$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa File: e06824cb-2a7f-4608-9566-85c5d5041fb2.roa (raw, json) Hash identifier: BLqxZpnywx4PkGVULw/jB78epGGNvSDiQQnPDDAbylM= Subject key identifier: BB:20:2F:41:60:4C:29:1F:7A:89:65:AF:0F:36:A2:01:22:82:9C:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 254BB63738F9C481F4EA39D3E26F07136507AAF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa Signing time: Tue 22 Jul 2025 00:11:40 +0000 ROA not before: Tue 22 Jul 2025 00:11:40 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4b:b6:37:38:f9:c4:81:f4:ea:39:d3:e2:6f:07:13:65:07:aa:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:11:40 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=770f4d9322309bd0af3313a5cf89ae1fc75daea9f621782e7d64bfc53b5e0a9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:c3:74:4b:35:36:4a:09:c8:d4:43:8e:aa: d2:83:7d:cc:e5:ea:db:66:42:5b:9a:82:cc:30:39: 2d:fd:d0:e8:f9:0e:cd:76:b3:f3:55:63:bf:f6:8c: 75:ba:9c:65:63:09:19:bf:e8:67:29:55:1f:f0:c9: 85:f3:8b:7d:37:4a:72:af:d4:4e:6d:60:94:79:a7: c7:9b:56:75:bf:12:e1:66:36:ed:99:2f:a3:f6:30: d1:52:6e:65:56:90:05:fb:fa:d8:ef:c8:e9:13:e7: 82:c9:74:2b:e9:fe:56:73:a6:af:0c:10:ab:f8:f9: b7:0e:8c:5e:60:37:9a:74:2a:48:6b:18:37:c3:9e: 0e:fb:79:79:f3:6a:de:c4:0a:9b:47:ae:8c:51:1d: aa:95:53:a3:57:08:27:95:19:1c:16:4f:88:a6:2f: 62:30:3c:71:3f:a1:f2:16:88:6d:b5:c6:fd:db:d0: 94:4f:0c:6e:a8:1d:c7:d2:8e:1f:fe:4c:9d:d3:da: 3e:7d:50:fe:75:93:cc:5c:58:61:e4:b8:9c:9f:91: 7f:9c:e8:8b:6c:0a:b5:4a:cc:8f:96:79:36:bd:6a: c4:76:ab:96:18:c5:6e:71:51:03:70:a2:91:5c:0f: 47:5b:22:d4:c3:a4:19:c7:44:da:08:61:6c:dd:5b: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:20:2F:41:60:4C:29:1F:7A:89:65:AF:0F:36:A2:01:22:82:9C:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption d5:87:fb:5a:bd:90:0a:b4:61:83:f8:8d:e7:e7:2c:21:c9:83: 31:cf:71:9e:27:c2:21:f7:a8:07:6f:94:02:eb:d9:49:00:dc: 3b:ff:ef:fe:01:53:c0:ad:ee:7a:05:53:6c:ea:b1:a1:f3:18: 12:34:a3:a5:33:16:92:c2:fa:e3:60:b2:f4:7f:f9:eb:81:1b: 9e:27:17:62:07:93:ce:b8:80:46:f1:a4:b7:62:89:e2:35:cd: 3f:63:7c:fa:64:bf:ab:b9:6a:b4:e6:da:5a:94:fb:00:4d:ec: f6:c6:f3:d6:d0:bf:b6:b3:b0:aa:89:16:59:04:41:cf:18:e8: 1a:4c:2c:8f:11:a2:f7:37:ef:1b:b5:32:24:ca:fe:4f:b1:2c: 92:6c:d6:13:aa:26:8b:ef:a5:d4:6e:7b:c6:d1:b1:3f:4e:c9: 2b:6e:c0:22:8f:ef:43:30:11:ce:df:ba:b3:4d:5e:b8:4f:c4: 29:57:e2:59:dc:06:c9:36:07:f9:3d:99:d6:76:de:75:58:6d: 02:7a:14:09:a9:4b:26:cc:d8:07:91:4c:b5:2d:28:a4:eb:db: 44:d2:8a:e1:a5:2e:3e:11:02:d3:2d:b2:a7:1f:c5:30:ba:c1: 8f:98:70:e9:b1:9f:20:68:28:25:56:d6:cc:e4:91:46:e8:70: 17:7a:76:6b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJUu2Nzj5xIH06jnT4m8HE2UHqvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAxMTQwWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzBmNGQ5MzIyMzA5YmQwYWYzMzEzYTVjZjg5YWUxZmM3 NWRhZWE5ZjYyMTc4MmU3ZDY0YmZjNTNiNWUwYTljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRa8N0SzU2SgnI1EOOqtKDfczl6ttmQluagswwOS390Oj5 Ds12s/NVY7/2jHW6nGVjCRm/6GcpVR/wyYXzi303SnKv1E5tYJR5p8ebVnW/EuFm Nu2ZL6P2MNFSbmVWkAX7+tjvyOkT54LJdCvp/lZzpq8MEKv4+bcOjF5gN5p0Kkhr GDfDng77eXnzat7ECptHroxRHaqVU6NXCCeVGRwWT4imL2IwPHE/ofIWiG21xv3b 0JRPDG6oHcfSjh/+TJ3T2j59UP51k8xcWGHkuJyfkX+c6ItsCrVKzI+WeTa9asR2 q5YYxW5xUQNwopFcD0dbItTDpBnHRNoIYWzdW2qXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuyAvQWBMKR96iWWvDzaiASKCnPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwNjgyNGNiLTJhN2YtNDYwOC05NTY2LTg1YzVkNTA0MWZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPgDANBgkqhkiG9w0BAQsFAAOCAQEA1Yf7Wr2QCrRhg/iN5+csIcmDMc9x nifCIfeoB2+UAuvZSQDcO//v/gFTwK3uegVTbOqxofMYEjSjpTMWksL642Cy9H/5 64EbnicXYgeTzriARvGkt2KJ4jXNP2N8+mS/q7lqtObaWpT7AE3s9sbz1tC/trOw qokWWQRBzxjoGkwsjxGi9zfvG7UyJMr+T7EskmzWE6omi++l1G57xtGxP07JK27A Io/vQzARzt+6s01euE/EKVfiWdwGyTYH+T2Z1nbedVhtAnoUCalLJszYB5FMtS0o pOvbRNKK4aUuPhEC0y2ypx/FMLrBj5hw6bGfIGgoJVbWzOSRRuhwF3p2aw== -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:27 2025 by rpki-client