$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa File: 0f453c42-9e01-4343-9d00-659e79e057bb.roa (raw, json) Hash identifier: VAt+gxR7hb7UFY14q2MfUZlvNC/51pGVPmAF+6d696M= Subject key identifier: 88:88:DD:47:13:00:4F:2D:E1:BF:00:F7:4A:7A:E7:D8:67:20:36:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C9146A7126F710FD5916269719EE7F55D62CFDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa Signing time: Fri 25 Jul 2025 00:20:12 +0000 ROA not before: Fri 25 Jul 2025 00:20:12 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.201.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:91:46:a7:12:6f:71:0f:d5:91:62:69:71:9e:e7:f5:5d:62:cf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:20:12 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=c50e03df69d395eb72e831386dd55246ee1ef7ab8295a728c92d46caa5b1185b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:e4:19:c7:91:a9:8c:9c:ed:7e:d0:b8:07: 3c:b9:77:f1:c3:b5:01:42:e8:a2:5f:83:ad:51:ac: ba:6e:57:6f:8a:7f:a3:a9:75:2e:ae:15:1f:5e:3c: 85:f6:e5:ce:60:01:80:f4:98:56:03:30:a7:74:50: c4:6c:cb:f0:84:b5:48:72:a3:31:02:28:aa:5f:ca: 4c:ff:c4:a9:6e:f7:46:78:d0:44:3c:4b:bd:bf:a2: a1:80:78:07:68:23:2b:ee:30:57:70:23:3b:2b:9a: 2e:35:7d:bc:a3:a9:47:6c:7f:7a:64:7a:9d:68:9f: 17:9a:aa:6e:07:ca:b5:48:c7:7a:f2:27:46:59:15: 0f:c4:80:1b:e2:b4:33:5f:ae:03:f0:a1:e2:7c:cf: 29:12:4e:c2:5a:0c:f7:3f:da:d1:c6:02:81:a8:44: 8c:18:45:1b:e3:9b:06:30:d1:2a:6d:23:40:a5:e8: d3:22:94:23:53:7e:2d:80:01:03:b7:2c:80:4e:8e: 9e:11:3b:c8:ac:e2:fa:54:de:37:c6:33:6b:60:6f: 43:71:4f:0b:31:7b:73:93:bf:63:63:71:a8:da:fd: e6:28:e0:7f:3f:db:38:c3:d7:0d:f3:82:77:57:e6: b1:60:3b:12:b7:ea:f9:fc:31:2e:de:a6:53:33:e1: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:DD:47:13:00:4F:2D:E1:BF:00:F7:4A:7A:E7:D8:67:20:36:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.201.0.0/19 Signature Algorithm: sha256WithRSAEncryption 60:bb:71:ef:13:c8:3e:b4:90:5a:63:c5:6d:7d:28:9c:21:aa: a4:47:36:74:82:5c:25:a1:cb:cb:05:d1:0d:68:34:e1:54:09: 77:64:7a:9e:a1:4f:44:4b:d3:c2:ef:d6:d8:73:4b:8c:5b:08: ad:b7:cb:b5:98:cc:6c:a4:b8:7f:88:9a:8b:db:fe:72:4b:92: c6:d8:4e:a0:9e:2a:1a:51:72:43:84:c3:41:df:76:4f:a4:03: b0:05:9b:82:78:4a:18:1a:a5:d1:e8:bf:f5:91:a5:a2:a9:76: e8:aa:26:af:e3:aa:28:3d:ff:59:f3:64:6d:ea:d5:1c:9a:5c: 61:f7:84:30:19:a8:19:d1:8b:6b:14:e5:15:9d:35:60:39:af: d6:34:0f:e5:36:ac:1f:8a:17:9d:08:84:1a:1c:c5:25:c9:ac: 8d:63:49:48:01:4d:ab:45:e9:25:68:c9:c4:13:80:b6:b2:b3: c9:27:1f:dd:43:0e:21:c3:e7:09:f0:74:83:e7:18:27:39:54: 66:af:ec:b9:7e:08:2e:5b:1c:91:4f:86:59:7b:00:ad:f5:c9: cc:b4:54:ae:9c:08:f7:1b:07:43:7e:e0:40:cf:c0:84:b1:5d: 2d:74:60:eb:f7:36:a4:b1:4d:03:8e:ec:40:c7:8b:ec:15:be: 2b:59:43:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDJFGpxJvcQ/VkWJpcZ7n9V1iz9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAyMDEyWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTBlMDNkZjY5ZDM5NWViNzJlODMxMzg2ZGQ1NTI0NmVl MWVmN2FiODI5NWE3MjhjOTJkNDZjYWE1YjExODViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGBOQZx5GpjJztftC4Bzy5d/HDtQFC6KJfg61RrLpuV2+K f6OpdS6uFR9ePIX25c5gAYD0mFYDMKd0UMRsy/CEtUhyozECKKpfykz/xKlu90Z4 0EQ8S72/oqGAeAdoIyvuMFdwIzsrmi41fbyjqUdsf3pkep1onxeaqm4HyrVIx3ry J0ZZFQ/EgBvitDNfrgPwoeJ8zykSTsJaDPc/2tHGAoGoRIwYRRvjmwYw0SptI0Cl 6NMilCNTfi2AAQO3LIBOjp4RO8is4vpU3jfGM2tgb0NxTwsxe3OTv2Njcaja/eYo 4H8/2zjD1w3zgndX5rFgOxK36vn8MS7eplMz4QcRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiIjdRxMATy3hvwD3Snrn2GcgNiEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmNDUzYzQyLTllMDEtNDM0My05ZDAwLTY1OWU3OWUwNTdiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAyQAwDQYJKoZIhvcNAQELBQADggEBAGC7ce8TyD60kFpjxW19KJwhqqRH NnSCXCWhy8sF0Q1oNOFUCXdkep6hT0RL08Lv1thzS4xbCK23y7WYzGykuH+Imovb /nJLksbYTqCeKhpRckOEw0Hfdk+kA7AFm4J4ShgapdHov/WRpaKpduiqJq/jqig9 /1nzZG3q1RyaXGH3hDAZqBnRi2sU5RWdNWA5r9Y0D+U2rB+KF50IhBocxSXJrI1j SUgBTatF6SVoycQTgLays8knH91DDiHD5wnwdIPnGCc5VGav7Ll+CC5bHJFPhll7 AK31ycy0VK6cCPcbB0N+4EDPwISxXS10YOv3NqSxTQOO7EDHi+wVvitZQ/Y= -----END CERTIFICATE-----Generated at Sat Aug 9 10:38:13 2025 by rpki-client