$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa File: a1820a02-368b-475a-8c64-c87e903d2117.roa (raw, json) Hash identifier: TN3eIkMOP8X8XwKnbmByaST7FZjl+2flIP7uhtqO/Qw= Subject key identifier: 26:EA:39:B0:C0:34:D0:CD:4A:4F:AF:7E:94:F3:1B:F9:AD:C8:25:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 175B7D1C3CFE9A2E63CC199E5D7F053243CCEE1E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa Signing time: Fri 01 Aug 2025 15:10:58 +0000 ROA not before: Fri 01 Aug 2025 15:10:58 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 164.152.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:7d:1c:3c:fe:9a:2e:63:cc:19:9e:5d:7f:05:32:43:cc:ee:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:10:58 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=2bddafb1189ecf43062442efe7aa87b0eefcddeb49f6c1168117ad1a1f015af2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:56:4c:f0:4c:1d:26:2e:3e:4b:57:92:41: 54:15:c6:d8:19:81:f1:3f:ae:02:69:50:31:27:c4: 13:05:f4:2f:07:67:df:a9:d8:09:d0:02:60:f8:f2: 68:49:16:7e:0a:15:89:14:4d:50:7a:ac:2a:60:57: 48:09:40:ba:1a:b7:78:74:34:c5:ee:c7:6b:a5:1b: d4:ea:6b:c9:55:9d:4f:44:40:11:c5:1d:e2:7b:da: 93:9a:04:e3:4b:26:99:aa:48:f2:6d:80:c8:50:23: 44:d8:b2:3e:6b:60:7b:0c:b0:a7:af:5f:29:c2:55: 10:57:75:e0:4f:1e:e4:9d:a7:bc:d9:15:22:e7:da: 9a:d6:7d:f6:d8:96:a5:22:b9:79:a7:0a:55:4f:d4: f1:0c:10:aa:44:36:b5:79:62:4c:3e:64:49:7c:9c: 40:7b:ac:43:ea:2c:73:d5:23:6a:7f:e6:64:f3:be: 56:45:91:b3:44:49:2a:ad:9e:77:94:4f:3b:73:69: fe:15:c2:bd:3b:85:69:c5:d1:ac:09:27:ec:9e:10: 08:62:4f:87:f2:97:11:de:f6:0e:31:97:a5:93:57: fe:5e:65:e2:24:b9:3c:ce:5b:e2:58:3d:27:4a:88: 07:f8:85:c3:a6:de:69:63:55:da:e5:21:2f:7b:de: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:39:B0:C0:34:D0:CD:4A:4F:AF:7E:94:F3:1B:F9:AD:C8:25:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.184.0/21 Signature Algorithm: sha256WithRSAEncryption 85:61:2a:c3:a6:4f:9f:54:38:73:98:86:52:dd:87:0f:e9:3b: 89:c3:9d:0d:b2:83:69:b3:f9:1a:8c:47:14:0b:09:90:34:d1: 7d:31:81:64:23:75:72:7c:88:8a:cf:04:d0:3f:b5:69:2e:70: 09:2c:0b:bb:0a:ff:11:ba:cf:5e:69:d7:39:64:7b:99:d7:62: 28:f3:70:e3:76:96:8b:ec:31:8f:41:9d:cc:74:5d:0b:94:dc: ea:0b:b8:01:20:4e:61:da:28:c7:f4:fe:7f:b8:06:67:87:56: 4b:55:fa:c3:76:9b:9f:3e:13:0b:b7:e5:fe:1e:8b:dd:02:15: df:07:7f:9a:b9:37:20:08:3c:25:52:19:b1:ae:4a:d5:df:19: 27:3e:fb:cc:82:48:1c:b1:b4:b5:d4:a9:7d:d8:d6:69:b5:a6: d4:6b:0e:d4:23:7e:2c:66:d8:31:c6:d0:25:d3:82:9a:06:49: c0:a4:21:2e:7c:7e:fe:82:05:51:a6:7a:b1:bb:0e:88:bf:7f: 58:64:25:76:f9:df:c8:6d:5a:79:9e:ad:a0:aa:33:fd:be:39: 25:99:d7:af:90:83:e7:a6:cd:b7:df:a8:fe:e9:4d:05:8c:a5: 72:ee:78:c2:ba:c9:df:51:db:47:2f:7e:bc:db:f0:14:92:04: f8:e5:68:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF1t9HDz+mi5jzBmeXX8FMkPM7h4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMDU4WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmRkYWZiMTE4OWVjZjQzMDYyNDQyZWZlN2FhODdiMGVl ZmNkZGViNDlmNmMxMTY4MTE3YWQxYTFmMDE1YWYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCij1ZM8EwdJi4+S1eSQVQVxtgZgfE/rgJpUDEnxBMF9C8H Z9+p2AnQAmD48mhJFn4KFYkUTVB6rCpgV0gJQLoat3h0NMXux2ulG9Tqa8lVnU9E QBHFHeJ72pOaBONLJpmqSPJtgMhQI0TYsj5rYHsMsKevXynCVRBXdeBPHuSdp7zZ FSLn2prWffbYlqUiuXmnClVP1PEMEKpENrV5Ykw+ZEl8nEB7rEPqLHPVI2p/5mTz vlZFkbNESSqtnneUTztzaf4Vwr07hWnF0awJJ+yeEAhiT4fylxHe9g4xl6WTV/5e ZeIkuTzOW+JYPSdKiAf4hcOm3mljVdrlIS973k/FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJuo5sMA00M1KT69+lPMb+a3IJX4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExODIwYTAyLTM2OGItNDc1YS04YzY0LWM4N2U5MDNkMjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOkmLgwDQYJKoZIhvcNAQELBQADggEBAIVhKsOmT59UOHOYhlLdhw/pO4nD nQ2yg2mz+RqMRxQLCZA00X0xgWQjdXJ8iIrPBNA/tWkucAksC7sK/xG6z15p1zlk e5nXYijzcON2lovsMY9Bncx0XQuU3OoLuAEgTmHaKMf0/n+4BmeHVktV+sN2m58+ Ewu35f4ei90CFd8Hf5q5NyAIPCVSGbGuStXfGSc++8yCSByxtLXUqX3Y1mm1ptRr DtQjfixm2DHG0CXTgpoGScCkIS58fv6CBVGmerG7Doi/f1hkJXb538htWnmeraCq M/2+OSWZ16+Qg+emzbffqP7pTQWMpXLueMK6yd9R20cvfrzb8BSSBPjlaI4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:57:19 2025 by rpki-client