$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa File: 60f85a40-3034-46e1-a52b-6569867c71a0.roa (raw, json) Hash identifier: 5+36kqVZEwANZc0OhthWIkEkl8EJw1Sx0SclDzmd0wY= Subject key identifier: 73:A8:9C:13:92:43:F4:73:EA:67:99:BC:A8:4A:FA:84:33:9D:86:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75C824452E2A2639A4FE9FCBC626876C9D759502 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa Signing time: Fri 01 Aug 2025 15:00:31 +0000 ROA not before: Fri 01 Aug 2025 15:00:31 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 147.108.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:24:45:2e:2a:26:39:a4:fe:9f:cb:c6:26:87:6c:9d:75:95:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:00:31 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=e40c1ecd67c4aee11a0b3ac2b12c74c5c049279f33bf1beeba58c05d1fae1e90, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:15:fd:b5:1d:b5:2e:fe:4b:0a:3c:41:53: a5:b2:de:68:41:e0:f6:af:a1:83:8a:bd:e9:af:85: d2:bb:d3:e2:8b:16:cf:a0:fb:40:01:48:a0:a9:b8: 0f:a8:c0:ba:b6:a6:e3:d6:4e:f1:2b:6c:51:f5:06: 88:10:7f:16:42:a5:4f:ff:d3:55:3f:02:64:01:34: 1b:00:ec:f0:52:c1:74:3a:83:2e:17:6a:5a:cf:d0: 77:9a:e1:ed:0e:51:ee:a5:1e:ab:9c:31:37:a2:35: d7:62:32:22:1d:17:b3:54:71:4e:90:1e:f4:85:e8: f9:8e:64:61:e5:40:ad:2c:fe:19:fb:00:53:a8:50: f2:5b:d1:62:17:b1:4f:50:bb:da:ec:b6:5b:ae:66: c1:fa:46:2e:5e:c1:8d:b5:4f:47:bb:cc:c3:e5:a1: 22:f2:0d:77:3b:38:ee:cc:cb:5f:6f:d2:24:cd:e7: 83:91:7b:bc:d1:4d:ea:fa:15:04:2e:57:a6:8b:8b: 36:0e:f0:81:19:a6:60:ad:cb:5f:f7:0a:39:0e:05: 80:9b:68:71:9c:b5:00:73:5a:6d:83:8d:88:f4:24: ea:71:96:4d:0e:bc:65:8f:70:f6:44:ff:37:7b:6e: 63:ca:c5:1f:56:85:ba:19:72:5d:4b:17:63:84:db: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A8:9C:13:92:43:F4:73:EA:67:99:BC:A8:4A:FA:84:33:9D:86:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:1e:43:f6:33:0e:91:64:28:bb:ec:05:f2:5b:bb:70:1b:60: 59:46:26:f9:5d:d8:64:02:24:28:f4:bd:2d:bc:18:85:29:56: d4:ee:f8:a4:ed:0c:3d:ad:9d:f3:39:90:f2:3e:95:76:a0:eb: 45:a2:5c:2f:2a:11:02:1d:a9:20:8b:0c:0c:2f:d3:5c:f5:7e: b8:cd:69:e7:80:3d:cb:0a:e3:78:50:1d:6f:0a:2b:32:5b:90: a5:4e:6d:8b:49:9e:59:48:26:ff:7f:f9:db:e7:6a:0f:87:7a: 50:d3:b1:d5:4b:f3:2a:b6:10:3d:ba:89:47:84:98:bc:af:87: b1:70:e0:19:9a:f9:61:a3:17:7a:46:f8:ba:a9:27:00:9a:e2: c5:6e:f4:b4:d6:b4:03:97:9d:42:0f:f1:52:5f:1c:06:93:11: bd:2b:ab:bc:eb:db:68:a4:19:6f:2b:8d:74:67:88:47:8f:d9: 5c:a3:47:57:d7:80:3d:7a:1c:f6:dd:72:e3:d9:cf:f3:f1:e6: 83:40:be:35:27:0b:3b:db:ff:66:eb:45:ed:5c:99:dd:e0:58: 58:d2:6f:36:ee:61:2b:64:00:c3:2e:bb:25:29:62:4a:40:6b: a3:37:a9:36:2e:37:9d:ee:8e:c6:b8:8c:e5:eb:bc:1d:5e:96: 46:d3:b5:dc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdcgkRS4qJjmk/p/LxiaHbJ11lQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUwMDMxWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDBjMWVjZDY3YzRhZWUxMWEwYjNhYzJiMTJjNzRjNWMw NDkyNzlmMzNiZjFiZWViYTU4YzA1ZDFmYWUxZTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2pRX9tR21Lv5LCjxBU6Wy3mhB4PavoYOKvemvhdK70+KL Fs+g+0ABSKCpuA+owLq2puPWTvErbFH1BogQfxZCpU//01U/AmQBNBsA7PBSwXQ6 gy4XalrP0Hea4e0OUe6lHqucMTeiNddiMiIdF7NUcU6QHvSF6PmOZGHlQK0s/hn7 AFOoUPJb0WIXsU9Qu9rstluuZsH6Ri5ewY21T0e7zMPloSLyDXc7OO7My19v0iTN 54ORe7zRTer6FQQuV6aLizYO8IEZpmCty1/3CjkOBYCbaHGctQBzWm2DjYj0JOpx lk0OvGWPcPZE/zd7bmPKxR9WhboZcl1LF2OE2x6LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUc6icE5JD9HPqZ5m8qEr6hDOdhvswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwZjg1YTQwLTMwMzQtNDZlMS1hNTJiLTY1Njk4NjdjNzFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCTbDANBgkqhkiG9w0BAQsFAAOCAQEAoR5D9jMOkWQou+wF8lu7cBtgWUYm +V3YZAIkKPS9LbwYhSlW1O74pO0MPa2d8zmQ8j6VdqDrRaJcLyoRAh2pIIsMDC/T XPV+uM1p54A9ywrjeFAdbworMluQpU5ti0meWUgm/3/52+dqD4d6UNOx1UvzKrYQ PbqJR4SYvK+HsXDgGZr5YaMXekb4uqknAJrixW70tNa0A5edQg/xUl8cBpMRvSur vOvbaKQZbyuNdGeIR4/ZXKNHV9eAPXoc9t1y49nP8/Hmg0C+NScLO9v/ZutF7VyZ 3eBYWNJvNu5hK2QAwy67JSliSkBrozepNi43ne6OxriM5eu8HV6WRtO13A== -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:03 2025 by rpki-client