$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa File: 6ba4f922-5b17-4233-add8-fdd64b141cce.roa (raw, json) Hash identifier: X2XNUIRQh3RTHn02AKbNszzAaY5BsKkrxZC7ClbKX4A= Subject key identifier: 5B:CB:43:D8:3E:5B:50:27:D8:8F:BE:ED:8D:66:FE:C5:E4:6C:6A:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C8DC61BA697247A73A297CCA5FD56A678AFEBD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa Signing time: Fri 01 Aug 2025 15:11:08 +0000 ROA not before: Fri 01 Aug 2025 15:11:08 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.21.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8d:c6:1b:a6:97:24:7a:73:a2:97:cc:a5:fd:56:a6:78:af:eb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:11:08 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=f987af5445f1387e4b7e94a19955cdf26a98509c78538f837413f538c88876c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:91:e6:75:7b:b6:d2:d6:39:85:9b:80:11: 7f:80:1f:07:2f:06:44:42:86:b3:75:fc:6a:55:32: 9f:0e:d6:9a:3e:d1:f8:c2:a0:d8:02:de:cc:07:68: bc:45:39:05:09:fe:b9:5f:00:54:58:4a:e1:e0:bb: 95:38:33:63:b8:2e:a7:1f:8f:c7:1d:1f:14:01:77: 3a:53:ba:1a:da:47:0f:d7:bf:1d:97:e7:a4:89:c4: be:af:f0:9b:23:21:64:69:44:65:eb:b6:c6:02:55: 34:30:4b:e7:64:2d:f3:08:a2:ef:01:a2:d5:a5:9e: d6:f1:08:12:4c:2c:a6:54:e6:3a:52:22:4c:d9:69: 6f:f6:ab:46:ca:3f:13:08:3b:04:3d:ae:a8:a9:0a: da:44:2f:1a:d1:55:ad:0e:86:b9:f5:3c:e9:a9:9f: f9:f5:5f:5a:74:71:69:04:99:04:b4:5d:4d:cc:86: 74:a8:27:c1:1c:82:09:bc:0a:4c:9e:02:27:ea:e0: 8f:27:5c:be:25:ea:2b:9c:9e:6d:7f:b6:7c:71:f7: f3:24:47:c2:75:ac:71:25:38:a6:20:2d:04:01:fb: b0:58:bf:e9:f4:0e:65:d1:19:a5:f5:4e:52:53:02: 0a:f2:4b:b9:ff:c0:5b:6a:98:d0:b8:fb:26:e8:fa: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:43:D8:3E:5B:50:27:D8:8F:BE:ED:8D:66:FE:C5:E4:6C:6A:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.128.0/18 Signature Algorithm: sha256WithRSAEncryption 25:47:7b:42:a5:d4:d4:cc:5d:ee:c0:a3:c2:54:31:4d:6d:21: 92:3e:fa:a6:53:00:16:c8:79:ef:a6:d9:84:f2:21:dc:d3:e1: 39:f5:2c:b4:cc:38:6c:a6:1f:70:53:cd:72:19:74:d1:2e:b3: 78:4d:00:e1:dd:bd:d0:fb:09:7f:29:99:57:ea:f8:33:d7:6c: 0a:96:a7:bd:5f:c5:cb:b9:96:43:3d:1a:7c:97:0d:ac:1d:3e: 58:d4:35:a6:81:cb:16:b7:60:99:68:b8:b4:39:11:7e:79:86: fe:ad:fa:a9:35:b3:3d:9c:dc:4e:bd:da:af:d6:db:96:eb:0c: 76:83:1c:7e:9b:80:64:53:7a:b1:99:15:94:2e:28:a2:a4:fd: 97:f5:e7:cc:59:fa:cc:44:ed:64:c3:af:82:bd:df:c0:65:94: 40:3c:78:d7:ba:9f:1c:63:bb:6c:15:16:3f:df:19:c8:11:f4: 04:c2:7e:7a:0e:03:52:d7:11:9c:e3:1e:5a:d5:ad:2d:28:a5: 32:a3:cf:af:1b:72:27:7a:d7:aa:31:cb:94:32:f2:45:06:30: 89:15:b3:c4:72:ec:62:f6:d2:23:d5:c0:e7:b1:53:2c:09:cd: 38:7c:33:06:d6:e4:a1:64:49:b7:d4:e0:6d:96:f6:0d:85:86: 90:e6:59:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXI3GG6aXJHpzopfMpf1Wpniv69MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMTA4WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTg3YWY1NDQ1ZjEzODdlNGI3ZTk0YTE5OTU1Y2RmMjZh OTg1MDljNzg1MzhmODM3NDEzZjUzOGM4ODg3NmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2NpHmdXu20tY5hZuAEX+AHwcvBkRChrN1/GpVMp8O1po+ 0fjCoNgC3swHaLxFOQUJ/rlfAFRYSuHgu5U4M2O4Lqcfj8cdHxQBdzpTuhraRw/X vx2X56SJxL6v8JsjIWRpRGXrtsYCVTQwS+dkLfMIou8BotWlntbxCBJMLKZU5jpS IkzZaW/2q0bKPxMIOwQ9rqipCtpELxrRVa0Ohrn1POmpn/n1X1p0cWkEmQS0XU3M hnSoJ8Ecggm8CkyeAifq4I8nXL4l6iucnm1/tnxx9/MkR8J1rHElOKYgLQQB+7BY v+n0DmXRGaX1TlJTAgryS7n/wFtqmNC4+ybo+vxHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW8tD2D5bUCfYj77tjWb+xeRsagcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYTRmOTIyLTViMTctNDIzMy1hZGQ4LWZkZDY0YjE0MWNjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbCFYAwDQYJKoZIhvcNAQELBQADggEBACVHe0Kl1NTMXe7Ao8JUMU1tIZI+ +qZTABbIee+m2YTyIdzT4Tn1LLTMOGymH3BTzXIZdNEus3hNAOHdvdD7CX8pmVfq +DPXbAqWp71fxcu5lkM9GnyXDawdPljUNaaByxa3YJlouLQ5EX55hv6t+qk1sz2c 3E692q/W25brDHaDHH6bgGRTerGZFZQuKKKk/Zf158xZ+sxE7WTDr4K938BllEA8 eNe6nxxju2wVFj/fGcgR9ATCfnoOA1LXEZzjHlrVrS0opTKjz68bcid616oxy5Qy 8kUGMIkVs8Ry7GL20iPVwOexUywJzTh8MwbW5KFkSbfU4G2W9g2FhpDmWZk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:40 2025 by rpki-client