$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa File: 96775b6e-d2c7-45b1-b153-6189276f8a53.roa (raw, json) Hash identifier: PsI32zS5ijCFUojO7S+TCblcIDfvwdZKlLg+K2DF2qs= Subject key identifier: 51:23:B8:3A:1A:4D:3E:E6:B6:A2:87:F4:3F:AE:C5:6D:BD:12:95:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25C35BB16CED66E65E6AF3E8594B8B32AB434000 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa Signing time: Wed 23 Jul 2025 00:22:20 +0000 ROA not before: Wed 23 Jul 2025 00:22:20 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.73.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:5b:b1:6c:ed:66:e6:5e:6a:f3:e8:59:4b:8b:32:ab:43:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:22:20 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=5bed9da2fcf6c965d30af987b1492c87544e96e96faa40dbdd9de52fe616c38f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:d2:36:bd:25:c8:b3:d9:68:ca:30:f6:e5: f8:cb:c9:fa:24:16:75:0a:8e:fb:7a:84:59:fd:46: 66:d7:ad:ab:df:a7:6c:a7:e9:aa:9e:48:43:87:4f: 32:16:ad:6c:21:fa:45:06:83:02:90:b6:17:4a:04: 48:2b:04:22:7b:5f:30:16:7b:b7:82:68:eb:87:c9: 6d:3e:c4:e2:54:55:c6:2a:e4:8e:09:97:83:7d:8b: bc:ec:e0:82:e5:c4:d1:ed:27:64:40:1d:d9:b0:1b: 86:3f:f8:d6:6b:e9:3e:ce:01:3e:0f:b6:ce:f5:e1: 67:c5:5d:de:ac:71:1d:4f:52:3c:50:9b:ad:26:74: 74:17:29:88:88:9d:dd:52:87:81:f4:38:89:67:eb: 91:78:74:a0:11:59:58:a2:c4:3b:4f:a4:15:c8:08: a7:84:f2:31:b5:8a:50:e5:05:2c:0f:2f:24:da:17: e1:6d:11:de:0f:b0:3d:4c:65:50:ca:9c:d7:21:3e: 84:4f:8c:e0:74:e3:dc:03:23:8b:b0:59:12:f5:14: 26:dd:73:e8:02:3f:6d:6d:5b:a6:c9:5a:ec:a3:2b: 0d:89:b1:6b:f5:43:85:52:73:67:ff:dd:bb:26:24: 2f:39:a5:f8:58:1f:d8:aa:98:e6:c2:79:cb:96:f1: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:B8:3A:1A:4D:3E:E6:B6:A2:87:F4:3F:AE:C5:6D:BD:12:95:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.73.152.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:0a:89:de:97:a2:1a:f2:66:fa:f2:98:2b:5c:09:4b:d3:ab: b6:b3:13:3b:68:bd:07:48:60:c5:e0:d7:5b:27:73:3a:3a:15: bc:ba:13:49:16:b7:80:71:ee:9b:b4:49:75:f4:bf:01:13:34: 12:7f:89:0d:83:1f:09:a8:47:56:06:fc:b1:9c:19:96:54:b7: db:dd:e7:4a:39:3f:d5:2b:0f:09:e9:b1:be:cf:7f:0e:d5:3f: 2c:94:17:25:af:36:98:04:7f:41:b7:71:ba:23:13:3c:76:dd: 4b:c0:95:96:53:c1:4f:22:83:3b:2e:6e:89:65:97:2e:2c:cc: 86:b2:12:50:c7:22:90:86:32:d6:33:61:12:98:22:a5:a2:eb: 72:9b:d2:a8:b6:77:71:fb:f8:ba:52:da:8d:35:89:04:d6:8f: 20:d8:26:02:f9:99:52:a8:2f:6a:34:ca:11:01:da:26:df:ba: 35:89:38:52:b0:d4:d4:d6:39:47:ee:ef:e8:01:db:e0:74:57: c8:3e:47:30:77:70:83:f4:fa:b5:1f:38:59:4f:b4:21:f0:3a: a0:7a:7c:92:af:68:b7:fc:68:19:8b:91:0a:66:5e:0b:bb:32: b3:1e:34:da:c5:33:5f:ac:90:cb:ce:58:d9:fc:bc:d2:ca:e0: 85:c3:12:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJcNbsWztZuZeavPoWUuLMqtDQAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAyMjIwWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmVkOWRhMmZjZjZjOTY1ZDMwYWY5ODdiMTQ5MmM4NzU0 NGU5NmU5NmZhYTQwZGJkZDlkZTUyZmU2MTZjMzhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK8dI2vSXIs9loyjD25fjLyfokFnUKjvt6hFn9RmbXravf p2yn6aqeSEOHTzIWrWwh+kUGgwKQthdKBEgrBCJ7XzAWe7eCaOuHyW0+xOJUVcYq 5I4Jl4N9i7zs4ILlxNHtJ2RAHdmwG4Y/+NZr6T7OAT4Pts714WfFXd6scR1PUjxQ m60mdHQXKYiInd1Sh4H0OIln65F4dKARWViixDtPpBXICKeE8jG1ilDlBSwPLyTa F+FtEd4PsD1MZVDKnNchPoRPjOB049wDI4uwWRL1FCbdc+gCP21tW6bJWuyjKw2J sWv1Q4VSc2f/3bsmJC85pfhYH9iqmObCecuW8SNXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUSO4OhpNPua2oof0P67Fbb0SlcwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2Nzc1YjZlLWQyYzctNDViMS1iMTUzLTYxODkyNzZmOGE1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SZgwDQYJKoZIhvcNAQELBQADggEBAE8Kid6XohryZvrymCtcCUvTq7az EztovQdIYMXg11snczo6Fby6E0kWt4Bx7pu0SXX0vwETNBJ/iQ2DHwmoR1YG/LGc GZZUt9vd50o5P9UrDwnpsb7Pfw7VPyyUFyWvNpgEf0G3cbojEzx23UvAlZZTwU8i gzsubollly4szIayElDHIpCGMtYzYRKYIqWi63Kb0qi2d3H7+LpS2o01iQTWjyDY JgL5mVKoL2o0yhEB2ibfujWJOFKw1NTWOUfu7+gB2+B0V8g+RzB3cIP0+rUfOFlP tCHwOqB6fJKvaLf8aBmLkQpmXgu7MrMeNNrFM1+skMvOWNn8vNLK4IXDEqE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:42 2025 by rpki-client