$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e44c10a9-b9d0-4cce-a282-c099d456f54b.roa File: e44c10a9-b9d0-4cce-a282-c099d456f54b.roa (raw, json) Hash identifier: f20IcbHcYdq+IARpDeH6VkFZmCOLave0tn2Fkd72SRI= Subject key identifier: F7:22:87:09:20:99:C6:B6:AE:84:2E:AC:9A:73:57:46:8D:97:07:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14214007A21C4B826B7743E5B636A12FBAC71527 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e44c10a9-b9d0-4cce-a282-c099d456f54b.roa Signing time: Fri 11 Jul 2025 00:10:31 +0000 ROA not before: Fri 11 Jul 2025 00:10:31 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:21:40:07:a2:1c:4b:82:6b:77:43:e5:b6:36:a1:2f:ba:c7:15:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:10:31 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=fdb34ccda901be44c1ad7c526359111c52e54ef091feb05ea0a9f65d005e1584, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:66:f0:55:6c:6d:34:72:da:c8:e7:d3:32: e3:47:e1:2b:8c:66:30:a7:44:39:0f:36:b2:ba:56: 3c:8a:c8:9e:c8:cb:84:ee:82:1d:cf:a9:4a:92:98: 79:2b:84:67:b1:a7:91:bb:29:f9:aa:b8:d5:23:4c: ab:5e:c6:f3:e7:16:4e:c3:35:9e:c1:22:bc:25:37: bd:b3:89:68:30:c5:d4:b2:7f:a5:b3:52:d9:73:3a: 00:78:19:3c:8b:52:a2:e8:86:0b:d4:c1:79:4e:1c: 87:ea:54:c6:1f:a0:8f:ab:1a:c2:fd:a3:bf:93:dd: 05:51:3f:9e:b4:64:14:a5:f5:ac:d3:92:fc:af:c8: 2f:0d:0c:bc:78:5e:d6:65:9c:e3:e8:ff:e8:aa:db: 9e:a5:ad:5c:2b:73:b0:d3:bd:4d:d8:51:6a:22:69: 13:0f:57:34:79:ac:92:00:2e:48:2f:2e:7d:60:77: b6:63:4c:e6:52:e3:82:7d:00:7f:05:38:17:ac:ed: 72:61:69:b9:5d:1c:17:45:34:85:3f:59:b1:b1:ce: a1:5a:10:8c:f7:22:b9:99:70:0e:b2:bf:f3:58:85: 9b:87:aa:96:af:59:6d:60:cf:96:34:10:10:5a:9c: 40:9b:dc:44:54:0a:4a:4c:6b:ef:b6:51:4c:34:3f: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:22:87:09:20:99:C6:B6:AE:84:2E:AC:9A:73:57:46:8D:97:07:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e44c10a9-b9d0-4cce-a282-c099d456f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.11.0/24 Signature Algorithm: sha256WithRSAEncryption 35:44:b9:9c:4d:eb:78:6f:7c:06:85:01:cd:35:3c:6c:88:94: 6d:05:a9:45:f4:4a:3f:95:da:b2:41:ef:39:1e:a1:86:d3:d5: 96:06:f1:3d:ff:f8:e0:de:86:3f:94:20:ce:ce:fa:93:5f:3e: e6:69:0b:f8:f8:27:b7:f2:8f:fb:39:98:9c:2c:0c:16:a9:4a: e4:24:21:a2:3d:1f:42:b2:6b:a4:9b:f8:cb:08:7f:29:0f:48: 44:84:40:00:96:63:ec:c4:06:5d:48:84:6c:80:a6:8c:e3:49: a7:48:f5:fd:36:12:32:b8:5e:d3:e5:2c:35:62:29:e8:bd:ec: e4:30:60:f6:2a:9e:2c:84:f7:b9:9b:cb:fb:6d:b7:82:52:f7: b0:b4:c0:4e:d9:07:0d:46:b2:90:cc:c1:05:84:43:1d:f3:f8: 63:f4:4f:b9:3b:c1:e8:ac:2c:22:b0:98:0f:0c:44:ed:7b:9f: 65:f1:32:28:90:2c:74:15:e1:4b:c7:b3:96:0c:c3:8a:66:7b: fb:9b:f1:c0:af:29:7b:62:ce:66:ef:06:45:2f:f5:90:ff:b0: a1:27:d8:4d:bb:3a:fc:5f:42:e8:c3:d4:7b:68:75:fc:72:3d: 53:25:3d:07:11:d9:cb:0b:a0:4f:3b:e3:bf:21:73:a5:00:3a: d3:2e:a3:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFCFAB6IcS4Jrd0PltjahL7rHFScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMDMxWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGIzNGNjZGE5MDFiZTQ0YzFhZDdjNTI2MzU5MTExYzUy ZTU0ZWYwOTFmZWIwNWVhMGE5ZjY1ZDAwNWUxNTg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN2mbwVWxtNHLayOfTMuNH4SuMZjCnRDkPNrK6VjyKyJ7I y4Tugh3PqUqSmHkrhGexp5G7KfmquNUjTKtexvPnFk7DNZ7BIrwlN72ziWgwxdSy f6WzUtlzOgB4GTyLUqLohgvUwXlOHIfqVMYfoI+rGsL9o7+T3QVRP560ZBSl9azT kvyvyC8NDLx4XtZlnOPo/+iq256lrVwrc7DTvU3YUWoiaRMPVzR5rJIALkgvLn1g d7ZjTOZS44J9AH8FOBes7XJhabldHBdFNIU/WbGxzqFaEIz3IrmZcA6yv/NYhZuH qpavWW1gz5Y0EBBanECb3ERUCkpMa++2UUw0P8URAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9yKHCSCZxrauhC6smnNXRo2XBwMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0NGMxMGE5LWI5ZDAtNGNjZS1hMjgyLWMwOTlkNDU2ZjU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYnQswDQYJKoZIhvcNAQELBQADggEBADVEuZxN63hvfAaFAc01PGyIlG0F qUX0Sj+V2rJB7zkeoYbT1ZYG8T3/+ODehj+UIM7O+pNfPuZpC/j4J7fyj/s5mJws DBapSuQkIaI9H0Kya6Sb+MsIfykPSESEQACWY+zEBl1IhGyApozjSadI9f02EjK4 XtPlLDViKei97OQwYPYqniyE97mby/ttt4JS97C0wE7ZBw1GspDMwQWEQx3z+GP0 T7k7weisLCKwmA8MRO17n2XxMiiQLHQV4UvHs5YMw4pme/ub8cCvKXtizmbvBkUv 9ZD/sKEn2E27OvxfQujD1HtodfxyPVMlPQcR2csLoE87478hc6UAOtMuo+Y= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:26 2025 by rpki-client