$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa File: ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa (raw, json) Hash identifier: mLupqwy4vlPlbFPQNTfspg86HTbmm62g6Xhyd+9D20k= Subject key identifier: 82:AB:CE:A1:83:F3:D8:C5:26:68:D6:0E:AF:C8:43:EC:74:92:BD:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2297BDFD282453F48477D7371E3D98085D509C51 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa Signing time: Fri 18 Jul 2025 00:11:57 +0000 ROA not before: Fri 18 Jul 2025 00:11:57 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.159.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:97:bd:fd:28:24:53:f4:84:77:d7:37:1e:3d:98:08:5d:50:9c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:11:57 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=687e2428e574ca386e2723ea08ad903e523294211ca268c5e33415425f11506f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:dc:2f:7d:5b:6d:1d:2a:03:e8:32:e0:19: e4:87:46:50:0d:62:88:7b:f9:51:58:5f:1e:94:89: 1e:7d:33:75:75:b6:0c:c1:50:fe:b1:97:d2:94:0e: 90:e0:ee:e8:32:f0:db:0a:d6:04:4e:ee:18:12:0f: f0:f6:7e:a0:5f:bf:dd:e9:15:00:c4:d6:b0:79:1a: b1:94:a0:34:55:3b:15:02:6f:4f:0e:9e:93:51:f8: a3:a4:7a:86:9d:41:2f:e9:94:3c:87:79:8b:6f:e8: cc:94:3e:7f:36:7a:c2:80:cb:fd:3c:3d:2a:86:da: 2b:0f:05:24:bc:86:b4:3e:e4:8e:f8:e5:92:c4:b4: 5b:f2:11:c4:eb:4b:3b:30:22:8b:f7:01:78:22:82: 95:46:c6:9f:e1:62:bc:05:9d:5c:66:a7:89:14:25: 67:da:b9:f2:a0:68:db:7a:5b:06:13:2f:9f:cb:e5: 65:1e:62:34:ec:d8:3a:59:c3:95:db:5b:1a:f8:b5: ad:e7:84:1e:1a:76:21:a6:1d:c3:89:ee:e3:8b:aa: 11:26:8d:e2:4d:2c:c2:ed:89:60:1d:f9:da:cf:66: 8a:9a:f8:67:d8:5a:03:33:f3:28:67:b2:bf:b3:e9: c5:20:26:4b:fe:59:05:08:13:90:27:f7:00:3d:f3: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AB:CE:A1:83:F3:D8:C5:26:68:D6:0E:AF:C8:43:EC:74:92:BD:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.159.32.0/19 Signature Algorithm: sha256WithRSAEncryption ae:52:3c:f1:0a:64:b8:36:41:3c:3c:d7:82:61:9b:14:9a:e3: c8:96:17:2e:ca:f8:c2:57:00:09:18:40:c4:e6:17:b4:03:ca: 61:27:fb:a2:17:b2:a2:f1:99:e5:4d:4b:79:21:0c:2d:ae:99: e8:e7:bc:61:c1:c8:e3:e4:fc:bb:ca:28:04:9b:2a:94:47:b4: 3f:3b:d5:b4:32:31:17:f6:1d:a4:52:53:c7:f3:c1:c3:14:a3: 37:19:d0:6b:f0:c3:11:6d:86:a9:dd:b2:4a:ef:9a:39:88:e1: de:4f:a6:7b:00:fa:33:ca:2e:b0:1d:48:da:84:8f:d8:94:94: d5:dc:f1:2d:39:04:b0:54:a7:73:6b:76:4a:56:83:75:81:3b: 81:8b:41:31:22:dd:4e:e3:65:06:52:22:21:61:7a:53:a9:02: ed:3d:ca:dc:46:a5:e9:47:46:af:ce:4c:2f:20:99:fd:a0:51: 8a:09:9f:ac:86:39:c5:7f:2b:0b:b2:32:66:aa:a1:05:60:d4: 0f:cb:c7:ed:66:39:4b:cd:e0:e4:cf:6b:6c:a9:af:05:f3:0d: e4:96:9d:79:1d:a8:10:af:f2:13:dc:38:c9:bc:c1:ce:93:9b: 64:52:f6:52:0d:a7:3e:a9:66:3d:97:22:b1:63:97:dc:d5:ca: 29:92:6b:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIpe9/SgkU/SEd9c3Hj2YCF1QnFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAxMTU3WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODdlMjQyOGU1NzRjYTM4NmUyNzIzZWEwOGFkOTAzZTUy MzI5NDIxMWNhMjY4YzVlMzM0MTU0MjVmMTE1MDZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkldwvfVttHSoD6DLgGeSHRlANYoh7+VFYXx6UiR59M3V1 tgzBUP6xl9KUDpDg7ugy8NsK1gRO7hgSD/D2fqBfv93pFQDE1rB5GrGUoDRVOxUC b08OnpNR+KOkeoadQS/plDyHeYtv6MyUPn82esKAy/08PSqG2isPBSS8hrQ+5I74 5ZLEtFvyEcTrSzswIov3AXgigpVGxp/hYrwFnVxmp4kUJWfaufKgaNt6WwYTL5/L 5WUeYjTs2DpZw5XbWxr4ta3nhB4adiGmHcOJ7uOLqhEmjeJNLMLtiWAd+drPZoqa +GfYWgMz8yhnsr+z6cUgJkv+WQUIE5An9wA9845HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgqvOoYPz2MUmaNYOr8hD7HSSvSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmZGMwYzVhLWU5YjQtNGNkZS04MWU3LTcxMjZhOWJiNGExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRnyAwDQYJKoZIhvcNAQELBQADggEBAK5SPPEKZLg2QTw814JhmxSa48iW Fy7K+MJXAAkYQMTmF7QDymEn+6IXsqLxmeVNS3khDC2umejnvGHByOPk/LvKKASb KpRHtD871bQyMRf2HaRSU8fzwcMUozcZ0GvwwxFthqndskrvmjmI4d5PpnsA+jPK LrAdSNqEj9iUlNXc8S05BLBUp3NrdkpWg3WBO4GLQTEi3U7jZQZSIiFhelOpAu09 ytxGpelHRq/OTC8gmf2gUYoJn6yGOcV/KwuyMmaqoQVg1A/Lx+1mOUvN4OTPa2yp rwXzDeSWnXkdqBCv8hPcOMm8wc6Tm2RS9lINpz6pZj2XIrFjl9zVyimSayI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:10 2025 by rpki-client