$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa File: f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa (raw, json) Hash identifier: LabxMBqY+pYDFuZ96knD3mwXsGJUUOf7icdDLBtHbmM= Subject key identifier: 6F:71:3F:DE:3A:5A:73:BC:EB:00:67:4F:5F:FC:B3:B4:55:11:16:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48FDCBA1C9C796BD672D238A601D35F522DE99DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa Signing time: Wed 09 Jul 2025 00:52:05 +0000 ROA not before: Wed 09 Jul 2025 00:52:05 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.25.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fd:cb:a1:c9:c7:96:bd:67:2d:23:8a:60:1d:35:f5:22:de:99:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:52:05 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=1f7e15d1eb0362067432cc58533de38a49e132c86a6d539678561c516673d15b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:62:52:bd:01:ad:0a:e8:5b:d3:73:82:c6: fe:71:59:09:ff:88:0c:1e:32:8d:e7:10:71:6a:54: 79:88:58:d4:07:33:c7:1a:59:11:41:a5:b3:c0:41: b6:e9:e6:97:2c:fd:24:44:1b:79:dc:27:18:61:53: 39:ef:03:72:aa:86:c3:e2:4f:e2:77:cf:26:30:c8: 80:2f:7c:3a:16:54:a4:b1:8b:ff:ab:e5:30:81:a4: 3f:b4:19:f0:29:06:a5:56:dc:6b:3d:a0:bd:98:e6: 9e:28:a1:f8:7b:25:c2:df:02:82:53:c8:4d:0e:cf: 97:f1:58:a8:b9:d1:ba:14:0e:45:e2:89:79:67:56: c9:e8:2a:f3:1a:99:0e:04:a8:1f:6b:cb:29:74:dc: 3b:54:11:22:60:78:9a:0f:f3:ec:ac:94:81:f2:c6: 9b:79:b9:2e:c4:9d:c9:b8:e3:0c:b6:5b:96:96:e3: 61:59:7f:a3:12:f6:1a:3d:09:29:85:0d:54:b1:57: 67:30:21:d2:38:08:39:02:16:39:ba:47:53:30:3e: 7e:36:db:5c:77:f6:f6:cb:9a:71:e7:53:c3:95:a4: 2e:1c:86:01:5f:43:48:e0:f7:47:47:fb:52:ca:a2: 41:a4:6c:25:67:1f:a9:c7:cd:7f:d9:ba:f3:1d:d0: d6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:71:3F:DE:3A:5A:73:BC:EB:00:67:4F:5F:FC:B3:B4:55:11:16:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.68.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b2:05:c5:98:6f:04:bf:e4:2c:1b:71:4c:b1:fa:0a:b4:2a: 7f:b9:76:67:b0:d3:dd:6e:dd:71:4e:cb:23:9e:62:71:0a:e5: 1d:19:5e:53:e9:8c:59:10:cb:b9:5b:5b:84:c5:81:c0:0b:f6: d5:c1:3a:b2:ec:d0:03:93:77:23:77:53:ac:d8:63:be:69:ca: 2a:26:8b:59:ad:bc:74:82:6a:95:24:b1:97:02:cb:08:8a:16: 95:47:3c:2f:90:df:82:e7:c5:58:9b:39:f0:3b:51:e3:e8:4f: af:16:91:70:6d:9c:9d:e0:70:37:f8:a7:fc:c0:88:56:2c:27: 53:9a:09:10:57:da:41:57:8e:84:cd:24:20:4c:d2:50:d3:5b: 8d:78:19:ae:67:8b:28:a1:e3:1a:4a:01:71:b2:1b:c3:76:a1: 40:82:f9:c0:20:13:c8:cc:f3:ea:15:e2:4b:3f:39:36:82:cc: e6:9f:1f:81:f8:64:6b:54:e8:36:d1:35:8c:e0:f1:c3:25:e4: 05:aa:4b:af:45:04:23:5c:d0:44:01:f1:85:0e:a2:18:6a:9e: 84:4d:06:20:29:98:99:39:a3:9a:4e:29:54:0e:b8:46:08:bf: 25:7a:73:63:bc:7b:d5:90:79:3d:fc:cb:6a:8f:d5:c0:86:95: c2:27:81:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSP3LocnHlr1nLSOKYB019SLemdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MjA1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjdlMTVkMWViMDM2MjA2NzQzMmNjNTg1MzNkZTM4YTQ5 ZTEzMmM4NmE2ZDUzOTY3ODU2MWM1MTY2NzNkMTViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmaGJSvQGtCuhb03OCxv5xWQn/iAweMo3nEHFqVHmIWNQH M8caWRFBpbPAQbbp5pcs/SREG3ncJxhhUznvA3KqhsPiT+J3zyYwyIAvfDoWVKSx i/+r5TCBpD+0GfApBqVW3Gs9oL2Y5p4oofh7JcLfAoJTyE0Oz5fxWKi50boUDkXi iXlnVsnoKvMamQ4EqB9ryyl03DtUESJgeJoP8+yslIHyxpt5uS7Encm44wy2W5aW 42FZf6MS9ho9CSmFDVSxV2cwIdI4CDkCFjm6R1MwPn4221x39vbLmnHnU8OVpC4c hgFfQ0jg90dH+1LKokGkbCVnH6nHzX/ZuvMd0NY7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb3E/3jpac7zrAGdPX/yztFURFsYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1ZDViMzNiLWIyYzgtNGY0NC1iODJiLTdkNGRjYTE3NjM0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUQwDQYJKoZIhvcNAQELBQADggEBADyyBcWYbwS/5CwbcUyx+gq0Kn+5 dmew091u3XFOyyOeYnEK5R0ZXlPpjFkQy7lbW4TFgcAL9tXBOrLs0AOTdyN3U6zY Y75pyiomi1mtvHSCapUksZcCywiKFpVHPC+Q34LnxVibOfA7UePoT68WkXBtnJ3g cDf4p/zAiFYsJ1OaCRBX2kFXjoTNJCBM0lDTW414Ga5niyih4xpKAXGyG8N2oUCC +cAgE8jM8+oV4ks/OTaCzOafH4H4ZGtU6DbRNYzg8cMl5AWqS69FBCNc0EQB8YUO ohhqnoRNBiApmJk5o5pOKVQOuEYIvyV6c2O8e9WQeT38y2qP1cCGlcIngR8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:06 2025 by rpki-client