$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa File: 814a1304-f90c-4e23-82d9-6fe21bfdb541.roa (raw, json) Hash identifier: eHeN5UcJxXJ+fryUwC+x6ESPhQ9bwa7dWXsyZsYhE4Y= Subject key identifier: 2D:CD:0B:FB:7C:07:59:6F:A2:FD:AA:93:47:0C:F5:8B:F9:38:18:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CF1D5DA137ABAED31D5E1507BC2CB695B0A21A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa Signing time: Tue 05 Aug 2025 00:01:06 +0000 ROA not before: Tue 05 Aug 2025 00:01:06 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f1:d5:da:13:7a:ba:ed:31:d5:e1:50:7b:c2:cb:69:5b:0a:21:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:01:06 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=784fea1b23854f5b762e6b44d260913830cc336a0d6e7ba856fb182780a7dced, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:43:f2:7a:37:86:98:21:b0:3c:fd:71:17: 6d:52:c2:cb:bc:56:f8:52:e1:86:62:6d:68:d6:9d: fc:c9:66:dc:78:8a:9f:fb:69:d5:df:c2:2d:c3:29: 35:ab:c4:03:64:25:53:69:23:0b:a8:b6:4e:46:77: eb:ea:18:14:b1:d9:3c:19:eb:16:a2:38:22:55:bc: 23:31:2c:e4:94:31:5e:7f:dd:78:02:82:03:99:d5: 05:e5:6d:a0:ec:5e:e1:5e:4b:6a:38:4f:fe:2f:ac: 41:13:1c:e1:a2:5f:4a:3f:a5:70:73:d9:5d:f4:28: 5b:07:bf:ac:3f:a8:08:79:c4:c3:0c:95:64:64:41: 8b:49:e7:07:0f:90:46:93:d6:30:8c:39:f7:9a:9b: e7:d1:8d:02:06:d0:e2:b2:69:85:65:8c:a8:64:66: 72:1f:15:23:65:2f:84:5b:d7:22:16:c0:6b:a6:ab: d2:7a:eb:57:0d:06:81:32:0f:97:98:c1:8c:02:71: 02:49:3d:30:fe:fc:96:34:9c:7a:36:b4:89:64:dc: 71:56:20:a3:a6:62:8b:06:12:bc:2b:56:49:c3:aa: a5:2d:5d:3f:c3:f3:f5:f5:d5:bf:6a:cc:03:60:06: 0f:97:37:7b:7b:ea:ee:41:fc:cb:93:9c:a0:63:b6: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:0B:FB:7C:07:59:6F:A2:FD:AA:93:47:0C:F5:8B:F9:38:18:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/814a1304-f90c-4e23-82d9-6fe21bfdb541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:18:1a:ed:8a:70:80:a4:f2:39:7e:06:24:ca:c2:dc:0d:b4: 0a:05:2e:e8:c4:f5:7e:72:4e:9a:21:d1:4f:8c:91:04:32:82: 68:bf:b7:97:8c:2a:41:52:17:0d:2c:4e:06:a8:98:1e:c4:3f: bf:f8:36:83:f3:b0:0d:e9:4b:f9:d2:c9:36:2c:b8:4f:8e:3f: df:56:3a:0e:d3:a9:ef:59:86:3a:4c:06:c7:21:06:a4:b3:99: f9:e2:d2:ab:7f:17:b3:f2:d0:29:9a:bb:e9:d5:fe:bc:11:5c: 2d:2d:01:db:58:3c:4d:08:6d:28:ee:46:ed:46:af:0e:a9:24: 2f:ac:5e:ed:14:dd:b0:98:49:eb:83:1a:86:e3:d3:9c:28:6f: 3a:a0:9c:94:02:b0:86:3b:60:e1:99:3c:1d:3d:df:75:63:e2: df:74:f4:23:81:69:f0:42:8f:9f:11:83:6c:25:2f:5f:34:65: dd:f9:bf:e5:72:0a:26:cc:ac:44:77:f3:d2:1d:6e:d0:f5:88: ac:ac:7a:89:46:69:9d:8a:05:59:62:5a:a8:5e:52:0b:5a:4a: e8:09:e0:0b:31:c1:c3:16:65:95:2b:a8:00:e6:55:71:eb:5b: 98:8f:b7:9d:07:16:f8:69:7d:ff:55:5b:42:bd:77:b7:e0:1e: 47:1f:ef:95 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfPHV2hN6uu0x1eFQe8LLaVsKIaEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAwMTA2WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODRmZWExYjIzODU0ZjViNzYyZTZiNDRkMjYwOTEzODMw Y2MzMzZhMGQ2ZTdiYTg1NmZiMTgyNzgwYTdkY2VkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU30PyejeGmCGwPP1xF21Swsu8VvhS4YZibWjWnfzJZtx4 ip/7adXfwi3DKTWrxANkJVNpIwuotk5Gd+vqGBSx2TwZ6xaiOCJVvCMxLOSUMV5/ 3XgCggOZ1QXlbaDsXuFeS2o4T/4vrEETHOGiX0o/pXBz2V30KFsHv6w/qAh5xMMM lWRkQYtJ5wcPkEaT1jCMOfeam+fRjQIG0OKyaYVljKhkZnIfFSNlL4Rb1yIWwGum q9J661cNBoEyD5eYwYwCcQJJPTD+/JY0nHo2tIlk3HFWIKOmYosGErwrVknDqqUt XT/D8/X11b9qzANgBg+XN3t76u5B/MuTnKBjtnkPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULc0L+3wHWW+i/aqTRwz1i/k4GCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNGExMzA0LWY5MGMtNGUyMy04MmQ5LTZmZTIxYmZkYjU0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBokDANBgkqhkiG9w0BAQsFAAOCAQEADhga7YpwgKTyOX4GJMrC3A20CgUu 6MT1fnJOmiHRT4yRBDKCaL+3l4wqQVIXDSxOBqiYHsQ/v/g2g/OwDelL+dLJNiy4 T44/31Y6DtOp71mGOkwGxyEGpLOZ+eLSq38Xs/LQKZq76dX+vBFcLS0B21g8TQht KO5G7UavDqkkL6xe7RTdsJhJ64MahuPTnChvOqCclAKwhjtg4Zk8HT3fdWPi33T0 I4Fp8EKPnxGDbCUvXzRl3fm/5XIKJsysRHfz0h1u0PWIrKx6iUZpnYoFWWJaqF5S C1pK6AngCzHBwxZllSuoAOZVcetbmI+3nQcW+Gl9/1VbQr13t+AeRx/vlQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:28 2025 by rpki-client