$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa File: 77f68970-d1fc-44f1-b19a-60ec049cd06a.roa (raw, json) Hash identifier: ZXew3ctPeo5Gom38bY9GZprGiwSKKp2QibapHXtbEXI= Subject key identifier: 73:02:4F:CC:94:03:AA:A0:B4:45:83:C9:04:1A:AA:7B:D2:12:3D:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 217238929D5E353B549F97892813E499E7E724BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa Signing time: Tue 05 Aug 2025 00:20:29 +0000 ROA not before: Tue 05 Aug 2025 00:20:29 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.153.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:72:38:92:9d:5e:35:3b:54:9f:97:89:28:13:e4:99:e7:e7:24:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:20:29 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=1436e2a92c3c1869d2dd526c07807a2fe7c9fe2e5e02e18a37b58f7e4fa2e5b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:3f:7d:d2:b4:3a:fb:2e:0a:f8:4d:c2:c6: b9:bc:9b:19:e9:b0:df:ab:c9:51:d6:35:a2:7d:d0: 0a:35:01:18:90:cd:58:48:50:ca:e5:97:4d:b6:63: f0:01:c2:80:28:aa:4b:21:0b:fc:8d:5a:6d:88:7e: e8:98:f1:ad:70:15:8b:ba:f8:7a:27:68:b3:31:05: 5e:89:bd:b8:e8:c8:af:c2:f0:2e:da:6d:1d:de:ed: aa:6f:ca:78:20:21:33:e5:91:4a:42:fe:c9:df:01: c8:60:df:bf:1a:83:41:a2:2b:c6:7e:9e:65:db:9e: 0e:38:16:3f:01:30:90:26:84:63:fa:1a:8d:14:c7: f6:2f:2f:11:51:71:ea:4c:4c:d4:7b:6d:41:24:5e: 8f:bb:0f:63:9d:db:cd:2d:69:d8:c4:40:c8:2c:bc: 0b:3e:7b:a9:fc:77:22:c1:8e:c3:52:29:20:8c:e9: e3:51:4c:a4:f9:cb:f8:f9:40:5c:80:c9:3f:30:ae: b3:a8:15:dc:83:a7:0c:70:0b:06:ff:05:b0:f7:07: 03:45:6d:09:ea:76:8b:de:63:32:01:9c:64:6e:47: 68:d2:63:ff:90:e1:f2:58:48:ec:ef:95:df:e0:32: 1e:f8:04:83:36:7f:d8:90:4c:0d:52:20:5e:35:49: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:02:4F:CC:94:03:AA:A0:B4:45:83:C9:04:1A:AA:7B:D2:12:3D:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption d6:f2:07:7b:1b:62:82:f8:f5:b5:05:bc:24:6c:31:cf:9e:b2: 61:37:4a:6a:73:67:bf:7f:21:1d:5a:4a:97:b6:2c:89:ea:e6: e2:3d:7d:3a:3d:99:e1:ff:1c:02:e9:7a:d5:80:b1:6f:52:43: 82:5e:81:cc:35:98:d3:6b:8d:ae:37:48:e9:6c:21:74:08:f0: 80:e5:c6:b9:4c:bd:ad:2e:79:96:a6:9b:78:37:17:e0:ca:26: f2:be:98:9d:56:e1:ed:2c:b7:5f:56:3b:2d:ef:bc:25:71:ae: 04:aa:1f:3d:07:b2:9e:1a:ff:16:84:2b:84:c1:9e:35:3a:05: f8:39:f4:d0:40:2c:bf:e8:15:88:b4:90:8e:52:3a:90:67:a8: a7:c6:81:0e:54:48:34:2c:88:f4:23:3a:72:96:92:4f:8b:32: 76:2e:41:fc:dd:5b:2e:b3:3f:96:d8:d1:f5:0e:34:0c:fe:a6: 11:b1:58:19:6c:56:12:99:cc:98:80:65:44:89:a1:31:d8:a9: 4d:59:d9:01:6c:bc:31:dc:b6:4e:32:f6:ab:a4:38:e7:10:24: c3:b4:a8:56:90:4a:f6:54:ac:52:da:a4:cd:63:9d:d7:ea:b4: d3:51:90:12:73:ef:6d:b4:d5:c1:18:b2:fb:a3:db:60:18:e9: 42:32:a9:75 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIXI4kp1eNTtUn5eJKBPkmefnJLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAyMDI5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDM2ZTJhOTJjM2MxODY5ZDJkZDUyNmMwNzgwN2EyZmU3 YzlmZTJlNWUwMmUxOGEzN2I1OGY3ZTRmYTJlNWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXlj990rQ6+y4K+E3Cxrm8mxnpsN+ryVHWNaJ90Ao1ARiQ zVhIUMrll022Y/ABwoAoqkshC/yNWm2IfuiY8a1wFYu6+HonaLMxBV6JvbjoyK/C 8C7abR3e7apvynggITPlkUpC/snfAchg378ag0GiK8Z+nmXbng44Fj8BMJAmhGP6 Go0Ux/YvLxFRcepMTNR7bUEkXo+7D2Od280tadjEQMgsvAs+e6n8dyLBjsNSKSCM 6eNRTKT5y/j5QFyAyT8wrrOoFdyDpwxwCwb/BbD3BwNFbQnqdoveYzIBnGRuR2jS Y/+Q4fJYSOzvld/gMh74BIM2f9iQTA1SIF41SSxTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcwJPzJQDqqC0RYPJBBqqe9ISPcMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc3ZjY4OTcwLWQxZmMtNDRmMS1iMTlhLTYwZWMwNDljZDA2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4mTANBgkqhkiG9w0BAQsFAAOCAQEA1vIHextigvj1tQW8JGwxz56yYTdK anNnv38hHVpKl7Ysierm4j19Oj2Z4f8cAul61YCxb1JDgl6BzDWY02uNrjdI6Wwh dAjwgOXGuUy9rS55lqabeDcX4Mom8r6YnVbh7Sy3X1Y7Le+8JXGuBKofPQeynhr/ FoQrhMGeNToF+Dn00EAsv+gViLSQjlI6kGeop8aBDlRINCyI9CM6cpaST4sydi5B /N1bLrM/ltjR9Q40DP6mEbFYGWxWEpnMmIBlRImhMdipTVnZAWy8Mdy2TjL2q6Q4 5xAkw7SoVpBK9lSsUtqkzWOd1+q001GQEnPvbbTVwRiy+6PbYBjpQjKpdQ== -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:08 2025 by rpki-client