$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa File: 41a88a73-93bb-44b8-90fd-a8b74cf86175.roa (raw, json) Hash identifier: 7tJjNhavrGlIweGRwet4ejV7xt72eLsv4mXXEGVbApc= Subject key identifier: B8:19:C2:DD:85:D8:60:2B:34:99:D0:B8:0C:CE:B8:CC:76:D1:80:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64952AD8342C397BA46D50A8C5B010629C49B464 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa Signing time: Sat 19 Jul 2025 00:41:11 +0000 ROA not before: Sat 19 Jul 2025 00:41:11 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 74.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:95:2a:d8:34:2c:39:7b:a4:6d:50:a8:c5:b0:10:62:9c:49:b4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:41:11 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=9dddf5a9bb7eef81c1e4ffae091c4a49ec6b108262fbd75b5fc9f35b20f9e769, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:6e:41:f9:e0:9b:f8:72:21:e5:84:44:23: eb:a7:c7:41:68:2d:60:8e:8f:58:a9:c0:4c:51:30: 44:d2:59:25:7f:9f:f5:b7:7c:77:ae:6b:1a:7e:8d: ef:e1:47:96:58:c4:4f:ea:28:e6:56:04:5b:d1:81: 26:6c:cc:9f:7c:46:27:69:1f:14:9e:4b:58:3e:1d: a0:57:22:d1:0c:ec:06:c1:fb:64:9e:cf:ed:1a:07: 65:ec:2a:4e:7b:46:2c:85:7b:3f:7c:e9:2d:6c:a9: cc:db:74:77:8c:44:1f:09:cf:70:22:d5:e3:21:f0: 94:a3:f6:25:80:bd:e0:50:ed:9b:8f:24:1d:94:93: 4d:de:f1:a2:fe:6c:3d:b8:a1:1d:0a:73:19:98:b2: d4:81:2a:d8:f8:a6:be:d1:cf:d0:7e:8b:ed:8f:df: 15:f8:c8:42:41:b7:c2:dc:1b:99:f8:5d:71:0e:d1: aa:05:d6:22:54:96:26:09:a8:b4:b2:f9:e3:0a:dd: b2:72:30:66:cd:84:9a:1e:00:05:bc:b9:92:33:5e: 50:e3:c1:67:0d:3b:8b:25:d7:12:b3:e8:71:cf:6a: ee:6d:56:8c:be:45:cd:cc:92:c6:90:ea:2e:0d:4a: 76:53:d2:4f:a1:26:bd:66:b7:ae:53:a5:91:9f:df: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:C2:DD:85:D8:60:2B:34:99:D0:B8:0C:CE:B8:CC:76:D1:80:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:6c:d6:4e:15:75:b6:31:85:c1:a9:59:ec:3b:bb:6b:78:9f: ba:18:ea:f8:ec:28:85:6b:e9:d8:84:4d:02:92:b3:04:7f:4a: 34:15:ab:d0:dd:ca:b2:7b:64:be:f9:83:7f:43:3e:ab:58:56: 21:17:ef:0a:a9:fa:66:f4:f0:b4:d8:d2:53:49:39:a3:5d:3f: 08:c1:93:cb:61:de:ad:60:9b:27:d0:f2:2b:6c:c0:e2:99:a0: 54:ab:52:c9:45:e7:a8:1b:b8:6e:13:7c:1d:f3:b6:6d:2e:4a: 58:3f:01:e9:a1:52:87:ed:7b:12:54:65:47:8c:17:1d:68:ff: 9e:48:ef:aa:46:5b:d4:76:76:17:2c:53:1a:e7:d3:19:99:ca: 4a:93:a0:b8:4e:6d:7d:6a:42:df:f3:21:9a:f3:e3:cc:0d:f6: e8:99:0a:6a:7c:c5:31:04:bb:9d:b3:ef:f2:43:64:fe:fd:51: 2c:5a:58:61:8d:e0:d0:f0:73:2f:e5:f6:66:e6:65:f4:69:ef: 9b:fc:d8:85:8e:b9:dc:86:d1:4d:4d:9a:90:b0:b6:4f:0b:b3: 1f:90:81:46:a4:35:43:62:c6:a7:82:17:9a:bf:9c:fa:48:d5: 9d:5a:02:a2:22:39:1e:cb:60:d6:c1:11:ce:52:db:b5:c0:ed: 0d:89:33:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZJUq2DQsOXukbVCoxbAQYpxJtGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MTExWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGRkZjVhOWJiN2VlZjgxYzFlNGZmYWUwOTFjNGE0OWVj NmIxMDgyNjJmYmQ3NWI1ZmM5ZjM1YjIwZjllNzY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvLW5B+eCb+HIh5YREI+unx0FoLWCOj1ipwExRMETSWSV/ n/W3fHeuaxp+je/hR5ZYxE/qKOZWBFvRgSZszJ98RidpHxSeS1g+HaBXItEM7AbB +2Sez+0aB2XsKk57RiyFez986S1sqczbdHeMRB8Jz3Ai1eMh8JSj9iWAveBQ7ZuP JB2Uk03e8aL+bD24oR0KcxmYstSBKtj4pr7Rz9B+i+2P3xX4yEJBt8LcG5n4XXEO 0aoF1iJUliYJqLSy+eMK3bJyMGbNhJoeAAW8uZIzXlDjwWcNO4sl1xKz6HHPau5t Voy+Rc3MksaQ6i4NSnZT0k+hJr1mt65TpZGf34WlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuBnC3YXYYCs0mdC4DM64zHbRgBkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxYTg4YTczLTkzYmItNDRiOC05MGZkLWE4Yjc0Y2Y4NjE3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBK5jANBgkqhkiG9w0BAQsFAAOCAQEAlGzWThV1tjGFwalZ7Du7a3ifuhjq +OwohWvp2IRNApKzBH9KNBWr0N3KsntkvvmDf0M+q1hWIRfvCqn6ZvTwtNjSU0k5 o10/CMGTy2HerWCbJ9DyK2zA4pmgVKtSyUXnqBu4bhN8HfO2bS5KWD8B6aFSh+17 ElRlR4wXHWj/nkjvqkZb1HZ2FyxTGufTGZnKSpOguE5tfWpC3/MhmvPjzA326JkK anzFMQS7nbPv8kNk/v1RLFpYYY3g0PBzL+X2ZuZl9Gnvm/zYhY653IbRTU2akLC2 TwuzH5CBRqQ1Q2LGp4IXmr+c+kjVnVoCoiI5Hstg1sERzlLbtcDtDYkz/Q== -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:01 2025 by rpki-client