$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa File: f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa (raw, json) Hash identifier: K5z04RtBFAj9y9MgRNJOzVNpL6UJZLbc2OonCtks+D4= Subject key identifier: 3B:21:FC:38:F7:4C:59:FE:09:36:7B:5A:8D:99:A3:2B:B4:E5:9A:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58A2362DEF6635379B37987F5CAE342DBDF78431 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa Signing time: Mon 14 Jul 2025 15:10:21 +0000 ROA not before: Mon 14 Jul 2025 15:10:21 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.180.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a2:36:2d:ef:66:35:37:9b:37:98:7f:5c:ae:34:2d:bd:f7:84:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:10:21 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=2ee5bf680c9db7b67873f1d069258318cb9aec7d47158beef4ecff5bb141584f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:77:d3:ac:1b:6d:29:47:84:27:48:88:d4: e3:c0:66:76:e5:36:ac:0b:54:53:a9:9b:fb:d7:26: da:ea:74:e6:3c:e3:d2:aa:f1:d5:62:7c:39:7b:fd: ac:fb:5a:6f:64:62:9c:6c:d2:e4:ce:ef:8b:ad:39: b6:de:85:c8:bd:13:eb:45:1d:fc:9c:a5:4d:63:96: a3:4b:80:54:e2:2f:b0:52:4a:c9:79:bc:b5:a0:e5: 55:3e:98:7f:fc:e8:fc:a8:a9:98:01:37:0d:51:00: 03:35:ff:dc:70:31:1d:19:c9:a6:6f:ff:cd:57:bb: 0a:30:26:d6:d8:ac:7e:7d:9f:69:09:9e:ef:54:79: d1:06:21:19:ea:69:d6:20:bc:37:fe:f0:a2:c4:56: 5a:49:76:9c:9b:a4:3a:b6:29:7f:30:de:a9:92:ef: 8f:20:33:ad:89:61:f3:d3:d5:76:f9:cb:b5:7a:af: 42:ce:02:f2:df:ea:ea:5d:90:35:9e:b0:00:f9:fc: 7e:b0:09:8d:b6:d6:93:13:98:5d:11:9f:aa:9d:62: fb:8b:94:35:cc:c6:f4:95:fb:b0:76:da:82:3c:77: f6:7e:71:8c:ae:82:1a:be:a0:6e:97:6c:e9:99:80: 37:6d:ee:05:7f:1a:c0:c5:ab:ec:fd:be:b7:b7:0a: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:FC:38:F7:4C:59:FE:09:36:7B:5A:8D:99:A3:2B:B4:E5:9A:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.180.0.0/15 Signature Algorithm: sha256WithRSAEncryption c4:8b:9b:56:f9:10:cc:a3:69:f0:af:32:27:56:57:b8:d3:af: 7d:3f:09:92:9d:4a:1c:87:3a:8f:cf:26:7e:ed:17:5f:83:ae: 9a:51:1c:82:68:46:42:e9:7a:1c:8a:ee:a3:30:24:cb:74:71: ef:e1:3a:2d:de:e1:c6:38:3e:70:7c:d1:e6:4b:a9:d4:ab:55: c7:e1:a4:8b:d9:94:19:b3:e7:af:ec:8c:c9:1c:96:b9:7e:41: f5:c0:8b:55:e1:7a:8d:99:53:7b:2e:86:43:d8:e4:d1:3b:26: 85:bf:1b:e3:66:55:75:d0:12:cb:3e:e5:aa:7d:1d:4f:7b:eb: 16:db:e3:44:71:d6:81:61:ea:8c:43:0c:9f:84:8d:1e:a9:3a: 7e:36:0d:3e:e5:76:40:54:94:12:22:99:81:72:2d:68:ad:64: d7:4c:33:fb:d2:de:af:47:e1:be:bc:60:ec:de:61:9a:80:2b: 82:30:5d:13:e0:c5:cf:42:11:b4:01:91:02:bf:6b:75:b4:7b: 1c:0f:e6:30:15:64:04:27:ff:4d:33:e4:0e:57:e0:73:c0:2c: 06:8c:9d:e8:e9:a3:7f:f9:97:13:35:2c:47:5e:c4:c8:d7:08: 20:ed:3b:8b:22:1f:32:36:85:62:18:59:45:d9:52:d4:ab:ce: 3f:e2:ac:62 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWKI2Le9mNTebN5h/XK40Lb33hDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUxMDIxWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWU1YmY2ODBjOWRiN2I2Nzg3M2YxZDA2OTI1ODMxOGNi OWFlYzdkNDcxNThiZWVmNGVjZmY1YmIxNDE1ODRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClM3fTrBttKUeEJ0iI1OPAZnblNqwLVFOpm/vXJtrqdOY8 49Kq8dVifDl7/az7Wm9kYpxs0uTO74utObbehci9E+tFHfycpU1jlqNLgFTiL7BS Ssl5vLWg5VU+mH/86PyoqZgBNw1RAAM1/9xwMR0ZyaZv/81XuwowJtbYrH59n2kJ nu9UedEGIRnqadYgvDf+8KLEVlpJdpybpDq2KX8w3qmS748gM62JYfPT1Xb5y7V6 r0LOAvLf6updkDWesAD5/H6wCY221pMTmF0Rn6qdYvuLlDXMxvSV+7B22oI8d/Z+ cYyughq+oG6XbOmZgDdt7gV/GsDFq+z9vre3CiI3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOyH8OPdMWf4JNntajZmjK7TlmgwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzMTI1ZTMxLWVkOTctNGUzMS04OWU5LWQ0YWYwMGU1YjMyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEotDANBgkqhkiG9w0BAQsFAAOCAQEAxIubVvkQzKNp8K8yJ1ZXuNOvfT8J kp1KHIc6j88mfu0XX4OumlEcgmhGQul6HIruozAky3Rx7+E6Ld7hxjg+cHzR5kup 1KtVx+Gki9mUGbPnr+yMyRyWuX5B9cCLVeF6jZlTey6GQ9jk0Tsmhb8b42ZVddAS yz7lqn0dT3vrFtvjRHHWgWHqjEMMn4SNHqk6fjYNPuV2QFSUEiKZgXItaK1k10wz +9Ler0fhvrxg7N5hmoArgjBdE+DFz0IRtAGRAr9rdbR7HA/mMBVkBCf/TTPkDlfg c8AsBoyd6Omjf/mXEzUsR17EyNcIIO07iyIfMjaFYhhZRdlS1KvOP+KsYg== -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:01 2025 by rpki-client