$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a367e845-6fff-49ee-9e02-cf3af1ac2bd6.roa File: a367e845-6fff-49ee-9e02-cf3af1ac2bd6.roa (raw, json) Hash identifier: xwG38SikoBUuLP/aqJ4fa0dRQynXMuNRjxOmsy6lJvI= Subject key identifier: D1:E4:D4:1E:E4:FA:DC:EA:B6:81:22:65:E5:CA:7B:FC:E1:52:5E:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56CB7AF2322BF4C5A49CE5E8DDBE1160B198FC92 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a367e845-6fff-49ee-9e02-cf3af1ac2bd6.roa Signing time: Tue 22 Jul 2025 00:00:56 +0000 ROA not before: Tue 22 Jul 2025 00:00:56 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:7a:f2:32:2b:f4:c5:a4:9c:e5:e8:dd:be:11:60:b1:98:fc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:56 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=5d305f3ad9fb1c6e5b88ffe9d910f5fc3c2d500c4eaafb70a912241692e1fd4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:a7:7e:7c:d1:8c:95:5b:ea:fe:a6:3b:65: 79:46:d7:da:bf:6f:b5:44:ef:a1:db:99:29:82:ff: c6:6d:c8:99:0c:4e:61:ab:e8:bf:20:b2:a0:ad:42: 1f:1b:39:2d:7a:f0:bd:96:02:e5:57:b5:7b:59:59: cc:bb:2c:f5:a0:1c:89:cb:48:34:06:6b:c5:f1:a0: d6:4d:1c:2a:af:7b:7b:b5:0a:33:64:af:a3:d8:9c: 2d:69:e6:1e:71:65:42:84:e5:31:59:fd:b1:68:c3: c4:3a:38:36:c3:60:bc:d9:3d:f8:db:ed:1b:82:cc: 79:b6:38:7d:4f:cb:96:88:a6:e7:32:c3:f2:ab:b1: d8:4a:98:6b:f4:99:05:47:4a:b6:4f:c2:51:e8:a0: 88:b7:6a:83:e1:39:03:8b:0d:45:f1:b2:8f:a8:94: 30:5c:9f:47:62:4e:d3:08:07:64:20:2d:79:e0:07: 98:50:e3:8b:58:6b:69:ea:08:db:3c:8d:93:1d:21: 38:b6:c5:a7:7a:ee:03:0c:89:94:aa:eb:f5:35:eb: d4:3a:cc:23:67:de:bc:25:7f:2f:ca:12:fa:b6:75: ba:f2:e3:18:a9:8f:3b:a2:51:6c:85:96:3e:82:51: 11:a5:6d:e8:35:56:a1:e1:08:7f:e4:16:9b:80:70: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E4:D4:1E:E4:FA:DC:EA:B6:81:22:65:E5:CA:7B:FC:E1:52:5E:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a367e845-6fff-49ee-9e02-cf3af1ac2bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.112.0/20 Signature Algorithm: sha256WithRSAEncryption 29:7b:fa:90:d2:68:82:7b:30:1e:da:29:a7:ec:49:af:fb:b0: b0:e4:05:c3:d8:68:cb:5f:73:1b:7a:3c:ce:53:53:62:d3:f5: e3:18:53:9a:7a:98:39:2d:66:a0:1b:7a:5e:3e:35:d1:f1:9f: ca:f7:26:a6:a3:19:90:df:94:a5:87:1c:8b:82:b4:dd:64:70: 23:ae:fa:36:8b:51:7c:21:a4:c4:cf:95:72:6b:f9:1b:61:ab: d9:94:de:e5:23:62:ca:0f:1c:39:64:d4:6a:b5:79:79:b4:4e: 7a:b7:0b:3f:8b:fb:99:87:8b:1a:e1:12:34:15:56:02:72:ab: 5d:26:0d:67:4a:76:e6:ec:aa:c9:31:d3:43:11:47:82:94:4e: 7e:90:83:20:5d:50:6c:78:e2:8e:0f:75:9d:02:4a:7f:51:64: e2:79:65:84:7e:fc:ad:ab:1e:8b:ed:3a:34:0b:39:ae:25:7f: b9:5e:07:49:db:b1:6b:bd:e9:d6:8c:ae:7a:d1:91:13:70:db: 81:ed:22:15:b0:8d:2a:fa:17:ff:b6:c9:69:7d:5e:61:1f:fd: 7f:81:2a:1d:03:74:45:ba:ce:27:c1:29:bc:b7:01:19:92:8b: ff:d1:e5:25:a8:c4:41:43:cd:ec:59:30:e0:70:79:0c:71:04: a3:e0:be:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVst68jIr9MWknOXo3b4RYLGY/JIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAwMDU2WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDMwNWYzYWQ5ZmIxYzZlNWI4OGZmZTlkOTEwZjVmYzNj MmQ1MDBjNGVhYWZiNzBhOTEyMjQxNjkyZTFmZDRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3cqd+fNGMlVvq/qY7ZXlG19q/b7VE76HbmSmC/8ZtyJkM TmGr6L8gsqCtQh8bOS168L2WAuVXtXtZWcy7LPWgHInLSDQGa8XxoNZNHCqve3u1 CjNkr6PYnC1p5h5xZUKE5TFZ/bFow8Q6ODbDYLzZPfjb7RuCzHm2OH1Py5aIpucy w/KrsdhKmGv0mQVHSrZPwlHooIi3aoPhOQOLDUXxso+olDBcn0diTtMIB2QgLXng B5hQ44tYa2nqCNs8jZMdITi2xad67gMMiZSq6/U169Q6zCNn3rwlfy/KEvq2dbry 4xipjzuiUWyFlj6CURGlbeg1VqHhCH/kFpuAcOQhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0eTUHuT63Oq2gSJl5cp7/OFSXnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNjdlODQ1LTZmZmYtNDllZS05ZTAyLWNmM2FmMWFjMmJkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgHAwDQYJKoZIhvcNAQELBQADggEBACl7+pDSaIJ7MB7aKafsSa/7sLDk BcPYaMtfcxt6PM5TU2LT9eMYU5p6mDktZqAbel4+NdHxn8r3JqajGZDflKWHHIuC tN1kcCOu+jaLUXwhpMTPlXJr+Rthq9mU3uUjYsoPHDlk1Gq1eXm0Tnq3Cz+L+5mH ixrhEjQVVgJyq10mDWdKdubsqskx00MRR4KUTn6QgyBdUGx44o4PdZ0CSn9RZOJ5 ZYR+/K2rHovtOjQLOa4lf7leB0nbsWu96daMrnrRkRNw24HtIhWwjSr6F/+2yWl9 XmEf/X+BKh0DdEW6zifBKby3ARmSi//R5SWoxEFDzexZMOBweQxxBKPgvnA= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:47 2025 by rpki-client