$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fecfa0e-80ac-4989-b150-e80a246d95f5.roa File: 9fecfa0e-80ac-4989-b150-e80a246d95f5.roa (raw, json) Hash identifier: 6J1n+VG4TPHiA7xnOnlNT5pElC0y/I0aFNBhX5Ew7sM= Subject key identifier: 55:FB:6F:92:4B:EA:9C:4F:3C:C6:0C:FF:B5:38:5D:46:71:C3:0A:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BF81F4F82AB33F31146E5E373BAD761B09EB024 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fecfa0e-80ac-4989-b150-e80a246d95f5.roa Signing time: Fri 01 Aug 2025 15:12:09 +0000 ROA not before: Fri 01 Aug 2025 15:12:09 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f8:1f:4f:82:ab:33:f3:11:46:e5:e3:73:ba:d7:61:b0:9e:b0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:12:09 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=51df2c38cb1067ea545d0759813da6f786142015491cd306b14272336cea307a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:fa:59:23:5e:41:71:95:03:8c:09:16:41: 8f:18:ae:0d:31:4d:4b:c9:26:c2:79:49:ce:7c:aa: f8:a5:a9:91:31:c1:11:92:65:0c:66:66:a2:8a:6a: 09:a1:db:a9:71:20:b5:87:6c:69:64:e0:a7:21:ba: d2:2d:96:d8:a8:c4:76:76:04:85:6d:5d:2d:77:93: 90:08:b4:92:26:1e:e8:99:0c:2a:18:91:da:2e:95: 14:b0:ae:fb:53:18:85:81:c0:bf:49:be:d0:08:ae: c4:f8:96:db:fb:c3:3c:ab:e8:9b:4c:d8:73:53:fb: 8d:bd:82:a0:d0:68:94:1b:c0:e2:35:80:25:e6:1b: f2:cc:88:09:0f:7d:07:23:4c:c9:63:26:54:23:50: aa:aa:67:da:27:dc:60:55:63:18:7e:8d:9a:44:8b: 16:18:3b:42:bb:bb:41:da:16:54:2f:e4:12:e9:67: 01:d0:b4:45:d4:6a:4b:d3:83:39:58:b7:9d:b2:17: 25:c5:df:7f:1e:fa:e4:0b:14:5d:e1:2c:cf:60:1c: f4:fb:70:d9:6c:bb:21:28:0e:e9:ef:23:59:0f:25: c3:ef:90:1b:bb:4f:15:79:8e:e3:04:e0:7e:7e:4b: 3e:5f:d9:f8:c4:4a:7d:6a:f9:39:33:26:cd:f7:69: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:6F:92:4B:EA:9C:4F:3C:C6:0C:FF:B5:38:5D:46:71:C3:0A:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fecfa0e-80ac-4989-b150-e80a246d95f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:36:b0:35:60:1a:c7:fc:93:79:45:36:13:36:0f:20:f2:3a: a8:2d:12:1f:63:f0:89:3a:52:a3:b4:8a:63:a5:2e:98:21:2e: 32:47:73:ed:8b:eb:e3:56:39:aa:e5:3c:02:4e:06:2d:54:3b: 5a:44:e5:5e:54:3c:63:11:8e:38:60:48:fd:13:9d:af:69:04: ff:e1:f8:32:97:e0:4f:b7:a5:b7:25:df:6a:7a:f5:d4:88:a3: 7e:02:2d:39:ff:d8:d8:f2:66:99:16:f9:5c:fb:59:81:db:6d: 16:41:ea:0f:8f:8a:3c:31:37:bd:17:3f:44:87:11:70:6a:f4: 5b:a8:ba:23:1f:56:78:bb:15:fc:d8:a8:32:c9:8b:7a:7a:04: f7:11:4e:5a:9c:16:8f:88:ed:97:cb:95:97:d6:81:6d:e9:c1: dd:e6:77:5e:84:4a:a5:6f:c3:de:61:9b:00:db:99:96:9e:c6: 0a:36:53:0e:a0:97:db:89:4a:63:e7:59:7c:44:ff:60:93:0a: ce:4f:3c:1d:46:a5:79:ec:2e:8f:6d:30:9c:2e:e4:68:6b:9d: 1e:85:df:46:df:c6:d8:24:99:82:35:5b:9d:70:bd:93:1d:3e: 90:21:7a:79:4b:85:f4:7f:cd:ad:57:1b:43:cb:97:fb:36:c0: 65:8a:04:49 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUO/gfT4KrM/MRRuXjc7rXYbCesCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMjA5WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWRmMmMzOGNiMTA2N2VhNTQ1ZDA3NTk4MTNkYTZmNzg2 MTQyMDE1NDkxY2QzMDZiMTQyNzIzMzZjZWEzMDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN0PpZI15BcZUDjAkWQY8Yrg0xTUvJJsJ5Sc58qvilqZEx wRGSZQxmZqKKagmh26lxILWHbGlk4KchutItltioxHZ2BIVtXS13k5AItJImHuiZ DCoYkdoulRSwrvtTGIWBwL9JvtAIrsT4ltv7wzyr6JtM2HNT+429gqDQaJQbwOI1 gCXmG/LMiAkPfQcjTMljJlQjUKqqZ9on3GBVYxh+jZpEixYYO0K7u0HaFlQv5BLp ZwHQtEXUakvTgzlYt52yFyXF338e+uQLFF3hLM9gHPT7cNlsuyEoDunvI1kPJcPv kBu7TxV5juME4H5+Sz5f2fjESn1q+TkzJs33aRMjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVftvkkvqnE88xgz/tThdRnHDCpwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZWNmYTBlLTgwYWMtNDk4OS1iMTUwLWU4MGEyNDZkOTVmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPhzANBgkqhkiG9w0BAQsFAAOCAQEAMTawNWAax/yTeUU2EzYPIPI6qC0S H2PwiTpSo7SKY6UumCEuMkdz7Yvr41Y5quU8Ak4GLVQ7WkTlXlQ8YxGOOGBI/ROd r2kE/+H4MpfgT7eltyXfanr11IijfgItOf/Y2PJmmRb5XPtZgdttFkHqD4+KPDE3 vRc/RIcRcGr0W6i6Ix9WeLsV/NioMsmLenoE9xFOWpwWj4jtl8uVl9aBbenB3eZ3 XoRKpW/D3mGbANuZlp7GCjZTDqCX24lKY+dZfET/YJMKzk88HUaleewuj20wnC7k aGudHoXfRt/G2CSZgjVbnXC9kx0+kCF6eUuF9H/NrVcbQ8uX+zbAZYoESQ== -----END CERTIFICATE-----Generated at Sat Aug 9 05:47:07 2025 by rpki-client