$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c52b36e-fe93-4270-998d-6381790a4666.roa File: 6c52b36e-fe93-4270-998d-6381790a4666.roa (raw, json) Hash identifier: WO3oR8YNoogW8f1zMMrQo7CIE8B397Z+pxbzNk0kwfE= Subject key identifier: 65:BA:65:7C:24:74:1F:2F:AE:47:F9:A1:06:B6:44:D1:A3:65:DC:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46930D6D6E7694C37C26459D934A54935F58C18A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c52b36e-fe93-4270-998d-6381790a4666.roa Signing time: Tue 05 Aug 2025 19:51:59 +0000 ROA not before: Tue 05 Aug 2025 19:51:59 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.166.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:93:0d:6d:6e:76:94:c3:7c:26:45:9d:93:4a:54:93:5f:58:c1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 19:51:59 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=3ac39b69784a5182dfca62032d8aa1625193bf219a4c9cb12287bf0e04b4c789, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:00:7d:00:3a:2d:2d:4f:31:6e:bb:4c:e9: 3c:f6:29:8a:ef:94:a8:7e:5f:c4:05:21:61:44:e3: 64:ab:66:56:81:55:d4:85:46:6d:44:45:54:9d:af: 95:76:54:c3:fa:62:4f:b2:eb:55:60:bf:df:9b:c4: 7a:6b:ef:65:77:58:6b:56:09:aa:97:0a:9a:04:b1: ef:f6:f8:6a:6b:bc:9f:fa:b1:6a:bf:bc:d5:60:58: 20:2c:69:a3:39:e1:a3:73:0d:8f:ce:34:fd:96:b4: 2b:49:8e:01:6d:38:c2:25:5d:e2:aa:bc:5d:93:d4: 3f:0f:38:47:bd:b4:86:3b:10:06:9d:77:53:9f:a9: 48:3d:8e:60:0c:80:c6:c4:96:b6:68:72:45:2e:67: 1c:31:ae:f0:3e:3c:56:05:2b:72:cb:8c:5f:3e:8d: fd:9d:8f:cc:09:89:54:8b:e9:4b:a9:0a:07:8c:39: c5:8d:d6:4d:b8:6d:06:7c:54:85:86:80:e3:99:ad: ae:74:30:98:fe:1b:e9:aa:c6:e4:50:3f:54:12:a9: f5:de:59:38:6d:cb:8c:0e:be:1b:68:d8:15:5c:36: 93:19:50:df:7a:37:72:27:cb:e0:ce:2c:a2:a8:61: 11:78:7e:de:4b:b8:46:9d:96:bd:3b:b6:89:ca:12: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:65:7C:24:74:1F:2F:AE:47:F9:A1:06:B6:44:D1:A3:65:DC:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c52b36e-fe93-4270-998d-6381790a4666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.166.0.0/15 Signature Algorithm: sha256WithRSAEncryption 96:6f:ab:71:0d:d4:54:45:52:2b:88:7d:15:1a:b4:9a:be:ee: 1f:d0:0c:3d:53:bc:de:c6:df:61:a0:c2:0f:52:76:fa:81:64: ce:2f:fc:b8:f2:56:d5:64:a9:9d:c3:6d:03:be:0d:e3:d8:13: 7e:9d:86:c9:57:4e:c9:0c:29:61:ab:fa:94:c6:8e:3c:ab:76: 20:51:ec:6b:5c:cb:2d:5c:b0:15:17:68:65:d0:ca:6d:5f:d9: 13:a2:eb:9e:df:4a:76:93:95:30:12:a7:72:ca:39:b9:00:b2: 3e:39:34:4e:c5:ac:e3:11:99:00:e4:56:d2:78:d0:25:f9:1e: 0d:74:42:0d:d4:d0:76:11:7f:4c:c6:e5:d8:77:e7:64:b5:19: 75:e7:1b:5f:d1:8a:b1:60:88:89:dd:0c:a5:a0:11:8c:93:0f: 3a:76:1d:32:a7:79:2c:0e:b7:96:d0:b9:af:60:95:69:ef:f8: 6c:f8:57:71:57:99:93:42:53:7c:ce:2a:5a:d3:db:95:d6:6e: 90:3b:87:0d:c3:0b:d4:9f:d8:4a:a4:53:14:f0:ad:71:28:d7: 59:bd:fc:f0:ee:bd:62:ee:29:9e:6d:2a:aa:55:28:23:85:d2: 87:2d:25:35:93:cc:59:32:46:da:a7:76:af:7c:08:ca:bb:0d: 68:f6:46:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURpMNbW52lMN8JkWdk0pUk19YwYowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTk1MTU5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWMzOWI2OTc4NGE1MTgyZGZjYTYyMDMyZDhhYTE2MjUx OTNiZjIxOWE0YzljYjEyMjg3YmYwZTA0YjRjNzg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf6QB9ADotLU8xbrtM6Tz2KYrvlKh+X8QFIWFE42SrZlaB VdSFRm1ERVSdr5V2VMP6Yk+y61Vgv9+bxHpr72V3WGtWCaqXCpoEse/2+GprvJ/6 sWq/vNVgWCAsaaM54aNzDY/ONP2WtCtJjgFtOMIlXeKqvF2T1D8POEe9tIY7EAad d1OfqUg9jmAMgMbElrZockUuZxwxrvA+PFYFK3LLjF8+jf2dj8wJiVSL6UupCgeM OcWN1k24bQZ8VIWGgOOZra50MJj+G+mqxuRQP1QSqfXeWThty4wOvhto2BVcNpMZ UN96N3Iny+DOLKKoYRF4ft5LuEadlr07tonKEqk/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZbplfCR0Hy+uR/mhBrZE0aNl3PcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjNTJiMzZlLWZlOTMtNDI3MC05OThkLTYzODE3OTBhNDY2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENpjANBgkqhkiG9w0BAQsFAAOCAQEAlm+rcQ3UVEVSK4h9FRq0mr7uH9AM PVO83sbfYaDCD1J2+oFkzi/8uPJW1WSpncNtA74N49gTfp2GyVdOyQwpYav6lMaO PKt2IFHsa1zLLVywFRdoZdDKbV/ZE6Lrnt9KdpOVMBKncso5uQCyPjk0TsWs4xGZ AORW0njQJfkeDXRCDdTQdhF/TMbl2HfnZLUZdecbX9GKsWCIid0MpaARjJMPOnYd Mqd5LA63ltC5r2CVae/4bPhXcVeZk0JTfM4qWtPbldZukDuHDcML1J/YSqRTFPCt cSjXWb388O69Yu4pnm0qqlUoI4XShy0lNZPMWTJG2qd2r3wIyrsNaPZGfw== -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:53 2025 by rpki-client