$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8874e635-d9df-43c1-b44b-b12c7fe93bde.roa File: 8874e635-d9df-43c1-b44b-b12c7fe93bde.roa (raw, json) Hash identifier: d7J/gZDHto/tbTmjTpJNwWxHvV48B+CjKoDF3k+c1Zo= Subject key identifier: C2:1A:3F:B9:C3:09:61:4C:BE:B4:A2:C3:37:D4:C5:9A:8E:09:90:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13490AF67FD77CE2A0B8AA489A54367AD0221839 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8874e635-d9df-43c1-b44b-b12c7fe93bde.roa Signing time: Sat 02 Aug 2025 00:50:26 +0000 ROA not before: Sat 02 Aug 2025 00:50:26 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 174.129.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:49:0a:f6:7f:d7:7c:e2:a0:b8:aa:48:9a:54:36:7a:d0:22:18:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:50:26 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=19b89b68d9bf4ac59fa499baa89ea969c66a82dfc9d1d574e789a60adaf526d4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:4f:bd:c9:bc:2d:71:d5:06:60:a5:6b:b2: 77:eb:ea:35:12:e1:58:f8:23:46:94:53:9d:e4:03: 6a:84:4f:26:b7:98:b1:dc:a0:01:95:07:d0:23:eb: 60:1a:11:d5:81:a8:e7:c2:84:ae:32:5f:74:8d:c2: 3a:bf:26:d6:53:28:5b:98:41:0e:aa:0c:bb:14:be: 09:26:1e:d2:cc:8c:8b:37:93:b2:44:75:f4:b1:43: 64:01:17:db:d9:90:74:90:50:77:3e:93:6b:03:e2: 62:69:a8:16:57:fc:01:df:a1:5e:ec:f6:53:d0:04: 38:0a:de:09:1b:7b:ce:ba:25:4e:91:75:d2:2b:a7: 74:c4:aa:01:52:1f:13:a1:11:80:85:3f:44:43:79: dd:22:30:e4:20:55:60:79:b5:e6:5c:14:63:63:ed: 8c:91:ad:1c:56:2e:b9:b5:a5:00:d2:b6:44:c3:5e: ec:64:0c:fc:c7:f3:5d:74:60:b0:83:fb:de:c1:f2: aa:c7:c8:3a:4d:a3:12:f1:d9:e4:af:43:f2:07:05: 14:6f:cd:dc:84:c4:7a:74:19:c3:db:9d:a8:58:f2: 11:4d:66:a3:88:f3:ee:65:64:41:33:ed:ab:63:59: 06:71:9c:79:5e:ba:3d:1e:d0:34:22:5c:ad:01:cb: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:3F:B9:C3:09:61:4C:BE:B4:A2:C3:37:D4:C5:9A:8E:09:90:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8874e635-d9df-43c1-b44b-b12c7fe93bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7b:bb:1c:05:30:97:13:61:2d:04:e5:6a:dc:55:43:72:ed:37: cc:21:5b:9e:57:1a:e0:93:fc:50:34:01:e2:f0:8f:db:c0:eb: 08:80:80:bb:d5:7c:c7:28:5e:16:0c:3a:af:ce:95:1b:47:60: b8:ca:79:df:53:83:9a:61:21:e1:4f:6d:92:5e:f6:c6:58:07: a0:35:92:84:f7:74:8b:69:ae:8a:87:2e:46:e8:48:2f:2b:5e: 33:ac:9e:a1:26:49:53:2e:86:e8:2c:76:ba:77:6a:80:7d:f8: 37:9c:6e:d6:4a:d2:49:5c:c3:13:af:b3:c5:76:72:2f:ac:69: c0:6e:c3:0f:08:dc:ee:24:95:b1:be:51:29:dd:57:cc:94:4a: 69:ec:e1:d9:61:c0:68:71:ea:2b:5b:53:00:24:70:20:2a:a9: ec:34:64:3c:6e:7a:a1:99:3b:0b:9e:a9:36:62:3d:a8:fb:af: 4d:2d:38:51:b2:cc:f4:2f:75:14:5b:0e:bb:c2:a0:03:7e:dd: 7a:6f:b6:7e:a2:44:c0:e8:43:05:14:f8:96:cf:40:fb:41:a2: 3f:cb:81:9b:2b:b1:ee:f6:5d:8b:3c:59:e3:76:6d:8e:b9:f5: b2:c1:6a:e4:bf:c8:85:67:10:14:e5:cb:1d:7e:c6:97:ce:41: fa:86:67:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE0kK9n/XfOKguKpImlQ2etAiGDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA1MDI2WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWI4OWI2OGQ5YmY0YWM1OWZhNDk5YmFhODllYTk2OWM2 NmE4MmRmYzlkMWQ1NzRlNzg5YTYwYWRhZjUyNmQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaZE+9ybwtcdUGYKVrsnfr6jUS4Vj4I0aUU53kA2qETya3 mLHcoAGVB9Aj62AaEdWBqOfChK4yX3SNwjq/JtZTKFuYQQ6qDLsUvgkmHtLMjIs3 k7JEdfSxQ2QBF9vZkHSQUHc+k2sD4mJpqBZX/AHfoV7s9lPQBDgK3gkbe866JU6R ddIrp3TEqgFSHxOhEYCFP0RDed0iMOQgVWB5teZcFGNj7YyRrRxWLrm1pQDStkTD XuxkDPzH8110YLCD+97B8qrHyDpNoxLx2eSvQ/IHBRRvzdyExHp0GcPbnahY8hFN ZqOI8+5lZEEz7atjWQZxnHleuj0e0DQiXK0By+g3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwho/ucMJYUy+tKLDN9TFmo4JkCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4NzRlNjM1LWQ5ZGYtNDNjMS1iNDRiLWIxMmM3ZmU5M2JkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaugUAwDQYJKoZIhvcNAQELBQADggEBAHu7HAUwlxNhLQTlatxVQ3LtN8wh W55XGuCT/FA0AeLwj9vA6wiAgLvVfMcoXhYMOq/OlRtHYLjKed9Tg5phIeFPbZJe 9sZYB6A1koT3dItproqHLkboSC8rXjOsnqEmSVMuhugsdrp3aoB9+DecbtZK0klc wxOvs8V2ci+sacBuww8I3O4klbG+USndV8yUSmns4dlhwGhx6itbUwAkcCAqqew0 ZDxueqGZOwueqTZiPaj7r00tOFGyzPQvdRRbDrvCoAN+3Xpvtn6iRMDoQwUU+JbP QPtBoj/LgZsrse72XYs8WeN2bY659bLBauS/yIVnEBTlyx1+xpfOQfqGZ2Y= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:14 2025 by rpki-client