$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa File: e2abe357-a286-4173-9db3-3fe355a4e8f9.roa (raw, json) Hash identifier: VRZ/YAgyvpdFUqC2V20GP08lPdUko1aKAnhGJDYjJG0= Subject key identifier: 96:92:8C:D7:82:70:2A:C5:8B:FE:B8:F3:7F:76:4E:19:74:7B:67:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08CB4A06879AE5FF3D389F39C95A450E897DFCF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa Signing time: Mon 07 Jul 2025 16:22:10 +0000 ROA not before: Mon 07 Jul 2025 16:22:10 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.31.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:4a:06:87:9a:e5:ff:3d:38:9f:39:c9:5a:45:0e:89:7d:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:22:10 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=8a1972bcadad0dbddceab32baf35d80843222efbef7a363b434dd1b63de9ea47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:75:10:64:42:b3:50:32:0c:6e:66:dd:62: 7e:cc:64:61:08:17:69:70:33:32:0c:19:72:56:98: e5:36:de:98:52:91:76:af:dd:f3:97:b0:b9:d7:ef: 12:fc:3a:52:f9:95:e1:51:a5:22:54:90:ad:8f:04: c8:b3:57:52:49:26:98:16:7a:13:2d:70:24:5f:7c: 7f:4c:e0:9e:db:07:1e:3f:c7:15:f2:5a:84:82:16: 29:45:56:51:d5:1d:83:16:0a:28:bc:95:86:6b:9e: ee:17:3f:35:b6:20:19:73:66:ad:ad:78:b4:7f:ee: 82:0e:dd:37:f8:b2:7c:8f:97:90:d0:62:17:a7:47: f3:dc:e2:37:d0:80:12:d3:6a:97:43:e1:b8:9c:df: a8:33:b5:0e:9c:8c:af:e4:dd:26:14:f9:02:cd:c6: 76:55:e8:d6:09:a7:ad:da:1b:6f:f1:25:28:c8:81: 41:13:df:a5:ae:b3:0f:11:45:a9:0c:bd:31:49:5d: cd:2c:39:fb:8c:84:73:8a:ea:19:0d:1d:15:e0:ac: 20:de:38:43:df:68:cb:6c:97:25:f8:3d:de:5b:91: c8:fc:d3:07:2a:41:ca:b2:50:af:4e:f0:05:30:c3: 93:00:46:c3:27:8d:92:a7:6b:f9:30:2c:32:48:35: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:8C:D7:82:70:2A:C5:8B:FE:B8:F3:7F:76:4E:19:74:7B:67:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.31.192.0/19 Signature Algorithm: sha256WithRSAEncryption 61:68:11:8c:16:f7:8c:fe:84:9b:7f:78:ca:c9:5b:a5:6c:9e: b6:50:5c:81:b3:2d:77:d7:b1:54:a4:03:dc:8e:d7:86:3b:1e: 98:b1:1f:a7:14:77:dc:ed:2a:46:34:d1:2b:57:b7:d5:2c:26: ca:a6:ad:96:a4:f8:55:cb:25:de:35:cb:7c:bc:af:20:c4:ac: 65:8d:6b:a4:f6:df:69:ff:a0:f5:32:12:65:cf:e3:d8:5c:d9: aa:00:03:5e:e1:8c:b5:ad:b5:bb:fa:e5:27:f4:19:80:48:f8: 6e:42:f8:ee:20:f2:0d:29:fc:fe:e5:f4:fe:d7:f0:5f:82:91: 70:f3:aa:18:6c:85:b7:2b:04:82:96:93:94:61:83:36:b3:b8: 98:a9:39:c4:5d:38:5b:9c:7c:82:7b:0b:15:ab:b3:19:44:83: 82:ba:75:c4:81:28:e8:d5:66:35:db:10:46:9c:41:96:07:54: ed:1d:3c:7a:81:b1:f5:fc:61:08:20:53:40:87:f9:a2:0b:70: f8:0d:fb:10:e9:b2:cb:2c:ff:db:17:81:bf:87:ae:4e:24:67: d1:8e:a7:4e:5d:9b:1c:9b:90:ca:de:26:93:0b:12:a4:ca:5a: db:92:1d:ce:61:29:53:cf:12:41:92:77:2a:a8:d0:67:12:54: 07:c5:77:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCMtKBoea5f89OJ85yVpFDol9/PUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYyMjEwWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTE5NzJiY2FkYWQwZGJkZGNlYWIzMmJhZjM1ZDgwODQz MjIyZWZiZWY3YTM2M2I0MzRkZDFiNjNkZTllYTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC85XUQZEKzUDIMbmbdYn7MZGEIF2lwMzIMGXJWmOU23phS kXav3fOXsLnX7xL8OlL5leFRpSJUkK2PBMizV1JJJpgWehMtcCRffH9M4J7bBx4/ xxXyWoSCFilFVlHVHYMWCii8lYZrnu4XPzW2IBlzZq2teLR/7oIO3Tf4snyPl5DQ YhenR/Pc4jfQgBLTapdD4bic36gztQ6cjK/k3SYU+QLNxnZV6NYJp63aG2/xJSjI gUET36Wusw8RRakMvTFJXc0sOfuMhHOK6hkNHRXgrCDeOEPfaMtslyX4Pd5bkcj8 0wcqQcqyUK9O8AUww5MARsMnjZKna/kwLDJINXs7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlpKM14JwKsWL/rjzf3ZOGXR7Z+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyYWJlMzU3LWEyODYtNDE3My05ZGIzLTNmZTM1NWE0ZThmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMH8AwDQYJKoZIhvcNAQELBQADggEBAGFoEYwW94z+hJt/eMrJW6VsnrZQ XIGzLXfXsVSkA9yO14Y7HpixH6cUd9ztKkY00StXt9UsJsqmrZak+FXLJd41y3y8 ryDErGWNa6T232n/oPUyEmXP49hc2aoAA17hjLWttbv65Sf0GYBI+G5C+O4g8g0p /P7l9P7X8F+CkXDzqhhshbcrBIKWk5RhgzazuJipOcRdOFucfIJ7CxWrsxlEg4K6 dcSBKOjVZjXbEEacQZYHVO0dPHqBsfX8YQggU0CH+aILcPgN+xDpssss/9sXgb+H rk4kZ9GOp05dmxybkMreJpMLEqTKWtuSHc5hKVPPEkGSdyqo0GcSVAfFd2w= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:40 2025 by rpki-client