$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa File: 0deeae0b-5842-4da2-9a82-9e71130af856.roa (raw, json) Hash identifier: cg2n5eXLGDINrGv8t6MFPbkWwioqObW2IDUcr8sJts4= Subject key identifier: E7:37:72:CE:7C:B0:E8:A1:0B:2E:ED:E1:2C:C1:51:EA:67:6C:AA:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02638FA6E1374B619D9B8895C59AAFAEE3FA5D12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa Signing time: Fri 08 Aug 2025 00:11:33 +0000 ROA not before: Fri 08 Aug 2025 00:11:33 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.30.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:63:8f:a6:e1:37:4b:61:9d:9b:88:95:c5:9a:af:ae:e3:fa:5d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:33 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=8bc3104df3b4305beef533f19bef7b4d0adee50676c8cc43e681d011ff03f667, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:c6:60:e9:95:a7:4d:1e:d6:f4:f8:27:a8: c2:80:39:a9:32:fb:84:e9:86:63:cd:f4:48:24:c8: 0f:ea:c5:1e:ee:42:00:01:38:3a:fa:03:4a:29:8b: 05:b6:66:76:86:f7:66:8d:ac:9a:56:cd:92:01:b1: 81:e1:99:1f:13:84:d2:d7:d4:3a:3c:6e:fc:74:82: 34:d3:ce:be:fe:6e:eb:61:87:70:d0:84:3e:63:82: 9e:ba:70:58:ac:7b:a7:88:1f:7e:09:8c:99:a8:72: 73:5f:7c:33:47:d8:2f:8f:36:cb:37:1a:0c:ef:1f: 87:e3:b2:32:f8:e1:10:a7:1f:34:dd:06:e8:7c:78: ea:79:0d:73:95:4c:35:34:a9:8d:c1:19:94:d1:66: 27:d1:6c:6b:7a:4f:c9:57:46:5d:4d:f9:17:00:15: 57:e2:7a:18:57:c2:05:01:08:7b:01:5b:df:68:e7: 8b:95:d2:95:09:1e:41:d8:fd:48:49:b8:47:9b:90: 63:f3:b4:6c:13:dd:bd:21:53:9b:ac:b3:17:b6:0d: 69:85:a5:f9:62:9f:3c:34:3f:7c:2d:53:d5:b6:35: 95:1b:ae:c9:3a:2f:7a:a2:41:27:0e:98:84:a2:fa: de:21:22:ac:2a:76:97:98:12:2e:f5:75:88:3a:d7: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:72:CE:7C:B0:E8:A1:0B:2E:ED:E1:2C:C1:51:EA:67:6C:AA:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.30.0.0/15 Signature Algorithm: sha256WithRSAEncryption 97:71:8b:1f:0e:f8:61:b5:05:7f:08:90:bc:f9:63:b6:f9:2d: 5d:58:f2:2d:66:4d:95:ce:50:9a:24:6e:2c:54:e2:c3:97:ec: b3:b0:67:98:79:ad:81:cf:e1:6f:e2:e2:d2:d5:11:a4:84:92: 53:89:d6:27:f4:3b:70:3d:e1:b0:4e:e8:6f:bf:d4:8d:a6:ff: 41:8d:8f:28:98:a9:03:36:01:84:f2:cf:71:50:ae:10:af:8e: f1:0f:58:60:c0:c8:3d:ab:fc:2f:e2:79:ac:dc:21:3b:6c:b3: 66:9d:cc:b2:5e:20:a5:99:a1:44:b4:7e:02:f7:7a:91:39:4d: eb:48:42:5a:89:7a:cc:6c:a2:61:6d:61:e3:dc:fe:2f:db:95: db:e9:a5:c4:46:95:bf:13:b3:b2:e2:d8:a4:9f:c6:74:e8:a6: 45:55:04:06:a8:0c:34:ef:4d:5c:d2:23:6b:df:02:27:60:3c: 48:d7:05:d5:0d:53:4e:6e:a3:1a:bb:d6:09:9a:e8:08:d1:7a: 9c:68:94:f0:1f:5d:79:dc:0c:05:03:ee:13:d6:42:ef:6e:58: 2e:1d:ce:7a:96:ce:bf:f2:ee:ed:89:9a:d6:2d:dd:cc:56:4f: 7a:9b:58:26:c0:a6:11:0f:66:b5:63:43:91:2b:2b:ad:52:47: ff:c6:ab:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAmOPpuE3S2Gdm4iVxZqvruP6XRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMTMzWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmMzMTA0ZGYzYjQzMDViZWVmNTMzZjE5YmVmN2I0ZDBh ZGVlNTA2NzZjOGNjNDNlNjgxZDAxMWZmMDNmNjY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9aMZg6ZWnTR7W9PgnqMKAOaky+4TphmPN9EgkyA/qxR7u QgABODr6A0opiwW2ZnaG92aNrJpWzZIBsYHhmR8ThNLX1Do8bvx0gjTTzr7+buth h3DQhD5jgp66cFise6eIH34JjJmocnNffDNH2C+PNss3GgzvH4fjsjL44RCnHzTd Buh8eOp5DXOVTDU0qY3BGZTRZifRbGt6T8lXRl1N+RcAFVfiehhXwgUBCHsBW99o 54uV0pUJHkHY/UhJuEebkGPztGwT3b0hU5ussxe2DWmFpflinzw0P3wtU9W2NZUb rsk6L3qiQScOmISi+t4hIqwqdpeYEi71dYg612lfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5zdyznyw6KELLu3hLMFR6mdsqlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkZWVhZTBiLTU4NDItNGRhMi05YTgyLTllNzExMzBhZjg1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjHjANBgkqhkiG9w0BAQsFAAOCAQEAl3GLHw74YbUFfwiQvPljtvktXVjy LWZNlc5QmiRuLFTiw5fss7BnmHmtgc/hb+Li0tURpISSU4nWJ/Q7cD3hsE7ob7/U jab/QY2PKJipAzYBhPLPcVCuEK+O8Q9YYMDIPav8L+J5rNwhO2yzZp3Msl4gpZmh RLR+Avd6kTlN60hCWol6zGyiYW1h49z+L9uV2+mlxEaVvxOzsuLYpJ/GdOimRVUE BqgMNO9NXNIja98CJ2A8SNcF1Q1TTm6jGrvWCZroCNF6nGiU8B9dedwMBQPuE9ZC 725YLh3OepbOv/Lu7Yma1i3dzFZPeptYJsCmEQ9mtWNDkSsrrVJH/8ar8w== -----END CERTIFICATE-----Generated at Sat Aug 9 01:17:55 2025 by rpki-client