$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a0763a-de95-47a3-9a8b-699832a89ea2.roa File: d2a0763a-de95-47a3-9a8b-699832a89ea2.roa (raw, json) Hash identifier: b1DcQ831gnsnRwsXEGvQWQmJnvyqOWYL8pSbYsjIRQ0= Subject key identifier: 34:91:3D:28:FF:36:CE:F1:C0:C7:2A:C7:1B:F5:38:C6:46:E1:16:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EE996FF9D05DC862417BF358B3CCAA60922428D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a0763a-de95-47a3-9a8b-699832a89ea2.roa Signing time: Mon 07 Jul 2025 16:11:15 +0000 ROA not before: Mon 07 Jul 2025 16:11:15 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.120.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e9:96:ff:9d:05:dc:86:24:17:bf:35:8b:3c:ca:a6:09:22:42:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:11:15 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=dd36f427ce069289e466cfbbb230dcb9255efe5a220e75a895e000fced87e261, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:14:5d:9f:8e:c8:a4:b4:a6:0f:d1:06:30: 4d:f2:58:6e:ff:9f:68:6f:cb:c4:86:97:31:a4:f4: 00:6e:3f:41:25:1e:fc:a0:9a:2f:90:6c:42:4a:64: dd:b8:d2:eb:e2:b9:9c:7d:76:cf:7f:ca:a1:13:68: c2:74:00:10:d0:ea:2c:1e:c6:3e:c9:cc:f6:33:d2: d3:a7:4f:a0:6f:56:87:d8:de:81:82:40:9a:39:92: 90:a9:85:5f:a7:a7:8c:d4:f3:b0:9d:b6:1c:df:ae: de:ce:6a:c9:a9:2d:cd:6c:37:89:88:a6:4a:c0:34: 9c:5c:74:c9:56:cc:4b:78:9f:58:66:51:73:eb:39: b5:51:bb:ee:82:d1:ba:13:4a:73:56:f1:dc:17:b3: 5a:0d:5f:52:7d:24:d9:d1:6a:c8:54:db:14:be:18: 9c:09:37:19:91:8d:74:b4:78:94:c7:ce:9d:44:34: 9f:5c:fa:c8:a4:df:6b:7a:61:f2:e6:dc:d8:d8:48: 4d:7e:75:ad:58:90:96:64:8d:b1:ec:14:67:3c:0f: 00:ea:1c:c2:60:82:18:98:ed:85:fa:31:b2:8e:4d: c0:7c:40:74:08:2b:85:d8:af:84:70:84:f1:af:36: fb:a8:89:2b:37:68:8e:7a:52:26:f8:02:da:31:24: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:3D:28:FF:36:CE:F1:C0:C7:2A:C7:1B:F5:38:C6:46:E1:16:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a0763a-de95-47a3-9a8b-699832a89ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.120.32.0/21 Signature Algorithm: sha256WithRSAEncryption 65:bc:ce:df:7d:bf:1a:66:5c:be:6e:e8:07:81:49:35:ce:6e: 04:10:0c:a5:c2:48:f4:2b:ee:c4:1c:2c:54:de:33:d6:3a:32: 69:90:f8:b0:80:ba:0e:a2:4a:9e:1a:58:d5:36:1b:fe:8a:c8: 1b:40:73:6c:60:29:8d:a5:14:28:4e:42:4f:f5:2e:e3:9b:32: 1b:e6:b0:a5:69:17:96:b8:bb:9e:ff:47:30:e0:83:82:c7:aa: 7d:f5:75:ef:03:65:e9:04:80:16:69:90:e2:6c:09:d5:e0:ff: 10:07:f3:df:cd:38:3d:cb:b4:6b:da:00:3b:b4:d9:61:30:d4: f4:d4:07:38:dd:10:53:8e:2a:fd:30:0f:fb:fe:9b:c6:d2:16: d1:cc:c7:85:10:94:a4:61:1c:8b:d2:f5:7e:e3:b6:03:15:6c: 7f:4b:67:c1:ea:cb:b5:28:f4:8a:9f:6b:4c:af:7e:db:ad:8a: 6d:a0:4c:76:4f:4d:ac:0f:5c:e0:2a:21:e6:15:a2:5a:52:39: fe:19:27:9d:d9:e3:e1:2e:b0:2a:d4:0c:66:af:90:13:8f:77: 81:9a:e4:62:da:3c:83:74:9b:c3:41:1e:fe:59:4a:a1:9c:cc: 3a:ce:22:1c:b0:47:61:dd:29:71:5f:41:5d:ba:61:46:06:72: 1c:b2:55:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPumW/50F3IYkF781izzKpgkiQo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYxMTE1WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDM2ZjQyN2NlMDY5Mjg5ZTQ2NmNmYmJiMjMwZGNiOTI1 NWVmZTVhMjIwZTc1YTg5NWUwMDBmY2VkODdlMjYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwsRRdn47IpLSmD9EGME3yWG7/n2hvy8SGlzGk9ABuP0El Hvygmi+QbEJKZN240uviuZx9ds9/yqETaMJ0ABDQ6iwexj7JzPYz0tOnT6BvVofY 3oGCQJo5kpCphV+np4zU87Cdthzfrt7OasmpLc1sN4mIpkrANJxcdMlWzEt4n1hm UXPrObVRu+6C0boTSnNW8dwXs1oNX1J9JNnRashU2xS+GJwJNxmRjXS0eJTHzp1E NJ9c+sik32t6YfLm3NjYSE1+da1YkJZkjbHsFGc8DwDqHMJgghiY7YX6MbKOTcB8 QHQIK4XYr4RwhPGvNvuoiSs3aI56Uib4AtoxJEi9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNJE9KP82zvHAxyrHG/U4xkbhFkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyYTA3NjNhLWRlOTUtNDdhMy05YThiLTY5OTgzMmE4OWVhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOieCAwDQYJKoZIhvcNAQELBQADggEBAGW8zt99vxpmXL5u6AeBSTXObgQQ DKXCSPQr7sQcLFTeM9Y6MmmQ+LCAug6iSp4aWNU2G/6KyBtAc2xgKY2lFChOQk/1 LuObMhvmsKVpF5a4u57/RzDgg4LHqn31de8DZekEgBZpkOJsCdXg/xAH89/NOD3L tGvaADu02WEw1PTUBzjdEFOOKv0wD/v+m8bSFtHMx4UQlKRhHIvS9X7jtgMVbH9L Z8Hqy7Uo9Iqfa0yvftutim2gTHZPTawPXOAqIeYVolpSOf4ZJ53Z4+EusCrUDGav kBOPd4Ga5GLaPIN0m8NBHv5ZSqGczDrOIhywR2HdKXFfQV26YUYGchyyVYk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:33 2025 by rpki-client