$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa File: 2afb1ff2-5586-43c7-baa9-e0c06c131116.roa (raw, json) Hash identifier: gs0ZWxwW7VXYERu1V4we85l2OfKssDnqdQBfaueCWC0= Subject key identifier: E1:40:D4:1F:B3:2E:71:59:71:C7:C9:54:DA:BE:5A:12:6C:34:EE:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A3747A59AEF95C8785C38248D771675A73FAFDE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa Signing time: Wed 06 Aug 2025 05:08:13 +0000 ROA not before: Wed 06 Aug 2025 05:08:13 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 40.178.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:37:47:a5:9a:ef:95:c8:78:5c:38:24:8d:77:16:75:a7:3f:af:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 05:08:13 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=6201d4e1fae34569e222d476a127955edee4ea271e83bafc847ffb59d7be504f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:2f:35:b3:87:c5:50:0b:ef:c2:dd:bd:a9: ae:8f:6b:86:5e:4e:6f:04:ad:fc:2c:17:f5:a1:64: 99:06:b9:2c:5c:c3:0a:25:68:e9:9f:cc:eb:90:b5: d0:1c:b7:fb:41:66:1c:c5:a9:0f:16:35:e7:72:ba: de:83:8e:a8:ce:c0:c4:9a:42:30:dd:23:94:94:42: f6:16:d4:e0:40:75:16:c6:ab:5e:4b:07:4d:0e:ab: 77:50:7e:6d:cb:ad:17:fd:00:ee:2d:c2:eb:32:14: 10:74:91:bb:c7:2b:80:27:53:e8:24:65:4a:2f:80: ec:f1:2a:ce:ca:1b:12:a0:76:c4:b5:29:9c:a9:6d: b1:15:e6:8f:cd:81:bd:fd:0b:ba:0b:b5:15:e5:a1: bd:b0:a0:ef:ae:a0:ee:a0:06:cb:8d:dc:87:9f:d9: fa:86:08:15:b1:86:6c:5e:87:bf:2d:de:59:0a:cd: 26:39:d8:ab:42:9e:74:e5:d4:d4:1c:bd:17:49:16: 70:3e:3f:72:ca:e1:25:ef:16:7a:ad:81:98:0f:1a: d5:8b:50:98:b1:79:e5:79:8c:96:d8:da:ab:d2:ca: e1:82:a2:1b:83:48:63:36:c8:45:d8:39:2f:ad:a8: df:99:97:e9:24:e6:05:b9:a0:a8:12:90:41:a9:8b: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:D4:1F:B3:2E:71:59:71:C7:C9:54:DA:BE:5A:12:6C:34:EE:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.178.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2b:27:6d:3b:6f:75:a5:8a:39:a4:81:de:cc:95:fb:66:90:b1: 62:f9:61:86:45:45:4d:35:f3:6f:43:e6:cc:97:d9:93:89:27: 76:19:51:7b:9a:88:ff:2e:f8:a5:e0:22:a3:8c:16:85:32:2b: 0d:ec:02:29:5f:53:f7:4d:cd:7d:a0:ea:48:cd:65:79:29:2e: 52:9e:26:2c:f3:c0:42:a5:c3:de:23:16:8d:14:90:df:33:e6: 51:70:1c:ca:4c:43:73:f0:41:5a:37:38:35:c9:1d:28:46:60: 6a:c8:4b:53:34:fd:3d:0f:5e:4e:7e:29:ef:1d:e7:ac:9a:0c: 36:bb:3c:c1:42:f9:5c:15:38:6d:ac:ac:a6:29:e1:65:bf:17: e6:90:88:81:6c:db:a3:7d:5f:45:ab:d1:b3:84:eb:0d:b4:19: f7:9b:b2:6e:1a:07:44:7c:1a:8b:ad:88:6e:84:71:31:73:89: e7:4d:34:61:bf:bf:4d:6f:4a:24:a8:f1:94:d2:ae:ef:87:e8: b0:4c:f6:1b:2c:a4:67:86:72:74:c1:e7:40:ce:34:13:36:f6: c3:32:b2:07:fc:b9:e5:c3:59:fb:ea:88:1e:c2:6d:7f:e2:ea: fd:a8:a8:df:bc:f7:76:19:c5:c9:bc:32:ae:7b:64:50:be:9c: 29:e6:e1:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKjdHpZrvlch4XDgkjXcWdac/r94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDUwODEzWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjAxZDRlMWZhZTM0NTY5ZTIyMmQ0NzZhMTI3OTU1ZWRl ZTRlYTI3MWU4M2JhZmM4NDdmZmI1OWQ3YmU1MDRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Mi81s4fFUAvvwt29qa6Pa4ZeTm8ErfwsF/WhZJkGuSxc wwolaOmfzOuQtdAct/tBZhzFqQ8WNedyut6DjqjOwMSaQjDdI5SUQvYW1OBAdRbG q15LB00Oq3dQfm3LrRf9AO4twusyFBB0kbvHK4AnU+gkZUovgOzxKs7KGxKgdsS1 KZypbbEV5o/Ngb39C7oLtRXlob2woO+uoO6gBsuN3Ief2fqGCBWxhmxeh78t3lkK zSY52KtCnnTl1NQcvRdJFnA+P3LK4SXvFnqtgZgPGtWLUJixeeV5jJbY2qvSyuGC ohuDSGM2yEXYOS+tqN+Zl+kk5gW5oKgSkEGpi9bLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4UDUH7MucVlxx8lU2r5aEmw07mQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZmIxZmYyLTU1ODYtNDNjNy1iYWE5LWUwYzA2YzEzMTExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEosjANBgkqhkiG9w0BAQsFAAOCAQEAKydtO291pYo5pIHezJX7ZpCxYvlh hkVFTTXzb0PmzJfZk4kndhlRe5qI/y74peAio4wWhTIrDewCKV9T903NfaDqSM1l eSkuUp4mLPPAQqXD3iMWjRSQ3zPmUXAcykxDc/BBWjc4NckdKEZgashLUzT9PQ9e Tn4p7x3nrJoMNrs8wUL5XBU4bayspinhZb8X5pCIgWzbo31fRavRs4TrDbQZ95uy bhoHRHwai62IboRxMXOJ5000Yb+/TW9KJKjxlNKu74fosEz2GyykZ4ZydMHnQM40 Ezb2wzKyB/y55cNZ++qIHsJtf+Lq/aio37z3dhnFybwyrntkUL6cKebhQw== -----END CERTIFICATE-----Generated at Sun Aug 10 03:52:37 2025 by rpki-client