$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa File: 7812bdff-a702-4659-8989-c79feeb052dd.roa (raw, json) Hash identifier: VlyNfG2afAmlYOPOYNY/4C50Swwtz9DxqjTHfhOvOUI= Subject key identifier: 47:78:44:6E:DD:C8:40:A6:D7:5E:EA:1D:C2:55:5A:5E:68:50:83:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 645933103334A0C9CFDA22C5B9ED4D3D02FC2B3E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa Signing time: Mon 28 Jul 2025 15:30:38 +0000 ROA not before: Mon 28 Jul 2025 15:30:38 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.198.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:59:33:10:33:34:a0:c9:cf:da:22:c5:b9:ed:4d:3d:02:fc:2b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 15:30:38 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=b772ba8b3b939b3cc3ece23d77fff750d2e1443d059f7a4506870930b9c0d88d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:14:51:68:00:aa:93:39:14:4c:8d:73:15: 76:3f:47:18:25:c4:7a:28:eb:27:4d:82:ac:1d:5a: 0a:3a:c5:ae:07:55:5e:6b:b8:a1:9a:c0:2d:a9:60: 06:4f:a8:b4:fa:3b:e4:aa:b8:06:00:a6:41:81:3c: ba:99:8f:58:69:e0:22:3c:99:ad:0c:34:66:06:0a: ca:3e:fc:bb:d1:9f:40:29:89:42:11:12:4b:28:e3: c3:80:f8:d5:96:64:c3:61:2b:e8:bf:23:c2:96:61: c6:b6:32:90:6c:80:30:0b:d1:5a:ae:46:f3:e7:c4: ee:05:78:ea:c2:9d:7b:e8:f4:08:df:0f:ab:3a:e8: c9:5c:bd:0f:c7:de:02:78:3f:ea:32:6a:5d:8d:21: 6c:a0:d5:c3:48:61:2c:f2:15:a5:59:22:c6:c2:c3: 00:79:cc:f1:3f:20:cd:87:79:f4:87:13:f2:80:31: 7d:56:15:7b:e7:36:58:18:dc:92:2b:11:6a:1a:f0: 4d:ed:01:c8:9b:aa:b4:19:b7:0f:2d:e3:4b:72:c2: b2:b4:94:de:91:0c:ee:8c:4b:d3:ba:00:2e:da:6a: 11:90:6c:61:2b:e5:8e:c1:15:2d:93:5b:39:f0:9c: 1e:44:47:cb:f4:8a:9b:1b:45:15:64:8f:57:df:1d: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:44:6E:DD:C8:40:A6:D7:5E:EA:1D:C2:55:5A:5E:68:50:83:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.198.85.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:57:27:9e:25:8f:65:66:2c:05:48:dc:cb:65:30:cd:16:ed: 1e:8f:97:1a:9f:a1:40:e2:8c:95:c6:d5:8f:ff:29:05:94:e3: e8:b1:5c:8b:53:0a:45:5a:fc:fd:bc:42:2e:4e:00:49:44:3e: 0d:51:02:cf:f3:82:d4:36:66:66:d6:09:bb:94:3b:de:f6:3c: 60:70:60:d7:bf:97:25:15:50:d5:a5:18:82:dc:17:fc:3d:12: f5:b3:08:28:a6:85:bf:f7:b6:a4:d5:50:44:41:dc:d4:20:86: 4b:04:07:57:08:09:3b:3f:e4:7d:71:4a:6d:31:ca:53:6e:6c: 55:0a:98:3e:ab:e6:58:38:ce:a3:19:fb:e9:7e:79:16:f5:9b: d4:ba:6a:4f:1b:79:e1:e1:3b:e8:14:8b:d8:54:e9:2f:02:dd: 31:cd:b4:ee:fc:c6:30:10:e6:e5:e3:aa:ae:24:8f:7b:fb:f6: 65:62:dd:df:29:31:cd:28:1c:6c:34:8c:a6:9d:99:2d:b8:84: 48:1f:e8:b7:33:3a:a0:c9:ce:c8:14:1e:00:42:f6:45:7c:2d: 8a:4e:ee:13:6e:88:56:5c:a8:40:c2:f1:81:66:4b:e9:28:53: f3:19:6b:fd:de:8c:c3:02:83:69:c8:c3:54:e8:63:23:20:97: 49:89:27:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZFkzEDM0oMnP2iLFue1NPQL8Kz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI4MTUzMDM4WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzcyYmE4YjNiOTM5YjNjYzNlY2UyM2Q3N2ZmZjc1MGQy ZTE0NDNkMDU5ZjdhNDUwNjg3MDkzMGI5YzBkODhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiJxRRaACqkzkUTI1zFXY/RxglxHoo6ydNgqwdWgo6xa4H VV5ruKGawC2pYAZPqLT6O+SquAYApkGBPLqZj1hp4CI8ma0MNGYGCso+/LvRn0Ap iUIREkso48OA+NWWZMNhK+i/I8KWYca2MpBsgDAL0VquRvPnxO4FeOrCnXvo9Ajf D6s66MlcvQ/H3gJ4P+oyal2NIWyg1cNIYSzyFaVZIsbCwwB5zPE/IM2HefSHE/KA MX1WFXvnNlgY3JIrEWoa8E3tAcibqrQZtw8t40tywrK0lN6RDO6MS9O6AC7aahGQ bGEr5Y7BFS2TWznwnB5ER8v0ipsbRRVkj1ffHduJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR3hEbt3IQKbXXuodwlVaXmhQg04wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MTJiZGZmLWE3MDItNDY1OS04OTg5LWM3OWZlZWIwNTJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYxlUwDQYJKoZIhvcNAQELBQADggEBAG1XJ54lj2VmLAVI3MtlMM0W7R6P lxqfoUDijJXG1Y//KQWU4+ixXItTCkVa/P28Qi5OAElEPg1RAs/zgtQ2ZmbWCbuU O972PGBwYNe/lyUVUNWlGILcF/w9EvWzCCimhb/3tqTVUERB3NQghksEB1cICTs/ 5H1xSm0xylNubFUKmD6r5lg4zqMZ++l+eRb1m9S6ak8beeHhO+gUi9hU6S8C3THN tO78xjAQ5uXjqq4kj3v79mVi3d8pMc0oHGw0jKadmS24hEgf6LczOqDJzsgUHgBC 9kV8LYpO7hNuiFZcqEDC8YFmS+koU/MZa/3ejMMCg2nIw1ToYyMgl0mJJ3Y= -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:32 2025 by rpki-client