$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa File: 040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa (raw, json) Hash identifier: fcFlmDmAlyISt9YMhnZNOsixeiGI1O/Npur7dd4guok= Subject key identifier: 78:D3:F1:BB:B2:C6:DE:59:6A:77:4D:25:63:22:FF:5D:BD:6B:8E:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66D3FEFC753C5AB0472A56D32C4D50ED9D1A0FA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa Signing time: Mon 28 Jul 2025 15:21:01 +0000 ROA not before: Mon 28 Jul 2025 15:21:01 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 111.64.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d3:fe:fc:75:3c:5a:b0:47:2a:56:d3:2c:4d:50:ed:9d:1a:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 15:21:01 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=f12f0582a9f7568163222785104890b567621041edd6bf6f741184e388a33844, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:d8:da:86:c8:0d:bb:7c:21:a8:11:ba:f5: 48:04:12:b1:35:eb:28:f9:9e:1c:ad:85:a4:d7:47: dc:4b:d6:da:64:27:4e:9f:89:59:02:b3:b8:03:db: 72:3f:8c:55:cd:68:7e:cf:0d:b0:89:49:a6:81:aa: 33:f0:81:7b:de:5e:12:27:64:24:c8:ba:a8:42:bd: ea:c2:4f:1a:08:eb:66:03:60:18:c5:12:e7:6f:3e: 62:e8:c0:2f:1d:d9:59:a0:41:84:92:f9:a0:b7:43: ec:b6:7d:50:06:ba:02:a8:78:0a:22:28:53:4d:41: a0:4f:e9:08:b5:c5:1b:64:d9:80:aa:7d:6a:e2:97: 23:6f:50:a3:d3:4a:79:9c:5d:36:33:1c:2c:c1:da: cc:3d:a1:2d:79:4f:1e:c7:f0:17:64:a0:6c:55:a1: e3:6e:c3:06:54:f8:fe:9a:2b:3c:4e:d2:36:11:fd: 48:e6:9b:1b:66:eb:02:47:f3:7e:95:79:20:ba:ed: fa:91:13:ea:70:a3:97:01:ce:a8:79:7d:b3:d9:78: 37:dc:cf:2f:be:8a:86:2c:ad:d0:12:0a:b7:b3:a4: 3d:e2:78:10:66:25:38:61:a9:d1:89:39:37:b8:90: f0:51:1d:79:00:07:6e:89:e5:dc:5c:da:f9:34:de: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:F1:BB:B2:C6:DE:59:6A:77:4D:25:63:22:FF:5D:BD:6B:8E:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.64.0.0/18 Signature Algorithm: sha256WithRSAEncryption 93:ae:0f:5a:a7:b2:5b:28:f5:19:f0:34:02:17:ee:99:01:aa: 51:e5:17:d6:ec:d2:17:8e:13:ae:ec:a6:97:76:af:3f:65:2e: 98:09:aa:79:b0:d8:b4:80:37:f5:21:86:0a:42:ff:85:91:be: 07:3c:0b:c1:32:8b:74:bc:e5:db:1e:4e:a0:5e:2b:af:ba:89: a9:ab:50:64:6a:af:b1:f5:87:d1:5b:dd:bb:ee:90:c9:3d:12: 3c:0d:69:26:3c:f7:9b:94:5b:f1:0f:96:5e:93:68:25:c2:8b: 49:46:73:5c:39:f9:53:84:dd:86:ab:be:62:42:82:50:a3:55: 9d:bd:e5:60:26:1a:fe:dc:9b:98:0b:1a:5a:ac:99:f2:89:40: 94:b7:55:1d:3c:60:12:84:68:0c:a1:64:96:6b:c9:33:a1:9f: e8:36:36:f5:3a:a7:5d:7a:3e:01:6c:d9:71:62:3f:83:79:96: 8c:23:d3:a7:eb:e0:82:7c:20:cb:8c:3b:1e:f6:20:df:86:6f: 95:d4:ad:21:dc:dc:04:a0:c9:f5:4b:bf:36:65:f2:5a:8a:19: c4:5c:83:3b:7e:aa:46:e9:e9:1a:cf:1b:3c:e7:fb:ba:c6:eb: 79:fc:90:57:6a:f3:72:93:6f:52:fc:ad:d6:bc:f7:28:a6:ae: ed:99:da:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZtP+/HU8WrBHKlbTLE1Q7Z0aD6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI4MTUyMTAxWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTJmMDU4MmE5Zjc1NjgxNjMyMjI3ODUxMDQ4OTBiNTY3 NjIxMDQxZWRkNmJmNmY3NDExODRlMzg4YTMzODQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCBNjahsgNu3whqBG69UgEErE16yj5nhythaTXR9xL1tpk J06fiVkCs7gD23I/jFXNaH7PDbCJSaaBqjPwgXveXhInZCTIuqhCverCTxoI62YD YBjFEudvPmLowC8d2VmgQYSS+aC3Q+y2fVAGugKoeAoiKFNNQaBP6Qi1xRtk2YCq fWrilyNvUKPTSnmcXTYzHCzB2sw9oS15Tx7H8BdkoGxVoeNuwwZU+P6aKzxO0jYR /Ujmmxtm6wJH836VeSC67fqRE+pwo5cBzqh5fbPZeDfczy++ioYsrdASCrezpD3i eBBmJThhqdGJOTe4kPBRHXkAB26J5dxc2vk03oCzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeNPxu7LG3llqd00lYyL/Xb1rjqgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MGJjYmMxLTgwYjYtNDczNi05ZWQxLTJhMWU3Y2YyMTY0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZvQAAwDQYJKoZIhvcNAQELBQADggEBAJOuD1qnslso9RnwNAIX7pkBqlHl F9bs0heOE67sppd2rz9lLpgJqnmw2LSAN/UhhgpC/4WRvgc8C8Eyi3S85dseTqBe K6+6iamrUGRqr7H1h9Fb3bvukMk9EjwNaSY895uUW/EPll6TaCXCi0lGc1w5+VOE 3YarvmJCglCjVZ295WAmGv7cm5gLGlqsmfKJQJS3VR08YBKEaAyhZJZryTOhn+g2 NvU6p116PgFs2XFiP4N5lowj06fr4IJ8IMuMOx72IN+Gb5XUrSHc3ASgyfVLvzZl 8lqKGcRcgzt+qkbp6RrPGzzn+7rG63n8kFdq83KTb1L8rda89yimru2Z2rY= -----END CERTIFICATE-----Generated at Wed Aug 6 13:04:15 2025 by rpki-client