$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa File: 1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa (raw, json) Hash identifier: /gl/38XvLmNtUcLS5/ikvCGHU4hgEE50kM7Pz/qxQwE= Subject key identifier: 0F:96:B7:DD:47:E1:2E:20:3D:76:4C:DB:4D:3B:1B:43:C3:0E:AF:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5659707C5931C333D018E8AA2564BDF1405CB66D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa Signing time: Mon 04 Aug 2025 17:31:53 +0000 ROA not before: Mon 04 Aug 2025 17:31:53 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.192.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:70:7c:59:31:c3:33:d0:18:e8:aa:25:64:bd:f1:40:5c:b6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:53 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=84be6ba72f74f9e3b689786d387e65d423462fccab1af25dd3abf75447e9adf6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:41:52:15:dc:d9:e3:9d:8b:33:69:e0:0b: 5e:7f:30:01:29:5e:76:80:b8:2d:1f:78:4e:ee:64: 41:98:d9:b3:bd:95:28:4c:fb:a1:8c:31:71:1a:9a: 24:c2:e4:27:65:b3:27:80:12:85:8d:ec:c9:56:36: 9b:4b:10:1e:fa:f1:1b:1a:0a:71:da:43:2c:b9:fc: 0f:67:98:17:f6:b7:a0:bd:1d:48:10:f4:43:c8:78: 22:28:84:b8:f2:ea:f5:0e:79:8c:e3:5f:fa:e8:a2: 45:c0:85:6f:78:12:d9:f8:ab:57:da:2c:40:29:59: 5f:16:43:fd:2c:22:fe:f6:6e:bf:9d:5d:82:5a:a2: 6b:38:95:07:a5:f0:90:26:be:69:ff:36:19:10:13: 44:e9:35:24:24:25:dd:90:af:fc:0b:e6:95:c6:a9: d3:2c:d7:12:2a:8c:86:92:6f:57:7d:7b:ed:7e:5a: e0:65:50:83:35:62:63:2a:d0:99:0c:24:b8:2c:bb: ed:23:ad:19:c9:6a:bb:dd:a5:04:a3:03:5e:84:a7: 4f:53:b4:ed:67:a6:84:2f:18:7c:3f:54:39:43:cd: d0:cb:91:07:8d:e8:72:0f:6e:74:cb:cc:82:7a:40: fd:3a:2c:86:47:cb:c6:1f:39:ae:ad:a9:c9:4f:7f: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:96:B7:DD:47:E1:2E:20:3D:76:4C:DB:4D:3B:1B:43:C3:0E:AF:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.192.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:fe:df:37:ad:aa:e7:5c:eb:52:1f:27:05:49:9f:79:a6:a1: f8:e0:b0:40:24:da:3f:84:ed:a8:1b:63:98:7f:57:5b:a8:14: 55:d6:70:91:bb:16:99:bb:3c:3d:44:35:e0:a2:09:a7:c6:72: f5:e0:f7:70:97:82:5b:56:78:4b:5d:04:30:25:9b:ee:ee:19: 5b:de:be:6c:91:9c:84:3e:a9:0c:5b:55:28:7a:37:d2:17:97: b8:90:31:c3:fc:0a:a6:27:7c:f8:9e:5e:03:16:7b:01:e1:16: 6a:c1:fe:aa:ec:df:aa:76:79:a4:2b:26:06:07:d6:bb:cb:50: 4d:9f:72:94:9b:e9:a7:89:0c:3f:80:97:27:3b:13:a9:75:e8: d2:dd:e1:c5:5a:65:f3:03:87:3f:0a:1d:8a:71:8f:75:b0:6d: 22:5f:0b:45:fe:3f:69:82:d2:aa:59:20:d2:00:36:71:60:49: 9d:ce:02:4a:da:32:6c:cc:c4:a3:90:ab:0e:30:1f:7e:ba:32: ba:bd:5e:dc:ae:e3:06:67:b9:fa:6f:cc:18:a8:2f:55:da:ec: 87:d1:7f:57:de:28:ef:43:bb:62:d8:19:5d:d4:fa:7e:3e:65: e7:00:84:a0:56:c7:81:b7:15:a7:fe:ff:98:f9:4f:7b:83:e4: 49:06:18:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVllwfFkxwzPQGOiqJWS98UBctm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTUzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGJlNmJhNzJmNzRmOWUzYjY4OTc4NmQzODdlNjVkNDIz NDYyZmNjYWIxYWYyNWRkM2FiZjc1NDQ3ZTlhZGY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj/kFSFdzZ452LM2ngC15/MAEpXnaAuC0feE7uZEGY2bO9 lShM+6GMMXEamiTC5CdlsyeAEoWN7MlWNptLEB768RsaCnHaQyy5/A9nmBf2t6C9 HUgQ9EPIeCIohLjy6vUOeYzjX/rookXAhW94Etn4q1faLEApWV8WQ/0sIv72br+d XYJaoms4lQel8JAmvmn/NhkQE0TpNSQkJd2Qr/wL5pXGqdMs1xIqjIaSb1d9e+1+ WuBlUIM1YmMq0JkMJLgsu+0jrRnJarvdpQSjA16Ep09TtO1npoQvGHw/VDlDzdDL kQeN6HIPbnTLzIJ6QP06LIZHy8YfOa6tqclPf5LpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUD5a33UfhLiA9dkzbTTsbQ8MOr6wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlMTcxY2ExLWI5MzQtNGNiYS1hODFlLWY3YWY5ZmE1MWJmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAowDANBgkqhkiG9w0BAQsFAAOCAQEAAf7fN62q51zrUh8nBUmfeaah+OCw QCTaP4TtqBtjmH9XW6gUVdZwkbsWmbs8PUQ14KIJp8Zy9eD3cJeCW1Z4S10EMCWb 7u4ZW96+bJGchD6pDFtVKHo30heXuJAxw/wKpid8+J5eAxZ7AeEWasH+quzfqnZ5 pCsmBgfWu8tQTZ9ylJvpp4kMP4CXJzsTqXXo0t3hxVpl8wOHPwodinGPdbBtIl8L Rf4/aYLSqlkg0gA2cWBJnc4CStoybMzEo5CrDjAffroyur1e3K7jBme5+m/MGKgv Vdrsh9F/V94o70O7YtgZXdT6fj5l5wCEoFbHgbcVp/7/mPlPe4PkSQYYWg== -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:17 2025 by rpki-client