$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa File: d02200a5-babe-4deb-9116-f1e308942b64.roa (raw, json) Hash identifier: 3vJqkZO3CCQCQDu4tMqwWGzQgSAKeH5TwyN5QsGn1/o= Subject key identifier: AA:7D:AC:D3:4A:E9:95:B8:34:CD:EF:7E:56:A3:DD:C5:D3:28:15:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 289B562099A8D0883DD7BDE6D76DD88796EDA12E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa Signing time: Mon 07 Jul 2025 16:01:15 +0000 ROA not before: Mon 07 Jul 2025 16:01:15 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9b:56:20:99:a8:d0:88:3d:d7:bd:e6:d7:6d:d8:87:96:ed:a1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:01:15 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=d2c08a4023341f9a84b83dce2a3fca63ca53ce8c6c165caf8a41fb03b01b29c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:13:b3:5f:bc:2f:c3:44:8a:cf:62:e8:16: 3d:0e:08:9f:f7:0b:10:7a:f0:31:29:1b:6b:b9:3a: 63:8b:88:50:18:f2:97:a3:7c:cb:5c:48:f0:eb:37: fb:1f:50:64:92:05:29:24:ad:2d:7a:38:b0:9b:c4: 10:c2:65:5f:f7:c3:e6:a3:a5:82:ec:e6:58:25:8a: 4c:66:b6:79:65:8b:93:8d:21:68:99:24:a3:d6:29: 7b:db:c4:64:13:4f:5f:8d:43:ef:f1:03:91:5f:1a: 66:8d:5e:ae:de:1d:f9:11:df:07:f9:5e:25:3e:d5: f1:48:94:23:d3:f0:45:24:31:b1:b3:91:e2:40:73: 73:c5:3a:da:cf:e7:16:e8:7d:01:86:2d:5a:f7:26: 7d:11:07:22:08:36:ea:c4:0e:f6:b7:8f:6d:b6:01: 3a:a4:c7:11:98:2e:1f:f3:e7:03:67:27:8a:a6:1b: 93:84:0c:41:fe:f9:8f:d7:d7:0c:30:c5:14:be:a3: 2a:e4:a2:5a:82:6a:f8:69:a7:b7:cd:52:da:e6:4f: 36:4f:d8:e9:5a:bf:1d:74:c8:98:93:9e:7f:fe:81: 86:31:ba:fc:ea:33:6c:a2:e3:46:5b:15:af:2c:5e: ce:5f:98:a4:91:da:47:78:91:25:6a:4e:93:a9:d0: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:AC:D3:4A:E9:95:B8:34:CD:EF:7E:56:A3:DD:C5:D3:28:15:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.72.0/21 Signature Algorithm: sha256WithRSAEncryption d8:35:48:fb:cd:a1:5e:c3:81:a9:19:a0:41:b2:1a:21:e4:39: 59:3c:ec:67:c5:e6:2e:24:23:c0:8a:9b:a2:ea:53:2a:66:8b: ac:ce:5f:e2:3b:f2:7f:b1:b8:80:46:1e:fe:13:54:fb:03:6a: 87:bf:ea:ac:35:53:51:57:45:94:fb:48:39:e4:fb:14:c7:d1: dc:cf:f7:d9:91:3a:e9:6e:2d:84:56:bc:39:a7:d9:73:40:b1: 2f:0f:29:9c:b3:90:73:8e:68:15:84:5a:10:b1:2d:73:47:89: 6e:a5:a4:76:c2:0d:6f:e3:ec:f1:4d:41:a0:e3:13:fb:97:31: 52:c3:d0:1a:2f:b8:c6:bd:4e:99:b4:f9:c3:1e:22:eb:ec:b4: b9:7c:67:a2:48:b8:64:62:bb:cf:b3:08:13:4e:78:4b:a9:62: f7:fa:de:e5:20:43:4e:a5:c1:0e:9e:99:f8:df:f5:07:ed:9b: 65:0f:7a:96:2d:ba:87:a3:ec:2d:b5:1e:62:6c:68:80:b7:b8: d0:31:96:48:06:9c:11:17:36:41:fc:d1:ef:db:bd:ef:2e:1a: 57:12:2f:c2:7e:5e:a0:bb:e1:14:4d:64:9f:2a:94:32:3a:ce: e5:a8:de:fb:f5:67:ee:df:03:c1:45:01:3e:64:83:87:bb:1e: c2:a9:a5:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKJtWIJmo0Ig9173m123Yh5btoS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMTE1WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmMwOGE0MDIzMzQxZjlhODRiODNkY2UyYTNmY2E2M2Nh NTNjZThjNmMxNjVjYWY4YTQxZmIwM2IwMWIyOWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC06hOzX7wvw0SKz2LoFj0OCJ/3CxB68DEpG2u5OmOLiFAY 8pejfMtcSPDrN/sfUGSSBSkkrS16OLCbxBDCZV/3w+ajpYLs5lglikxmtnlli5ON IWiZJKPWKXvbxGQTT1+NQ+/xA5FfGmaNXq7eHfkR3wf5XiU+1fFIlCPT8EUkMbGz keJAc3PFOtrP5xbofQGGLVr3Jn0RByIINurEDva3j222ATqkxxGYLh/z5wNnJ4qm G5OEDEH++Y/X1wwwxRS+oyrkolqCavhpp7fNUtrmTzZP2Olavx10yJiTnn/+gYYx uvzqM2yi40ZbFa8sXs5fmKSR2kd4kSVqTpOp0BRVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqn2s00rplbg0ze9+VqPdxdMoFbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwMjIwMGE1LWJhYmUtNGRlYi05MTE2LWYxZTMwODk0MmI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBskgwDQYJKoZIhvcNAQELBQADggEBANg1SPvNoV7DgakZoEGyGiHkOVk8 7GfF5i4kI8CKm6LqUypmi6zOX+I78n+xuIBGHv4TVPsDaoe/6qw1U1FXRZT7SDnk +xTH0dzP99mROuluLYRWvDmn2XNAsS8PKZyzkHOOaBWEWhCxLXNHiW6lpHbCDW/j 7PFNQaDjE/uXMVLD0BovuMa9Tpm0+cMeIuvstLl8Z6JIuGRiu8+zCBNOeEupYvf6 3uUgQ06lwQ6emfjf9Qftm2UPepYtuoej7C21HmJsaIC3uNAxlkgGnBEXNkH80e/b ve8uGlcSL8J+XqC74RRNZJ8qlDI6zuWo3vv1Z+7fA8FFAT5kg4e7HsKppT0= -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:41 2025 by rpki-client