$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa File: 2650d932-359e-462d-a188-11b8c7779af6.roa (raw, json) Hash identifier: OBGGN9r8IOM3Bc+gyMSfKvaoPX1tStSwxbnWAFpyPoA= Subject key identifier: D4:09:21:14:1F:24:85:E2:FD:B7:9C:30:93:A9:60:03:CB:3F:81:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E3888C24A06F59377D2DBE6E8E3B58B70A33DE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa Signing time: Fri 11 Jul 2025 00:50:24 +0000 ROA not before: Fri 11 Jul 2025 00:50:24 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 79.73.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:38:88:c2:4a:06:f5:93:77:d2:db:e6:e8:e3:b5:8b:70:a3:3d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:50:24 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=8d5c9c219d2f0ed78da056cb9a4f462542511d75773816f05175f8f119efe251, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:f6:71:3b:f1:89:ac:33:57:70:d5:e5:b1: 13:5c:4b:ef:18:ac:b0:36:29:85:a4:1a:81:cf:e8: 27:8b:a5:16:e1:68:8f:4f:26:a7:a3:77:fb:d6:85: 9a:8e:40:78:32:be:c1:66:f1:11:4e:61:9e:a4:93: 16:e9:91:87:87:1a:12:45:2f:d5:58:49:c7:a7:de: c3:be:13:b1:ea:ff:c0:d6:24:2d:1a:9a:3c:69:6e: a8:64:fa:5e:2d:6e:71:1a:94:82:39:fd:8b:2e:5d: 45:55:52:bd:ab:80:e5:e2:e4:22:9b:ee:bb:96:ad: 23:6c:dd:65:51:c6:b6:be:b7:d6:eb:2c:ba:f7:0e: cd:5e:0f:e6:f6:28:d7:f8:1f:cb:28:47:c7:95:bd: 55:14:75:7d:7d:ac:d5:3f:cf:e0:15:d6:43:ce:29: 94:e5:d1:89:7f:d9:2c:4c:64:85:0d:c8:1d:21:ba: 9f:27:c0:c8:3c:a9:f5:f8:24:f0:38:07:b4:5a:84: 4d:fa:0b:49:10:b5:f0:11:c7:29:49:09:ae:65:62: 4b:d7:56:64:6e:8d:ba:90:90:6e:b1:d5:19:f5:5b: 50:6d:ef:f0:73:ae:7f:e8:63:3b:4e:be:4e:91:a2: e0:8a:ee:17:0c:32:ee:68:96:42:31:91:80:6e:1d: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:21:14:1F:24:85:E2:FD:B7:9C:30:93:A9:60:03:CB:3F:81:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.73.64.0/18 Signature Algorithm: sha256WithRSAEncryption 01:4a:9e:73:ac:4e:36:ad:d8:4b:d2:f8:09:7a:33:8c:8b:52: 89:d7:aa:56:ef:fd:1e:dd:c5:ae:a0:5a:c6:04:ac:78:20:2b: 78:96:e3:14:9f:ba:7c:77:b5:2f:8d:2e:68:98:af:3a:57:4e: 2a:02:d2:74:cd:d7:5c:b3:74:7e:7a:ad:bb:9d:0c:ba:78:86: ad:1b:eb:2f:e4:f5:9d:f8:ef:44:59:39:ed:ea:d3:2b:94:2f: 98:ec:49:2f:a6:3d:09:2c:c6:5d:f2:e9:72:f7:7b:d2:a7:16: ae:8b:56:f8:ad:5f:2b:73:ff:99:22:0c:f3:bd:34:7e:ce:8f: 25:1c:da:64:d0:25:47:1c:69:c9:a4:70:25:cb:1b:c0:94:b5: 86:88:50:92:12:7e:bb:83:34:3b:28:c4:db:80:91:f7:fd:1a: ac:04:7e:e7:f8:08:cb:a2:6f:79:43:d1:c4:de:01:f6:ca:ed: f7:48:02:3f:93:4b:f3:c2:0b:e1:d8:06:b1:d0:b8:09:b5:02: 6e:42:71:b8:60:c4:9a:00:c9:79:20:4d:68:0f:82:f0:5e:3e: 51:e4:f2:a4:1b:8c:e8:17:7a:0e:2e:be:59:3b:31:4c:25:fe: 67:31:92:7c:85:f8:f9:cb:b5:0a:f8:88:c3:97:e6:d9:45:e0: c2:e1:ea:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTjiIwkoG9ZN30tvm6OO1i3CjPegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA1MDI0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDVjOWMyMTlkMmYwZWQ3OGRhMDU2Y2I5YTRmNDYyNTQy NTExZDc1NzczODE2ZjA1MTc1ZjhmMTE5ZWZlMjUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDALfZxO/GJrDNXcNXlsRNcS+8YrLA2KYWkGoHP6CeLpRbh aI9PJqejd/vWhZqOQHgyvsFm8RFOYZ6kkxbpkYeHGhJFL9VYScen3sO+E7Hq/8DW JC0amjxpbqhk+l4tbnEalII5/YsuXUVVUr2rgOXi5CKb7ruWrSNs3WVRxra+t9br LLr3Ds1eD+b2KNf4H8soR8eVvVUUdX19rNU/z+AV1kPOKZTl0Yl/2SxMZIUNyB0h up8nwMg8qfX4JPA4B7RahE36C0kQtfARxylJCa5lYkvXVmRujbqQkG6x1Rn1W1Bt 7/Bzrn/oYztOvk6RouCK7hcMMu5olkIxkYBuHaqnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1AkhFB8kheL9t5wwk6lgA8s/gTgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2NTBkOTMyLTM1OWUtNDYyZC1hMTg4LTExYjhjNzc3OWFmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZPSUAwDQYJKoZIhvcNAQELBQADggEBAAFKnnOsTjat2EvS+Al6M4yLUonX qlbv/R7dxa6gWsYErHggK3iW4xSfunx3tS+NLmiYrzpXTioC0nTN11yzdH56rbud DLp4hq0b6y/k9Z3470RZOe3q0yuUL5jsSS+mPQksxl3y6XL3e9KnFq6LVvitXytz /5kiDPO9NH7OjyUc2mTQJUccacmkcCXLG8CUtYaIUJISfruDNDsoxNuAkff9GqwE fuf4CMuib3lD0cTeAfbK7fdIAj+TS/PCC+HYBrHQuAm1Am5CcbhgxJoAyXkgTWgP gvBePlHk8qQbjOgXeg4uvlk7MUwl/mcxknyF+PnLtQr4iMOX5tlF4MLh6gc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:14:09 2025 by rpki-client