$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa File: 2309db7a-9533-458b-bc2b-77dd1708ae8a.roa (raw, json) Hash identifier: pnG/s/GdI7BeFU77Ept/wQ5UN6zTmT6tC/yKeueCaVA= Subject key identifier: 9F:F2:60:97:63:35:B5:5A:33:94:23:37:BE:CA:2B:80:F3:93:6F:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 732F6DE35FCB0A9144D209D7518EFAF8B244C48F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa Signing time: Fri 18 Jul 2025 00:30:25 +0000 ROA not before: Fri 18 Jul 2025 00:30:25 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2f:6d:e3:5f:cb:0a:91:44:d2:09:d7:51:8e:fa:f8:b2:44:c4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:30:25 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=91fb9af8a8ac9a56d10ad3b3524e056ea6fa1e8d4392a0bd9b9c6002926994da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:cb:e9:bb:d2:f7:c6:d6:08:97:bc:fd:53: b9:ea:1a:04:a0:3a:ef:a4:01:06:02:9a:94:fc:0d: aa:c9:7e:d3:60:dd:97:3b:d2:0b:62:98:23:d6:8d: 2f:2d:e8:0e:3f:2b:5b:e8:f2:72:41:c9:99:77:05: 80:1b:8b:fe:b9:6c:8f:e6:7c:0a:1f:92:41:19:26: 78:d3:aa:af:ac:73:83:58:fe:f0:c6:59:1a:4e:c2: 54:ba:13:27:c9:31:f7:02:60:73:fe:ba:02:c7:c2: a0:04:2d:93:a7:88:04:a3:0a:07:7c:e2:14:b2:ce: 08:72:4f:57:de:a4:28:20:b7:68:ec:53:6b:7f:cd: 02:ef:43:59:46:ed:fe:c2:ae:93:7a:22:9e:e7:a5: 42:bd:66:3c:e3:9b:2f:66:a9:2e:3f:49:9c:3e:0e: 62:71:91:72:9a:f2:a7:ff:a7:76:cb:f8:4a:d0:a7: 6d:eb:1f:64:8d:bc:6b:9f:30:79:ba:05:68:34:33: 56:89:e8:c8:a1:56:07:31:2a:68:9d:91:48:6c:1f: 3a:28:d7:44:ca:7a:47:df:53:15:2c:cd:b5:2d:57: 3b:f0:90:7a:23:db:64:f8:45:b0:d2:e0:8b:fa:5c: 14:8d:a9:19:96:80:dd:03:66:d0:fb:3e:ff:05:2c: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:60:97:63:35:B5:5A:33:94:23:37:BE:CA:2B:80:F3:93:6F:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.105.0/24 Signature Algorithm: sha256WithRSAEncryption 13:02:8e:e8:37:08:2e:c0:8a:b9:86:7c:8d:ed:e3:22:2a:a8: 9d:38:7c:ac:bc:1d:ff:1b:88:0c:61:87:c1:98:21:8e:cc:3f: fa:c1:b8:4a:0e:6b:db:57:96:fd:0c:cd:f9:f8:8f:84:bb:83: 3b:a4:29:b2:ee:c5:98:d7:52:55:39:f2:8a:ec:12:bf:c6:9f: 44:4f:b5:4e:78:ae:6c:38:ff:f0:54:65:b3:7a:b4:64:5e:61: 5c:8c:35:de:ff:81:c1:01:c5:88:74:17:a5:d4:3a:4c:7b:ae: 4c:44:fd:78:8f:e6:c6:e9:2c:75:35:b4:c0:8d:87:2f:8c:85: c2:c7:fb:54:f4:1e:d7:ba:4b:f2:3c:5c:53:e5:70:c7:0f:38: 27:14:48:9b:b8:65:e0:0a:21:11:ca:5e:a5:9f:c7:04:3b:f4: 48:4f:87:b3:5b:94:31:83:88:a7:f7:94:9e:e9:a0:28:36:f6: f8:c6:34:9b:d9:a7:e7:e3:f3:e2:cd:80:13:95:de:ed:2d:dc: 03:6b:16:f1:22:01:c6:35:ac:1b:1f:49:76:c6:5b:ed:1a:18: ab:86:70:33:7c:ab:d8:99:a5:93:f1:56:dc:14:b1:8e:1b:ae: 6f:ff:ce:ee:05:a1:5f:f6:d5:47:f1:e8:f1:b0:d8:b1:37:b9: 81:93:91:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcy9t41/LCpFE0gnXUY76+LJExI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAzMDI1WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWZiOWFmOGE4YWM5YTU2ZDEwYWQzYjM1MjRlMDU2ZWE2 ZmExZThkNDM5MmEwYmQ5YjljNjAwMjkyNjk5NGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBicvpu9L3xtYIl7z9U7nqGgSgOu+kAQYCmpT8DarJftNg 3Zc70gtimCPWjS8t6A4/K1vo8nJByZl3BYAbi/65bI/mfAofkkEZJnjTqq+sc4NY /vDGWRpOwlS6EyfJMfcCYHP+ugLHwqAELZOniASjCgd84hSyzghyT1fepCggt2js U2t/zQLvQ1lG7f7CrpN6Ip7npUK9Zjzjmy9mqS4/SZw+DmJxkXKa8qf/p3bL+ErQ p23rH2SNvGufMHm6BWg0M1aJ6MihVgcxKmidkUhsHzoo10TKekffUxUszbUtVzvw kHoj22T4RbDS4Iv6XBSNqRmWgN0DZtD7Pv8FLFNJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn/Jgl2M1tVozlCM3vsorgPOTbzowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDlkYjdhLTk1MzMtNDU4Yi1iYzJiLTc3ZGQxNzA4YWU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GkwDQYJKoZIhvcNAQELBQADggEBABMCjug3CC7AirmGfI3t4yIqqJ04 fKy8Hf8biAxhh8GYIY7MP/rBuEoOa9tXlv0Mzfn4j4S7gzukKbLuxZjXUlU58ors Er/Gn0RPtU54rmw4//BUZbN6tGReYVyMNd7/gcEBxYh0F6XUOkx7rkxE/XiP5sbp LHU1tMCNhy+MhcLH+1T0Hte6S/I8XFPlcMcPOCcUSJu4ZeAKIRHKXqWfxwQ79EhP h7NblDGDiKf3lJ7poCg29vjGNJvZp+fj8+LNgBOV3u0t3ANrFvEiAcY1rBsfSXbG W+0aGKuGcDN8q9iZpZPxVtwUsY4brm//zu4FoV/21Ufx6PGw2LE3uYGTkQ4= -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:07 2025 by rpki-client