$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ceac7814-d16c-4280-b23c-337c70896964.roa File: ceac7814-d16c-4280-b23c-337c70896964.roa (raw, json) Hash identifier: tF8vRYtNjPr1UAww9eOKd3J8WcWTlNJXE5967Ad2c90= Subject key identifier: EC:F3:9B:CF:CA:45:89:89:CD:4F:FB:C1:48:11:D7:35:DE:90:FC:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 454340FBF509CB3CF2A300E7C4F7E2B5D8652C48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ceac7814-d16c-4280-b23c-337c70896964.roa Signing time: Sat 12 Jul 2025 00:20:47 +0000 ROA not before: Sat 12 Jul 2025 00:20:47 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.228.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:43:40:fb:f5:09:cb:3c:f2:a3:00:e7:c4:f7:e2:b5:d8:65:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:20:47 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=b9e6bb6a4c8f66ac387adebc67ffd88faa791dd00fc8024a934be7f144b465eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:85:48:11:d4:d4:45:4f:d1:de:8c:2f:57: a5:ad:8b:b1:74:5b:54:a9:73:8c:e9:1b:db:63:34: e5:58:25:6f:60:d5:01:a6:1e:52:f1:76:1b:db:68: 1f:2f:78:b7:82:fa:7a:bd:fc:5d:e4:85:54:4a:cd: 11:e8:8f:f0:9d:36:2a:74:bd:9e:e5:08:0d:8e:2b: 2a:d2:30:36:62:2c:e7:41:1f:cf:5a:b3:f1:fd:21: 34:3e:d2:84:da:70:fa:46:4c:f5:e1:e0:dc:b9:19: b7:b0:89:01:e3:5f:16:af:95:b6:ed:42:9c:44:c5: 26:67:1b:a1:a7:8f:81:0d:25:e8:8d:2f:d1:f9:4e: 1b:9a:e0:d6:f9:41:6e:d0:69:fe:75:89:fa:2e:9d: 62:2d:56:6b:b3:3d:44:9b:43:ef:83:90:d4:90:96: e8:67:43:bd:c7:f0:f3:ce:3c:19:e2:4b:a3:b0:a3: 46:c5:6e:f7:cc:35:39:32:f3:72:e3:eb:be:a7:2a: 0f:43:6b:73:d8:e0:79:fc:b0:8e:05:79:e2:1a:7c: 32:cb:ad:a8:76:90:0c:32:3f:31:cc:86:db:6b:2e: 9e:9f:86:cb:7b:90:e3:94:5b:43:bf:49:23:8a:d6: 6f:2a:a1:f7:2d:5f:81:6e:81:53:e8:c7:b5:5b:2c: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:9B:CF:CA:45:89:89:CD:4F:FB:C1:48:11:D7:35:DE:90:FC:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ceac7814-d16c-4280-b23c-337c70896964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.228.193.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:a9:cb:b0:8f:00:3e:2d:b5:8f:47:b6:0c:1f:b7:60:df:3a: 78:d7:71:1c:4b:4f:00:e6:a1:36:a7:ff:9e:bf:70:4b:96:b1: 8a:82:b4:7e:65:f2:a2:75:28:f6:42:be:83:eb:f5:1a:27:37: 0a:32:3d:ba:74:c6:59:9f:bd:45:91:c0:66:5a:09:6b:3d:12: 3b:35:8e:5d:bf:85:38:89:03:47:76:b9:69:15:05:36:5f:9b: d4:07:4d:90:54:ec:bc:cb:1d:7f:f2:30:a2:4a:d5:af:ae:6c: c6:02:e6:3c:91:d0:eb:aa:ef:bd:75:1a:23:12:8a:85:50:4d: 96:e8:bd:8a:ee:05:f1:b8:33:ef:eb:e0:56:b1:c2:92:c9:dd: 43:d9:35:4f:57:c9:09:fc:f3:1a:99:ea:61:68:1f:8e:cf:ac: 6b:07:ee:b1:8f:bd:4b:97:d3:99:fd:8c:2d:8e:0f:7e:54:69: 91:0f:2c:02:78:67:f2:a6:86:3c:c2:70:b3:84:75:c4:d8:9a: b4:a4:a0:a0:bf:82:06:57:b8:97:84:71:a9:5b:07:12:7d:e2: 97:9b:ac:a4:86:21:8d:72:0f:67:9b:ef:12:d8:33:17:7f:f4: 7b:62:35:07:dd:cf:d7:a2:51:dd:97:26:97:88:09:76:55:91: 4f:a7:01:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUNA+/UJyzzyowDnxPfitdhlLEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMDQ3WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWU2YmI2YTRjOGY2NmFjMzg3YWRlYmM2N2ZmZDg4ZmFh NzkxZGQwMGZjODAyNGE5MzRiZTdmMTQ0YjQ2NWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA1oVIEdTURU/R3owvV6Wti7F0W1Spc4zpG9tjNOVYJW9g 1QGmHlLxdhvbaB8veLeC+nq9/F3khVRKzRHoj/CdNip0vZ7lCA2OKyrSMDZiLOdB H89as/H9ITQ+0oTacPpGTPXh4Ny5GbewiQHjXxavlbbtQpxExSZnG6Gnj4ENJeiN L9H5Thua4Nb5QW7Qaf51ifounWItVmuzPUSbQ++DkNSQluhnQ73H8PPOPBniS6Ow o0bFbvfMNTky83Lj676nKg9Da3PY4Hn8sI4FeeIafDLLrah2kAwyPzHMhttrLp6f hst7kOOUW0O/SSOK1m8qofctX4FugVPox7VbLIJ7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7PObz8pFiYnNT/vBSBHXNd6Q/J0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYWM3ODE0LWQxNmMtNDI4MC1iMjNjLTMzN2M3MDg5Njk2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX5MEwDQYJKoZIhvcNAQELBQADggEBAIupy7CPAD4ttY9Htgwft2DfOnjX cRxLTwDmoTan/56/cEuWsYqCtH5l8qJ1KPZCvoPr9RonNwoyPbp0xlmfvUWRwGZa CWs9Ejs1jl2/hTiJA0d2uWkVBTZfm9QHTZBU7LzLHX/yMKJK1a+ubMYC5jyR0Ouq 7711GiMSioVQTZbovYruBfG4M+/r4FaxwpLJ3UPZNU9XyQn88xqZ6mFoH47PrGsH 7rGPvUuX05n9jC2OD35UaZEPLAJ4Z/KmhjzCcLOEdcTYmrSkoKC/ggZXuJeEcalb BxJ94pebrKSGIY1yD2eb7xLYMxd/9HtiNQfdz9eiUd2XJpeICXZVkU+nAaU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:19 2025 by rpki-client