$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa File: 7aec645b-f991-4a6c-97ff-47cd491428c4.roa (raw, json) Hash identifier: xGUT8EMtQw//+gNYFJtIeJf2fWvLloe+o7M1cms8m7U= Subject key identifier: A2:B3:87:9A:22:D3:CA:5F:A3:47:69:C6:41:09:23:45:70:D0:E7:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59FF2ADA2EF8AFF7E4CBB1A8687B21F79E7F1473 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa Signing time: Fri 25 Jul 2025 00:41:30 +0000 ROA not before: Fri 25 Jul 2025 00:41:30 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ff:2a:da:2e:f8:af:f7:e4:cb:b1:a8:68:7b:21:f7:9e:7f:14:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:41:30 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=5124204e7fffb5fc58e08944da210adb298cafd6fe7b5bc68bfc4eb307d29fe3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:ad:58:d0:8d:98:e2:b6:1a:96:b9:45:44: 1f:76:5c:17:b8:3c:fe:c0:0e:d6:9a:6c:d8:a0:fa: f8:ab:b7:86:67:66:e0:d4:8a:5f:8e:83:79:b1:9f: de:a3:0a:7d:8c:4a:24:9d:0c:7d:29:23:da:84:93: 93:05:df:ea:2c:29:25:98:67:d8:2d:3f:8a:23:14: 2b:ba:a2:14:ac:0a:aa:83:ae:c9:5c:e0:c0:69:76: 81:9c:2a:df:9f:2f:38:d1:d5:cc:dc:4d:38:0c:b6: c2:09:c7:01:49:49:f3:de:64:bd:d2:b5:da:26:b7: c4:e8:21:e9:e3:07:10:3b:3a:1d:eb:37:b9:d9:99: 96:dd:54:44:eb:2a:3d:f4:48:59:cf:2a:73:51:b6: 5e:dc:7a:92:a2:03:e8:79:37:72:d1:5d:98:5e:20: 43:b1:cd:cb:06:21:1e:9f:f5:fa:fd:28:c4:80:08: 31:45:84:28:f1:43:e9:a4:42:34:8d:28:61:79:35: b6:79:ef:f5:fb:0a:eb:98:1a:f1:eb:13:10:67:37: cd:fb:35:cd:06:9d:7a:21:9b:c3:09:14:9e:dd:48: fb:64:bb:1f:85:98:db:12:29:a7:f2:61:b7:d3:6d: 45:a9:6b:0c:92:95:90:31:cd:6a:21:ff:f1:9d:51: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:87:9A:22:D3:CA:5F:A3:47:69:C6:41:09:23:45:70:D0:E7:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:13:31:fe:86:c8:63:2d:ef:57:9c:80:89:f9:ac:d6:75:58: 7b:97:f9:ee:78:6f:01:9d:a8:04:86:15:5c:04:f4:dd:fc:05: 1c:25:30:d3:70:a3:99:3b:00:2e:66:74:03:30:26:62:2f:f8: 8f:28:b9:5e:54:cc:e6:1d:5a:20:e4:ec:95:32:56:6b:0b:92: db:2f:d1:cd:44:97:94:59:7c:f0:96:88:a9:d4:c3:e0:f2:37: 4c:a4:18:aa:b2:33:f7:ed:d9:c4:c9:4d:ab:07:30:9a:ec:5d: b8:25:83:fa:49:9a:bf:e0:a4:12:1d:70:4b:35:00:2a:06:22: fe:1c:c2:59:1a:90:8d:da:f1:b6:bd:e1:65:e2:93:81:8a:a4: 9d:b0:b4:3c:91:50:f1:21:a8:3c:6d:3a:d8:98:e8:29:65:c1: 4b:89:15:21:90:15:86:65:9e:88:56:05:f1:a0:02:dd:fb:40: d2:11:67:e2:d8:e0:72:b7:d5:46:d7:21:b0:31:76:a5:cc:ac: b7:1e:cd:cc:75:32:72:27:70:ef:7c:79:68:a1:0f:dc:a9:e6: ce:0e:62:ca:67:15:90:86:1c:77:a7:81:01:28:c1:d2:c9:85: 93:88:b9:6d:8c:32:a0:a9:95:e0:a9:09:0a:f1:c4:4b:7c:b6: 08:0a:46:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWf8q2i74r/fky7GoaHsh955/FHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDA0MTMwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTI0MjA0ZTdmZmZiNWZjNThlMDg5NDRkYTIxMGFkYjI5 OGNhZmQ2ZmU3YjViYzY4YmZjNGViMzA3ZDI5ZmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8YK1Y0I2Y4rYalrlFRB92XBe4PP7ADtaabNig+virt4Zn ZuDUil+Og3mxn96jCn2MSiSdDH0pI9qEk5MF3+osKSWYZ9gtP4ojFCu6ohSsCqqD rslc4MBpdoGcKt+fLzjR1czcTTgMtsIJxwFJSfPeZL3Stdomt8ToIenjBxA7Oh3r N7nZmZbdVETrKj30SFnPKnNRtl7cepKiA+h5N3LRXZheIEOxzcsGIR6f9fr9KMSA CDFFhCjxQ+mkQjSNKGF5NbZ57/X7CuuYGvHrExBnN837Nc0GnXohm8MJFJ7dSPtk ux+FmNsSKafyYbfTbUWpawySlZAxzWoh//GdUV1RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUorOHmiLTyl+jR2nGQQkjRXDQ5y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhZWM2NDViLWY5OTEtNGE2Yy05N2ZmLTQ3Y2Q0OTE0MjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl3AwDQYJKoZIhvcNAQELBQADggEBAE4TMf6GyGMt71ecgIn5rNZ1WHuX +e54bwGdqASGFVwE9N38BRwlMNNwo5k7AC5mdAMwJmIv+I8ouV5UzOYdWiDk7JUy VmsLktsv0c1El5RZfPCWiKnUw+DyN0ykGKqyM/ft2cTJTasHMJrsXbglg/pJmr/g pBIdcEs1ACoGIv4cwlkakI3a8ba94WXik4GKpJ2wtDyRUPEhqDxtOtiY6CllwUuJ FSGQFYZlnohWBfGgAt37QNIRZ+LY4HK31UbXIbAxdqXMrLcezcx1MnIncO98eWih D9yp5s4OYspnFZCGHHengQEowdLJhZOIuW2MMqCpleCpCQrxxEt8tggKRpY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:08 2025 by rpki-client