$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa File: 2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa (raw, json) Hash identifier: CLb8rEL+iNxbDmBgtX6R+h9cftrdxgGGWxiiq2YHgoo= Subject key identifier: 3F:18:13:A4:D2:61:94:B4:A2:D1:4A:87:8C:96:A7:43:37:95:92:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07BD0DF9D48901D7D179253FC4659DA199D6642E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa Signing time: Mon 04 Aug 2025 15:31:25 +0000 ROA not before: Mon 04 Aug 2025 15:31:25 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:bd:0d:f9:d4:89:01:d7:d1:79:25:3f:c4:65:9d:a1:99:d6:64:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:31:25 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=52a744f023f1023cc26fa2aa5c7f26ec5786777de52f0ee22636051974e9eaeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:68:93:26:b6:e0:3d:29:1d:df:91:c6:ba: 9b:ca:3b:83:8b:e8:3f:c9:f6:ac:b4:c1:ae:da:2c: 7a:ca:b7:45:23:94:a7:c8:2d:0e:a9:f4:5a:61:98: 30:4f:48:61:d5:53:02:ce:7d:74:52:54:b5:bf:42: 3d:d3:68:82:72:78:85:8a:25:77:32:ad:47:7e:2c: ac:67:3f:27:3b:49:0f:c9:63:a3:1f:75:b0:9d:34: 2f:dc:00:76:36:75:63:35:c8:10:41:d9:17:56:d9: 38:d5:78:9b:a6:4f:c6:f0:56:12:ef:1e:65:8d:37: 7a:9d:60:60:0f:42:6d:97:1a:bb:c5:de:60:bc:d9: 61:69:1d:92:36:14:67:73:12:63:f6:65:55:20:a0: 4b:5a:c8:e6:1c:13:85:b6:c2:fc:b7:87:7c:37:77: 3a:88:02:34:e7:55:a5:f7:60:34:2f:1b:5a:91:cb: 51:4a:1f:8b:28:86:07:8c:85:41:63:38:ae:df:f5: b7:f0:e3:04:bc:00:95:dd:b3:a8:5f:cf:b3:0b:1f: 74:2c:4f:10:f3:83:54:da:d0:15:b3:ab:b7:db:42: de:af:74:70:e1:8f:5f:f6:5b:b0:04:5f:19:49:e3: e5:c2:0c:74:0d:29:42:2d:9b:54:a4:2a:ce:71:d6: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:13:A4:D2:61:94:B4:A2:D1:4A:87:8C:96:A7:43:37:95:92:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:09:2d:f7:a3:c1:77:85:8d:22:76:2a:ae:6e:ff:68:4a:c9: ea:54:09:54:f1:b9:ba:b5:29:fa:92:97:41:16:d2:aa:2f:bb: 26:63:ff:43:1c:1b:f9:e5:14:7a:01:da:8c:a3:bf:97:d5:c5: 56:03:f8:20:27:2b:e1:19:1d:c2:f0:71:0d:2c:24:ed:48:4f: 41:0b:b2:a1:3c:c9:3d:d8:4e:76:ca:09:db:45:f6:ac:21:cd: d9:48:1e:72:d2:03:df:ba:3c:68:14:6f:d5:c8:cf:0c:a8:24: a1:dc:17:55:d2:5b:6a:e6:d7:fd:13:b2:78:d7:3f:a7:f5:1c: aa:a6:09:0d:32:c9:df:94:00:b4:d8:0c:77:e5:31:f0:bf:21: b8:eb:11:69:80:d5:33:dc:60:5e:4c:52:b7:d9:ff:82:18:60: 2d:02:b5:ec:55:9f:ba:4f:42:47:a7:e7:0f:d4:68:bb:92:b1: 95:e7:7f:b9:d7:01:93:93:af:81:2f:4f:d1:50:e1:37:ff:6e: ae:74:70:ee:6b:9a:71:25:7f:9b:25:bf:66:4f:5e:ac:b4:55: 88:a3:79:a6:5a:14:e1:0a:b1:c5:c1:af:05:2e:85:ee:07:68: 80:18:9a:b1:7e:fb:a1:16:44:c1:78:41:1e:9a:2a:38:6a:1e: a6:d5:e2:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB70N+dSJAdfReSU/xGWdoZnWZC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTUzMTI1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmE3NDRmMDIzZjEwMjNjYzI2ZmEyYWE1YzdmMjZlYzU3 ODY3NzdkZTUyZjBlZTIyNjM2MDUxOTc0ZTllYWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt82iTJrbgPSkd35HGupvKO4OL6D/J9qy0wa7aLHrKt0Uj lKfILQ6p9FphmDBPSGHVUwLOfXRSVLW/Qj3TaIJyeIWKJXcyrUd+LKxnPyc7SQ/J Y6MfdbCdNC/cAHY2dWM1yBBB2RdW2TjVeJumT8bwVhLvHmWNN3qdYGAPQm2XGrvF 3mC82WFpHZI2FGdzEmP2ZVUgoEtayOYcE4W2wvy3h3w3dzqIAjTnVaX3YDQvG1qR y1FKH4sohgeMhUFjOK7f9bfw4wS8AJXds6hfz7MLH3QsTxDzg1Ta0BWzq7fbQt6v dHDhj1/2W7AEXxlJ4+XCDHQNKUItm1SkKs5x1hRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPxgTpNJhlLSi0UqHjJanQzeVklUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmY2ZkZWVhLTcwZjgtNDJhOS1hNDllLTQ0NmEzYWY3MmQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATGDQAwDQYJKoZIhvcNAQELBQADggEBAC4JLfejwXeFjSJ2Kq5u/2hKyepU CVTxubq1KfqSl0EW0qovuyZj/0McG/nlFHoB2oyjv5fVxVYD+CAnK+EZHcLwcQ0s JO1IT0ELsqE8yT3YTnbKCdtF9qwhzdlIHnLSA9+6PGgUb9XIzwyoJKHcF1XSW2rm 1/0TsnjXP6f1HKqmCQ0yyd+UALTYDHflMfC/IbjrEWmA1TPcYF5MUrfZ/4IYYC0C texVn7pPQken5w/UaLuSsZXnf7nXAZOTr4EvT9FQ4Tf/bq50cO5rmnElf5slv2ZP Xqy0VYijeaZaFOEKscXBrwUuhe4HaIAYmrF++6EWRMF4QR6aKjhqHqbV4g0= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:17 2025 by rpki-client