3vXWY39aIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAwMDIyWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzFlNzk5MzM4NmVhZTExOGY0NGJhOWIyNjg5YWRlMjlk MzEzYmZjZjUzZGFmOTE5ZmYxZGE3ZmZlMWYwN2ZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGIsbXb6ev0nmZuOYmnFdSNEbXK5osAJo6cBWJ/Fg2nGyF UE9F/o7w8Y8sH+OuoMpFVp9A3xrmxSu2sqniTVlyQOxr/AQEtmyZnpZYpz4cBpSe vb7P/f/WXs53NJS0piH33+MdRvG1VymRgnWfE3Y+ntc+v0Q/ZD0lhvXfdGq/Bm1z XAY2we3CQBsJ+yPN9dqqyIMALwmBaugTCT/+x+JofiPyWjkcOy48gY16fqLswXlZ i4sbHuUjUgHUZ9B3mLYgrZ4I1BxsCJDj7HkVwEIdMkrWnVWFedfU60YtAmzUVgMu m3I0pwykE2BOrdmAuNfsqFEd1vNkr26QeguFQ6y3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3H3xb6A8kQCIw6lo/QZbOtyvXaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5Mzc5MTgzLTJmNzgtNDk0Yi04ZDI3LTIwMWEyODBjMGY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfPf4AwDQYJKoZIhvcNAQELBQADggEBAJ6cSFb9AKW1HC3DE1ZesFHnwQuz igepiuSTn8W6BGmbe8Tqc2HzvUhKXqwkaT3+dcemyl5X/9bUo2Ov9DjmbZ71ba9o kefzMddxm3S9uz4ArRVz7YG2iDfLt0fGsPobLgursGIukQ+KNgkpBYl/m81vPxHl VvTEPte9DVGTk3p8Wn/ZBYEDVLi1RcHpZnZDHRzSbLVqa9bGhFjw8Xk5xe/ORWc9 ZDovQFgJJJAcAFnpmmgh40LfoDJU0ohQD8sAg7/z7BGs9Er4M0H3DRTF88sylRIg ehgZFtJsrDeDwwXNI3mYD/LfcBqks4Ds8S5umUkdRJ5PmBZ9H46LSQgwh1E= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:42 2025 by rpki-client