$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa File: fe5bf133-3d81-4137-ac73-2c66456c6024.roa (raw, json) Hash identifier: OGQtH8YcU3Cp8RXYHuzMz+ra2h+Mahunj9IPKuyGu9c= Subject key identifier: A2:F2:C8:A4:33:BF:62:C4:65:1E:2D:D0:02:7F:62:E5:1E:E3:68:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72AA741A234B5EF760C12DDF29D33F669369DBC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa Signing time: Fri 18 Jul 2025 00:31:21 +0000 ROA not before: Fri 18 Jul 2025 00:31:21 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:aa:74:1a:23:4b:5e:f7:60:c1:2d:df:29:d3:3f:66:93:69:db:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:31:21 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=60a25a55e67f2e515bf0972d559d74533cfc9b5b9392060fc68046878c14cf51, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:6d:66:9d:b2:c7:99:2c:af:15:58:35:1e: c4:43:30:72:0b:d1:43:ae:29:7c:47:11:11:d0:0f: 35:be:73:0e:84:a3:f2:9e:22:fe:c7:08:94:df:01: 41:ca:f2:01:b3:54:3c:dc:a1:96:58:3e:79:a7:8d: 38:19:c6:8d:e4:dd:14:39:36:7f:ca:22:13:d7:7f: 20:bb:b8:8a:7b:b4:6c:4e:77:12:42:86:df:85:bf: c3:63:e0:65:ae:9f:03:54:49:5b:ca:32:e9:35:cf: 8a:0d:8b:a1:cc:73:0b:8b:c9:66:29:42:da:e5:bc: 53:62:cd:a1:da:b2:ce:1d:8d:42:de:9d:4b:4a:f5: ff:4e:0b:92:c9:3e:08:d1:0e:c1:21:43:f2:f6:84: 69:a9:de:a8:58:25:78:ec:22:53:4e:57:60:39:5d: 14:4e:40:29:15:55:a2:29:c0:6a:d8:e4:62:ee:59: ad:32:17:49:4b:81:8e:24:80:35:cb:ec:ce:06:fa: 3f:8e:cc:21:c7:ce:e8:63:ae:c0:cc:bb:29:80:69: 17:5d:e0:20:3e:aa:13:3f:47:6a:58:d1:4e:a3:6a: 06:d6:bf:43:1b:2f:d7:31:54:36:e2:5b:1a:ef:e0: 58:98:fa:6c:1d:2e:b9:a9:3d:27:6f:c1:60:f5:76: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F2:C8:A4:33:BF:62:C4:65:1E:2D:D0:02:7F:62:E5:1E:E3:68:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:cb:9e:5d:d5:45:88:83:44:67:d1:7e:71:53:08:22:1a:53: 3e:67:1c:4f:23:98:59:ee:9d:42:47:bf:82:41:84:3d:76:a1: 39:25:36:33:4b:d5:32:3e:ab:a7:54:23:44:73:36:93:48:53: dc:a0:48:63:04:48:9b:01:91:46:d4:e8:81:b2:ec:a8:9d:12: c9:1b:7f:2a:77:e2:0d:f7:ed:72:84:6b:b0:55:0f:6c:81:f5: eb:98:5f:54:ed:90:da:8b:33:63:65:66:0a:53:c4:d3:9f:46: 3b:cc:fb:21:f0:a0:a3:f0:d5:8f:4b:22:21:9a:9d:be:8b:db: d4:16:26:66:8a:e3:cf:40:71:0b:af:ed:22:0c:24:ae:62:d0: f2:ab:c3:eb:78:81:08:e7:69:fc:dd:a2:b9:a5:14:92:37:ec: 34:bf:c9:7a:e1:3f:b0:09:da:00:35:0e:fa:72:aa:c8:ea:10: 9c:c6:73:ac:af:85:98:7d:65:31:8d:92:91:2d:d9:11:7b:7d: 3a:1a:74:2c:5d:cf:45:05:60:f2:26:c0:dd:98:08:66:9e:5d: fb:dd:84:7d:fd:0f:34:da:74:28:3f:8a:6c:16:0d:66:5f:c8: ed:4d:53:34:19:13:44:b0:86:a9:9c:5d:4a:ed:5f:e8:d5:d3: 0d:e4:c5:e5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcqp0GiNLXvdgwS3fKdM/ZpNp28MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAzMTIxWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGEyNWE1NWU2N2YyZTUxNWJmMDk3MmQ1NTlkNzQ1MzNj ZmM5YjViOTM5MjA2MGZjNjgwNDY4NzhjMTRjZjUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO+m1mnbLHmSyvFVg1HsRDMHIL0UOuKXxHERHQDzW+cw6E o/KeIv7HCJTfAUHK8gGzVDzcoZZYPnmnjTgZxo3k3RQ5Nn/KIhPXfyC7uIp7tGxO dxJCht+Fv8Nj4GWunwNUSVvKMuk1z4oNi6HMcwuLyWYpQtrlvFNizaHass4djULe nUtK9f9OC5LJPgjRDsEhQ/L2hGmp3qhYJXjsIlNOV2A5XRROQCkVVaIpwGrY5GLu Wa0yF0lLgY4kgDXL7M4G+j+OzCHHzuhjrsDMuymAaRdd4CA+qhM/R2pY0U6jagbW v0MbL9cxVDbiWxrv4FiY+mwdLrmpPSdvwWD1dkRdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUovLIpDO/YsRlHi3QAn9i5R7jaHowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlNWJmMTMzLTNkODEtNDEzNy1hYzczLTJjNjY0NTZjNjAyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5xjANBgkqhkiG9w0BAQsFAAOCAQEAAsueXdVFiINEZ9F+cVMIIhpTPmcc TyOYWe6dQke/gkGEPXahOSU2M0vVMj6rp1QjRHM2k0hT3KBIYwRImwGRRtTogbLs qJ0SyRt/KnfiDfftcoRrsFUPbIH165hfVO2Q2oszY2VmClPE059GO8z7IfCgo/DV j0siIZqdvovb1BYmZorjz0BxC6/tIgwkrmLQ8qvD63iBCOdp/N2iuaUUkjfsNL/J euE/sAnaADUO+nKqyOoQnMZzrK+FmH1lMY2SkS3ZEXt9Ohp0LF3PRQVg8ibA3ZgI Zp5d+92Eff0PNNp0KD+KbBYNZl/I7U1TNBkTRLCGqZxdSu1f6NXTDeTF5Q== -----END CERTIFICATE-----Generated at Mon Jul 21 18:20:03 2025 by rpki-client