$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa File: 948e4dbe-30d8-401a-a08a-9dd934e20639.roa (raw, json) Hash identifier: xn9bCuCZwwhCv8UarhR16hEbNeoEisf22dBN7Uj5iIQ= Subject key identifier: 87:1B:D9:12:C6:7C:40:83:9F:2F:EE:28:E8:DA:62:4D:CF:43:A6:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 354EECB165B75EFD8F92B35C7FD909FADFECFDBC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa Signing time: Tue 05 Aug 2025 19:52:59 +0000 ROA not before: Tue 05 Aug 2025 19:52:59 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.184.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4e:ec:b1:65:b7:5e:fd:8f:92:b3:5c:7f:d9:09:fa:df:ec:fd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 19:52:59 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=69502fe6f6a25d3687f659e31812b517064bed44e174a142f19bcec7fdd3e40e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:0c:22:4b:9f:e2:ae:d9:65:d7:25:5e:96: e0:db:aa:70:be:4d:09:cc:e3:aa:35:00:25:6f:e2: aa:70:d6:ea:35:c0:f3:e4:b7:34:9b:12:72:b7:16: ea:60:31:e9:74:33:5e:0f:9c:f7:97:5c:47:7d:87: b6:75:b4:98:9c:be:6c:8b:dd:a9:d5:50:b8:9c:a4: ea:3d:89:e6:72:83:27:00:22:2d:a8:6b:d2:81:88: ec:b8:b1:f5:9d:03:7d:a3:a0:24:fb:5c:41:4a:35: 9f:8b:bd:e8:12:6e:06:e9:6a:bf:22:46:f8:6a:63: 8b:6d:b2:f8:1a:ce:71:26:0f:da:b0:71:c9:49:eb: 9e:b1:0e:ae:da:88:6e:77:b4:d3:3a:80:1e:d0:13: ee:37:c9:af:4f:9f:b2:68:7a:96:cf:06:67:75:7a: 1c:ca:77:a0:dc:3f:37:00:78:aa:2e:7c:17:e7:1b: 43:50:18:62:8e:44:5c:f0:bc:93:c2:b5:1f:5b:be: 24:1e:5d:6d:f4:22:ee:44:be:92:60:7f:fa:08:f2: 49:96:ec:66:a8:50:18:14:07:95:19:d8:09:01:b4: b8:fd:38:82:94:0e:66:35:3d:6f:b3:db:77:a2:0a: f0:a3:9a:40:1c:1c:30:ee:f9:fe:2d:c9:dc:90:a3: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1B:D9:12:C6:7C:40:83:9F:2F:EE:28:E8:DA:62:4D:CF:43:A6:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.184.0.0/13 Signature Algorithm: sha256WithRSAEncryption 83:7d:a2:f0:0e:de:79:14:46:8d:d8:ec:68:b9:4e:f2:cd:4d: b1:03:ab:70:3c:33:8e:5d:98:72:99:b5:b1:7c:c9:1f:66:79: 8a:78:93:c4:fe:0c:5b:e8:9c:81:bd:f7:26:35:25:4e:9c:68: 68:c5:9d:dd:f0:b7:73:60:9d:b6:cb:c0:0b:26:08:23:c7:3f: f0:cb:43:24:28:e0:90:ec:ac:ee:2e:61:32:15:8b:c3:1f:14: 80:c4:a2:ef:b3:c2:7e:d5:c3:7b:77:28:26:66:bd:e7:62:8c: 6e:b7:a7:08:ea:99:98:6b:df:8e:eb:94:2f:92:77:cb:b3:4d: 91:09:09:f9:db:91:e7:64:3f:1d:87:62:7f:03:ec:61:e6:7d: 23:20:83:fa:c4:1f:ca:96:38:f0:2d:23:3c:9b:03:42:a3:3f: 40:2d:5a:ba:79:46:dc:0f:46:8e:da:00:4b:6a:5c:07:9e:bb: 78:9f:85:3b:ff:41:7b:3f:ca:f1:6e:05:d6:6c:57:7c:6f:6e: 72:01:f9:a8:7f:fe:c4:f0:72:a1:14:83:d0:7e:4b:78:b1:b5: 7d:e8:2f:47:7f:81:1b:16:f2:fd:ac:20:cc:e1:e5:43:4e:9d: a8:43:70:f4:b5:ae:69:c4:62:70:14:40:77:8c:fe:a2:61:90: ad:43:57:d1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNU7ssWW3Xv2PkrNcf9kJ+t/s/bwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTk1MjU5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTUwMmZlNmY2YTI1ZDM2ODdmNjU5ZTMxODEyYjUxNzA2 NGJlZDQ0ZTE3NGExNDJmMTliY2VjN2ZkZDNlNDBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSJgwiS5/irtll1yVeluDbqnC+TQnM46o1ACVv4qpw1uo1 wPPktzSbEnK3FupgMel0M14PnPeXXEd9h7Z1tJicvmyL3anVULicpOo9ieZygycA Ii2oa9KBiOy4sfWdA32joCT7XEFKNZ+LvegSbgbpar8iRvhqY4ttsvgaznEmD9qw cclJ656xDq7aiG53tNM6gB7QE+43ya9Pn7JoepbPBmd1ehzKd6DcPzcAeKoufBfn G0NQGGKORFzwvJPCtR9bviQeXW30Iu5EvpJgf/oI8kmW7GaoUBgUB5UZ2AkBtLj9 OIKUDmY1PW+z23eiCvCjmkAcHDDu+f4tydyQo0ivAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhxvZEsZ8QIOfL+4o6NpiTc9DpvIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0OGU0ZGJlLTMwZDgtNDAxYS1hMDhhLTlkZDkzNGUyMDYzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMNuDANBgkqhkiG9w0BAQsFAAOCAQEAg32i8A7eeRRGjdjsaLlO8s1NsQOr cDwzjl2Ycpm1sXzJH2Z5iniTxP4MW+icgb33JjUlTpxoaMWd3fC3c2CdtsvACyYI I8c/8MtDJCjgkOys7i5hMhWLwx8UgMSi77PCftXDe3coJma952KMbrenCOqZmGvf juuUL5J3y7NNkQkJ+duR52Q/HYdifwPsYeZ9IyCD+sQfypY48C0jPJsDQqM/QC1a unlG3A9GjtoAS2pcB567eJ+FO/9Bez/K8W4F1mxXfG9ucgH5qH/+xPByoRSD0H5L eLG1fegvR3+BGxby/awgzOHlQ06dqENw9LWuacRicBRAd4z+omGQrUNX0Q== -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:30 2025 by rpki-client