$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa File: fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa (raw, json) Hash identifier: 9980jAcrYt+KiX87//8Qgq+9vqMvXZGs+Dn8mfin9SM= Subject key identifier: 07:D6:54:0B:22:71:E8:4B:B3:88:83:36:EA:E3:67:25:1D:10:BC:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47007E8A29B46E59A06FA886880C4F7B691CE31A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa Signing time: Tue 08 Jul 2025 17:32:03 +0000 ROA not before: Tue 08 Jul 2025 17:32:03 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.2.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:00:7e:8a:29:b4:6e:59:a0:6f:a8:86:88:0c:4f:7b:69:1c:e3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:32:03 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=1aaaa56b94fdb1f80f699fa5363a05f2a9db991b4653325bba120f447e3c5dae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:60:bf:56:97:25:12:b5:a4:af:78:19:9d: d0:9a:59:37:b9:7a:72:ea:ec:d9:e8:68:b2:fa:d4: bc:40:73:9b:12:cc:15:76:dc:25:66:36:35:c7:f9: a6:3d:0c:bc:a2:dd:33:b4:49:0a:8e:ee:73:7c:3d: 5c:bf:b6:a7:db:55:1b:8f:06:eb:cf:32:88:64:2a: bb:e2:0a:b1:f7:a1:12:15:07:42:99:bd:5d:0c:da: ce:c0:4a:99:15:d4:77:fa:70:df:a9:d1:1b:13:31: 73:e1:60:3b:29:d6:04:93:8e:63:9c:1f:4d:d8:13: ee:9b:48:eb:92:d2:1a:d0:bb:30:48:cb:39:50:9a: e8:3e:8a:37:36:00:ac:5d:e4:db:62:67:45:37:34: b7:20:0c:7c:c1:6d:09:45:dd:8e:18:9c:b4:58:b6: 86:13:ed:99:3e:97:0b:4f:70:db:6c:10:10:d1:fc: 0b:15:9f:ea:d3:96:78:51:00:dc:02:5b:69:29:c1: dc:91:c4:d3:58:47:2d:a8:06:51:86:16:a5:58:02: c7:9b:00:cc:d1:a0:e7:f5:63:3b:a0:0b:4d:84:2e: 7d:a8:36:68:30:df:ae:f1:05:78:63:36:0f:73:b6: 29:c2:b4:c2:96:8f:2c:7e:b7:8f:c8:d2:f0:13:58: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:54:0B:22:71:E8:4B:B3:88:83:36:EA:E3:67:25:1D:10:BC:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.2.0.0/17 Signature Algorithm: sha256WithRSAEncryption 81:b6:3c:b6:68:dd:d3:46:4e:fc:d7:c7:4c:23:22:ff:c2:20: bc:45:86:e0:1c:6e:35:5e:81:21:0f:24:ae:a7:2b:58:96:f4: c6:e1:96:51:10:66:cc:e3:c8:4a:c5:56:cc:69:f6:fb:94:97: 45:2a:a5:1b:e6:84:47:2d:00:3f:23:45:8e:ea:eb:22:71:ea: 28:5d:30:9b:8b:51:a6:b3:0d:4a:23:73:93:96:b9:12:fe:50: ba:85:23:96:9f:55:70:fd:d6:5c:b1:67:ec:83:93:8d:ad:04: 09:a1:af:6a:3c:8b:35:c6:11:56:d7:d2:32:ce:da:8c:32:03: c2:cf:24:05:f1:79:4a:f1:ac:d4:08:6f:41:a6:d7:89:a7:1d: c3:62:1f:3d:d6:a2:65:4d:44:a9:08:08:b5:9b:d9:49:d7:ec: c2:4d:ef:9e:20:74:6f:6b:b7:19:b5:f4:65:ab:0a:da:f8:ca: a7:da:d2:3f:c2:b3:73:98:55:41:07:5c:f7:79:9c:97:0a:4b: 50:23:39:08:6f:13:46:cb:dc:6f:92:9f:0c:a1:2f:a9:42:b8: b5:2b:b3:43:81:4e:63:a0:18:a9:9a:93:e8:4c:69:de:8a:72: 2c:4a:ab:4a:0a:3c:ab:43:2e:39:33:92:48:36:71:73:47:cd: 70:78:68:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURwB+iim0blmgb6iGiAxPe2kc4xowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMjAzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWFhYTU2Yjk0ZmRiMWY4MGY2OTlmYTUzNjNhMDVmMmE5 ZGI5OTFiNDY1MzMyNWJiYTEyMGY0NDdlM2M1ZGFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlMmC/VpclErWkr3gZndCaWTe5enLq7NnoaLL61LxAc5sS zBV23CVmNjXH+aY9DLyi3TO0SQqO7nN8PVy/tqfbVRuPBuvPMohkKrviCrH3oRIV B0KZvV0M2s7ASpkV1Hf6cN+p0RsTMXPhYDsp1gSTjmOcH03YE+6bSOuS0hrQuzBI yzlQmug+ijc2AKxd5NtiZ0U3NLcgDHzBbQlF3Y4YnLRYtoYT7Zk+lwtPcNtsEBDR /AsVn+rTlnhRANwCW2kpwdyRxNNYRy2oBlGGFqVYAsebAMzRoOf1YzugC02ELn2o Nmgw367xBXhjNg9ztinCtMKWjyx+t4/I0vATWGLFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB9ZUCyJx6EuziIM26uNnJR0QvE0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlYzk3ZTg1LWZiMzQtNDgyNi05N2NjLTUzZTVmZTJkOTBiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcfAgAwDQYJKoZIhvcNAQELBQADggEBAIG2PLZo3dNGTvzXx0wjIv/CILxF huAcbjVegSEPJK6nK1iW9MbhllEQZszjyErFVsxp9vuUl0UqpRvmhEctAD8jRY7q 6yJx6ihdMJuLUaazDUojc5OWuRL+ULqFI5afVXD91lyxZ+yDk42tBAmhr2o8izXG EVbX0jLO2owyA8LPJAXxeUrxrNQIb0Gm14mnHcNiHz3WomVNRKkICLWb2UnX7MJN 754gdG9rtxm19GWrCtr4yqfa0j/Cs3OYVUEHXPd5nJcKS1AjOQhvE0bL3G+Snwyh L6lCuLUrs0OBTmOgGKmak+hMad6KcixKq0oKPKtDLjkzkkg2cXNHzXB4aEQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:47 2025 by rpki-client