$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32f314b2-f42e-4b1e-979e-90df3baa4690.roa File: 32f314b2-f42e-4b1e-979e-90df3baa4690.roa (raw, json) Hash identifier: 6M7fJVa4CjP/LJoOY6qJ68cmf+FIuI3WV2rYoKEh8gs= Subject key identifier: 81:6D:7A:24:FF:5C:AE:26:0C:A9:BD:65:6E:CE:99:BF:5D:8D:DF:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A372A26B0135AC295813342826B73E6AD92664A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32f314b2-f42e-4b1e-979e-90df3baa4690.roa Signing time: Fri 08 Aug 2025 00:00:24 +0000 ROA not before: Fri 08 Aug 2025 00:00:24 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.101.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:37:2a:26:b0:13:5a:c2:95:81:33:42:82:6b:73:e6:ad:92:66:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:24 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=ee866ae4c388beb9008ef6de7a4c3fe12241f3d26521753b05b2227c0385cb43, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:94:fa:4e:3b:97:bf:a5:d6:f3:3c:a4:bf: 49:a3:82:13:ee:80:f2:0a:2a:59:60:2e:97:9a:0c: 40:bc:5e:d8:b5:15:ec:8f:e3:66:03:9c:75:1e:48: 30:d9:75:b3:ad:57:ce:84:49:b8:e4:91:e8:a0:73: 73:bc:c6:2d:a7:83:6c:22:0e:71:bb:91:fa:41:ca: 37:46:25:d8:80:df:fd:33:6c:e2:98:41:98:3b:eb: c6:7e:28:e6:fb:38:c2:2e:ab:fe:3f:39:86:ec:00: ba:78:a6:1c:46:41:4b:72:f1:e6:09:00:c6:2a:30: d5:06:d1:c4:01:a6:d6:74:b0:52:ac:3d:d1:2f:bc: d7:12:70:dd:80:b2:7b:b0:f8:ea:df:c5:6b:a7:65: 99:88:0e:13:7b:90:55:1d:ad:fa:3b:eb:4f:5f:2d: 58:24:dd:27:3d:3c:0a:58:54:a1:4e:1d:42:1b:36: dd:62:c8:59:0b:e5:35:6e:41:ae:ce:e7:cb:c9:d7: 06:4d:38:59:7e:17:cc:74:cb:03:96:68:7c:00:6a: bb:1f:28:8b:f7:b2:78:24:6e:97:f5:a3:c1:90:29: b3:a1:3e:9b:85:fc:cf:90:49:d0:fa:90:ba:b8:8b: ea:5a:04:33:49:0a:89:9e:10:43:d9:6d:93:9f:d0: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:7A:24:FF:5C:AE:26:0C:A9:BD:65:6E:CE:99:BF:5D:8D:DF:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32f314b2-f42e-4b1e-979e-90df3baa4690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.101.0.0/17 Signature Algorithm: sha256WithRSAEncryption 7a:be:f0:83:08:ba:a9:c8:d2:e8:f0:e4:36:25:9b:04:0b:2a: bc:70:c0:05:cf:b8:89:d6:1f:02:1f:b1:52:f3:fd:7f:5a:de: 5d:3b:d0:47:25:59:31:aa:2a:35:6e:0c:e1:b0:03:3b:a1:68: d2:43:52:91:56:60:5f:42:74:67:74:9c:ae:17:5b:4b:60:f6: 70:81:fc:46:e8:8b:47:eb:9b:d1:8a:36:14:ba:a7:d0:6a:d1: e4:a0:2a:c2:52:ca:ac:a7:2f:81:a9:90:a5:68:84:71:ec:d9: ba:b3:e8:91:b4:4c:0e:b7:d6:9f:de:c5:c0:a1:e3:63:ef:eb: e8:6c:56:28:63:03:6d:dd:f0:63:35:b9:33:c5:e9:33:a1:90: 47:8b:7d:f1:20:fd:d9:2a:23:60:9c:c8:1a:c0:e9:f0:60:5b: c4:b2:92:57:ed:91:23:db:71:fa:ba:d1:1b:ba:bb:bc:f6:75: 89:87:03:2b:38:06:5a:76:07:99:16:21:bc:8e:c1:87:33:98: 86:94:51:19:8a:fd:d8:86:de:61:7e:43:24:cc:bc:b7:f8:56: 4a:3a:ac:6f:fd:2e:0f:89:c0:9b:51:5e:6b:94:d5:38:78:f0: 37:ac:67:85:94:0a:eb:43:05:7a:13:93:e1:61:77:85:28:02: 0f:cb:a0:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSjcqJrATWsKVgTNCgmtz5q2SZkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMDI0WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTg2NmFlNGMzODhiZWI5MDA4ZWY2ZGU3YTRjM2ZlMTIy NDFmM2QyNjUyMTc1M2IwNWIyMjI3YzAzODVjYjQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvMZT6TjuXv6XW8zykv0mjghPugPIKKllgLpeaDEC8Xti1 FeyP42YDnHUeSDDZdbOtV86ESbjkkeigc3O8xi2ng2wiDnG7kfpByjdGJdiA3/0z bOKYQZg768Z+KOb7OMIuq/4/OYbsALp4phxGQUty8eYJAMYqMNUG0cQBptZ0sFKs PdEvvNcScN2Asnuw+OrfxWunZZmIDhN7kFUdrfo7609fLVgk3Sc9PApYVKFOHUIb Nt1iyFkL5TVuQa7O58vJ1wZNOFl+F8x0ywOWaHwAarsfKIv3sngkbpf1o8GQKbOh PpuF/M+QSdD6kLq4i+paBDNJComeEEPZbZOf0ECFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgW16JP9criYMqb1lbs6Zv12N32EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyZjMxNGIyLWY0MmUtNGIxZS05NzllLTkwZGYzYmFhNDY5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeCZQAwDQYJKoZIhvcNAQELBQADggEBAHq+8IMIuqnI0ujw5DYlmwQLKrxw wAXPuInWHwIfsVLz/X9a3l070EclWTGqKjVuDOGwAzuhaNJDUpFWYF9CdGd0nK4X W0tg9nCB/Eboi0frm9GKNhS6p9Bq0eSgKsJSyqynL4GpkKVohHHs2bqz6JG0TA63 1p/excCh42Pv6+hsVihjA23d8GM1uTPF6TOhkEeLffEg/dkqI2CcyBrA6fBgW8Sy klftkSPbcfq60Ru6u7z2dYmHAys4Blp2B5kWIbyOwYczmIaUURmK/diG3mF+QyTM vLf4Vko6rG/9Lg+JwJtRXmuU1Th48DesZ4WUCutDBXoTk+Fhd4UoAg/LoN4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:48 2025 by rpki-client