$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca55f16e-3296-4fcf-bb32-17c4021e77f6.roa File: ca55f16e-3296-4fcf-bb32-17c4021e77f6.roa (raw, json) Hash identifier: UIflU/0Lm8bce5jC9dVttvH7+UXvlg4WRoyYh/xAfGU= Subject key identifier: 11:78:1B:CF:C4:5F:BA:AD:5D:6F:D7:EC:27:81:AB:37:A3:E3:4A:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72149886B1C3F17D0E80F12E9A9FD4B2D044F028 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca55f16e-3296-4fcf-bb32-17c4021e77f6.roa Signing time: Wed 09 Jul 2025 00:30:16 +0000 ROA not before: Wed 09 Jul 2025 00:30:16 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:14:98:86:b1:c3:f1:7d:0e:80:f1:2e:9a:9f:d4:b2:d0:44:f0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:30:16 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=8f1220b8ab375c9032a139f938fd3e6c4f17a8cf2789e915664e8b915ceb5553, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:34:c8:c1:3b:13:64:21:8a:06:95:d9:78: d8:d8:7f:93:5b:52:fb:2a:d6:3e:b8:01:42:fd:75: 60:27:b4:b5:8b:dd:1d:89:1f:af:64:87:ec:22:e0: 47:8e:3a:13:aa:df:4f:b4:b4:fe:80:2d:fb:43:85: b2:b3:93:50:e7:10:b6:bc:6b:0f:11:e9:2f:d5:be: 1c:c3:a6:e8:e2:b9:cd:71:60:af:cb:3a:fb:c1:06: 36:68:22:1e:6a:a6:ec:a4:b9:5c:1b:ab:db:8c:f2: d3:e7:45:fd:f0:f1:8d:df:f3:cd:ba:58:80:dc:68: b5:42:85:12:6b:a0:78:25:1a:ad:f8:61:e0:17:d8: 3c:e9:77:cd:93:81:fb:73:83:ea:1f:0f:e6:16:82: db:fb:b8:35:64:e8:67:70:95:17:1f:ca:19:c2:d1: b5:2f:b7:41:5d:bd:cf:32:a4:f2:0b:78:bc:c7:93: 19:c6:48:d2:51:1b:3c:53:f3:06:5c:fa:7e:00:88: 5c:6f:d4:12:44:f3:95:ec:0d:42:af:78:48:09:8f: 1f:80:01:e8:ac:9a:8a:8a:38:92:b2:ad:57:05:75: 5c:c8:aa:ee:32:02:23:f2:8a:a9:e5:37:c7:65:a9: e2:f4:d2:e9:87:01:6b:5a:72:8b:77:2e:3d:67:92: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:78:1B:CF:C4:5F:BA:AD:5D:6F:D7:EC:27:81:AB:37:A3:E3:4A:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca55f16e-3296-4fcf-bb32-17c4021e77f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.0.0/18 Signature Algorithm: sha256WithRSAEncryption 95:dd:08:d4:9c:ec:29:92:64:67:9d:cf:f0:5c:4d:42:a3:ec: 0a:12:84:f9:f8:0b:4e:a8:0c:08:36:a9:71:ba:05:ee:0d:d5: 42:a6:0b:44:20:ac:04:2d:50:c9:2b:19:f3:a2:7e:9f:d2:44: 9e:15:46:c6:0b:38:b8:6f:9a:ec:e0:7c:4a:78:90:ac:eb:6d: 12:b6:9c:e3:34:f7:92:20:41:3e:5a:94:50:ab:cc:41:b1:fe: b9:09:e0:1b:ee:ae:57:6c:73:74:33:8f:dd:2b:22:f0:85:29: 19:a9:3c:aa:e7:0c:15:e2:1e:71:3b:fa:ff:8e:cc:7e:43:4d: ac:e5:8a:d6:c1:d6:f7:e2:dd:ae:01:f0:49:3f:75:07:8d:13: 69:79:fa:ba:1b:b8:32:4a:5b:2d:6d:07:75:c0:af:55:bb:24: 35:ee:b5:57:04:6a:22:0b:c9:a4:85:2d:4d:1c:51:8c:e5:ce: 7d:cc:6e:f5:0f:3f:99:50:91:60:5a:c1:a2:ef:55:65:ac:73: 4b:e3:e0:f6:10:e1:8f:9e:60:48:62:0a:5a:3c:3c:92:53:50: c2:cd:5e:86:df:fe:2b:41:64:ae:4c:55:9a:64:fa:bb:f4:97: 5d:ec:a1:29:eb:7a:fa:6a:87:e4:75:82:67:02:1d:2d:1e:1c: 5b:a0:96:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUchSYhrHD8X0OgPEump/UstBE8CgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAzMDE2WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjEyMjBiOGFiMzc1YzkwMzJhMTM5ZjkzOGZkM2U2YzRm MTdhOGNmMjc4OWU5MTU2NjRlOGI5MTVjZWI1NTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMvzTIwTsTZCGKBpXZeNjYf5NbUvsq1j64AUL9dWAntLWL 3R2JH69kh+wi4EeOOhOq30+0tP6ALftDhbKzk1DnELa8aw8R6S/VvhzDpujiuc1x YK/LOvvBBjZoIh5qpuykuVwbq9uM8tPnRf3w8Y3f8826WIDcaLVChRJroHglGq34 YeAX2Dzpd82Tgftzg+ofD+YWgtv7uDVk6GdwlRcfyhnC0bUvt0Fdvc8ypPILeLzH kxnGSNJRGzxT8wZc+n4AiFxv1BJE85XsDUKveEgJjx+AAeismoqKOJKyrVcFdVzI qu4yAiPyiqnlN8dlqeL00umHAWtacot3Lj1nkufHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEXgbz8Rfuq1db9fsJ4GrN6PjSlowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNTVmMTZlLTMyOTYtNGZjZi1iYjMyLTE3YzQwMjFlNzdmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFwAwDQYJKoZIhvcNAQELBQADggEBAJXdCNSc7CmSZGedz/BcTUKj7AoS hPn4C06oDAg2qXG6Be4N1UKmC0QgrAQtUMkrGfOifp/SRJ4VRsYLOLhvmuzgfEp4 kKzrbRK2nOM095IgQT5alFCrzEGx/rkJ4Bvurldsc3Qzj90rIvCFKRmpPKrnDBXi HnE7+v+OzH5DTazlitbB1vfi3a4B8Ek/dQeNE2l5+robuDJKWy1tB3XAr1W7JDXu tVcEaiILyaSFLU0cUYzlzn3MbvUPP5lQkWBawaLvVWWsc0vj4PYQ4Y+eYEhiClo8 PJJTUMLNXobf/itBZK5MVZpk+rv0l13soSnrevpqh+R1gmcCHS0eHFugllk= -----END CERTIFICATE-----Generated at Tue Jul 22 06:26:25 2025 by rpki-client