$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa File: b4696ceb-f833-43c4-af53-9960894ce08d.roa (raw, json) Hash identifier: K4z1o0Y8t9dt95ot0nSkBUEffG6bVdGdpZS2OI5Rf5Q= Subject key identifier: CB:27:03:00:D4:21:8B:A1:DB:CE:69:02:E9:FF:CC:71:2D:6A:DF:61 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2C9253F7B77256BFE34225D8EA9313B80B53B669 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa Signing time: Mon 30 Jun 2025 15:40:25 +0000 ROA not before: Mon 30 Jun 2025 15:40:25 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 205.251.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:92:53:f7:b7:72:56:bf:e3:42:25:d8:ea:93:13:b8:0b:53:b6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 30 15:40:25 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=403ddde09a8bf2407788c05335bf44b8afb7bb5f99a2843c07ff6e440e0e7602, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:be:bb:6d:27:4c:7f:7a:8e:d7:9e:54:eb: d3:0d:ab:bd:e5:fc:b8:f8:30:42:c7:cc:fc:29:6c: bc:e4:39:16:4e:9a:ce:0a:63:1d:e8:32:00:18:68: ba:4a:f4:e3:cd:ab:51:8f:b2:4d:10:2d:f0:09:1c: 54:f7:dd:e4:de:85:75:00:1a:5e:46:25:67:f5:f8: 20:0d:7b:db:32:1f:8e:28:63:9c:e2:e2:96:a3:c3: 23:61:d8:71:27:95:c4:f0:30:ac:b8:ca:2f:32:03: e0:d0:2c:de:a0:ec:19:cf:cf:22:19:3f:67:f7:6f: d4:4a:2d:1d:3b:1c:ea:2a:d0:63:10:e5:fd:b6:06: db:0f:83:ca:2c:fa:6e:93:a7:79:9f:5a:bf:ea:84: 16:16:19:74:4b:5d:27:0d:92:63:03:07:4a:08:01: d2:1b:5c:e7:6a:45:35:12:0f:c3:37:08:d5:6d:41: 5f:a4:e7:a7:d1:9d:38:c7:28:af:3b:0c:79:3f:1f: 82:19:e7:55:42:aa:cf:45:fc:ed:43:0b:38:0b:ab: 61:8e:84:78:90:03:7f:1a:dc:fc:b3:a1:5f:2e:e2: 50:96:11:4b:01:bb:06:ed:48:0a:22:89:67:a8:32: ca:43:bb:1b:e9:7d:90:08:74:eb:27:f2:7e:96:6a: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:03:00:D4:21:8B:A1:DB:CE:69:02:E9:FF:CC:71:2D:6A:DF:61 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.240.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:20:db:0b:c2:c3:95:3c:70:42:0a:e2:97:c5:b4:fe:e2:a7: 6f:32:f0:c2:5b:90:9a:0f:55:96:26:d4:ed:5d:6e:cd:6f:28: 84:2f:af:b4:d5:73:0e:ca:d7:62:e6:38:26:2d:1d:e3:1a:89: ff:8f:2e:c7:80:ea:f4:ce:c3:7d:1b:da:08:19:d3:71:83:32: 83:f0:7d:29:eb:b3:a6:bb:89:a6:08:80:c0:10:d2:3f:4d:36: 8d:54:c9:00:7e:15:d1:0a:b7:c9:56:68:08:a3:9e:86:e5:3f: 85:08:06:a9:a1:76:f2:77:76:03:7c:67:47:87:bc:6c:db:2c: a6:ba:56:6e:c1:56:85:a7:03:e5:84:10:dc:36:05:d4:65:f1: 33:5e:97:7d:10:50:a6:46:af:6f:3c:17:db:ad:94:ef:b6:98: 82:b3:b9:03:21:d7:d0:03:df:59:a3:78:2b:4c:3b:3c:ba:21: 9e:5f:10:e9:21:0f:5c:81:d9:16:88:ab:d0:81:09:4c:dd:c9: 35:2a:74:31:77:80:42:b1:35:2e:b0:bd:90:c3:b7:b4:ee:de: 5f:bb:52:0d:d8:dd:30:a8:de:cf:a7:c9:b2:e4:ce:42:45:40: 1b:72:07:31:3e:bb:ca:2a:33:52:ed:ba:a8:7f:e3:15:e9:c8: b5:bc:f7:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULJJT97dyVr/jQiXY6pMTuAtTtmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNjMwMTU0MDI1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDNkZGRlMDlhOGJmMjQwNzc4OGMwNTMzNWJmNDRiOGFm YjdiYjVmOTlhMjg0M2MwN2ZmNmU0NDBlMGU3NjAyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCXL67bSdMf3qO155U69MNq73l/Lj4MELHzPwpbLzkORZO ms4KYx3oMgAYaLpK9OPNq1GPsk0QLfAJHFT33eTehXUAGl5GJWf1+CANe9syH44o Y5zi4pajwyNh2HEnlcTwMKy4yi8yA+DQLN6g7BnPzyIZP2f3b9RKLR07HOoq0GMQ 5f22BtsPg8os+m6Tp3mfWr/qhBYWGXRLXScNkmMDB0oIAdIbXOdqRTUSD8M3CNVt QV+k56fRnTjHKK87DHk/H4IZ51VCqs9F/O1DCzgLq2GOhHiQA38a3PyzoV8u4lCW EUsBuwbtSAoiiWeoMspDuxvpfZAIdOsn8n6WajXVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyycDANQhi6HbzmkC6f/McS1q32EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I0Njk2Y2ViLWY4MzMtNDNjNC1hZjUzLTk5NjA4OTRjZTA4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALN+/AwDQYJKoZIhvcNAQELBQADggEBAAwg2wvCw5U8cEIK4pfFtP7ip28y 8MJbkJoPVZYm1O1dbs1vKIQvr7TVcw7K12LmOCYtHeMaif+PLseA6vTOw30b2ggZ 03GDMoPwfSnrs6a7iaYIgMAQ0j9NNo1UyQB+FdEKt8lWaAijnoblP4UIBqmhdvJ3 dgN8Z0eHvGzbLKa6Vm7BVoWnA+WEENw2BdRl8TNel30QUKZGr288F9utlO+2mIKz uQMh19AD31mjeCtMOzy6IZ5fEOkhD1yB2RaIq9CBCUzdyTUqdDF3gEKxNS6wvZDD t7Tu3l+7Ug3Y3TCo3s+nybLkzkJFQBtyBzE+u8oqM1Ltuqh/4xXpyLW89+4= -----END CERTIFICATE-----Generated at Mon Jul 21 23:26:20 2025 by rpki-client