$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daf2bc53-4d80-41a6-8a07-c86526e9651b.roa File: daf2bc53-4d80-41a6-8a07-c86526e9651b.roa (raw, json) Hash identifier: M+VCYI+lLE3mOCUQCogIK88rGpMygcxgkBULyJlxTgo= Subject key identifier: 3E:90:F0:49:1E:60:E9:A8:86:3E:A0:13:93:4E:89:7C:0C:D3:59:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3926153E7FF5DE42434CC3A5D13736D3BA30ACCD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daf2bc53-4d80-41a6-8a07-c86526e9651b.roa Signing time: Tue 08 Jul 2025 00:51:07 +0000 ROA not before: Tue 08 Jul 2025 00:51:07 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:15:3e:7f:f5:de:42:43:4c:c3:a5:d1:37:36:d3:ba:30:ac:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:51:07 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=33d240e494ff0993f3f2c9d5b5e1310894417f25ff64333ab26aa793ad5c7830, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:c7:0a:b7:39:67:cc:81:7c:f3:76:0e:fd: ab:f3:11:81:d1:02:e3:5f:36:1f:cb:db:ec:07:7e: c0:07:c1:a6:f2:78:24:d0:02:9b:4a:db:34:c5:0f: f9:60:e9:7c:cd:7a:7e:f7:15:f7:50:02:99:94:bb: dc:4b:cd:bd:ea:39:3d:2c:e7:20:35:4d:84:db:fc: f7:6a:c9:8c:15:7b:d8:7b:db:2e:1c:be:40:a7:4c: 11:a6:96:6f:47:3d:f5:23:4e:c2:f5:ed:b1:2a:68: 82:5c:d3:fe:ab:e6:5b:bf:6b:da:aa:7e:85:f4:0a: a9:6b:da:bb:f1:54:ff:3a:f7:c2:e0:17:f4:f7:35: bc:54:55:bb:e1:a9:0c:a3:b0:11:c5:13:24:ce:d5: 0b:8a:3f:a9:15:e6:6d:a9:23:ea:63:02:9c:96:79: 2b:45:c4:a9:2c:26:74:e5:2c:5c:1d:fd:0f:8b:88: 09:cb:27:b0:e4:da:74:a8:7f:4b:7b:47:9a:22:e8: e1:fe:aa:1b:56:b4:d0:ff:6e:82:21:04:35:0c:a2: 93:20:47:59:09:88:02:6c:60:4d:e8:e5:1e:37:2e: f7:e0:3b:fa:33:10:59:b7:e3:c1:8a:fe:53:60:25: 71:d7:cb:74:8f:b1:b1:53:aa:fa:0d:74:0a:15:a2: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:F0:49:1E:60:E9:A8:86:3E:A0:13:93:4E:89:7C:0C:D3:59:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daf2bc53-4d80-41a6-8a07-c86526e9651b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.224.0/19 Signature Algorithm: sha256WithRSAEncryption d8:7d:1f:0b:5b:3a:19:ab:53:80:88:23:6b:73:ec:b4:a2:73: ff:92:3f:80:22:17:50:71:94:6f:4f:ec:45:4e:f8:42:16:de: 73:01:c2:64:36:7a:f9:33:4c:e5:2b:59:cf:50:38:a5:aa:9b: 7b:20:d2:94:bc:a9:e4:9d:61:89:ea:5c:7f:a7:57:73:7a:5a: 42:a1:a1:ca:ae:47:81:6b:67:ed:71:33:0d:22:9e:4d:bd:cc: b8:07:3f:a1:df:d0:ee:de:ab:a3:7a:f0:da:66:00:53:35:55: c9:26:90:82:b4:db:d3:e6:f3:64:66:55:eb:29:57:b5:e6:31: 37:81:d0:1f:7e:e2:ce:47:14:69:fb:29:4e:c8:c5:2d:66:12: dd:24:fc:fe:70:7b:27:c4:11:91:30:ce:1e:9d:cb:98:42:70: dc:6e:12:46:ff:87:a3:fd:87:82:1a:72:13:e9:ab:33:b9:50: 8c:8d:5f:38:e2:ef:b2:4e:1e:c2:c5:6a:d2:dc:99:e3:83:af: c9:00:28:81:17:6e:18:02:90:a2:59:74:b6:27:f9:07:da:22: 2c:22:1c:31:54:5f:fb:98:53:8b:8f:c9:d6:e7:a9:bb:23:fc: be:dc:8d:22:58:d4:fa:ac:b0:6b:fd:20:28:c9:7e:66:22:40: 16:61:95:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOSYVPn/13kJDTMOl0Tc207owrM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDA1MTA3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2QyNDBlNDk0ZmYwOTkzZjNmMmM5ZDViNWUxMzEwODk0 NDE3ZjI1ZmY2NDMzM2FiMjZhYTc5M2FkNWM3ODMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRt8cKtzlnzIF883YO/avzEYHRAuNfNh/L2+wHfsAHwaby eCTQAptK2zTFD/lg6XzNen73FfdQApmUu9xLzb3qOT0s5yA1TYTb/PdqyYwVe9h7 2y4cvkCnTBGmlm9HPfUjTsL17bEqaIJc0/6r5lu/a9qqfoX0Cqlr2rvxVP8698Lg F/T3NbxUVbvhqQyjsBHFEyTO1QuKP6kV5m2pI+pjApyWeStFxKksJnTlLFwd/Q+L iAnLJ7Dk2nSof0t7R5oi6OH+qhtWtND/boIhBDUMopMgR1kJiAJsYE3o5R43Lvfg O/ozEFm348GK/lNgJXHXy3SPsbFTqvoNdAoVoht/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPpDwSR5g6aiGPqATk06JfAzTWWEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhZjJiYzUzLTRkODAtNDFhNi04YTA3LWM4NjUyNmU5NjUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXM7OAwDQYJKoZIhvcNAQELBQADggEBANh9HwtbOhmrU4CII2tz7LSic/+S P4AiF1BxlG9P7EVO+EIW3nMBwmQ2evkzTOUrWc9QOKWqm3sg0pS8qeSdYYnqXH+n V3N6WkKhocquR4FrZ+1xMw0ink29zLgHP6Hf0O7eq6N68NpmAFM1VckmkIK029Pm 82RmVespV7XmMTeB0B9+4s5HFGn7KU7IxS1mEt0k/P5weyfEEZEwzh6dy5hCcNxu Ekb/h6P9h4IachPpqzO5UIyNXzji77JOHsLFatLcmeODr8kAKIEXbhgCkKJZdLYn +QfaIiwiHDFUX/uYU4uPydbnqbsj/L7cjSJY1PqssGv9ICjJfmYiQBZhlTE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:25 2025 by rpki-client