$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22d63c54-bc77-4d42-b8ff-0a94f1116f4a.roa File: 22d63c54-bc77-4d42-b8ff-0a94f1116f4a.roa (raw, json) Hash identifier: o+Kjldxnk4yYszRi0cvu7IV6LQCpcGgnG1ruiLPh9rU= Subject key identifier: 1C:B2:0E:B6:9F:1C:FC:09:9F:03:AD:3D:D3:0E:C7:8E:EC:02:66:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B5E3FD6D9A6248FB8AFC4DFDC84259E151CE0CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22d63c54-bc77-4d42-b8ff-0a94f1116f4a.roa Signing time: Fri 01 Aug 2025 15:21:45 +0000 ROA not before: Fri 01 Aug 2025 15:21:45 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.219.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5e:3f:d6:d9:a6:24:8f:b8:af:c4:df:dc:84:25:9e:15:1c:e0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:21:45 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=b68df2aa63e794624fcd2777f71e101204c2b4bbc8c9e0ecf312873c059c50ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:b5:bf:5d:8d:fb:09:08:74:ce:ef:f0:95: 43:28:79:e6:64:00:3c:32:ff:dc:8a:20:91:59:13: 66:c4:d9:c8:cc:7f:28:dc:da:d0:d0:8b:e8:71:87: f9:a1:bf:e9:3e:dc:00:a7:8e:93:c7:85:ee:47:c9: af:07:3e:2d:59:fb:3c:6f:52:78:6c:aa:1e:ab:bc: dd:c8:4a:b9:37:1a:a8:35:71:0e:9e:83:f0:54:37: df:52:e5:54:b7:05:0f:f2:f8:74:e5:9a:7f:ce:01: 19:12:5d:e3:e0:c0:57:6a:ba:f6:e4:09:1a:b8:dc: f4:38:14:4d:d2:ac:1c:b1:2a:fc:fe:7b:0b:b2:d4: 31:56:80:69:a1:a3:ce:cc:7e:7f:35:e5:66:3a:5b: a8:81:b8:5b:17:53:a3:80:5b:b0:bf:e4:60:c4:18: ba:d4:4a:87:83:6c:3d:14:9f:84:6d:fa:e2:da:dc: c7:c0:54:09:4e:52:e2:23:c1:b0:0a:a4:d7:9d:4d: b6:ca:aa:99:8c:c7:1d:41:26:8f:50:89:e6:4b:76: bf:01:37:e6:69:16:8b:09:7d:cf:c8:09:a8:6c:c0: 8e:94:87:46:56:17:fb:4d:64:d2:b6:0d:9a:a5:dc: 3a:31:e3:38:ad:77:03:af:69:27:e0:23:20:25:b5: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:0E:B6:9F:1C:FC:09:9F:03:AD:3D:D3:0E:C7:8E:EC:02:66:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22d63c54-bc77-4d42-b8ff-0a94f1116f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.219.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4c:97:83:83:fe:a2:e7:31:43:86:b5:65:78:77:5b:ca:2f:f4: 3c:84:a1:47:7f:6b:31:79:3e:4e:47:3b:b7:37:52:31:8c:09: 24:8c:dd:7f:6e:90:be:36:e5:7b:ea:5b:07:7f:80:29:e5:53: 46:3e:f1:cc:65:b3:8c:f8:3d:cc:d7:69:c9:ac:9d:23:b2:1e: 00:34:5f:bc:4f:dc:03:5b:6b:10:e7:4a:be:5c:f0:68:15:e6: 5c:d2:9b:fc:1a:3f:5e:bf:85:67:5f:c6:81:30:67:d0:8e:c5: fc:bb:16:e9:f4:68:6f:79:aa:f5:90:f6:96:83:2c:f5:9f:78: da:33:c8:59:ca:c6:4d:5a:c0:8f:af:da:34:29:05:c5:fc:11: 8e:3b:bd:92:fc:48:64:bc:69:80:19:7f:c9:a1:67:2c:1c:47: 5d:b2:45:38:d2:26:72:f3:3a:e9:a5:2d:62:b4:e0:3b:d2:46: 42:12:19:3c:24:1a:01:30:65:03:ca:96:c1:90:af:df:49:ef: 8f:36:ed:32:5e:59:ad:23:dd:00:bc:f2:b3:3a:65:60:f5:96: 05:69:da:56:57:13:96:ec:b6:69:9c:ca:82:f9:e8:09:8c:e3: 54:33:65:ce:41:ea:fa:20:21:ab:4e:df:f4:c2:01:32:21:69: e5:8c:0c:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW14/1tmmJI+4r8Tf3IQlnhUc4MwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUyMTQ1WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjhkZjJhYTYzZTc5NDYyNGZjZDI3NzdmNzFlMTAxMjA0 YzJiNGJiYzhjOWUwZWNmMzEyODczYzA1OWM1MGFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeIrW/XY37CQh0zu/wlUMoeeZkADwy/9yKIJFZE2bE2cjM fyjc2tDQi+hxh/mhv+k+3ACnjpPHhe5Hya8HPi1Z+zxvUnhsqh6rvN3ISrk3Gqg1 cQ6eg/BUN99S5VS3BQ/y+HTlmn/OARkSXePgwFdquvbkCRq43PQ4FE3SrByxKvz+ ewuy1DFWgGmho87Mfn815WY6W6iBuFsXU6OAW7C/5GDEGLrUSoeDbD0Un4Rt+uLa 3MfAVAlOUuIjwbAKpNedTbbKqpmMxx1BJo9QieZLdr8BN+ZpFosJfc/ICahswI6U h0ZWF/tNZNK2DZql3Dox4zitdwOvaSfgIyAltYObAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHLIOtp8c/AmfA6090w7HjuwCZmowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyZDYzYzU0LWJjNzctNGQ0Mi1iOGZmLTBhOTRmMTExNmY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfY24AwDQYJKoZIhvcNAQELBQADggEBAEyXg4P+oucxQ4a1ZXh3W8ov9DyE oUd/azF5Pk5HO7c3UjGMCSSM3X9ukL425XvqWwd/gCnlU0Y+8cxls4z4PczXacms nSOyHgA0X7xP3ANbaxDnSr5c8GgV5lzSm/waP16/hWdfxoEwZ9COxfy7Fun0aG95 qvWQ9paDLPWfeNozyFnKxk1awI+v2jQpBcX8EY47vZL8SGS8aYAZf8mhZywcR12y RTjSJnLzOumlLWK04DvSRkISGTwkGgEwZQPKlsGQr99J74827TJeWa0j3QC88rM6 ZWD1lgVp2lZXE5bstmmcyoL56AmM41QzZc5B6vogIatO3/TCATIhaeWMDOc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:45 2025 by rpki-client