$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dee300-5e34-4b4e-a799-075c31ceaa80.roa File: 23dee300-5e34-4b4e-a799-075c31ceaa80.roa (raw, json) Hash identifier: iAAYBSAetMoQmNNN244NT5c37SPGJdmw12p0XX+mHus= Subject key identifier: 6D:D1:00:AD:DC:58:09:3B:F5:45:DB:80:EF:51:BE:48:B5:27:F1:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 582B947A8F55A1DE2EA52202DB98E3F7C81FDA54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dee300-5e34-4b4e-a799-075c31ceaa80.roa Signing time: Tue 22 Jul 2025 00:11:38 +0000 ROA not before: Tue 22 Jul 2025 00:11:38 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.128.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2b:94:7a:8f:55:a1:de:2e:a5:22:02:db:98:e3:f7:c8:1f:da:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:11:38 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=6ea3e8d98d0033e68a120e8cdbdd6576481be8ae2b51e212c887d444e9ccf593, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:d4:84:a2:1f:5a:10:ae:50:0a:f1:a8:ab: d5:7f:35:56:fe:dc:d5:04:73:5c:dd:fe:aa:98:26: 6e:2b:f7:96:90:e0:c2:e6:8e:ec:24:e4:6b:eb:af: f1:5c:f0:cf:09:ea:18:f2:30:55:64:97:02:35:61: bd:a6:e1:46:d5:a7:13:17:05:63:0b:89:2d:39:1e: 2f:76:79:f1:3f:cf:d5:58:9c:35:c8:b1:91:7f:e8: 8e:5f:0b:53:db:6a:a9:25:9f:a6:68:1c:37:be:df: 3b:49:65:e9:c3:0c:75:fe:fb:19:f4:57:ba:18:a8: 3a:de:86:c9:f7:fd:8d:f5:3e:68:43:65:9e:f8:0a: 46:31:13:4b:94:03:34:3e:b6:81:93:13:e1:21:46: 26:ce:14:8b:df:b3:89:b4:5e:5e:7e:37:d9:c8:3d: cc:37:a4:3c:e9:73:c7:c4:76:c4:72:86:03:af:7a: 12:fa:d4:29:76:75:bb:f0:68:38:19:5e:a2:5c:7e: 88:b0:f6:39:e6:71:be:68:0a:45:59:34:7a:5b:7a: 21:83:07:a8:79:97:fb:1e:c6:71:b5:eb:d5:da:9e: ad:66:a2:92:b4:9c:f0:1c:0c:3a:d5:82:56:f2:f3: 58:64:14:71:1e:20:13:a2:d0:64:fb:95:ef:cd:47: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D1:00:AD:DC:58:09:3B:F5:45:DB:80:EF:51:BE:48:B5:27:F1:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23dee300-5e34-4b4e-a799-075c31ceaa80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.128.0.0/20 Signature Algorithm: sha256WithRSAEncryption 40:eb:bf:81:10:4d:fb:75:26:d2:e9:02:65:49:77:85:8b:a6: cb:dd:27:5a:8e:25:c3:98:d0:de:e0:ec:63:1e:ec:5e:89:2e: 72:dc:85:4e:95:a4:79:f0:4b:30:f3:ae:bf:df:37:8c:a8:b2: 07:5d:cd:68:5d:88:68:3c:e3:f6:b8:c2:7d:e1:14:8b:b9:c9: 41:bf:53:6f:02:4d:88:21:90:ee:f3:80:31:de:e8:54:ec:45: 20:ed:cd:4a:48:02:4e:9a:54:ec:f5:24:80:6f:c7:c1:17:b2: 5a:d9:4f:41:b4:6a:98:00:41:3e:3c:80:43:19:f8:16:65:52: bc:59:f6:7d:a2:95:73:33:ce:24:88:a7:0a:09:d9:92:41:39: d4:4e:fa:e1:98:57:02:f4:7c:c8:ca:32:f8:24:8d:13:ab:50: 0b:1e:56:4a:f8:b5:b6:61:32:4f:16:f9:8c:0b:3e:6c:9c:c5: e7:43:f2:30:21:8b:52:4d:7e:92:f5:30:10:85:2a:48:22:25: 32:a7:01:b8:53:59:8f:19:e1:23:a7:72:b3:81:74:24:c7:e7: a4:11:a1:dc:06:0f:6a:3b:d0:98:b6:ff:b1:f3:1d:91:50:69: 15:bb:e0:9f:35:6f:9e:df:14:89:fc:8c:cf:23:eb:34:35:ab: 39:40:ed:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWCuUeo9Vod4upSIC25jj98gf2lQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAxMTM4WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWEzZThkOThkMDAzM2U2OGExMjBlOGNkYmRkNjU3NjQ4 MWJlOGFlMmI1MWUyMTJjODg3ZDQ0NGU5Y2NmNTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ9NSEoh9aEK5QCvGoq9V/NVb+3NUEc1zd/qqYJm4r95aQ 4MLmjuwk5Gvrr/Fc8M8J6hjyMFVklwI1Yb2m4UbVpxMXBWMLiS05Hi92efE/z9VY nDXIsZF/6I5fC1Pbaqkln6ZoHDe+3ztJZenDDHX++xn0V7oYqDrehsn3/Y31PmhD ZZ74CkYxE0uUAzQ+toGTE+EhRibOFIvfs4m0Xl5+N9nIPcw3pDzpc8fEdsRyhgOv ehL61Cl2dbvwaDgZXqJcfoiw9jnmcb5oCkVZNHpbeiGDB6h5l/sexnG169Xanq1m opK0nPAcDDrVglby81hkFHEeIBOi0GT7le/NRx8fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbdEArdxYCTv1RduA71G+SLUn8bcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzZGVlMzAwLTVlMzQtNGI0ZS1hNzk5LTA3NWMzMWNlYWE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPgAAwDQYJKoZIhvcNAQELBQADggEBAEDrv4EQTft1JtLpAmVJd4WLpsvd J1qOJcOY0N7g7GMe7F6JLnLchU6VpHnwSzDzrr/fN4yosgddzWhdiGg84/a4wn3h FIu5yUG/U28CTYghkO7zgDHe6FTsRSDtzUpIAk6aVOz1JIBvx8EXslrZT0G0apgA QT48gEMZ+BZlUrxZ9n2ilXMzziSIpwoJ2ZJBOdRO+uGYVwL0fMjKMvgkjROrUAse Vkr4tbZhMk8W+YwLPmycxedD8jAhi1JNfpL1MBCFKkgiJTKnAbhTWY8Z4SOncrOB dCTH56QRodwGD2o70Ji2/7HzHZFQaRW74J81b57fFIn8jM8j6zQ1qzlA7Uc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:08 2025 by rpki-client