$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa File: f003f8b3-3437-44b7-a0b7-0988bc303328.roa (raw, json) Hash identifier: U2e4YPnMU2mSp6Hm8d4kUVbeUKWS93BgGRZNhxzXEPI= Subject key identifier: 2C:16:49:8B:89:77:91:D4:72:93:6B:13:12:4D:19:7D:D4:51:0A:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 015DC2F5F0B50E650B652220DE702B9BA667D3D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa Signing time: Fri 18 Jul 2025 00:21:23 +0000 ROA not before: Fri 18 Jul 2025 00:21:23 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.8.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5d:c2:f5:f0:b5:0e:65:0b:65:22:20:de:70:2b:9b:a6:67:d3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:21:23 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=41659ad58b8bf7fa81352413ce95b1aadefc3c59420626f96bea25d13ef8a65d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:74:c2:68:da:4e:cf:cb:c1:eb:9c:33:59: d4:85:0c:27:7a:45:79:76:bc:15:13:95:78:4a:fd: 54:37:75:ad:64:09:2a:f4:b4:96:88:31:1b:24:18: b2:85:93:ec:00:80:44:0a:48:66:e6:2a:9e:b0:95: e4:02:dd:78:4c:6c:c6:d3:9b:2d:e1:ac:2f:73:a6: 93:23:6d:38:05:c6:00:f0:fb:e1:29:cf:b7:43:0b: a6:ca:39:49:38:f4:31:b6:e3:3a:0a:bc:99:fe:9d: fa:5c:97:15:75:30:8c:22:c8:e1:12:53:80:47:0d: 8b:49:3e:5b:08:a0:10:f6:b9:61:8b:38:20:e1:07: 53:00:0e:d4:14:bf:fd:ef:42:9e:c5:d9:10:70:2d: 15:6c:9d:00:46:ae:07:ca:cc:eb:46:fc:19:9e:ce: 22:f5:ba:fd:21:11:39:82:c6:71:03:89:11:f6:8f: 49:5d:e1:5c:11:52:0c:fc:d6:7a:84:7b:d2:be:45: 15:44:32:2f:dd:0f:f0:aa:b1:b7:b8:98:3b:53:bd: c6:2c:cb:d9:8b:83:94:2e:7b:9f:73:56:4b:31:83: 58:53:84:cf:d7:2d:d3:af:ab:79:2e:ca:aa:ff:04: 46:98:ff:33:7f:d7:a0:51:30:53:db:41:16:f7:27: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:49:8B:89:77:91:D4:72:93:6B:13:12:4D:19:7D:D4:51:0A:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:d0:5f:19:88:05:ff:fd:b8:0f:2d:19:c6:ce:23:f0:7a:fa: 34:89:21:13:cc:a7:9d:d1:7c:89:b3:e4:42:cc:45:bc:9a:66: 4f:6a:ad:3c:e4:54:7f:bb:9d:49:ff:92:c4:cc:64:aa:b0:4b: c0:a4:9a:28:eb:f0:7e:99:22:cd:6b:c9:8b:c9:8d:d3:99:f8: f6:10:d7:89:e9:f6:12:b3:4c:68:7d:a2:7d:4a:42:86:28:fa: 2d:ec:98:3d:9f:7b:84:30:f6:0d:56:c9:c4:11:4b:39:f5:67: ff:7f:53:d4:d5:69:bf:19:95:85:da:6a:8b:d1:4c:1b:27:9c: 51:15:cc:46:2a:6b:6a:07:1f:03:2f:b3:08:55:00:07:81:24: 9f:a1:05:a4:93:1e:36:5b:d0:b5:5e:65:f2:d8:e9:01:8e:52: da:c4:34:c8:67:0b:a2:46:29:57:43:dc:44:9d:a6:d4:99:50: 15:f9:39:a5:58:ee:e2:5c:a2:91:29:54:ab:35:41:f5:2d:a8: 27:ee:bc:3b:d5:d1:2b:d7:63:23:e7:9f:18:1c:2b:ce:cd:7b: a7:df:af:eb:22:1c:25:ff:cf:8b:2a:5f:ef:92:b2:9c:d4:0f: 32:63:81:fc:1d:9c:89:9d:90:ab:56:0e:d0:e2:ed:16:b7:97: 3f:2b:b5:74 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAV3C9fC1DmULZSIg3nArm6Zn09EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAyMTIzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTY1OWFkNThiOGJmN2ZhODEzNTI0MTNjZTk1YjFhYWRl ZmMzYzU5NDIwNjI2Zjk2YmVhMjVkMTNlZjhhNjVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV/XTCaNpOz8vB65wzWdSFDCd6RXl2vBUTlXhK/VQ3da1k CSr0tJaIMRskGLKFk+wAgEQKSGbmKp6wleQC3XhMbMbTmy3hrC9zppMjbTgFxgDw ++Epz7dDC6bKOUk49DG24zoKvJn+nfpclxV1MIwiyOESU4BHDYtJPlsIoBD2uWGL OCDhB1MADtQUv/3vQp7F2RBwLRVsnQBGrgfKzOtG/BmeziL1uv0hETmCxnEDiRH2 j0ld4VwRUgz81nqEe9K+RRVEMi/dD/Cqsbe4mDtTvcYsy9mLg5Que59zVksxg1hT hM/XLdOvq3kuyqr/BEaY/zN/16BRMFPbQRb3JwHFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULBZJi4l3kdRyk2sTEk0ZfdRRCkUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMDNmOGIzLTM0MzctNDRiNy1hMGI3LTA5ODhiYzMwMzMyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2CDANBgkqhkiG9w0BAQsFAAOCAQEAF9BfGYgF//24Dy0Zxs4j8Hr6NIkh E8ynndF8ibPkQsxFvJpmT2qtPORUf7udSf+SxMxkqrBLwKSaKOvwfpkizWvJi8mN 05n49hDXien2ErNMaH2ifUpChij6LeyYPZ97hDD2DVbJxBFLOfVn/39T1NVpvxmV hdpqi9FMGyecURXMRipragcfAy+zCFUAB4Ekn6EFpJMeNlvQtV5l8tjpAY5S2sQ0 yGcLokYpV0PcRJ2m1JlQFfk5pVju4lyikSlUqzVB9S2oJ+68O9XRK9djI+efGBwr zs17p9+v6yIcJf/Piypf75KynNQPMmOB/B2ciZ2Qq1YO0OLtFreXPyu1dA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:09 2025 by rpki-client