$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa File: 3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa (raw, json) Hash identifier: u3EkxHh42QCt1SJ86fTt2GNvjIRb0tP/WUlH9eq/oX4= Subject key identifier: 3C:D5:36:11:8C:82:FC:79:0B:00:8A:94:D7:9F:38:22:F9:5E:F3:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67B09741B94CB9DC82C37164342A1FC8F96F0092 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa Signing time: Mon 04 Aug 2025 15:50:31 +0000 ROA not before: Mon 04 Aug 2025 15:50:31 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.78.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b0:97:41:b9:4c:b9:dc:82:c3:71:64:34:2a:1f:c8:f9:6f:00:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:50:31 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=9394953d319219532edf8e82c5fd7821c991b42890a75c9a1f80472e5dd32ea3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:76:c0:5c:4b:a1:63:07:e5:37:cc:6b:04: 1a:05:a4:78:6e:64:09:d2:f2:f7:77:3f:28:2f:29: 94:14:af:be:ed:49:94:75:a5:18:77:f5:e0:b4:a0: d6:b6:86:16:32:aa:8e:45:78:4f:c9:84:84:88:b9: 83:f9:57:77:98:52:bc:e3:58:82:13:ff:3b:56:4e: bd:b9:c0:c3:01:31:89:66:53:bf:16:42:9c:f1:f8: 87:c1:70:92:1a:74:55:3c:1c:f9:18:af:19:85:46: 82:8a:d8:2c:eb:1c:91:8b:00:7a:02:7e:0b:60:d9: 2c:d2:58:cd:df:44:6c:cd:98:5f:61:b0:3a:85:ef: e8:8f:16:89:55:84:76:4c:cc:21:83:6d:35:03:8e: b0:36:e8:09:33:99:28:37:b8:94:d9:5b:4d:e3:1f: f8:31:7a:64:2f:da:5f:1b:0a:5a:b5:d7:be:62:37: 4b:f8:bc:44:a2:bf:ba:9b:d9:f4:bf:70:55:83:c9: f6:03:87:61:f0:72:ae:a6:90:46:13:c4:75:16:a3: 0f:9a:0e:f7:e2:7c:aa:99:aa:8b:4c:43:27:8c:83: be:41:2e:ab:06:44:30:aa:12:1b:b3:9f:f4:4b:8a: bb:c9:40:1f:f6:74:69:cf:ff:c9:e5:f4:fc:43:7c: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:36:11:8C:82:FC:79:0B:00:8A:94:D7:9F:38:22:F9:5E:F3:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.78.128.0/21 Signature Algorithm: sha256WithRSAEncryption ab:02:75:c2:87:8a:1b:03:7b:c4:b8:b7:a7:cb:e7:e5:93:bf: 9e:eb:92:6d:8f:e3:12:4b:71:d1:4b:80:f8:05:0b:26:cd:bb: 5f:ee:bd:c8:c0:03:95:53:0b:c0:e7:86:ee:45:97:fd:1c:29: c1:d0:30:28:3b:a5:3c:b0:cf:2d:e6:77:8b:a3:63:d3:9f:fd: ba:e1:08:3a:c6:bc:a9:c2:8d:51:b6:56:81:78:4f:56:fe:d0: e5:72:bd:69:2c:7c:d9:5d:4e:80:2d:9b:f2:84:33:0c:37:2a: 52:2f:59:6c:15:7a:d5:6c:37:ee:b7:0d:09:77:44:35:e6:17: 6f:85:29:ba:ec:b0:6b:e5:e0:e9:25:11:83:c1:b8:e2:bf:9f: 1e:25:e3:f1:f8:50:cd:75:24:2a:21:12:01:27:3d:25:7a:95: 03:05:ed:b0:d8:a4:63:e0:ab:f3:44:ff:ca:77:84:f9:f8:d5: 6d:ec:98:2e:1a:59:ad:65:6e:77:2b:21:b7:45:9e:95:e0:08: 6b:3f:73:8a:3d:c0:ec:23:d3:af:32:ee:c3:41:11:2b:e8:bc: 42:12:3f:fb:8a:91:d5:36:17:17:28:f3:bf:73:31:8a:2f:76: d9:24:eb:ee:78:6a:5e:8c:c2:60:e5:19:b6:2e:95:51:3a:db: be:b8:73:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ7CXQblMudyCw3FkNCofyPlvAJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU1MDMxWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Mzk0OTUzZDMxOTIxOTUzMmVkZjhlODJjNWZkNzgyMWM5 OTFiNDI4OTBhNzVjOWExZjgwNDcyZTVkZDMyZWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDANHbAXEuhYwflN8xrBBoFpHhuZAnS8vd3PygvKZQUr77t SZR1pRh39eC0oNa2hhYyqo5FeE/JhISIuYP5V3eYUrzjWIIT/ztWTr25wMMBMYlm U78WQpzx+IfBcJIadFU8HPkYrxmFRoKK2CzrHJGLAHoCfgtg2SzSWM3fRGzNmF9h sDqF7+iPFolVhHZMzCGDbTUDjrA26AkzmSg3uJTZW03jH/gxemQv2l8bClq1175i N0v4vESiv7qb2fS/cFWDyfYDh2Hwcq6mkEYTxHUWow+aDvfifKqZqotMQyeMg75B LqsGRDCqEhuzn/RLirvJQB/2dGnP/8nl9PxDfFF5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPNU2EYyC/HkLAIqU1584Ivle890wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhYzhiMDNlLTA3NTItNGY0My04YjM4LWVlY2EyNmM5Y2ZmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQToAwDQYJKoZIhvcNAQELBQADggEBAKsCdcKHihsDe8S4t6fL5+WTv57r km2P4xJLcdFLgPgFCybNu1/uvcjAA5VTC8Dnhu5Fl/0cKcHQMCg7pTywzy3md4uj Y9Of/brhCDrGvKnCjVG2VoF4T1b+0OVyvWksfNldToAtm/KEMww3KlIvWWwVetVs N+63DQl3RDXmF2+FKbrssGvl4OklEYPBuOK/nx4l4/H4UM11JCohEgEnPSV6lQMF 7bDYpGPgq/NE/8p3hPn41W3smC4aWa1lbncrIbdFnpXgCGs/c4o9wOwj068y7sNB ESvovEISP/uKkdU2Fxco879zMYovdtkk6+54al6MwmDlGbYulVE62764czE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:24:51 2025 by rpki-client