$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8aa8e-8cfa-475d-b0f4-d4eefbae1433.roa File: 46d8aa8e-8cfa-475d-b0f4-d4eefbae1433.roa (raw, json) Hash identifier: n18y2pMvA4o7Zy95FY2eal20vbpwl/Bh890OEQ4Ol0E= Subject key identifier: 2A:72:DE:AF:C3:D5:DD:BD:1D:42:68:E2:CE:26:7B:AD:0F:E0:76:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CDBE54EEFB791BE85EFA3647DAEADE599196B5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8aa8e-8cfa-475d-b0f4-d4eefbae1433.roa Signing time: Tue 05 Aug 2025 00:01:21 +0000 ROA not before: Tue 05 Aug 2025 00:01:21 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 138.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:db:e5:4e:ef:b7:91:be:85:ef:a3:64:7d:ae:ad:e5:99:19:6b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:01:21 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=954a7c045a515c92bd216cb43a6a5c21983ce9a2292725732b4dcbd25dc63f0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:ec:74:ee:a9:28:db:e0:ae:f9:44:af:c6: 0e:0f:00:73:b4:59:ce:e5:e4:03:0f:62:65:29:01: e4:c1:b3:8c:ce:ac:00:a9:4e:e2:03:cf:6a:3b:b9: 8d:20:c6:d0:63:a5:95:c0:66:dd:5e:3b:14:fc:5b: ad:aa:50:91:7d:9f:66:b1:44:56:a3:7e:df:40:2f: d5:4e:19:33:ab:72:9b:e1:d8:7b:d2:15:f3:51:77: 64:5d:58:b1:14:87:75:64:7a:8f:67:aa:78:a1:a6: e1:b5:8b:fb:ce:5a:10:bc:f0:7a:2a:d9:b1:13:00: c4:b0:71:2c:c8:d4:33:5b:ed:92:7a:11:73:a7:9a: 70:ca:92:22:e4:69:bc:60:97:74:aa:ed:73:54:53: 1d:cb:47:ab:d6:98:57:14:f5:7d:03:0b:3d:c9:1a: 9a:42:02:f6:b1:43:19:f1:a1:ce:3d:62:a9:b8:12: 50:0a:9c:4e:aa:a4:fc:bf:40:b7:a7:9a:c5:6c:ab: d7:26:10:f5:33:09:71:b2:21:d4:9d:22:a8:42:a7: 27:e0:a4:6b:8a:b3:db:37:14:77:c7:f3:50:22:2d: 49:d0:96:04:b3:5d:35:13:ff:04:4a:0a:8c:a6:62: 3f:2a:fa:97:3f:f9:4d:ad:03:92:ba:2f:7d:ed:16: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:72:DE:AF:C3:D5:DD:BD:1D:42:68:E2:CE:26:7B:AD:0F:E0:76:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8aa8e-8cfa-475d-b0f4-d4eefbae1433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:bc:98:73:ab:75:c9:09:ef:89:af:f1:32:95:74:02:eb:81: 94:62:10:f2:9f:75:a3:95:77:90:19:1b:cf:9a:e8:5c:ea:cd: d7:6e:1e:0b:bc:04:f5:22:fa:9e:f5:09:e7:44:c2:aa:ed:49: 74:1c:5c:73:6b:da:e3:7a:05:e9:20:22:87:c8:87:9d:5c:83: 8f:91:9f:31:13:a8:38:5e:7c:d6:db:26:3d:ac:ce:49:7b:62: 30:9e:1f:86:2b:ed:8a:89:d7:b8:82:d7:9d:21:4e:85:48:84: 93:2b:43:4d:53:2f:b1:b2:75:7e:b6:2c:b1:67:3a:e5:d2:a3: c4:c3:a7:6a:ea:de:7c:7b:51:e7:84:ec:6d:27:49:eb:59:02: fc:00:90:dd:21:18:91:8f:81:2f:0e:ed:53:64:3f:72:aa:71: 76:7f:98:17:da:94:1a:a3:e7:92:09:22:4a:1b:5c:27:ef:08: 26:18:bc:f0:71:6d:25:21:37:88:fa:57:d5:f4:59:98:ca:c4: 7c:58:59:76:7f:98:6f:46:3f:49:26:ff:59:9e:00:c3:49:4a: 8e:9a:d9:eb:c7:3d:a1:a9:d7:52:30:7b:b2:38:74:ef:91:5f: 71:00:81:2a:dd:73:dc:c3:05:1b:b0:c2:b0:dd:2c:ba:22:71: d5:ac:36:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfNvlTu+3kb6F76Nkfa6t5ZkZa18wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAwMTIxWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTRhN2MwNDVhNTE1YzkyYmQyMTZjYjQzYTZhNWMyMTk4 M2NlOWEyMjkyNzI1NzMyYjRkY2JkMjVkYzYzZjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsy+x07qko2+Cu+USvxg4PAHO0Wc7l5AMPYmUpAeTBs4zO rACpTuIDz2o7uY0gxtBjpZXAZt1eOxT8W62qUJF9n2axRFajft9AL9VOGTOrcpvh 2HvSFfNRd2RdWLEUh3Vkeo9nqnihpuG1i/vOWhC88Hoq2bETAMSwcSzI1DNb7ZJ6 EXOnmnDKkiLkabxgl3Sq7XNUUx3LR6vWmFcU9X0DCz3JGppCAvaxQxnxoc49Yqm4 ElAKnE6qpPy/QLenmsVsq9cmEPUzCXGyIdSdIqhCpyfgpGuKs9s3FHfH81AiLUnQ lgSzXTUT/wRKCoymYj8q+pc/+U2tA5K6L33tFgopAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKnLer8PV3b0dQmjiziZ7rQ/gdggwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZDhhYThlLThjZmEtNDc1ZC1iMGY0LWQ0ZWVmYmFlMTQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCK8DANBgkqhkiG9w0BAQsFAAOCAQEAc7yYc6t1yQnvia/xMpV0AuuBlGIQ 8p91o5V3kBkbz5roXOrN124eC7wE9SL6nvUJ50TCqu1JdBxcc2va43oF6SAih8iH nVyDj5GfMROoOF581tsmPazOSXtiMJ4fhivtionXuILXnSFOhUiEkytDTVMvsbJ1 frYssWc65dKjxMOnaurefHtR54TsbSdJ61kC/ACQ3SEYkY+BLw7tU2Q/cqpxdn+Y F9qUGqPnkgkiShtcJ+8IJhi88HFtJSE3iPpX1fRZmMrEfFhZdn+Yb0Y/SSb/WZ4A w0lKjprZ68c9oanXUjB7sjh075FfcQCBKt1z3MMFG7DCsN0suiJx1aw2UQ== -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:49 2025 by rpki-client