$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa File: 68598716-8ef3-4659-8c2a-ea94e7225c46.roa (raw, json) Hash identifier: DY3Lz5QzaLM4duwTkDd1sqNL8bMnRMMnR/XwQLrt4n8= Subject key identifier: 8F:D0:AE:72:4A:87:B3:44:87:91:4C:F3:B1:5D:57:47:71:A7:D7:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 134AD279C1CB2BDFC4A7ADBBC53F53959E3D5EB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa Signing time: Wed 06 Aug 2025 00:30:24 +0000 ROA not before: Wed 06 Aug 2025 00:30:24 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4a:d2:79:c1:cb:2b:df:c4:a7:ad:bb:c5:3f:53:95:9e:3d:5e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:30:24 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=426730c71051d60ac8d33533a8d843ff176cdec901362ce7368b2231b0c64465, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:49:62:9e:43:1b:1a:3f:e0:29:19:d4:94: 1a:f6:df:d8:5f:52:97:ef:10:b5:71:17:8e:05:57: e9:39:a7:39:44:6f:0f:0d:4a:0d:6b:0a:fb:2d:51: 82:ec:f7:16:ae:df:d1:ba:75:41:a4:61:cb:9e:57: 88:ab:61:d7:cd:14:d5:ed:b2:32:9c:27:07:35:1e: 0c:1f:18:46:25:84:70:e5:e1:06:51:36:f7:2b:7d: 10:75:6b:7f:4b:10:4a:3a:87:c5:4f:e5:e6:d5:db: 0c:13:8b:81:0c:2d:6f:b8:7d:4a:eb:30:fe:2c:12: 3a:f7:30:fd:3c:01:ac:46:7f:07:43:09:56:aa:d9: 58:85:75:7d:7d:d8:e2:e9:7a:49:9a:97:42:3f:43: fd:88:ed:28:5d:92:fe:85:f9:75:45:0d:7b:a1:c1: 66:78:54:bc:d5:11:15:16:12:de:56:3b:c7:df:ac: 54:98:b0:4b:d3:52:ef:27:00:4a:93:5a:fe:27:83: 81:4b:78:5e:88:92:48:49:ec:ce:a8:06:ea:e3:f5: 96:f5:a2:24:2d:82:19:0c:78:91:5e:c4:ce:80:a6: ab:a7:9d:0d:ce:b1:58:f8:f7:cc:ee:13:19:8d:47: cc:dd:62:25:a3:bc:d8:34:7d:e8:0e:8d:9b:e9:0e: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:AE:72:4A:87:B3:44:87:91:4C:F3:B1:5D:57:47:71:A7:D7:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:11:99:3a:41:9c:c3:d5:99:34:d4:eb:8d:4a:57:12:6b:f1: 3b:8b:e1:83:03:9b:f7:5d:3b:5c:e6:ce:f6:36:9b:5b:8f:65: d0:f3:29:30:0a:d9:f7:b2:e7:97:89:83:6a:a1:91:06:da:c9: e7:5f:0d:05:b5:dc:fe:3f:1c:06:62:df:5a:6b:65:51:ef:8a: 4f:cb:f0:9d:ce:76:04:22:ce:c3:c6:92:5b:8b:00:c8:79:8b: d7:d3:37:40:72:fe:ef:2a:c4:91:c7:3c:ca:a5:26:87:cb:6f: f3:6f:a6:2c:a8:77:84:fb:0d:59:bd:c1:ce:33:ff:81:2a:9d: 01:51:80:e2:81:1b:86:bb:68:9c:7a:44:3f:5b:54:65:c7:fc: 49:f7:63:b7:4d:bd:02:84:1e:e9:bc:e0:8c:3f:bc:88:35:01: b3:9b:52:f1:38:4c:0c:6f:fa:05:df:34:34:0c:9e:72:8f:40: 1d:75:4e:f5:7c:75:d5:2c:be:69:1b:39:6e:94:c7:fb:84:c1: ce:bc:c4:16:c4:63:19:b9:c4:27:9c:f7:43:5e:df:fe:6e:ba: f5:23:27:aa:be:18:8b:c5:8e:3c:3a:09:e6:8d:87:2c:c1:4e: d3:13:e7:26:e4:30:de:99:03:cf:c4:dd:f0:61:79:43:c0:db: 6c:22:d5:d0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE0rSecHLK9/Ep627xT9TlZ49XrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAzMDI0WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjY3MzBjNzEwNTFkNjBhYzhkMzM1MzNhOGQ4NDNmZjE3 NmNkZWM5MDEzNjJjZTczNjhiMjIzMWIwYzY0NDY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxSUlinkMbGj/gKRnUlBr239hfUpfvELVxF44FV+k5pzlE bw8NSg1rCvstUYLs9xau39G6dUGkYcueV4irYdfNFNXtsjKcJwc1HgwfGEYlhHDl 4QZRNvcrfRB1a39LEEo6h8VP5ebV2wwTi4EMLW+4fUrrMP4sEjr3MP08AaxGfwdD CVaq2ViFdX192OLpekmal0I/Q/2I7Shdkv6F+XVFDXuhwWZ4VLzVERUWEt5WO8ff rFSYsEvTUu8nAEqTWv4ng4FLeF6IkkhJ7M6oBurj9Zb1oiQtghkMeJFexM6Apqun nQ3OsVj498zuExmNR8zdYiWjvNg0fegOjZvpDqyLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj9CuckqHs0SHkUzzsV1XR3Gn15swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NTk4NzE2LThlZjMtNDY1OS04YzJhLWVhOTRlNzIyNWM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAopzANBgkqhkiG9w0BAQsFAAOCAQEAaBGZOkGcw9WZNNTrjUpXEmvxO4vh gwOb9107XObO9jabW49l0PMpMArZ97Lnl4mDaqGRBtrJ518NBbXc/j8cBmLfWmtl Ue+KT8vwnc52BCLOw8aSW4sAyHmL19M3QHL+7yrEkcc8yqUmh8tv82+mLKh3hPsN Wb3BzjP/gSqdAVGA4oEbhrtonHpEP1tUZcf8Sfdjt029AoQe6bzgjD+8iDUBs5tS 8ThMDG/6Bd80NAyeco9AHXVO9Xx11Sy+aRs5bpTH+4TBzrzEFsRjGbnEJ5z3Q17f /m669SMnqr4Yi8WOPDoJ5o2HLMFO0xPnJuQw3pkDz8Td8GF5Q8DbbCLV0A== -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:01 2025 by rpki-client