$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa File: d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa (raw, json) Hash identifier: +WRfhPItlp17uJAsDA49a+OaryYqOlKdEVE+LU1M6bo= Subject key identifier: FF:7E:14:7D:29:76:6B:57:0D:23:28:FF:74:93:F5:B8:DB:51:F2:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4896ED1F799B157B4079AEF0EE558342EE7CF3C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa Signing time: Wed 02 Jul 2025 00:20:17 +0000 ROA not before: Wed 02 Jul 2025 00:20:17 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 109.71.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:96:ed:1f:79:9b:15:7b:40:79:ae:f0:ee:55:83:42:ee:7c:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:20:17 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=56ffc0674666ef4d2b504872c19640ff8e9dbbe23ae6e25f4f57eef6f18b291d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:42:a7:b8:84:70:c1:73:22:91:f3:60:d5: c5:24:78:c0:05:54:e5:41:8f:ed:6a:79:a7:17:5b: 4f:86:b4:6d:22:e6:d3:a9:f4:bb:93:4c:a8:76:91: c2:6f:63:1d:f7:dd:4b:b8:13:6e:cd:25:ea:1a:93: e7:ae:79:cf:1f:b9:c6:b1:a5:6e:4f:58:8b:95:94: df:9e:9e:4d:21:60:6f:45:27:09:87:95:64:fa:5a: 69:dc:30:1d:cc:9d:1e:aa:65:d3:bc:fa:5d:89:41: 8d:97:a8:18:a8:b4:b0:3f:9e:f8:8d:9b:c0:55:26: 31:ea:f9:01:c8:ca:ff:9d:5a:d3:ee:3c:ec:1c:28: 4a:c8:2e:f5:21:0d:64:a2:31:3f:45:68:af:00:68: e4:9a:4d:4f:84:f5:90:21:36:78:f3:4e:84:f8:40: f6:05:07:f4:44:fd:bd:ab:22:f0:1c:de:a9:cf:0f: 06:ff:cc:ca:53:fb:d2:fb:40:ca:77:e0:0a:99:50: 00:62:4d:c3:9b:6f:ba:f4:e7:fb:7b:bd:1e:3f:08: e1:33:cc:6c:a6:08:93:67:fe:1f:22:af:75:c5:08: 95:b9:2a:e6:fb:2d:61:0c:59:5c:fb:3b:16:29:36: fd:e7:e6:dc:3a:06:36:6d:33:3a:cd:0c:3e:6d:ea: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:14:7D:29:76:6B:57:0D:23:28:FF:74:93:F5:B8:DB:51:F2:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.184.0/24 Signature Algorithm: sha256WithRSAEncryption 44:07:e4:83:c6:63:10:65:df:7e:3c:9d:54:8f:48:ee:46:fa: a6:59:2f:72:10:45:84:0e:92:06:e1:20:82:98:d0:85:f8:64: 84:8a:7f:ef:90:f4:40:6f:f2:97:44:14:11:cd:ed:25:78:5f: cb:0e:70:d6:5b:9c:85:cf:09:57:16:1e:8a:28:ec:15:ff:63: dc:c1:31:ac:6f:0e:3b:57:1d:77:fd:3a:52:94:87:a5:a7:1a: 3e:c1:ef:60:1f:77:37:88:ad:27:c2:68:51:19:78:bb:60:f7: 49:c8:8d:44:d7:4c:db:ea:cb:99:0f:c4:52:c2:96:0c:ed:f3: 0c:f5:92:25:19:63:9e:04:b5:68:b6:39:bf:ec:ca:78:17:4d: 5f:3c:59:76:99:f1:19:3b:66:37:71:e5:d7:f6:bc:27:e4:de: 5f:07:fa:30:c4:bc:ca:30:45:03:e4:77:dd:c0:f6:1f:ac:b8: 11:9f:09:06:42:fa:62:88:56:a2:c3:ea:4e:c5:06:67:49:66: 92:ce:dc:1f:0b:bd:5a:ba:17:df:26:62:82:5d:62:a3:9c:06: dd:93:cd:c8:c3:75:ad:b9:04:cd:17:6d:df:d9:1b:c7:f2:6d: 65:46:30:d3:69:2f:a5:ba:16:ea:5a:3b:f1:fd:50:07:26:7a: b5:6f:3d:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSJbtH3mbFXtAea7w7lWDQu5888AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAyMDE3WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmZmYzA2NzQ2NjZlZjRkMmI1MDQ4NzJjMTk2NDBmZjhl OWRiYmUyM2FlNmUyNWY0ZjU3ZWVmNmYxOGIyOTFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2O0KnuIRwwXMikfNg1cUkeMAFVOVBj+1qeacXW0+GtG0i 5tOp9LuTTKh2kcJvYx333Uu4E27NJeoak+euec8fucaxpW5PWIuVlN+enk0hYG9F JwmHlWT6WmncMB3MnR6qZdO8+l2JQY2XqBiotLA/nviNm8BVJjHq+QHIyv+dWtPu POwcKErILvUhDWSiMT9FaK8AaOSaTU+E9ZAhNnjzToT4QPYFB/RE/b2rIvAc3qnP Dwb/zMpT+9L7QMp34AqZUABiTcObb7r05/t7vR4/COEzzGymCJNn/h8ir3XFCJW5 Kub7LWEMWVz7OxYpNv3n5tw6BjZtMzrNDD5t6jr5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/34UfSl2a1cNIyj/dJP1uNtR8qEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5MmZmZDlhLTFhMDItNDA0YS05NWM3LTNmZTBhNzg1MmEzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABtR7gwDQYJKoZIhvcNAQELBQADggEBAEQH5IPGYxBl3348nVSPSO5G+qZZ L3IQRYQOkgbhIIKY0IX4ZISKf++Q9EBv8pdEFBHN7SV4X8sOcNZbnIXPCVcWHooo 7BX/Y9zBMaxvDjtXHXf9OlKUh6WnGj7B72AfdzeIrSfCaFEZeLtg90nIjUTXTNvq y5kPxFLClgzt8wz1kiUZY54EtWi2Ob/syngXTV88WXaZ8Rk7Zjdx5df2vCfk3l8H +jDEvMowRQPkd93A9h+suBGfCQZC+mKIVqLD6k7FBmdJZpLO3B8LvVq6F98mYoJd YqOcBt2TzcjDda25BM0Xbd/ZG8fybWVGMNNpL6W6FupaO/H9UAcmerVvPYs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:00 2025 by rpki-client