$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa File: 3672d2f1-7991-40bd-afef-9cfaf5207b96.roa (raw, json) Hash identifier: 8cOz9NUA/lA77RNU8tkyqfxEBbeRGd9HrtLq/n4HzBU= Subject key identifier: 5A:DF:22:2A:69:03:CA:E0:44:F4:58:14:7C:91:5E:BC:12:D1:76:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 532307756368E0505CE1DFE834D63D3A1B111313 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa Signing time: Sat 19 Jul 2025 00:40:21 +0000 ROA not before: Sat 19 Jul 2025 00:40:21 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:23:07:75:63:68:e0:50:5c:e1:df:e8:34:d6:3d:3a:1b:11:13:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:40:21 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=65457318ae23e854b400c424b4aa699768d717144b852a1663264ba02c518037, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:cc:f1:2a:6d:d5:68:14:0e:20:6d:35:f5: 6e:96:df:57:46:a4:66:aa:95:6f:21:07:5b:e0:0a: 34:c6:b1:ce:9e:62:c4:eb:09:c1:91:7b:64:1e:34: b6:3a:7b:f2:75:f7:ce:02:99:a1:c4:01:d1:f4:c0: c4:6d:41:e2:46:c8:63:6b:5d:18:7e:87:54:d3:e3: ed:6a:ca:f4:9a:23:ad:45:39:b3:61:da:07:64:e4: df:3d:d3:77:99:c4:86:3f:64:1a:97:f3:81:ec:99: 46:2d:3a:7d:a5:0c:6a:4a:4f:da:bc:b1:6e:aa:87: bb:03:db:5a:78:9e:76:05:89:a6:33:27:39:d0:ad: 7d:5b:1d:27:4d:55:91:d7:0a:1d:21:8e:66:31:85: 06:be:8e:96:ac:3d:8b:45:bb:ad:98:75:38:7d:a7: 7b:37:e1:24:37:aa:6e:fc:e3:54:8c:d5:b4:f8:72: 65:e6:c1:09:f9:71:e4:a5:5a:73:9e:9e:73:86:56: e7:86:c3:ee:9d:3c:0e:2c:d9:26:a3:c9:96:12:0c: 0c:0a:b1:03:40:54:ce:73:23:e4:6e:44:6c:09:d3: 05:70:d5:be:ca:b8:38:50:61:7d:49:9f:15:88:6e: dc:c6:28:eb:0c:7f:ae:77:e8:bd:2f:70:6b:73:8f: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DF:22:2A:69:03:CA:E0:44:F4:58:14:7C:91:5E:BC:12:D1:76:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.96.0/22 Signature Algorithm: sha256WithRSAEncryption a9:bb:6f:1e:9e:08:9b:1b:42:cc:66:a5:c7:c0:3b:37:ce:03: b4:43:d1:e5:1a:e8:5c:a8:d0:9a:0f:2b:55:f2:42:e4:2a:59: 71:e3:6f:37:9e:29:8d:e5:50:7d:92:c6:84:03:92:db:f1:96: 8a:8d:ec:a1:4d:3c:22:ec:ca:04:60:76:43:ce:95:68:fd:fa: 09:00:8d:2c:38:0f:53:a5:66:08:b8:32:4d:40:c1:77:b7:99: 98:c2:22:91:f2:4f:d1:3a:7c:04:5a:8b:a6:6e:cf:56:f4:d2: 5b:a5:40:06:0a:cb:23:93:bc:32:1a:01:a3:55:9a:5d:25:d7: 83:f1:8a:c9:3c:df:9d:f0:c7:e4:1d:48:f1:69:47:7f:1d:83: ca:86:02:e1:63:c2:1e:a8:d6:30:7e:da:20:d8:94:36:77:f3: 4b:3d:42:1e:96:b6:06:b9:8d:bc:9a:51:17:bc:da:dd:06:45: 94:e9:ce:69:48:e3:13:2a:14:5d:79:c4:a4:ae:8f:e7:0e:cb: ce:37:8e:b8:eb:8f:25:33:bf:22:2e:47:e2:b3:1f:92:db:c9: 0d:da:26:8c:9d:2c:69:c7:d8:0e:75:ab:85:f8:4e:49:ef:88: 4e:83:c5:e8:83:b4:c5:ab:6e:2e:4c:cf:ba:d7:b4:02:f5:ce: 06:1a:d0:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUyMHdWNo4FBc4d/oNNY9OhsRExMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MDIxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTQ1NzMxOGFlMjNlODU0YjQwMGM0MjRiNGFhNjk5NzY4 ZDcxNzE0NGI4NTJhMTY2MzI2NGJhMDJjNTE4MDM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6wszxKm3VaBQOIG019W6W31dGpGaqlW8hB1vgCjTGsc6e YsTrCcGRe2QeNLY6e/J1984CmaHEAdH0wMRtQeJGyGNrXRh+h1TT4+1qyvSaI61F ObNh2gdk5N8903eZxIY/ZBqX84HsmUYtOn2lDGpKT9q8sW6qh7sD21p4nnYFiaYz JznQrX1bHSdNVZHXCh0hjmYxhQa+jpasPYtFu62YdTh9p3s34SQ3qm7841SM1bT4 cmXmwQn5ceSlWnOennOGVueGw+6dPA4s2SajyZYSDAwKsQNAVM5zI+RuRGwJ0wVw 1b7KuDhQYX1JnxWIbtzGKOsMf6536L0vcGtzj1szAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWt8iKmkDyuBE9FgUfJFevBLRdngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2NzJkMmYxLTc5OTEtNDBiZC1hZmVmLTljZmFmNTIwN2I5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAGAwDQYJKoZIhvcNAQELBQADggEBAKm7bx6eCJsbQsxmpcfAOzfOA7RD 0eUa6Fyo0JoPK1XyQuQqWXHjbzeeKY3lUH2SxoQDktvxloqN7KFNPCLsygRgdkPO lWj9+gkAjSw4D1OlZgi4Mk1AwXe3mZjCIpHyT9E6fARai6Zuz1b00lulQAYKyyOT vDIaAaNVml0l14Pxisk8353wx+QdSPFpR38dg8qGAuFjwh6o1jB+2iDYlDZ380s9 Qh6Wtga5jbyaURe82t0GRZTpzmlI4xMqFF15xKSuj+cOy843jrjrjyUzvyIuR+Kz H5LbyQ3aJoydLGnH2A51q4X4TknviE6DxeiDtMWrbi5Mz7rXtAL1zgYa0Kk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:40:17 2025 by rpki-client