$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa File: 844abc15-f137-4ba6-91a9-3db90fdebd62.roa (raw, json) Hash identifier: x/4diW4D6lVALTHX7n2Kdg5ARTrgM9B1wzj4SexShLY= Subject key identifier: D8:CA:F3:47:DA:8E:25:15:94:B0:B7:E3:61:5F:55:A1:F8:8F:39:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 618F29583E075DFEB73534D2E8903FC416C03B7D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa Signing time: Wed 16 Jul 2025 00:12:02 +0000 ROA not before: Wed 16 Jul 2025 00:12:02 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.27.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8f:29:58:3e:07:5d:fe:b7:35:34:d2:e8:90:3f:c4:16:c0:3b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:12:02 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=e10fe74371fa324850d9ef11054d5da55ed404c35ef4c18acc7c57ed765e9550, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:a4:f2:42:4c:1d:48:46:33:c5:07:2b:76: 50:8a:74:cc:5b:f0:de:91:37:c2:f2:ab:86:dd:bd: 08:0d:52:e9:19:53:ea:ab:1e:19:83:f7:e9:a6:d7: 65:c1:d8:22:e6:fc:43:b4:8d:d3:9d:8b:c7:d6:c2: 49:90:0c:28:52:0b:b8:45:23:d4:7e:d0:5e:a5:02: d9:77:8d:a4:e4:04:af:1a:35:1a:f2:d0:ed:d0:a2: 94:a0:49:62:8b:af:d6:73:34:7f:27:2d:62:bc:75: 98:ed:4b:84:85:98:ed:9d:a2:2f:39:ef:3f:ee:c8: 44:21:2d:60:f7:e4:71:76:4a:19:d1:22:54:a1:3c: 57:3e:00:fc:c1:6c:96:98:c8:a8:01:ff:31:76:cd: f8:a8:74:c4:33:9c:ff:5c:87:ed:98:33:51:bc:3a: 47:01:4d:13:c2:13:89:07:a7:87:39:e9:ad:29:ae: 81:e3:c3:9a:86:4f:37:18:37:d5:1c:37:0f:37:9f: d5:5a:7d:da:63:3f:e4:37:e4:06:a7:a8:3f:d2:df: d8:5b:36:20:49:ce:15:94:98:76:88:57:3a:22:a6: ba:e0:a0:5a:ec:e3:87:45:40:7e:83:26:91:bc:0c: 5f:ef:ea:c2:41:6e:36:d7:08:11:32:d5:a2:5e:21: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:F3:47:DA:8E:25:15:94:B0:B7:E3:61:5F:55:A1:F8:8F:39:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:06:ea:ad:dd:fe:c9:d1:9c:62:68:11:9f:05:e7:09:30:5a: f6:f7:77:e2:54:af:a9:be:91:9f:68:a5:81:8e:24:03:17:ea: 55:13:7a:ac:36:ca:fa:33:f9:82:67:f2:64:36:45:e3:40:7b: 2e:1a:82:de:45:ed:af:08:1e:bc:64:b7:d1:cb:13:6e:91:82: ae:00:16:fe:6d:aa:20:7e:e5:76:06:d4:29:2d:d6:1d:d4:cd: 08:63:14:51:64:74:9e:68:6c:a3:bd:1e:90:fb:6f:55:26:44: bf:26:f9:b3:d4:30:c8:fe:57:73:b0:fb:a1:37:b0:a2:cf:44: 4c:18:db:a8:8c:98:e7:97:0f:bd:e3:8d:26:17:63:88:9e:ce: 70:bc:df:cb:19:80:9c:63:e1:e6:fc:1b:4f:81:bc:20:ca:48: 9b:82:b1:ce:fc:1d:72:d9:b4:70:e8:1c:a2:6f:76:44:04:70: 9d:e0:68:ee:df:f8:3c:50:c0:46:08:39:72:c1:ac:a8:7d:8f: 31:af:57:38:a8:d9:71:b5:e9:49:33:68:1a:ec:8b:2e:90:62: d1:cd:f3:72:26:bb:cd:db:af:da:d6:a2:bb:0d:b2:f9:89:b4: b2:4c:cf:0f:5e:b3:c9:4c:cb:db:1f:65:2f:c2:b6:38:ca:06: 5f:09:54:c3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYY8pWD4HXf63NTTS6JA/xBbAO30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAxMjAyWhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTBmZTc0MzcxZmEzMjQ4NTBkOWVmMTEwNTRkNWRhNTVl ZDQwNGMzNWVmNGMxOGFjYzdjNTdlZDc2NWU5NTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0qTyQkwdSEYzxQcrdlCKdMxb8N6RN8Lyq4bdvQgNUukZ U+qrHhmD9+mm12XB2CLm/EO0jdOdi8fWwkmQDChSC7hFI9R+0F6lAtl3jaTkBK8a NRry0O3QopSgSWKLr9ZzNH8nLWK8dZjtS4SFmO2doi857z/uyEQhLWD35HF2ShnR IlShPFc+APzBbJaYyKgB/zF2zfiodMQznP9ch+2YM1G8OkcBTRPCE4kHp4c56a0p roHjw5qGTzcYN9UcNw83n9VafdpjP+Q35AanqD/S39hbNiBJzhWUmHaIVzoiprrg oFrs44dFQH6DJpG8DF/v6sJBbjbXCBEy1aJeIT9dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2MrzR9qOJRWUsLfjYV9VofiPOXkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0NGFiYzE1LWYxMzctNGJhNi05MWE5LTNkYjkwZmRlYmQ2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGzANBgkqhkiG9w0BAQsFAAOCAQEABQbqrd3+ydGcYmgRnwXnCTBa9vd3 4lSvqb6Rn2ilgY4kAxfqVRN6rDbK+jP5gmfyZDZF40B7LhqC3kXtrwgevGS30csT bpGCrgAW/m2qIH7ldgbUKS3WHdTNCGMUUWR0nmhso70ekPtvVSZEvyb5s9QwyP5X c7D7oTewos9ETBjbqIyY55cPveONJhdjiJ7OcLzfyxmAnGPh5vwbT4G8IMpIm4Kx zvwdctm0cOgcom92RARwneBo7t/4PFDARgg5csGsqH2PMa9XOKjZcbXpSTNoGuyL LpBi0c3zcia7zduv2taiuw2y+Ym0skzPD16zyUzL2x9lL8K2OMoGXwlUww== -----END CERTIFICATE-----Generated at Thu Aug 7 05:09:48 2025 by rpki-client