$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa File: 550ca0bb-4e09-403b-882c-301eea6f0a9e.roa (raw, json) Hash identifier: 3LtKycdIgmDJJauqdMiMGhbZpzDCvtnFYWuRGf1ojLo= Subject key identifier: 5F:F1:9F:2D:66:27:AC:DF:24:96:38:D8:B5:61:F2:72:84:5E:7A:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C1442F8F2637684EF1B3A1239F1AE8CFE571C37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa Signing time: Fri 25 Jul 2025 00:40:19 +0000 ROA not before: Fri 25 Jul 2025 00:40:19 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:14:42:f8:f2:63:76:84:ef:1b:3a:12:39:f1:ae:8c:fe:57:1c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:40:19 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=54d6a2b7355b2b3c168e24f7f2479e908749f23d5c9f8634c15c4920d15c619c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:f3:53:ac:8e:98:2b:fe:fe:b3:ca:82:6d: af:e9:41:d5:13:98:9b:ae:33:78:e6:c8:e4:1e:02: 00:fd:17:27:c4:50:85:13:51:f4:0f:dc:eb:9c:45: 79:f2:1c:a8:a5:0d:06:5e:4c:74:1a:e0:11:fa:cb: 60:a9:fc:11:66:d0:c0:9b:08:c2:be:1d:8d:48:89: b0:01:e7:b9:c4:8c:48:a9:24:82:96:ea:90:e6:8f: b3:f9:9d:74:34:39:a0:7d:fe:c7:02:24:2d:00:4c: d2:5f:d5:d1:90:bd:e5:24:1a:45:ea:8f:8c:61:17: 9b:95:7e:52:df:e9:fd:0a:39:46:d0:aa:0e:9f:93: 1b:ba:54:3c:e9:33:05:67:c8:c7:01:40:c1:e0:5c: 1e:9e:c1:89:bc:50:8b:52:6a:5c:9a:ea:c2:32:79: b2:cd:9a:10:e2:42:15:e8:dd:85:e8:dc:1a:c3:9b: 9c:cc:f8:c6:bd:72:21:49:cb:d9:71:e7:3f:02:bb: ac:5e:75:db:2a:8e:0f:91:80:b9:65:6d:c5:15:a8: 67:b1:db:6f:e1:28:43:bf:1b:f4:f6:1d:b4:a4:a0: 7b:c2:32:f0:3b:7a:ca:7e:69:a0:62:85:53:8f:60: fd:61:d5:a7:01:15:af:13:0b:08:68:65:27:94:73: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:9F:2D:66:27:AC:DF:24:96:38:D8:B5:61:F2:72:84:5E:7A:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.152.0/21 Signature Algorithm: sha256WithRSAEncryption 60:54:bc:3a:50:34:ee:16:c1:6f:89:ab:3f:fb:f0:21:b5:49: b2:f3:86:80:7f:8e:74:44:cf:0f:6e:26:77:ac:d0:19:47:c3: 0b:fe:5e:a3:b0:18:de:cb:86:95:33:90:e1:91:ea:d6:0b:9b: a2:74:6f:6b:7a:5b:3f:7d:18:1c:16:2b:34:16:dc:e7:f5:ab: 44:40:d4:77:4b:78:e4:4e:d7:3f:b2:04:28:b8:19:8a:1d:da: 21:48:84:7f:33:60:e5:1e:fa:0d:8e:71:dd:07:2d:16:1b:cf: 0b:c0:1d:05:2b:49:60:bc:3b:9a:35:dd:a7:ea:93:31:b5:34: c9:1a:2e:0f:34:00:5c:bf:51:09:51:ee:a8:61:d5:81:d6:10: f2:6b:b6:18:5f:1a:61:83:f1:bf:89:f5:8e:25:d1:5b:16:55: bc:84:b5:e8:7b:4c:c0:43:68:78:1e:f4:5a:e4:31:d6:69:0a: 08:72:4c:6c:a6:49:44:51:d1:0d:d3:70:d0:17:a4:b9:6f:92: 75:cf:17:25:98:50:8d:9c:8c:a4:f1:fa:d4:f6:63:b0:90:0a: c3:47:d9:da:7f:08:6c:5c:43:34:ca:de:c9:a7:35:b4:ba:c5: 93:ae:48:de:4e:f2:88:8b:7d:be:af:06:36:7a:b8:3b:ba:1f: c4:f8:53:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPBRC+PJjdoTvGzoSOfGujP5XHDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDA0MDE5WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGQ2YTJiNzM1NWIyYjNjMTY4ZTI0ZjdmMjQ3OWU5MDg3 NDlmMjNkNWM5Zjg2MzRjMTVjNDkyMGQxNWM2MTljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/DvNTrI6YK/7+s8qCba/pQdUTmJuuM3jmyOQeAgD9FyfE UIUTUfQP3OucRXnyHKilDQZeTHQa4BH6y2Cp/BFm0MCbCMK+HY1IibAB57nEjEip JIKW6pDmj7P5nXQ0OaB9/scCJC0ATNJf1dGQveUkGkXqj4xhF5uVflLf6f0KOUbQ qg6fkxu6VDzpMwVnyMcBQMHgXB6ewYm8UItSalya6sIyebLNmhDiQhXo3YXo3BrD m5zM+Ma9ciFJy9lx5z8Cu6xeddsqjg+RgLllbcUVqGex22/hKEO/G/T2HbSkoHvC MvA7esp+aaBihVOPYP1h1acBFa8TCwhoZSeUc7iLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX/GfLWYnrN8kljjYtWHycoReemcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1MGNhMGJiLTRlMDktNDAzYi04ODJjLTMwMWVlYTZmMGE5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl5gwDQYJKoZIhvcNAQELBQADggEBAGBUvDpQNO4WwW+Jqz/78CG1SbLz hoB/jnREzw9uJnes0BlHwwv+XqOwGN7LhpUzkOGR6tYLm6J0b2t6Wz99GBwWKzQW 3Of1q0RA1HdLeORO1z+yBCi4GYod2iFIhH8zYOUe+g2Ocd0HLRYbzwvAHQUrSWC8 O5o13afqkzG1NMkaLg80AFy/UQlR7qhh1YHWEPJrthhfGmGD8b+J9Y4l0VsWVbyE teh7TMBDaHge9FrkMdZpCghyTGymSURR0Q3TcNAXpLlvknXPFyWYUI2cjKTx+tT2 Y7CQCsNH2dp/CGxcQzTK3smnNbS6xZOuSN5O8oiLfb6vBjZ6uDu6H8T4U98= -----END CERTIFICATE-----Generated at Thu Aug 7 04:31:29 2025 by rpki-client