$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa File: 40f3125c-a240-4e96-98f9-38d7861a1143.roa (raw, json) Hash identifier: 78vHlWT++XXYCiGvoKxm19j1zLvm1gvHyyQZ7Hr+5Ds= Subject key identifier: 4C:7B:F0:2F:50:87:66:EC:21:91:D3:46:2E:06:A5:2B:BB:A8:90:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AEB2E98A478C874C6BA89B69361F8ABE284D277 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa Signing time: Wed 23 Jul 2025 00:22:19 +0000 ROA not before: Wed 23 Jul 2025 00:22:19 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.73.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:eb:2e:98:a4:78:c8:74:c6:ba:89:b6:93:61:f8:ab:e2:84:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:22:19 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=c2b2523fa8a85184f6c6d3513bad92b2af637841795e2ff5ebf1d555530a3120, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:0b:40:ea:d4:2b:b2:7a:fd:84:e4:bd:bc: 14:d3:6e:7b:b2:92:87:7c:99:f1:c7:38:4b:30:61: ab:d6:b0:c6:8f:e4:df:88:ae:94:fb:ba:4b:43:0f: 73:6a:74:73:c5:73:35:11:e0:c6:5a:39:13:89:96: d2:cb:82:46:2c:5e:c4:bc:95:8c:da:ff:02:11:f6: bc:49:5e:dc:9a:02:ec:b5:de:98:14:77:f9:1b:8c: fd:b5:7f:13:6b:7c:9a:1f:65:67:aa:35:e3:72:d8: 9e:e6:39:87:b6:4b:7f:d2:8d:13:53:e8:4f:1a:35: 93:0d:40:23:65:0c:73:2f:68:23:a5:82:fe:eb:fb: 7f:40:2a:fc:98:6b:8a:e0:fc:8b:b8:8a:5c:75:87: d3:c4:e7:29:c3:84:8d:df:7a:d1:f0:5a:d0:d3:76: 78:3c:50:91:af:98:b3:e9:01:fa:5c:07:5c:6d:4c: 11:b4:dc:8a:1b:36:f4:34:52:9e:b2:1b:64:11:3c: 1c:6b:a8:af:15:eb:ea:4c:c5:88:e8:9c:69:ac:34: 4b:2f:8f:22:4b:2d:0a:ec:c4:e6:1d:64:a5:7d:32: 79:01:87:45:1e:ad:d7:c6:c4:7e:79:62:0f:03:05: 84:70:c4:17:c9:a7:07:ee:db:0e:1a:da:e0:1b:ec: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:F0:2F:50:87:66:EC:21:91:D3:46:2E:06:A5:2B:BB:A8:90:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.73.152.0/21 Signature Algorithm: sha256WithRSAEncryption 44:28:88:0b:bc:ba:68:6d:36:6d:15:0e:00:23:41:14:13:58: cb:0a:e4:14:19:e0:bd:2c:e2:8a:9c:6c:95:b3:c5:60:7b:ec: 32:e4:9b:78:72:c6:e5:d1:bd:bc:45:cf:b2:07:9f:05:9b:cb: ca:53:ac:8b:f4:de:d8:2b:aa:06:66:2c:d2:84:86:62:18:5b: a6:2a:fd:a0:37:47:79:42:b8:56:a9:51:9d:38:c4:02:4a:bc: 35:32:40:3d:a6:02:46:d7:64:65:06:ed:33:cf:d2:96:ca:0f: f5:3c:d9:ae:3c:d4:50:c5:92:7e:0d:81:f4:b7:a3:ad:53:52: fb:6c:1c:58:a7:c6:69:f7:0f:38:69:e2:8b:99:ef:ed:99:cc: 91:01:3d:30:27:66:71:af:e6:6d:ce:cf:bb:f0:69:e9:48:d5: d5:8a:2f:7a:d7:6a:96:0d:89:82:e2:10:e1:d5:18:9a:18:58: d0:77:ab:b1:8a:73:05:59:35:c5:16:88:f3:80:ba:19:90:ce: d8:59:1c:4f:02:00:90:5f:ad:f6:0d:a7:86:46:e7:99:e6:92: e1:98:37:e4:2e:bb:3b:84:a0:37:c6:0c:a0:cf:60:6d:14:12: 99:a3:b2:c9:83:6f:6e:f5:05:d9:b2:5a:45:29:f5:15:31:5c: 2c:74:7b:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKusumKR4yHTGuom2k2H4q+KE0ncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAyMjE5WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmIyNTIzZmE4YTg1MTg0ZjZjNmQzNTEzYmFkOTJiMmFm NjM3ODQxNzk1ZTJmZjVlYmYxZDU1NTUzMGEzMTIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLJgtA6tQrsnr9hOS9vBTTbnuykod8mfHHOEswYavWsMaP 5N+IrpT7uktDD3NqdHPFczUR4MZaOROJltLLgkYsXsS8lYza/wIR9rxJXtyaAuy1 3pgUd/kbjP21fxNrfJofZWeqNeNy2J7mOYe2S3/SjRNT6E8aNZMNQCNlDHMvaCOl gv7r+39AKvyYa4rg/Iu4ilx1h9PE5ynDhI3fetHwWtDTdng8UJGvmLPpAfpcB1xt TBG03IobNvQ0Up6yG2QRPBxrqK8V6+pMxYjonGmsNEsvjyJLLQrsxOYdZKV9MnkB h0UerdfGxH55Yg8DBYRwxBfJpwfu2w4a2uAb7PDzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTHvwL1CHZuwhkdNGLgalK7uokBAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZjMxMjVjLWEyNDAtNGU5Ni05OGY5LTM4ZDc4NjFhMTE0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SZgwDQYJKoZIhvcNAQELBQADggEBAEQoiAu8umhtNm0VDgAjQRQTWMsK 5BQZ4L0s4oqcbJWzxWB77DLkm3hyxuXRvbxFz7IHnwWby8pTrIv03tgrqgZmLNKE hmIYW6Yq/aA3R3lCuFapUZ04xAJKvDUyQD2mAkbXZGUG7TPP0pbKD/U82a481FDF kn4NgfS3o61TUvtsHFinxmn3Dzhp4ouZ7+2ZzJEBPTAnZnGv5m3Oz7vwaelI1dWK L3rXapYNiYLiEOHVGJoYWNB3q7GKcwVZNcUWiPOAuhmQzthZHE8CAJBfrfYNp4ZG 55nmkuGYN+QuuzuEoDfGDKDPYG0UEpmjssmDb271BdmyWkUp9RUxXCx0ews= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:38 2025 by rpki-client