$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa File: 78823995-1ea3-458b-919e-48e1b3b2cfc4.roa (raw, json) Hash identifier: GROCbO7hY/QMwD2LME/hJRimPaamnBSTrtA8vjr5VI4= Subject key identifier: D1:B9:0D:5C:71:AA:AA:A5:B5:06:46:81:49:AF:FB:47:82:3F:7F:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FD477CB08C19C0996554FD5FC55271683DED8E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa Signing time: Wed 16 Jul 2025 00:00:56 +0000 ROA not before: Wed 16 Jul 2025 00:00:56 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 129.30.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d4:77:cb:08:c1:9c:09:96:55:4f:d5:fc:55:27:16:83:de:d8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:00:56 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=39b0098828fdf80837fa4e7806df1aa8e4f5d8fd638dc8bef0a3971bbc38b496, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:4a:50:6c:9a:3a:3a:3f:5d:02:47:88:71: 0a:de:e9:47:16:93:b6:a0:78:73:d3:a1:43:7d:da: 8e:59:eb:e5:dc:76:7f:11:46:1f:83:99:83:7d:1c: b4:a8:bb:a4:b6:05:1d:be:f8:1b:44:49:af:75:81: fa:95:a5:ed:8c:0a:88:e7:cc:49:22:a9:15:40:0f: 07:cf:87:e6:cd:e8:9d:63:f6:fd:c1:87:37:22:25: 3e:a9:7e:db:2c:e6:1a:45:57:91:fc:b1:58:cd:13: 20:71:61:c0:d9:4f:d6:33:b9:bb:87:38:a0:3c:25: 10:9b:65:76:a7:7f:bd:14:02:1b:95:e3:a2:8a:d6: 2b:d9:c9:27:48:4a:0d:f5:2f:c1:78:f0:bb:63:e7: 12:f9:7a:fd:1e:8b:88:72:e0:3d:5e:b0:93:48:33: 69:a1:d0:54:60:b1:84:cd:01:0f:ee:de:d6:5e:55: e5:d6:a2:a4:0f:49:55:43:43:2f:71:d2:08:7f:e0: c8:10:ff:92:2b:a2:ab:2b:87:a4:47:08:70:51:ce: 46:c3:2e:1e:d5:a4:af:f3:24:a6:0c:d1:32:d4:bc: 7f:54:a9:7c:d8:30:04:67:97:06:79:b7:e5:e3:03: fb:be:6b:c8:0a:ad:d0:e0:3c:07:2a:02:2f:d0:4d: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B9:0D:5C:71:AA:AA:A5:B5:06:46:81:49:AF:FB:47:82:3F:7F:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:6e:1b:f7:67:2a:76:1d:5f:d6:1f:37:16:36:b7:28:fc:11: ff:75:a3:56:65:57:8a:94:87:50:88:2c:70:63:44:e5:08:a5: ab:a7:29:6f:cc:f1:f7:5b:11:38:a9:54:75:e6:bb:f6:a7:ff: 1f:3f:3a:7e:65:8d:9f:9b:8f:00:67:81:8b:33:ee:7f:79:d6: a2:14:9d:c4:12:42:b4:ca:4e:71:74:75:04:44:d9:31:30:64: 35:17:f4:85:9d:d3:2f:f3:47:ec:73:4d:54:85:8c:18:5f:f1: 00:9b:cc:58:35:0e:b3:74:ce:ca:62:01:8b:0d:04:2a:d9:eb: cf:7d:e1:c7:8e:97:98:26:55:12:d8:34:14:ef:f8:f4:50:13: d6:8f:94:04:0c:c5:ba:94:5e:5f:56:66:0f:58:21:9c:b9:09: da:ca:91:e3:09:fd:1b:c9:31:52:bd:88:1d:2c:70:16:e0:a5: b7:cd:d6:6a:69:fb:41:aa:9a:a3:b4:14:92:12:ba:aa:60:d2: 63:19:d7:94:48:e6:ed:36:c5:47:df:07:d4:89:6c:cc:2b:d0: 87:7f:16:4b:cd:1e:4b:01:8e:54:66:68:98:7e:72:4f:c3:d8: 1f:d5:70:47:40:21:33:02:66:19:47:37:a9:92:c9:79:32:e8: 67:49:28:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf9R3ywjBnAmWVU/V/FUnFoPe2OkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAwMDU2WhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWIwMDk4ODI4ZmRmODA4MzdmYTRlNzgwNmRmMWFhOGU0 ZjVkOGZkNjM4ZGM4YmVmMGEzOTcxYmJjMzhiNDk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnw0pQbJo6Oj9dAkeIcQre6UcWk7ageHPToUN92o5Z6+Xc dn8RRh+DmYN9HLSou6S2BR2++BtESa91gfqVpe2MCojnzEkiqRVADwfPh+bN6J1j 9v3BhzciJT6pftss5hpFV5H8sVjNEyBxYcDZT9YzubuHOKA8JRCbZXanf70UAhuV 46KK1ivZySdISg31L8F48Ltj5xL5ev0ei4hy4D1esJNIM2mh0FRgsYTNAQ/u3tZe VeXWoqQPSVVDQy9x0gh/4MgQ/5Iroqsrh6RHCHBRzkbDLh7VpK/zJKYM0TLUvH9U qXzYMARnlwZ5t+XjA/u+a8gKrdDgPAcqAi/QTYtrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0bkNXHGqqqW1BkaBSa/7R4I/f6EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ODIzOTk1LTFlYTMtNDU4Yi05MTllLTQ4ZTFiM2IyY2ZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCBHjANBgkqhkiG9w0BAQsFAAOCAQEAB24b92cqdh1f1h83Fja3KPwR/3Wj VmVXipSHUIgscGNE5Qilq6cpb8zx91sROKlUdea79qf/Hz86fmWNn5uPAGeBizPu f3nWohSdxBJCtMpOcXR1BETZMTBkNRf0hZ3TL/NH7HNNVIWMGF/xAJvMWDUOs3TO ymIBiw0EKtnrz33hx46XmCZVEtg0FO/49FAT1o+UBAzFupReX1ZmD1ghnLkJ2sqR 4wn9G8kxUr2IHSxwFuClt83Wamn7Qaqao7QUkhK6qmDSYxnXlEjm7TbFR98H1Ils zCvQh38WS80eSwGOVGZomH5yT8PYH9VwR0AhMwJmGUc3qZLJeTLoZ0koAg== -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:40 2025 by rpki-client