$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa File: cc1edd83-1b74-4b56-9667-3461850e8add.roa (raw, json) Hash identifier: ZKpGuEfX8tbicy1QM/EqVwtefDxxd7D8ZZptwS0dB5A= Subject key identifier: C1:EB:D0:9F:83:55:C6:71:E6:B7:F8:16:03:AA:F1:CB:F3:E5:51:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67B4CCABB291BAE278D91BF5C95443B419E845B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa Signing time: Sat 12 Jul 2025 00:00:35 +0000 ROA not before: Sat 12 Jul 2025 00:00:35 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 129.224.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b4:cc:ab:b2:91:ba:e2:78:d9:1b:f5:c9:54:43:b4:19:e8:45:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:00:35 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=0f1dce0651eefa8862e02dcc19d93c7d5b344076f7c91821709c21ff42b67c83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:0f:55:f4:32:e4:bf:5e:ec:8c:b5:53:f5: 1f:3f:a7:76:06:98:7e:2d:2d:51:00:f8:0c:5e:ef: 64:cf:67:29:25:ca:c2:e3:d6:a2:e8:ca:9f:94:a0: fc:4c:ef:d1:c9:3c:d4:ee:83:0e:a6:94:d8:6f:35: 5e:1e:3a:38:20:25:72:e4:d5:2e:07:21:31:4a:9a: 26:f3:24:21:bf:af:b5:5b:d1:f0:b4:c8:4d:7f:02: f1:9f:dc:80:d5:20:9e:20:0e:c2:b8:c5:55:01:2b: 61:5e:38:36:8a:7d:14:dd:3e:03:82:e1:78:b1:a2: 12:53:50:63:c6:65:fb:d4:c5:37:c0:39:50:95:bc: 63:69:36:05:2f:22:7b:b3:e4:8a:c7:2c:4c:29:18: 88:1f:23:38:fe:fc:49:08:19:4e:8a:d5:5c:b6:7c: ea:20:b5:8f:a9:be:6f:9b:cd:3d:1c:01:3a:4b:b6: 05:41:2f:00:85:ed:fa:46:87:92:33:0d:f5:38:94: c6:87:14:e6:c9:9b:9e:d1:40:9a:3d:2f:63:57:60: 4b:b5:52:84:6c:87:bf:39:f6:0d:1c:a9:d9:1d:58: 77:74:83:1c:51:09:6a:1d:0c:77:da:44:e8:2a:9f: be:da:45:5d:7d:bd:4c:bd:2d:75:0f:8c:5c:36:ad: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EB:D0:9F:83:55:C6:71:E6:B7:F8:16:03:AA:F1:CB:F3:E5:51:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.224.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:4c:af:de:17:d4:de:ee:f1:03:da:07:7e:02:57:9b:e9:dd: a8:47:f6:83:c4:fa:fb:b0:63:f7:16:eb:4e:6a:f3:28:0f:9c: a6:09:64:72:4d:87:04:4c:bf:89:bd:fc:ab:75:0e:09:38:54: 66:04:08:87:a0:98:f0:46:2c:44:b0:51:bf:a0:a9:64:cd:f2: 04:31:0c:5c:fa:b6:bd:ef:cb:ed:53:a7:51:e0:fa:a9:14:7a: 51:af:58:23:99:cd:fa:09:4f:de:23:cc:b0:13:a9:f8:b7:91: 20:c1:95:4c:06:54:66:66:8e:95:0a:25:a6:5e:25:5a:16:3e: 4d:31:81:8d:05:79:78:2a:d6:7c:05:60:53:84:95:51:90:a3: fd:21:5d:c1:07:66:33:58:63:5a:9d:de:e9:4e:98:27:39:92: 42:af:0e:7f:a4:d5:ec:e0:23:fa:c5:98:10:80:9c:4e:fe:9b: 39:07:82:02:68:6f:7e:bf:48:0c:a4:30:7e:02:00:e9:23:22: 70:4a:ce:78:dd:42:9a:ca:91:8e:2b:ba:bf:6b:4a:08:c8:9c: c9:40:ab:46:26:2b:1f:45:f9:92:a2:26:d6:ab:bd:0c:62:e4: 0a:f7:bd:bf:f6:41:1e:1a:19:1e:79:29:ee:66:31:19:d0:dd: 38:d8:af:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ7TMq7KRuuJ42Rv1yVRDtBnoRbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAwMDM1WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjFkY2UwNjUxZWVmYTg4NjJlMDJkY2MxOWQ5M2M3ZDVi MzQ0MDc2ZjdjOTE4MjE3MDljMjFmZjQyYjY3YzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV8A9V9DLkv17sjLVT9R8/p3YGmH4tLVEA+Axe72TPZykl ysLj1qLoyp+UoPxM79HJPNTugw6mlNhvNV4eOjggJXLk1S4HITFKmibzJCG/r7Vb 0fC0yE1/AvGf3IDVIJ4gDsK4xVUBK2FeODaKfRTdPgOC4XixohJTUGPGZfvUxTfA OVCVvGNpNgUvInuz5IrHLEwpGIgfIzj+/EkIGU6K1Vy2fOogtY+pvm+bzT0cATpL tgVBLwCF7fpGh5IzDfU4lMaHFObJm57RQJo9L2NXYEu1UoRsh7859g0cqdkdWHd0 gxxRCWodDHfaROgqn77aRV19vUy9LXUPjFw2rcCZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwevQn4NVxnHmt/gWA6rxy/PlUYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjMWVkZDgzLTFiNzQtNGI1Ni05NjY3LTM0NjE4NTBlOGFkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWB4OAwDQYJKoZIhvcNAQELBQADggEBAIxMr94X1N7u8QPaB34CV5vp3ahH 9oPE+vuwY/cW605q8ygPnKYJZHJNhwRMv4m9/Kt1Dgk4VGYECIegmPBGLESwUb+g qWTN8gQxDFz6tr3vy+1Tp1Hg+qkUelGvWCOZzfoJT94jzLATqfi3kSDBlUwGVGZm jpUKJaZeJVoWPk0xgY0FeXgq1nwFYFOElVGQo/0hXcEHZjNYY1qd3ulOmCc5kkKv Dn+k1ezgI/rFmBCAnE7+mzkHggJob36/SAykMH4CAOkjInBKznjdQprKkY4rur9r SgjInMlAq0YmKx9F+ZKiJtarvQxi5Ar3vb/2QR4aGR55Ke5mMRnQ3TjYrxc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:20 2025 by rpki-client