$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa File: e96bbb8e-db86-4398-a60a-ddece0b4a061.roa (raw, json) Hash identifier: /1nSgKPDfMk4M1ORQkLgDMfONxvpcbQJJKjhRxRL+CM= Subject key identifier: 46:AE:61:F5:E8:3F:16:DE:8F:AC:FF:F0:EC:75:A8:DE:33:CB:22:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61BD435D0D6C66E9854190DBCFA65432542E3C48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa Signing time: Wed 09 Jul 2025 00:20:22 +0000 ROA not before: Wed 09 Jul 2025 00:20:22 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bd:43:5d:0d:6c:66:e9:85:41:90:db:cf:a6:54:32:54:2e:3c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:20:22 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=cee82e041428418723bc60cf609d6e2428251218b7c9aeb3a76ba95d7c65d646, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:59:8f:58:1a:d2:0f:d1:68:a8:a9:c1:d9: 52:7d:1d:b0:1d:c8:f8:20:97:e0:e2:a8:b1:67:35: 66:8b:d2:d5:30:e1:91:ba:5c:96:63:09:34:01:a1: c0:ed:14:49:e1:0b:5c:a7:96:e8:b0:19:09:a7:42: fa:26:34:0e:1c:c5:72:fd:c8:9f:79:4b:b0:6c:18: 89:f4:b3:f5:43:0c:d6:6d:4c:9a:56:ee:5a:2c:d8: cb:8c:2f:59:08:10:25:e9:a2:fe:40:22:b9:e8:fc: af:bf:4a:76:41:e8:5c:b5:01:1e:46:c9:9c:74:54: 82:36:bf:c5:64:22:3d:50:dc:78:26:26:6e:ba:64: 8d:c5:d4:6e:c0:61:4f:42:3a:7b:51:47:70:96:ec: ef:d7:67:d7:8f:7c:3d:46:55:40:be:cb:93:e1:57: 1d:0c:1a:19:5e:28:e5:d5:12:14:c9:15:d9:0a:1d: 6c:52:e2:0c:79:78:15:18:20:0f:ff:5b:5d:dd:dd: 6f:64:de:a8:51:e7:59:e1:7f:5e:e6:66:77:ee:6e: e5:25:a4:6f:46:91:a3:e7:74:cf:af:11:52:b0:51: 9a:4f:df:2d:de:c0:a2:87:f5:8d:5a:1a:5c:23:a1: e2:d2:11:40:d9:22:81:84:8f:88:59:fd:76:5d:6b: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:61:F5:E8:3F:16:DE:8F:AC:FF:F0:EC:75:A8:DE:33:CB:22:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.73.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:79:ce:9e:65:82:74:dc:d0:30:8c:2c:0b:b3:52:44:c9:97: 29:7d:e1:26:28:e3:3e:aa:83:67:7f:ee:ee:d9:25:1c:e7:d5: 5a:03:79:c5:91:1b:5e:8e:23:29:dd:14:e2:96:df:da:09:5f: 96:a3:31:ff:e5:ee:e8:12:6b:75:5e:7e:8e:56:72:eb:31:e8: f0:cf:0d:fe:0c:02:1d:61:08:36:51:76:55:35:83:6c:19:14: e1:1e:6c:2b:21:fa:5b:48:1f:81:6b:69:5d:dd:8d:1e:e6:b3: b8:db:2b:07:9f:05:be:35:da:e1:6b:6b:d9:58:57:aa:a6:92: d0:6b:da:76:ca:36:83:d8:9f:ac:d1:1a:15:7a:bf:ac:78:34: a0:bc:7f:ea:51:8d:36:35:08:6b:9f:d2:18:d8:d0:c9:e5:29: 71:fd:16:e1:55:30:9d:f3:2e:cd:de:0b:40:a7:d6:85:9c:ca: 1a:50:55:35:c9:03:ab:e5:8f:3b:22:e3:34:9f:ee:2b:26:1b: 40:af:d4:fe:f4:c3:82:5b:2e:49:af:75:0c:74:6a:04:98:6f: 43:e9:30:bc:0f:45:45:b1:5e:ed:38:ae:40:48:dd:4d:27:95: 3a:b8:e6:db:54:0f:f3:4b:1c:bd:d5:6c:d9:e5:77:a1:3d:6a: f8:b4:16:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYb1DXQ1sZumFQZDbz6ZUMlQuPEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAyMDIyWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWU4MmUwNDE0Mjg0MTg3MjNiYzYwY2Y2MDlkNmUyNDI4 MjUxMjE4YjdjOWFlYjNhNzZiYTk1ZDdjNjVkNjQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChT1mPWBrSD9FoqKnB2VJ9HbAdyPggl+DiqLFnNWaL0tUw 4ZG6XJZjCTQBocDtFEnhC1ynluiwGQmnQvomNA4cxXL9yJ95S7BsGIn0s/VDDNZt TJpW7los2MuML1kIECXpov5AIrno/K+/SnZB6Fy1AR5GyZx0VII2v8VkIj1Q3Hgm Jm66ZI3F1G7AYU9COntRR3CW7O/XZ9ePfD1GVUC+y5PhVx0MGhleKOXVEhTJFdkK HWxS4gx5eBUYIA//W13d3W9k3qhR51nhf17mZnfubuUlpG9GkaPndM+vEVKwUZpP 3y3ewKKH9Y1aGlwjoeLSEUDZIoGEj4hZ/XZdazqPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURq5h9eg/Ft6PrP/w7HWo3jPLIi0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5NmJiYjhlLWRiODYtNDM5OC1hNjBhLWRkZWNlMGI0YTA2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXFkkwDQYJKoZIhvcNAQELBQADggEBAD95zp5lgnTc0DCMLAuzUkTJlyl9 4SYo4z6qg2d/7u7ZJRzn1VoDecWRG16OIyndFOKW39oJX5ajMf/l7ugSa3Vefo5W cusx6PDPDf4MAh1hCDZRdlU1g2wZFOEebCsh+ltIH4FraV3djR7ms7jbKwefBb41 2uFra9lYV6qmktBr2nbKNoPYn6zRGhV6v6x4NKC8f+pRjTY1CGuf0hjY0MnlKXH9 FuFVMJ3zLs3eC0Cn1oWcyhpQVTXJA6vljzsi4zSf7ismG0Cv1P70w4JbLkmvdQx0 agSYb0PpMLwPRUWxXu04rkBI3U0nlTq45ttUD/NLHL3VbNnld6E9avi0FpM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:02 2025 by rpki-client