$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa File: 7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa (raw, json) Hash identifier: GBLgR+OPtzNJDfgzk3YCyEUcAhxITcst3y3JVF2QRp4= Subject key identifier: 2A:C5:A5:14:8B:F9:8E:E5:FA:DE:72:EF:1B:FE:B8:D7:E8:CB:86:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32C6BF97A6C5C7526301DB60417D8FF24C57BD40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa Signing time: Mon 04 Aug 2025 17:40:30 +0000 ROA not before: Mon 04 Aug 2025 17:40:30 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.124.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c6:bf:97:a6:c5:c7:52:63:01:db:60:41:7d:8f:f2:4c:57:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:40:30 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=31303e12a6c330ea911523b2775d3d28540addb49c61953988c6bdc8e966b877, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:ce:f7:82:e6:58:10:c8:28:f4:b1:97:16: a7:e8:18:79:24:93:a0:79:e1:fe:d9:1e:00:6b:b6: db:4b:e7:61:69:43:ae:23:ea:df:fb:4c:1d:35:d5: 7c:2b:df:fe:0d:d8:7d:77:04:11:5e:6d:91:a7:7e: 1c:98:9a:9b:fb:2c:af:90:a4:21:26:d3:15:bd:20: 6b:ee:02:1e:80:d0:5f:b5:60:fe:e2:6a:7f:8e:af: 0a:88:04:b1:f7:fa:be:9c:46:a0:5b:83:69:95:f8: fa:18:94:ea:14:47:2b:9a:e4:fa:a4:5e:6b:01:81: 4d:1e:12:8e:08:b6:41:0a:5a:73:d4:29:13:16:47: 2e:73:68:ea:8a:b4:a0:c4:f4:c5:e7:bb:9d:75:8c: 05:7a:28:20:c8:18:33:bd:de:f9:4d:75:6a:84:ec: f9:1f:2b:48:6f:ff:7d:fd:f9:55:db:27:02:2c:d9: 1d:a4:55:c2:09:59:13:8e:d4:ef:6e:88:24:42:b7: 55:c0:03:0b:e7:e8:d5:2e:73:09:b2:ba:80:0d:01: 6e:f9:4c:d3:31:f6:64:67:e0:bc:70:e4:76:f6:ea: de:88:56:7f:2c:2a:4d:08:dd:e0:bc:c1:9b:e4:3c: a6:6a:f2:89:8c:9d:e5:44:33:89:0b:9e:a7:ed:de: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:A5:14:8B:F9:8E:E5:FA:DE:72:EF:1B:FE:B8:D7:E8:CB:86:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.124.0.0/17 Signature Algorithm: sha256WithRSAEncryption 65:32:32:18:1a:63:2d:3d:95:c2:9a:2c:af:92:1d:92:ac:5a: 05:4b:a3:dd:6e:f6:8a:b5:c2:97:18:7d:33:9d:ad:5c:16:aa: 92:ff:d0:0f:b1:75:ec:58:dd:80:07:7d:e6:8f:f8:7b:45:ed: 3b:90:0c:d5:1a:cf:cb:b9:07:20:75:48:24:60:e7:da:f5:08: a7:ac:bd:f8:c6:cf:e8:03:1e:76:3b:bd:03:1a:e6:a1:a1:da: 98:67:65:60:7f:20:65:ec:1a:d3:49:fc:a3:a1:49:08:07:aa: 9f:8f:1f:52:5a:2b:8d:e1:6c:56:c0:d0:cc:5f:d0:78:76:b2: 57:b3:be:4e:ce:18:9c:2b:12:86:65:52:09:08:b9:ac:b6:f4: b7:f6:74:66:be:4b:f0:27:68:6c:cc:a0:ff:9e:10:b5:7a:15: cd:a5:41:86:00:0e:8d:d2:03:18:81:17:aa:64:2c:40:09:91: b9:0c:98:0f:81:86:dc:11:f4:04:dd:b8:ea:5f:0f:4f:17:03: bd:a8:2b:4b:86:59:96:7a:87:b2:c5:64:23:e9:0d:4f:ec:88: 3f:3d:5e:02:ba:99:a9:97:e1:16:25:8e:f6:db:8f:91:b9:78: 8e:27:07:94:67:90:02:83:9b:c3:bd:fc:d9:87:e4:c7:91:20: e0:19:f2:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMsa/l6bFx1JjAdtgQX2P8kxXvUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTc0MDMwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTMwM2UxMmE2YzMzMGVhOTExNTIzYjI3NzVkM2QyODU0 MGFkZGI0OWM2MTk1Mzk4OGM2YmRjOGU5NjZiODc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzIM73guZYEMgo9LGXFqfoGHkkk6B54f7ZHgBrtttL52Fp Q64j6t/7TB011Xwr3/4N2H13BBFebZGnfhyYmpv7LK+QpCEm0xW9IGvuAh6A0F+1 YP7ian+OrwqIBLH3+r6cRqBbg2mV+PoYlOoURyua5PqkXmsBgU0eEo4ItkEKWnPU KRMWRy5zaOqKtKDE9MXnu511jAV6KCDIGDO93vlNdWqE7PkfK0hv/339+VXbJwIs 2R2kVcIJWROO1O9uiCRCt1XAAwvn6NUucwmyuoANAW75TNMx9mRn4Lxw5Hb26t6I Vn8sKk0I3eC8wZvkPKZq8omMneVEM4kLnqft3q8DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKsWlFIv5juX63nLvG/641+jLhsIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlNDUwMjJjLTk3NjctNGE1ZC1iZGM2LTM1ZjYxZmVjN2JkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4fAAwDQYJKoZIhvcNAQELBQADggEBAGUyMhgaYy09lcKaLK+SHZKsWgVL o91u9oq1wpcYfTOdrVwWqpL/0A+xdexY3YAHfeaP+HtF7TuQDNUaz8u5ByB1SCRg 59r1CKesvfjGz+gDHnY7vQMa5qGh2phnZWB/IGXsGtNJ/KOhSQgHqp+PH1JaK43h bFbA0Mxf0Hh2slezvk7OGJwrEoZlUgkIuay29Lf2dGa+S/AnaGzMoP+eELV6Fc2l QYYADo3SAxiBF6pkLEAJkbkMmA+BhtwR9ATduOpfD08XA72oK0uGWZZ6h7LFZCPp DU/siD89XgK6mamX4RYljvbbj5G5eI4nB5RnkAKDm8O9/NmH5MeRIOAZ8jM= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:25 2025 by rpki-client