$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6125ffa-ed26-4355-829d-e0134dfbce22.roa File: d6125ffa-ed26-4355-829d-e0134dfbce22.roa (raw, json) Hash identifier: JidHTH5wpTFhIQoXhsFrm5NifI0eX4qaWYiJuNYTOeo= Subject key identifier: FF:FD:89:47:5E:49:85:FF:E2:88:89:41:9F:0E:8C:28:16:21:59:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 298BFF1D07A6433C5241FE9FC85DDADED17AFDF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6125ffa-ed26-4355-829d-e0134dfbce22.roa Signing time: Mon 14 Jul 2025 15:00:15 +0000 ROA not before: Mon 14 Jul 2025 15:00:15 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.39.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8b:ff:1d:07:a6:43:3c:52:41:fe:9f:c8:5d:da:de:d1:7a:fd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:00:15 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=9672046710dae0b16b17022198ad2f8decc43b1c7239113ae03442b17942ed18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:09:5e:d4:16:94:d6:a3:14:7b:f5:d0:b1: 08:49:f5:87:bd:e3:8f:21:30:22:bf:e8:ce:0d:4f: dd:51:0f:4c:7b:b7:35:0d:2e:dd:ff:27:57:af:53: 7a:7f:40:55:1a:45:2f:4f:0e:bc:08:1d:0c:02:4d: 3b:14:e9:c2:e0:f3:89:87:40:46:7a:f6:57:10:44: be:dd:f5:a4:08:db:d4:54:94:5b:e6:27:d0:56:28: a6:85:7a:01:b8:63:9e:49:70:a9:12:bf:24:30:81: 84:62:3b:db:bc:75:3c:97:63:ff:a8:61:5c:5c:d8: 88:8b:36:65:61:fd:4b:42:4f:56:fa:fd:be:93:9b: a2:72:c6:e2:b7:d5:1a:44:cd:a1:12:25:7b:35:b4: 96:ad:55:1b:03:d0:98:1b:27:92:d4:17:ca:6f:a5: e8:4c:61:8c:2d:c4:4a:3c:59:db:29:bc:be:46:89: 6e:79:2f:4f:91:2e:3a:6f:a2:61:dd:2d:0c:86:74: ee:7a:bc:20:ed:a0:bc:ac:7a:17:1f:a5:f3:9c:b2: 7e:77:34:5b:3c:2e:09:2d:80:b9:5e:85:66:1b:5a: 41:10:f0:a0:02:69:96:6e:55:9c:ea:14:12:c3:d1: d2:af:02:b5:f6:4c:3c:8c:19:57:90:0e:80:a1:e8: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:89:47:5E:49:85:FF:E2:88:89:41:9F:0E:8C:28:16:21:59:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6125ffa-ed26-4355-829d-e0134dfbce22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.39.0.0/17 Signature Algorithm: sha256WithRSAEncryption c6:69:dc:59:8c:9c:31:43:2d:57:2f:e4:ed:75:b3:3f:49:51: d0:7a:33:14:62:ca:a8:a7:15:f7:8e:f4:4e:67:72:a8:a9:ce: d3:2d:89:c3:62:1b:5a:46:4a:83:63:8f:6b:67:b5:5c:a0:7c: d3:d6:57:44:ac:ed:84:cf:f7:37:f2:d2:a3:21:5a:00:b7:93: 3b:8d:7e:46:f6:17:20:cc:95:f3:8d:34:08:e1:da:15:ac:d9: 1a:8c:eb:d6:55:ad:93:f0:74:34:a8:1a:04:0c:6b:d8:36:3d: 3e:52:72:fe:87:00:2f:c8:3e:0e:6d:cb:b2:3f:80:85:cb:b5: 4a:76:43:eb:eb:4f:19:6e:c6:04:b0:35:7f:fc:5c:d6:b3:ff: 8e:58:8b:3e:d0:82:15:03:32:ac:53:8f:3d:ed:de:6c:b9:b9: 3e:ce:87:1b:c9:68:a4:ee:f7:d8:ea:d3:55:a0:27:b9:c3:49: ce:57:26:d6:52:cd:0f:81:b6:0d:bc:4d:e6:2b:ab:91:7d:2c: dc:ef:4f:05:41:89:65:66:64:7b:54:7f:a9:db:4f:34:84:82: 38:02:ab:71:05:66:16:dc:a9:aa:e2:de:11:fa:a5:85:07:c1: 71:4f:b6:c8:ea:0d:30:c6:97:ee:ec:52:b6:01:d4:07:0b:9f: 7a:5d:61:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKYv/HQemQzxSQf6fyF3a3tF6/fkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMDE1WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjcyMDQ2NzEwZGFlMGIxNmIxNzAyMjE5OGFkMmY4ZGVj YzQzYjFjNzIzOTExM2FlMDM0NDJiMTc5NDJlZDE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCftAle1BaU1qMUe/XQsQhJ9Ye9448hMCK/6M4NT91RD0x7 tzUNLt3/J1evU3p/QFUaRS9PDrwIHQwCTTsU6cLg84mHQEZ69lcQRL7d9aQI29RU lFvmJ9BWKKaFegG4Y55JcKkSvyQwgYRiO9u8dTyXY/+oYVxc2IiLNmVh/UtCT1b6 /b6Tm6JyxuK31RpEzaESJXs1tJatVRsD0JgbJ5LUF8pvpehMYYwtxEo8WdspvL5G iW55L0+RLjpvomHdLQyGdO56vCDtoLysehcfpfOcsn53NFs8LgktgLlehWYbWkEQ 8KACaZZuVZzqFBLD0dKvArX2TDyMGVeQDoCh6LLvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU//2JR15Jhf/iiIlBnw6MKBYhWVswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MTI1ZmZhLWVkMjYtNDM1NS04MjlkLWUwMTM0ZGZiY2UyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfMJwAwDQYJKoZIhvcNAQELBQADggEBAMZp3FmMnDFDLVcv5O11sz9JUdB6 MxRiyqinFfeO9E5ncqipztMticNiG1pGSoNjj2tntVygfNPWV0Ss7YTP9zfy0qMh WgC3kzuNfkb2FyDMlfONNAjh2hWs2RqM69ZVrZPwdDSoGgQMa9g2PT5Scv6HAC/I Pg5ty7I/gIXLtUp2Q+vrTxluxgSwNX/8XNaz/45Yiz7QghUDMqxTjz3t3my5uT7O hxvJaKTu99jq01WgJ7nDSc5XJtZSzQ+Btg28TeYrq5F9LNzvTwVBiWVmZHtUf6nb TzSEgjgCq3EFZhbcqari3hH6pYUHwXFPtsjqDTDGl+7sUrYB1AcLn3pdYU8= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:45 2025 by rpki-client