$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a767aec8-98f9-455d-b88a-5d95b05f732f.roa File: a767aec8-98f9-455d-b88a-5d95b05f732f.roa (raw, json) Hash identifier: QAMPI+RCN8+0mUkPD1tmTfoKMeyXmFmiKx5cyZZLACc= Subject key identifier: 90:8C:51:2B:B0:94:BA:EF:10:57:D1:06:EF:11:E9:E5:97:13:4F:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3ADC8FAE138EEC1CED67451244B155EEC1276034 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a767aec8-98f9-455d-b88a-5d95b05f732f.roa Signing time: Sat 12 Jul 2025 00:10:59 +0000 ROA not before: Sat 12 Jul 2025 00:10:59 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 160.84.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:8f:ae:13:8e:ec:1c:ed:67:45:12:44:b1:55:ee:c1:27:60:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:10:59 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=99dbe96d91cefa9fc5dcefc7fe2da4472bfb930d3e4f537f48a3e32daa50f657, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:18:7f:00:d7:f2:73:f3:05:2f:48:20:36: f8:35:7e:5d:73:8c:2d:b0:ce:56:b1:87:81:d1:31: ec:5e:a6:e7:f4:2e:13:79:c2:28:0d:0f:14:16:1a: 7d:35:98:bf:6a:a2:73:e8:2e:54:93:1f:cb:a3:02: 7b:fe:fd:50:91:3a:6d:30:88:46:0a:25:6b:e5:4d: 7c:5d:e2:ad:77:84:0f:e5:47:48:8f:60:c9:aa:04: fb:f8:7f:65:1a:e9:34:69:c9:00:40:7b:f7:e3:f4: ce:68:ec:f0:7b:9c:a4:2c:ba:81:a6:98:85:df:16: 63:ca:f4:f1:0f:cb:c8:dd:fe:25:d0:d9:df:0c:d0: e9:31:7d:53:cc:ea:ca:69:64:4b:c6:c2:71:31:83: 86:26:a0:5b:c2:1b:86:fa:22:c0:08:46:6f:d7:1a: e0:95:28:73:4c:5f:c1:4b:1b:31:11:bc:b0:3f:34: 0c:2f:1f:53:48:7d:5c:e3:32:5c:d0:9e:da:97:5c: be:ff:f8:b7:22:59:6c:ce:bb:14:b6:59:fd:bd:47: bd:d2:e1:4e:71:80:2e:b8:d7:57:fe:b8:d0:9c:25: 4d:10:7f:61:21:be:b3:34:95:a7:10:15:e3:9d:5d: 07:73:55:19:a9:6e:18:5b:7e:5b:27:e5:ae:4a:e1: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:51:2B:B0:94:BA:EF:10:57:D1:06:EF:11:E9:E5:97:13:4F:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a767aec8-98f9-455d-b88a-5d95b05f732f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.84.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:83:32:fd:b4:71:f5:10:1b:20:10:f7:d1:b6:f6:0d:c1:5a: 9d:0c:66:2d:4d:ea:6f:4c:d6:ec:ea:51:4f:9a:52:58:c0:20: 80:63:07:b9:4f:94:59:c2:b7:fd:e9:cc:4f:3a:e5:05:32:35: f4:a8:44:59:21:85:2a:64:e8:84:3b:02:9d:c7:a7:20:71:2e: 70:73:07:ab:50:bf:0a:93:eb:93:47:10:fa:c3:d3:f7:48:8d: ee:71:92:a2:83:4c:0e:7e:76:4e:e6:f2:1d:95:ae:a8:dc:2c: 07:1c:7f:4c:d5:d6:70:42:35:37:42:47:6e:b8:c7:48:1e:83: 22:18:2c:79:34:05:f7:f9:2b:2c:4e:2c:8e:e8:d1:d3:ad:99: ae:ae:98:7c:eb:db:f3:92:8e:d5:72:cf:80:c7:3c:f0:34:ed: da:de:23:a9:1a:98:cc:67:95:1e:6a:16:07:9b:48:df:5d:71: fc:8a:86:83:5d:76:e3:11:4e:56:79:7a:fe:63:41:94:5b:84: be:f6:a8:05:e5:e7:9f:14:04:4a:4a:ca:9d:ea:61:a7:51:b8: 82:5e:c1:37:ad:7f:ce:2a:eb:b3:da:dd:31:68:2f:ee:6f:5a: 6e:ba:dc:8d:d2:59:a3:9c:8f:bc:ed:04:5c:50:7f:ea:70:7d: f1:f1:f5:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOtyPrhOO7BztZ0USRLFV7sEnYDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAxMDU5WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWRiZTk2ZDkxY2VmYTlmYzVkY2VmYzdmZTJkYTQ0NzJi ZmI5MzBkM2U0ZjUzN2Y0OGEzZTMyZGFhNTBmNjU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyJRh/ANfyc/MFL0ggNvg1fl1zjC2wzlaxh4HRMexepuf0 LhN5wigNDxQWGn01mL9qonPoLlSTH8ujAnv+/VCROm0wiEYKJWvlTXxd4q13hA/l R0iPYMmqBPv4f2Ua6TRpyQBAe/fj9M5o7PB7nKQsuoGmmIXfFmPK9PEPy8jd/iXQ 2d8M0OkxfVPM6sppZEvGwnExg4YmoFvCG4b6IsAIRm/XGuCVKHNMX8FLGzERvLA/ NAwvH1NIfVzjMlzQntqXXL7/+LciWWzOuxS2Wf29R73S4U5xgC6411f+uNCcJU0Q f2EhvrM0lacQFeOdXQdzVRmpbhhbflsn5a5K4botAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkIxRK7CUuu8QV9EG7xHp5ZcTT5gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3NjdhZWM4LTk4ZjktNDU1ZC1iODhhLTVkOTViMDVmNzMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAegVAAwDQYJKoZIhvcNAQELBQADggEBAB2DMv20cfUQGyAQ99G29g3BWp0M Zi1N6m9M1uzqUU+aUljAIIBjB7lPlFnCt/3pzE865QUyNfSoRFkhhSpk6IQ7Ap3H pyBxLnBzB6tQvwqT65NHEPrD0/dIje5xkqKDTA5+dk7m8h2VrqjcLAccf0zV1nBC NTdCR264x0gegyIYLHk0Bff5KyxOLI7o0dOtma6umHzr2/OSjtVyz4DHPPA07dre I6kamMxnlR5qFgebSN9dcfyKhoNdduMRTlZ5ev5jQZRbhL72qAXl558UBEpKyp3q YadRuIJewTetf84q67Pa3TFoL+5vWm663I3SWaOcj7ztBFxQf+pwffHx9RY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:59 2025 by rpki-client