$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa File: 2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa (raw, json) Hash identifier: L+lc71z16uPi3CcK/EKOdp376OwOyOHiGKcep/I+wjk= Subject key identifier: 5F:15:BF:60:0B:78:81:8B:FA:4B:95:6A:EF:C6:DD:27:CD:C8:A3:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5722F16AAC86DFC243665937D2343A24F8145BFD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa Signing time: Mon 04 Aug 2025 16:00:22 +0000 ROA not before: Mon 04 Aug 2025 16:00:22 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:22:f1:6a:ac:86:df:c2:43:66:59:37:d2:34:3a:24:f8:14:5b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:00:22 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=b121e120784f180cebf80d5bfe8d220899186d257c45214cda2b975e6fb6b895, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:b0:d9:4f:fc:06:69:bd:7e:e0:65:02:00: 9f:8e:6a:0d:28:f8:72:83:9c:23:d1:df:c8:32:2d: f6:c3:51:93:38:4e:02:e9:8f:4e:c0:34:99:47:34: 3c:ec:26:2a:a6:08:34:ad:96:66:4f:29:2b:c4:d6: 06:e6:16:c8:81:a0:8f:dd:1b:a2:f4:06:95:12:18: 88:6e:75:9d:95:16:9e:1e:94:f6:cb:90:12:27:e7: 53:35:9f:51:3d:63:29:74:f8:a7:0c:82:e3:f8:9b: 1b:e7:7b:de:79:f2:a9:10:dc:04:9d:4a:d2:ac:2b: 5b:8b:c5:77:84:5e:3b:5d:bf:75:f6:8b:23:3a:5b: e0:ff:af:fc:0b:de:07:05:ee:d5:03:50:f4:a7:08: e2:f5:da:7e:9f:d0:e2:95:c0:ef:7a:4e:4e:68:62: 29:52:f1:29:2f:09:4b:0e:1d:ce:cf:48:cc:e0:22: bf:76:c9:b1:d4:cf:de:49:c8:c4:2c:5b:0c:6c:1a: d0:d9:72:14:d2:2d:d1:ef:14:d4:d6:18:d2:f2:8f: 29:d1:f3:4d:16:db:00:f9:b1:55:f5:d9:8f:f4:d8: 22:af:83:d6:da:75:14:68:77:01:5c:86:d3:b2:6f: d6:5d:0f:41:55:9a:c8:6d:33:45:e3:e7:47:0f:fd: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:BF:60:0B:78:81:8B:FA:4B:95:6A:EF:C6:DD:27:CD:C8:A3:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0a:ba:2e:58:0b:14:83:1f:c8:50:6c:a2:ab:52:d2:27:02:e6: 5c:66:81:e2:1b:65:86:b2:12:94:00:48:00:7e:2a:d2:7e:73: cb:37:b3:a7:51:86:a2:32:54:5f:f6:f1:79:f9:e7:20:18:91: 47:51:56:87:28:36:06:37:17:fd:f9:ee:7e:5b:37:a2:37:05: db:57:f5:76:70:a7:28:a1:9e:6f:15:57:4c:38:d9:57:85:61: 2b:50:b9:b2:71:29:6b:bb:ce:60:3b:af:e1:c9:5d:5a:e8:1e: 30:bf:1b:5a:5f:29:94:47:d2:5c:fb:0d:da:42:7e:ae:e5:96: cc:8c:68:7a:13:2a:7d:ff:1b:4e:66:1c:60:d9:4e:61:93:f2: 2a:b5:2c:0d:6c:9d:b7:cb:d8:e3:fa:cb:6f:55:31:59:81:00: 70:97:6a:0c:73:ed:d2:30:d9:0a:4f:79:23:2f:94:6e:4c:ef: f5:61:86:81:1d:05:c9:0f:14:cf:25:31:42:80:d9:79:69:1c: 6a:f6:b0:d5:c9:03:af:8f:ef:61:1d:e1:91:2d:e1:2a:f4:7f: 01:e8:64:d1:8f:32:cc:2a:8e:28:5b:d5:7f:44:9b:e0:47:69: 50:56:15:73:07:0a:ef:b6:67:5e:f1:19:ed:39:ee:35:81:86: e1:41:4d:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVyLxaqyG38JDZlk30jQ6JPgUW/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYwMDIyWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTIxZTEyMDc4NGYxODBjZWJmODBkNWJmZThkMjIwODk5 MTg2ZDI1N2M0NTIxNGNkYTJiOTc1ZTZmYjZiODk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfx7DZT/wGab1+4GUCAJ+Oag0o+HKDnCPR38gyLfbDUZM4 TgLpj07ANJlHNDzsJiqmCDStlmZPKSvE1gbmFsiBoI/dG6L0BpUSGIhudZ2VFp4e lPbLkBIn51M1n1E9Yyl0+KcMguP4mxvne9558qkQ3ASdStKsK1uLxXeEXjtdv3X2 iyM6W+D/r/wL3gcF7tUDUPSnCOL12n6f0OKVwO96Tk5oYilS8SkvCUsOHc7PSMzg Ir92ybHUz95JyMQsWwxsGtDZchTSLdHvFNTWGNLyjynR800W2wD5sVX12Y/02CKv g9badRRodwFchtOyb9ZdD0FVmshtM0Xj50cP/b09AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXxW/YAt4gYv6S5Vq78bdJ83Io0EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZGFmMTY5LTRmYmItNDlmZi1hYmE5LWIyNjE4NjcwZjZjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfM7IAwDQYJKoZIhvcNAQELBQADggEBAAq6LlgLFIMfyFBsoqtS0icC5lxm geIbZYayEpQASAB+KtJ+c8s3s6dRhqIyVF/28Xn55yAYkUdRVocoNgY3F/357n5b N6I3BdtX9XZwpyihnm8VV0w42VeFYStQubJxKWu7zmA7r+HJXVroHjC/G1pfKZRH 0lz7DdpCfq7llsyMaHoTKn3/G05mHGDZTmGT8iq1LA1snbfL2OP6y29VMVmBAHCX agxz7dIw2QpPeSMvlG5M7/VhhoEdBckPFM8lMUKA2XlpHGr2sNXJA6+P72Ed4ZEt 4Sr0fwHoZNGPMswqjihb1X9Em+BHaVBWFXMHCu+2Z17xGe057jWBhuFBTXA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:12 2025 by rpki-client