$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa File: d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa (raw, json) Hash identifier: kRICVKSYMprlMXFOp5c5rlhjom/APFf98mz+2kWUMQk= Subject key identifier: 11:9B:A8:29:E0:95:A8:37:74:3F:F2:BA:7C:94:34:C1:BE:54:63:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CE7DE389171C9B0C6D08E131AB32E104B3DBCFC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa Signing time: Fri 11 Jul 2025 00:31:47 +0000 ROA not before: Fri 11 Jul 2025 00:31:47 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e7:de:38:91:71:c9:b0:c6:d0:8e:13:1a:b3:2e:10:4b:3d:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:31:47 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=854fb1ce88e31a1501e9589fe101c2fbd7e68f034cc2f4e042bea28ec1040d98, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:07:7b:18:f7:6a:6c:87:b9:f1:74:83:c7: ec:41:6b:96:22:8d:06:a1:5a:b1:c0:8f:82:85:d9: 67:9d:5f:46:e0:e7:77:fe:12:91:26:2c:8e:e1:c4: 8a:9b:a1:4c:0e:90:b5:0e:68:ff:10:0e:1a:ab:39: 09:75:ba:3c:3c:a7:e4:63:73:3d:93:b4:34:2f:c5: 6f:5b:0a:4a:46:9a:61:55:e9:6a:6e:8a:23:03:be: 18:f7:10:97:ec:f4:32:16:1e:18:f1:b0:ed:29:42: 24:d6:b8:82:5f:b5:61:99:81:82:01:87:e5:95:a9: 40:d7:28:d1:b1:00:a1:e8:55:ad:f3:43:f2:fc:2f: 3f:3d:fb:27:ab:c4:16:29:4d:f2:1d:32:1c:35:fe: f1:96:af:e5:2e:5c:ae:2d:b0:e1:00:a0:00:25:76: 1c:f9:76:43:9c:8f:d1:6e:16:a2:3a:c9:54:46:7e: 38:ab:05:04:8f:aa:7e:46:47:d8:c9:bf:c4:66:7a: a5:03:89:b9:18:6e:fe:62:8d:40:06:6b:35:15:9b: 1d:ee:64:b2:07:6c:50:d1:1c:44:dd:fa:3a:3d:ce: 4d:57:d1:f7:9d:f3:21:e7:6b:98:72:fc:0b:5d:b7: 0f:39:e1:d1:02:2a:45:66:0a:98:60:01:75:b7:f7: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9B:A8:29:E0:95:A8:37:74:3F:F2:BA:7C:94:34:C1:BE:54:63:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:f6:26:43:06:ee:79:63:66:4f:8f:89:1e:95:ac:d0:24:07: 90:7e:c5:71:04:5e:02:b5:4d:f3:ef:41:d7:93:53:0f:22:70: a7:9b:8a:58:72:a4:4a:da:f3:7b:17:f4:fc:bf:57:18:0a:7e: 66:8c:b1:38:0b:56:46:d9:c3:16:11:05:b8:d5:f7:a0:7f:1f: b5:6d:b8:e3:c3:1a:d4:90:27:4b:39:65:b5:89:ad:e0:bc:3b: 63:3c:40:fe:95:88:f2:01:71:2e:92:aa:9b:02:83:41:06:cb: 12:28:b6:7c:55:98:ab:4b:9b:92:97:9d:fc:6b:aa:9b:73:b3: 3b:79:0b:4c:90:aa:de:9e:ee:f3:4f:e0:05:bb:c4:8e:4e:50: 0e:6b:13:3a:eb:b2:7a:9e:fe:e2:7d:01:4a:b5:78:46:d3:8e: df:b6:d2:5d:76:06:f7:45:b6:03:eb:bc:c7:9d:56:6f:7c:67: 33:29:e2:ee:13:3d:e9:68:99:f5:07:6b:ef:b0:cb:38:c7:6b: 92:32:91:4f:12:14:a7:69:1c:d4:33:b4:05:ab:e2:92:c5:e4: da:b0:62:2d:3a:c7:87:27:a6:a1:d0:28:79:95:02:fd:21:0f: 07:0a:39:3e:c9:32:83:2e:73:d1:69:dc:21:47:fe:c7:5f:02: b3:d5:a0:8c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfOfeOJFxybDG0I4TGrMuEEs9vPwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAzMTQ3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTRmYjFjZTg4ZTMxYTE1MDFlOTU4OWZlMTAxYzJmYmQ3 ZTY4ZjAzNGNjMmY0ZTA0MmJlYTI4ZWMxMDQwZDk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYywd7GPdqbIe58XSDx+xBa5YijQahWrHAj4KF2WedX0bg 53f+EpEmLI7hxIqboUwOkLUOaP8QDhqrOQl1ujw8p+Rjcz2TtDQvxW9bCkpGmmFV 6WpuiiMDvhj3EJfs9DIWHhjxsO0pQiTWuIJftWGZgYIBh+WVqUDXKNGxAKHoVa3z Q/L8Lz89+yerxBYpTfIdMhw1/vGWr+UuXK4tsOEAoAAldhz5dkOcj9FuFqI6yVRG fjirBQSPqn5GR9jJv8RmeqUDibkYbv5ijUAGazUVmx3uZLIHbFDRHETd+jo9zk1X 0fed8yHna5hy/Atdtw854dECKkVmCphgAXW39/H7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEZuoKeCVqDd0P/K6fJQ0wb5UY2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2NWU0YjBkLWE1OTQtNGZlNS1hOGY1LWE2Y2FmNjIyMzRkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA46DANBgkqhkiG9w0BAQsFAAOCAQEApfYmQwbueWNmT4+JHpWs0CQHkH7F cQReArVN8+9B15NTDyJwp5uKWHKkStrzexf0/L9XGAp+ZoyxOAtWRtnDFhEFuNX3 oH8ftW2448Ma1JAnSzlltYmt4Lw7YzxA/pWI8gFxLpKqmwKDQQbLEii2fFWYq0ub kped/Guqm3OzO3kLTJCq3p7u80/gBbvEjk5QDmsTOuuyep7+4n0BSrV4RtOO37bS XXYG90W2A+u8x51Wb3xnMyni7hM96WiZ9Qdr77DLOMdrkjKRTxIUp2kc1DO0Bavi ksXk2rBiLTrHhyemodAoeZUC/SEPBwo5Pskygy5z0WncIUf+x18Cs9WgjA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:14 2025 by rpki-client