$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa File: ff1a08ba-07d4-454f-bb58-b0503ad24592.roa (raw, json) Hash identifier: dFyi+PX3Do+RzWuYc8aknSHHJBXb2C10GEja4o8ItZo= Subject key identifier: 54:49:4E:78:19:40:17:AD:0B:38:E4:24:2A:20:E2:E5:2B:A2:75:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B3F58DD696A3CA782F26D60AC6FA7CA95295281 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa Signing time: Tue 08 Jul 2025 15:40:19 +0000 ROA not before: Tue 08 Jul 2025 15:40:19 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 138.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:58:dd:69:6a:3c:a7:82:f2:6d:60:ac:6f:a7:ca:95:29:52:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:40:19 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=5829b5d531f4c2f0cd11f4f6434cd4975fc4cd08343229232b2a826b48f50496, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:c6:60:52:92:76:d7:22:50:ca:c0:80:63: 72:1c:1b:a3:76:87:2e:4f:6d:15:1c:c3:17:74:e0: b4:b0:05:64:ee:b0:84:56:59:4a:0f:be:7c:e2:f5: 89:d6:23:12:ec:66:12:15:e8:03:e9:0f:00:16:96: 57:04:37:87:b6:f8:9c:9e:6f:98:64:f9:91:64:ae: 10:21:ee:9c:da:f1:f3:88:f4:29:70:74:53:2a:f3: af:28:bf:7a:40:dc:20:79:5f:07:42:70:ae:95:9d: f7:9e:a2:b3:bb:c0:57:bc:06:d1:43:72:ee:05:54: 59:e2:cf:04:b2:e8:a4:53:94:b0:53:fa:cb:ec:83: 18:b8:5e:57:b7:d4:b4:40:64:04:46:31:09:5a:97: 98:92:1a:fa:ac:34:c7:3c:2a:0d:01:56:44:cb:e4: 7c:15:4d:ab:c6:36:2b:58:d2:91:76:b3:3d:59:7f: 8f:40:99:59:66:05:01:d6:83:18:19:4d:f8:3c:0a: 04:cd:9f:b5:ec:90:20:4d:51:4a:1f:35:5c:2a:37: 2a:e5:88:91:bb:95:eb:9b:4f:72:6f:12:a0:83:f4: 09:bc:68:c2:a6:53:f9:f0:eb:68:b1:d6:0a:78:88: 7a:93:6f:0b:79:da:58:e1:b0:04:12:a2:0c:43:35: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:49:4E:78:19:40:17:AD:0B:38:E4:24:2A:20:E2:E5:2B:A2:75:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:2f:b1:8d:5b:63:d5:c5:28:bf:5b:1f:79:ec:80:90:b1:62: 14:c9:b6:bc:84:0a:ef:33:fb:f1:93:c9:09:6f:e9:05:e6:63: d9:5c:b2:a9:9c:40:b8:5c:04:3e:9d:f1:73:c8:ac:d7:6a:93: 07:88:7f:c5:b2:17:d8:f4:a9:dc:5d:24:a8:c0:f6:95:c6:ed: 6f:e6:e8:eb:90:e5:c8:a2:82:ae:dc:3c:6b:27:c3:80:d0:2c: dd:89:29:16:f1:9f:52:3f:2e:a9:44:3c:aa:3c:2e:24:bc:4e: a0:4c:10:df:0b:67:92:84:34:19:58:9d:4c:46:17:48:cd:42: e6:d2:33:e0:b7:96:db:5c:e8:ae:8f:c4:d5:c2:0e:0f:e9:8f: f9:6b:de:48:9e:1f:ce:c5:48:0a:d7:ac:f1:36:cc:7c:8b:f9: af:ae:a5:9b:05:5f:7e:0d:ed:af:df:68:e2:3f:f4:11:39:d3: 23:5c:6e:c9:86:a9:93:35:59:f8:f7:3f:9b:4b:20:c3:1d:21: f0:c7:f7:36:5f:d7:01:4e:f1:a0:74:a2:a9:7c:10:f8:d9:11: 06:60:80:4e:f6:27:de:44:f4:bf:44:eb:27:3d:28:c7:34:fc: 87:62:e4:fb:c5:8e:bc:ca:0f:89:65:98:c9:c0:0a:f7:b2:b5: 00:dc:ab:29 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKz9Y3WlqPKeC8m1grG+nypUpUoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU0MDE5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODI5YjVkNTMxZjRjMmYwY2QxMWY0ZjY0MzRjZDQ5NzVm YzRjZDA4MzQzMjI5MjMyYjJhODI2YjQ4ZjUwNDk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGU8ZgUpJ21yJQysCAY3IcG6N2hy5PbRUcwxd04LSwBWTu sIRWWUoPvnzi9YnWIxLsZhIV6APpDwAWllcEN4e2+Jyeb5hk+ZFkrhAh7pza8fOI 9ClwdFMq868ov3pA3CB5XwdCcK6VnfeeorO7wFe8BtFDcu4FVFnizwSy6KRTlLBT +svsgxi4Xle31LRAZARGMQlal5iSGvqsNMc8Kg0BVkTL5HwVTavGNitY0pF2sz1Z f49AmVlmBQHWgxgZTfg8CgTNn7XskCBNUUofNVwqNyrliJG7leubT3JvEqCD9Am8 aMKmU/nw62ix1gp4iHqTbwt52ljhsAQSogxDNRx7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVElOeBlAF60LOOQkKiDi5SuidbkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMWEwOGJhLTA3ZDQtNDU0Zi1iYjU4LWIwNTAzYWQyNDU5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCKIjANBgkqhkiG9w0BAQsFAAOCAQEAnS+xjVtj1cUov1sfeeyAkLFiFMm2 vIQK7zP78ZPJCW/pBeZj2VyyqZxAuFwEPp3xc8is12qTB4h/xbIX2PSp3F0kqMD2 lcbtb+bo65DlyKKCrtw8ayfDgNAs3YkpFvGfUj8uqUQ8qjwuJLxOoEwQ3wtnkoQ0 GVidTEYXSM1C5tIz4LeW21zoro/E1cIOD+mP+WveSJ4fzsVICtes8TbMfIv5r66l mwVffg3tr99o4j/0ETnTI1xuyYapkzVZ+Pc/m0sgwx0h8Mf3Nl/XAU7xoHSiqXwQ +NkRBmCATvYn3kT0v0TrJz0oxzT8h2Lk+8WOvMoPiWWYycAK97K1ANyrKQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:43:00 2025 by rpki-client