$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa File: 4ba35884-742e-42ee-a410-8e26638067ef.roa (raw, json) Hash identifier: Ys4vbhRsSthJ4ZpvIUrfNJvqRrakHDSn/wWyvTTBKrI= Subject key identifier: 3C:E2:2C:3C:86:64:C7:5C:44:20:58:CB:C3:A6:A6:57:00:59:68:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EA44261E4B7F7DBC5BAFEDEEA77A6E42248A16C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa Signing time: Tue 22 Jul 2025 00:11:01 +0000 ROA not before: Tue 22 Jul 2025 00:11:01 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a4:42:61:e4:b7:f7:db:c5:ba:fe:de:ea:77:a6:e4:22:48:a1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:11:01 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=f2ce5e314fbcf4ed8a96198232706cc33ff528b57e667dcd1904c6aa57dc5915, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:f3:53:1d:ac:98:0c:57:ac:53:bb:79:44: 8e:2c:35:6b:59:e2:1e:f9:77:be:1b:bc:f0:eb:85: ef:aa:cf:51:a8:ba:6a:41:08:8b:20:54:b3:0a:9e: 1d:72:88:42:50:1b:75:12:f5:92:b4:bc:d4:c9:41: 47:49:f8:cf:ad:2e:c5:0b:78:fe:bc:66:c5:8e:04: f3:7f:68:ea:73:8f:a4:54:cb:0f:b4:7d:00:5e:7b: 46:7d:2e:f9:4e:c1:9d:6d:0e:47:e5:84:78:92:b6: 8c:f2:be:fd:b1:9f:2b:ad:f5:be:84:87:6a:cd:30: 8e:e9:b2:7c:15:26:47:c2:c8:ab:f7:c4:3d:5f:06: 34:4f:4a:43:24:b3:e0:e0:6d:69:c5:ad:81:55:ba: 06:f9:2c:86:d3:5d:84:30:34:6f:d0:ca:1a:97:5d: 53:54:18:2b:c9:2f:d7:fa:8f:f6:b8:03:45:90:6d: 4a:2b:49:38:22:2d:a6:92:85:43:6b:aa:0c:1e:ff: 2f:84:09:8d:a0:41:8f:63:5c:a0:9d:59:a4:99:62: 1b:b5:56:82:c8:ba:9e:86:c6:e1:97:fa:75:ca:9e: 59:c7:ff:b3:03:2d:b3:2a:96:9d:11:81:ec:dc:6e: 7e:c4:54:35:ee:76:f5:9d:64:e1:76:e7:8d:96:6d: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E2:2C:3C:86:64:C7:5C:44:20:58:CB:C3:A6:A6:57:00:59:68:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.48.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:0f:5b:44:52:8a:c9:ed:9a:60:74:15:84:2e:34:0e:02:5f: 82:a0:f2:29:c3:cf:24:a0:41:70:29:22:3c:d0:8a:85:b9:f6: 09:22:03:69:bb:b3:d8:91:dc:14:68:74:70:ca:34:c9:1c:49: 84:47:6d:8b:77:ec:af:2a:bc:a5:6d:1e:bd:c1:92:c6:c8:01: f3:4b:06:15:97:d9:14:f5:79:71:91:2c:12:52:a7:f8:7d:63: bd:ab:1a:a7:3e:9c:1c:4c:30:56:07:36:da:bc:66:5b:5c:3c: 96:4c:eb:61:93:32:fb:0e:1f:e3:e1:f2:d7:3d:76:8f:84:55: 14:10:24:63:30:e1:87:12:60:6a:db:8d:4d:40:5d:ec:cd:e3: fa:cb:02:f8:31:83:3b:ab:73:2c:51:eb:23:1d:96:a7:32:7a: ba:68:06:c7:49:e5:c6:71:73:7f:08:5f:67:4e:6d:b2:72:67: 21:5d:19:48:e8:13:19:39:22:8d:28:2e:87:6f:93:fb:95:47: 30:dd:9b:79:a2:84:4f:79:a9:07:a7:68:c7:e5:1d:8e:de:03: a1:b6:1e:72:f6:b5:51:24:1f:a5:8d:59:fa:9b:37:42:a0:f3: ec:23:5c:22:f3:31:f2:ec:33:ab:bd:78:b4:28:7c:fb:56:65: d0:69:18:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHqRCYeS399vFuv7e6nem5CJIoWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAxMTAxWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmNlNWUzMTRmYmNmNGVkOGE5NjE5ODIzMjcwNmNjMzNm ZjUyOGI1N2U2NjdkY2QxOTA0YzZhYTU3ZGM1OTE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYBPNTHayYDFesU7t5RI4sNWtZ4h75d74bvPDrhe+qz1Go umpBCIsgVLMKnh1yiEJQG3US9ZK0vNTJQUdJ+M+tLsULeP68ZsWOBPN/aOpzj6RU yw+0fQBee0Z9LvlOwZ1tDkflhHiStozyvv2xnyut9b6Eh2rNMI7psnwVJkfCyKv3 xD1fBjRPSkMks+DgbWnFrYFVugb5LIbTXYQwNG/QyhqXXVNUGCvJL9f6j/a4A0WQ bUorSTgiLaaShUNrqgwe/y+ECY2gQY9jXKCdWaSZYhu1VoLIup6GxuGX+nXKnlnH /7MDLbMqlp0Rgezcbn7EVDXudvWdZOF2542WbZcTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPOIsPIZkx1xEIFjLw6amVwBZaDkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiYTM1ODg0LTc0MmUtNDJlZS1hNDEwLThlMjY2MzgwNjdlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNkDAwDQYJKoZIhvcNAQELBQADggEBAJ8PW0RSisntmmB0FYQuNA4CX4Kg 8inDzySgQXApIjzQioW59gkiA2m7s9iR3BRodHDKNMkcSYRHbYt37K8qvKVtHr3B ksbIAfNLBhWX2RT1eXGRLBJSp/h9Y72rGqc+nBxMMFYHNtq8ZltcPJZM62GTMvsO H+Ph8tc9do+EVRQQJGMw4YcSYGrbjU1AXezN4/rLAvgxgzurcyxR6yMdlqcyerpo BsdJ5cZxc38IX2dObbJyZyFdGUjoExk5Io0oLodvk/uVRzDdm3mihE95qQenaMfl HY7eA6G2HnL2tVEkH6WNWfqbN0Kg8+wjXCLzMfLsM6u9eLQofPtWZdBpGH8= -----END CERTIFICATE-----Generated at Sun Aug 10 10:39:26 2025 by rpki-client