$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa File: f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa (raw, json) Hash identifier: SdOYGBdjK+GjllGpmdpzTk9D/7iBLuufs8bX85MRqQU= Subject key identifier: 7F:41:CD:DE:63:85:8B:9B:19:8D:47:EC:5D:3D:BD:BA:CE:08:14:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D537B524C54ECB6103AD5AE2954E3A1C79B11BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa Signing time: Tue 08 Jul 2025 16:10:18 +0000 ROA not before: Tue 08 Jul 2025 16:10:18 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.222.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:53:7b:52:4c:54:ec:b6:10:3a:d5:ae:29:54:e3:a1:c7:9b:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:10:18 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d091de28b00e056bc07d4c49461549a53a5cffc17c7fdf8d19b951ca74d6d553, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:1a:5f:50:c7:77:cf:02:40:fc:30:37:c9: 77:92:58:e7:79:9d:68:4e:71:dd:89:61:3d:b1:1a: e4:1e:22:e4:9c:3c:cb:ad:ef:ab:ae:0a:80:48:2d: eb:39:81:8f:4e:24:5e:98:4a:ec:77:2e:08:6e:9c: d6:76:65:ef:d6:c6:d4:f7:2c:55:d0:18:be:04:1f: a5:6c:32:4f:aa:24:0b:ff:cc:e8:bc:35:f7:e7:e3: 6b:69:e5:ae:11:f7:9c:a1:c0:70:d1:99:d3:8b:49: 7f:8c:ee:59:01:29:2d:7e:93:f3:23:44:e4:8b:41: c6:ac:c8:41:ee:bc:50:e2:c2:e6:21:ca:22:5f:17: c1:31:15:75:d6:e1:c6:8f:2d:eb:69:5a:8b:e4:f3: 75:cf:52:4c:45:3c:bd:dc:db:e4:45:76:25:81:b5: 96:39:2b:6a:6e:b4:77:35:e7:d3:75:3d:bd:f2:67: 65:69:ce:47:4f:8d:2e:19:99:f2:ab:c9:16:c9:2e: 61:ef:c0:a0:d8:45:a1:87:01:70:34:3c:a8:f1:2b: 88:19:c8:a9:45:68:e4:55:05:8c:b4:a9:dc:6c:de: d7:3a:2d:05:2b:64:bf:49:01:41:90:11:61:9e:15: 17:7c:cb:b0:3a:a0:60:ee:42:c7:b0:17:7d:47:48: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:CD:DE:63:85:8B:9B:19:8D:47:EC:5D:3D:BD:BA:CE:08:14:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.222.148.0/23 Signature Algorithm: sha256WithRSAEncryption 22:4c:f2:3d:a2:6e:3d:85:18:4b:da:1b:5f:c1:77:02:af:72: 49:bd:d1:3b:ac:47:7c:70:39:05:93:71:fc:dd:14:f7:30:af: 9e:65:da:ed:88:78:d9:34:78:45:0b:dc:62:03:47:cb:c2:b9: 55:95:81:47:d7:61:9d:c4:d1:f5:bb:4a:0e:32:ee:2f:db:56: 41:9b:e3:7b:11:e8:59:5b:fa:e9:ed:78:dc:13:1e:15:8c:9f: f8:0c:81:92:f5:c5:65:73:6a:24:4d:4a:28:82:37:10:92:fa: 31:63:1b:98:a6:e1:34:a3:97:18:e4:4e:92:44:0d:ff:95:c9: 7d:b1:92:ac:6e:d4:59:96:bc:68:ec:ad:06:46:e1:28:cb:bf: a3:d7:75:25:91:d0:20:93:4b:a3:1b:b7:3c:a2:fe:6f:ff:ba: 5a:6d:ac:ff:8f:3b:31:13:ad:fa:c1:6d:0f:b7:33:a4:df:8e: 2a:78:8c:f1:ca:10:fc:ae:15:88:2c:e6:a5:1e:aa:38:7d:68: d5:dc:22:0e:f7:5e:ea:0f:38:69:da:e5:b1:31:57:d4:f6:48: f0:84:39:e0:31:6e:5b:0f:a1:dd:98:09:fe:04:5c:15:64:93: 1b:29:1c:c3:b7:a8:3f:31:c3:88:d5:6f:19:8b:0d:30:6e:37: 2c:1c:e3:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPVN7UkxU7LYQOtWuKVTjocebEbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYxMDE4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDkxZGUyOGIwMGUwNTZiYzA3ZDRjNDk0NjE1NDlhNTNh NWNmZmMxN2M3ZmRmOGQxOWI5NTFjYTc0ZDZkNTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH0BpfUMd3zwJA/DA3yXeSWOd5nWhOcd2JYT2xGuQeIuSc PMut76uuCoBILes5gY9OJF6YSux3LghunNZ2Ze/WxtT3LFXQGL4EH6VsMk+qJAv/ zOi8Nffn42tp5a4R95yhwHDRmdOLSX+M7lkBKS1+k/MjROSLQcasyEHuvFDiwuYh yiJfF8ExFXXW4caPLetpWovk83XPUkxFPL3c2+RFdiWBtZY5K2putHc159N1Pb3y Z2VpzkdPjS4ZmfKryRbJLmHvwKDYRaGHAXA0PKjxK4gZyKlFaORVBYy0qdxs3tc6 LQUrZL9JAUGQEWGeFRd8y7A6oGDuQsewF31HSD79AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf0HN3mOFi5sZjUfsXT29us4IFBIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4N2UxNDUyLTBiZjYtNGI1ZS1hNWRjLWI0ODJmNjk5ZjZiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGi3pQwDQYJKoZIhvcNAQELBQADggEBACJM8j2ibj2FGEvaG1/BdwKvckm9 0TusR3xwOQWTcfzdFPcwr55l2u2IeNk0eEUL3GIDR8vCuVWVgUfXYZ3E0fW7Sg4y 7i/bVkGb43sR6Flb+unteNwTHhWMn/gMgZL1xWVzaiRNSiiCNxCS+jFjG5im4TSj lxjkTpJEDf+VyX2xkqxu1FmWvGjsrQZG4SjLv6PXdSWR0CCTS6Mbtzyi/m//ulpt rP+POzETrfrBbQ+3M6Tfjip4jPHKEPyuFYgs5qUeqjh9aNXcIg73XuoPOGna5bEx V9T2SPCEOeAxblsPod2YCf4EXBVkkxspHMO3qD8xw4jVbxmLDTBuNywc48k= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:46 2025 by rpki-client