$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa File: f98c6682-15ea-4f71-9c0e-97127590dea1.roa (raw, json) Hash identifier: /6GbMMZEOR1lOc+eLX4zsop5PsrsqBncLb263r9ljow= Subject key identifier: DA:AA:06:D7:90:B8:70:5D:3D:09:42:71:DB:F3:CD:1F:0C:D3:4F:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73ABEF075A214A37284EB24AB14D2D9878AFDCDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa Signing time: Fri 11 Jul 2025 00:41:23 +0000 ROA not before: Fri 11 Jul 2025 00:41:23 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.176.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ab:ef:07:5a:21:4a:37:28:4e:b2:4a:b1:4d:2d:98:78:af:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:41:23 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=4a9a011006b3b1e970256b2610ec4f747cd69bbb1888f96c977c9b5af0350673, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:d9:0b:85:b9:9b:9e:20:35:82:03:fd:79: 77:90:88:22:71:4b:2a:2d:80:e9:b4:88:e4:c8:c9: 08:88:af:39:01:e4:13:f5:fc:67:60:7b:28:6f:8f: d8:72:72:87:b1:07:87:fc:ec:2d:3f:bc:8e:1d:2f: a6:86:3c:15:99:02:5c:be:57:c0:75:db:0d:ae:73: ce:a1:1a:b0:ba:48:66:cd:40:88:f5:12:d5:2c:96: 5a:f8:e8:7c:67:79:25:99:be:b6:09:90:d4:00:d3: 09:c0:5d:e8:f7:19:d5:fc:89:84:6f:2d:d8:36:22: 21:c2:8f:48:95:85:dd:7a:3c:62:84:25:47:8f:00: 92:1a:2f:e1:eb:be:c5:73:5a:a6:12:2b:af:f0:8c: 5e:e8:7d:a3:55:31:ab:88:c3:5c:ad:24:7d:a9:9c: 52:d5:6f:2a:6c:65:2f:91:ad:a6:44:da:ef:7c:18: 68:9c:8c:17:38:fc:08:fd:5a:c2:da:8e:bd:31:7d: 06:f3:de:a4:b5:b7:5f:8b:57:45:6e:13:f8:8c:29: 79:de:d1:db:57:7c:68:0d:0a:86:14:0f:fb:22:57: 93:c9:63:c6:23:60:c1:b3:2e:ba:86:56:34:64:51: 56:14:e1:5d:b9:d6:4f:9d:ef:55:5c:8b:f9:d8:3f: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:06:D7:90:B8:70:5D:3D:09:42:71:DB:F3:CD:1F:0C:D3:4F:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.176.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8b:86:2e:37:7a:4b:8a:6e:3b:5a:b0:8d:ad:27:03:4b:93:a0: c4:1f:67:28:b3:6f:3f:6a:7c:e5:c6:c3:11:8c:53:2b:70:ba: 25:a1:7e:3f:60:d1:0a:33:ce:00:6d:90:c8:0b:e3:7c:33:ca: 8a:bc:b9:e8:78:ed:29:19:d9:f7:f7:93:dd:40:b1:d4:c9:35: ba:cb:89:f6:0f:d1:a0:43:54:ae:41:cb:99:69:d1:59:18:df: 30:b3:7c:fb:a3:b4:02:3d:18:44:e6:c6:0c:25:16:57:a8:5f: f7:ca:a1:f5:f5:be:46:ec:ce:4e:8c:4d:1b:a3:57:2f:3c:78: 73:8e:00:10:11:32:55:d4:8f:07:24:e2:1a:93:ed:bb:14:bf: 4a:fc:b2:a3:b6:32:cc:5a:1f:66:b5:18:ac:97:da:9c:c9:78: f5:89:27:95:71:50:99:4e:ef:ca:3a:f4:8d:df:55:85:cc:93: 68:5f:44:e1:0b:69:46:bc:b8:42:4c:fe:69:26:f7:bf:94:8b: e8:13:81:34:dd:6d:00:a6:8b:c0:e9:1a:e4:c7:55:b9:61:50: 8d:c7:d7:01:83:a9:82:34:a4:30:52:90:95:36:de:b1:82:2d: d1:de:0f:67:53:44:d5:4e:69:b2:d2:3f:20:41:9a:2d:09:7c: fd:81:77:63 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUc6vvB1ohSjcoTrJKsU0tmHiv3NwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MTIzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTlhMDExMDA2YjNiMWU5NzAyNTZiMjYxMGVjNGY3NDdj ZDY5YmJiMTg4OGY5NmM5NzdjOWI1YWYwMzUwNjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt7dkLhbmbniA1ggP9eXeQiCJxSyotgOm0iOTIyQiIrzkB 5BP1/Gdgeyhvj9hycoexB4f87C0/vI4dL6aGPBWZAly+V8B12w2uc86hGrC6SGbN QIj1EtUsllr46HxneSWZvrYJkNQA0wnAXej3GdX8iYRvLdg2IiHCj0iVhd16PGKE JUePAJIaL+HrvsVzWqYSK6/wjF7ofaNVMauIw1ytJH2pnFLVbypsZS+RraZE2u98 GGicjBc4/Aj9WsLajr0xfQbz3qS1t1+LV0VuE/iMKXne0dtXfGgNCoYUD/siV5PJ Y8YjYMGzLrqGVjRkUVYU4V251k+d71Vci/nYP/AzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2qoG15C4cF09CUJx2/PNHwzTT0YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5OGM2NjgyLTE1ZWEtNGY3MS05YzBlLTk3MTI3NTkwZGVhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI/sDANBgkqhkiG9w0BAQsFAAOCAQEAi4YuN3pLim47WrCNrScDS5OgxB9n KLNvP2p85cbDEYxTK3C6JaF+P2DRCjPOAG2QyAvjfDPKiry56HjtKRnZ9/eT3UCx 1Mk1usuJ9g/RoENUrkHLmWnRWRjfMLN8+6O0Aj0YRObGDCUWV6hf98qh9fW+RuzO ToxNG6NXLzx4c44AEBEyVdSPByTiGpPtuxS/Svyyo7YyzFofZrUYrJfanMl49Ykn lXFQmU7vyjr0jd9VhcyTaF9E4QtpRry4Qkz+aSb3v5SL6BOBNN1tAKaLwOka5MdV uWFQjcfXAYOpgjSkMFKQlTbesYIt0d4PZ1NE1U5pstI/IEGaLQl8/YF3Yw== -----END CERTIFICATE-----Generated at Thu Jul 31 01:10:45 2025 by rpki-client