$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa File: 22397cac-406e-4c89-85e5-b4a29edd8651.roa (raw, json) Hash identifier: NOR1UsIqNAC8WraqO4ZYO1XSAdjM/sW862f/3hEMdVc= Subject key identifier: 91:51:BC:DF:8F:63:EE:EF:D0:BF:DA:87:95:74:1B:9C:E6:C3:A5:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01661BAF02ECD8947CD36165AEFECDA03EAAF090 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa Signing time: Mon 04 Aug 2025 17:31:20 +0000 ROA not before: Mon 04 Aug 2025 17:31:20 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.25.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:66:1b:af:02:ec:d8:94:7c:d3:61:65:ae:fe:cd:a0:3e:aa:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:20 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d024912618bec28f0a5d127e1c508d34efcb9a1baed86b916a75eecafd21cfa3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:88:b9:fc:84:4b:31:3a:d0:aa:c4:a9:5e: 1a:cb:83:f4:08:c0:e2:67:a2:46:02:9c:41:6e:79: 08:fd:79:0f:ea:b4:b5:be:0a:63:47:fe:da:cf:e4: 0b:48:73:7f:71:03:8e:85:33:56:8c:6b:94:8c:e7: ad:d4:3d:5c:d8:31:67:f1:3e:bd:e0:9d:3f:56:27: 68:41:c6:49:e2:e0:9f:9c:1d:df:3a:3c:32:fd:a3: c7:b0:57:e6:06:c1:30:91:1e:86:e7:a1:31:95:7d: f3:df:27:ae:08:2e:c4:03:94:b1:67:b0:e9:b0:65: c5:ce:25:37:76:50:47:8d:9b:6b:4c:54:24:3e:66: 3e:69:07:68:a0:cc:d1:eb:df:12:c1:6c:50:b3:c9: 0c:0e:23:90:e5:b4:8f:f3:8e:36:80:c1:f9:48:cb: ed:e4:6e:45:35:f1:e3:6e:46:1e:d8:28:d9:e0:e3: 52:c1:c6:3e:e6:d5:41:ed:1a:11:41:d2:32:c8:fe: 02:fe:c7:a9:c9:ee:a3:41:2f:70:3a:97:a6:01:22: e9:aa:85:b4:fa:87:fc:b9:4c:9f:47:05:ae:39:18: af:4b:e5:c7:c6:d8:54:e4:52:a3:62:bd:b5:46:c1: 89:96:d7:ad:6e:ea:07:27:e5:d7:84:e3:12:de:77: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:BC:DF:8F:63:EE:EF:D0:BF:DA:87:95:74:1B:9C:E6:C3:A5:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.15.0/24 Signature Algorithm: sha256WithRSAEncryption 04:61:e1:7c:4c:cc:65:e9:b8:0f:e7:e6:63:54:91:e8:4a:95: 06:55:00:54:7d:d7:5b:75:80:f8:93:48:b2:2f:a8:3d:a2:29: b7:6c:4e:18:b9:12:6c:cd:fd:b9:ed:df:b5:1b:7b:a7:06:7b: 01:02:21:f9:2c:ee:67:28:e4:ea:6a:74:a4:a0:a8:b8:92:27: 96:6d:69:33:0b:bd:8d:0c:ff:60:67:43:90:46:aa:b9:fa:4c: fe:b2:38:0e:b5:96:ae:a7:6f:83:ce:24:63:df:f5:44:05:71: a0:ee:05:6a:f7:09:83:2d:22:d6:65:5c:d4:50:55:bb:07:d6: 38:8b:76:0f:ee:79:53:27:97:38:f3:fc:6e:1b:41:56:78:6b: 01:03:ca:27:e9:f6:97:54:15:b3:7b:d6:33:e1:11:1f:6f:20: 57:4d:72:9e:1a:2c:c1:93:74:ca:7e:be:13:dd:53:8e:ff:47: 90:24:32:8d:14:8b:91:d2:41:c9:33:10:40:55:d1:05:27:35: 5b:e3:fc:48:71:8b:15:51:01:fd:28:d6:69:66:a4:fb:94:47: 53:5b:51:b4:62:45:9d:d5:14:6e:1e:45:a9:16:d6:6c:3a:dd: c4:fd:83:37:a0:c4:f2:23:ac:7c:49:62:db:3b:16:c4:4e:35: 06:82:ce:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAWYbrwLs2JR802Flrv7NoD6q8JAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTIwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDI0OTEyNjE4YmVjMjhmMGE1ZDEyN2UxYzUwOGQzNGVm Y2I5YTFiYWVkODZiOTE2YTc1ZWVjYWZkMjFjZmEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrhIi5/IRLMTrQqsSpXhrLg/QIwOJnokYCnEFueQj9eQ/q tLW+CmNH/trP5AtIc39xA46FM1aMa5SM563UPVzYMWfxPr3gnT9WJ2hBxkni4J+c Hd86PDL9o8ewV+YGwTCRHobnoTGVffPfJ64ILsQDlLFnsOmwZcXOJTd2UEeNm2tM VCQ+Zj5pB2igzNHr3xLBbFCzyQwOI5DltI/zjjaAwflIy+3kbkU18eNuRh7YKNng 41LBxj7m1UHtGhFB0jLI/gL+x6nJ7qNBL3A6l6YBIumqhbT6h/y5TJ9HBa45GK9L 5cfG2FTkUqNivbVGwYmW161u6gcn5deE4xLed6blAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkVG8349j7u/Qv9qHlXQbnObDpWowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyMzk3Y2FjLTQwNmUtNGM4OS04NWU1LWI0YTI5ZWRkODY1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAARh4XxMzGXpuA/n5mNUkehKlQZV AFR911t1gPiTSLIvqD2iKbdsThi5EmzN/bnt37Ube6cGewECIfks7mco5OpqdKSg qLiSJ5ZtaTMLvY0M/2BnQ5BGqrn6TP6yOA61lq6nb4POJGPf9UQFcaDuBWr3CYMt ItZlXNRQVbsH1jiLdg/ueVMnlzjz/G4bQVZ4awEDyifp9pdUFbN71jPhER9vIFdN cp4aLMGTdMp+vhPdU47/R5AkMo0Ui5HSQckzEEBV0QUnNVvj/EhxixVRAf0o1mlm pPuUR1NbUbRiRZ3VFG4eRakW1mw63cT9gzegxPIjrHxJYts7FsRONQaCzrQ= -----END CERTIFICATE-----Generated at Fri Aug 8 20:49:16 2025 by rpki-client