$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa File: ab76ae71-78e8-4d73-b40b-688a18c78444.roa (raw, json) Hash identifier: okqEMeild67ujDCc9O1o3XVDUa8AA4QwdxKi34w6C0I= Subject key identifier: 00:89:53:FE:3E:4A:B8:64:4A:6F:F0:C9:F3:DB:8B:3E:83:4F:C4:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CC02F8F903B0DD7B564776D85FCE1E0E4859BE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa Signing time: Fri 08 Aug 2025 00:11:35 +0000 ROA not before: Fri 08 Aug 2025 00:11:35 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.34.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c0:2f:8f:90:3b:0d:d7:b5:64:77:6d:85:fc:e1:e0:e4:85:9b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:35 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=b9ad48d4630eb7c3c8a0c911922bb97410d5816a7b5186a27570614a84509311, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:b7:65:84:d2:c3:41:3f:25:12:62:fb:82: 2e:37:31:97:96:80:95:5f:74:b6:32:b8:8e:a1:81: d8:82:64:56:60:73:3a:8f:22:c5:20:0b:49:a1:74: b7:84:3c:40:b4:22:46:84:1c:26:0e:7e:b4:e6:16: 89:86:1a:f4:c2:c9:c8:ca:d6:26:48:e0:71:84:36: 8f:c3:b2:70:90:80:d7:c2:67:7d:2f:6f:68:55:45: ca:32:74:c8:8c:5d:64:aa:b6:d8:4d:dd:5d:8e:0f: 32:fd:69:fa:9f:b7:2c:35:4a:29:a2:a9:ae:1f:1c: 88:5e:bb:de:a1:ab:70:63:e4:38:85:d2:63:f1:f4: 36:63:99:01:7d:d7:07:70:6b:56:8e:c5:3d:59:1d: dc:60:46:ac:2e:94:90:f7:b5:12:4c:56:c4:1e:5e: b7:0e:20:d9:17:4b:00:b2:00:d2:be:e4:36:da:45: 1d:91:6b:a0:f3:02:45:cb:12:ef:1d:c3:d3:d7:2d: 8b:e0:22:ab:e9:c4:92:36:20:f2:ef:f4:7b:7e:86: 9f:15:17:19:da:2d:71:27:3b:43:98:c0:85:50:99: 2b:0b:1d:1a:8b:2f:ac:ad:65:5c:b6:92:7c:2e:83: 25:c6:2b:17:f0:fa:38:02:17:ef:fb:62:5d:38:6e: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:89:53:FE:3E:4A:B8:64:4A:6F:F0:C9:F3:DB:8B:3E:83:4F:C4:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.34.128.0/17 Signature Algorithm: sha256WithRSAEncryption c1:66:8d:75:94:d1:79:05:ea:36:08:5d:5c:e5:cb:50:5b:d4: 0c:9c:61:40:0a:3f:2f:dc:13:5a:f7:9d:70:aa:6a:7e:39:21: 15:e3:0b:dd:c3:94:48:fa:0d:5a:7d:58:08:2a:2f:5a:62:08: f1:4a:84:46:04:56:a8:72:38:9e:50:15:94:9a:ec:a6:c7:da: 67:57:fa:b3:e8:44:28:6f:cd:22:61:7e:72:b9:01:15:15:d7: 03:87:27:a7:36:19:70:9b:6d:b2:5c:ef:72:0f:ec:c1:a4:4f: 24:49:bb:3d:5f:c6:8a:40:68:6e:d1:e3:c9:66:5f:cc:7b:ba: fd:af:3b:18:10:b5:36:bd:fa:4e:f3:40:f9:17:f6:da:e5:e8: ce:65:c9:12:93:95:56:f2:13:95:c5:9c:0f:bc:78:3f:d4:23: 5b:54:44:67:48:bb:bb:17:81:fa:f6:97:fb:e7:96:b2:f8:6e: 71:85:fe:89:c4:ee:ee:4b:c4:b2:51:70:71:59:ca:5c:f3:2e: f8:18:b2:ff:16:0f:df:64:f3:cf:58:69:07:e1:a0:1b:65:4e: f1:06:0e:3c:7a:fb:2a:21:dc:94:7c:93:d1:bf:b0:d0:fd:3b: df:ab:8b:54:74:1f:25:1d:74:49:02:47:c2:63:85:10:0b:96: a5:32:6c:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXMAvj5A7Dde1ZHdthfzh4OSFm+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMTM1WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWFkNDhkNDYzMGViN2MzYzhhMGM5MTE5MjJiYjk3NDEw ZDU4MTZhN2I1MTg2YTI3NTcwNjE0YTg0NTA5MzExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhsLdlhNLDQT8lEmL7gi43MZeWgJVfdLYyuI6hgdiCZFZg czqPIsUgC0mhdLeEPEC0IkaEHCYOfrTmFomGGvTCycjK1iZI4HGENo/DsnCQgNfC Z30vb2hVRcoydMiMXWSqtthN3V2ODzL9afqftyw1Simiqa4fHIheu96hq3Bj5DiF 0mPx9DZjmQF91wdwa1aOxT1ZHdxgRqwulJD3tRJMVsQeXrcOINkXSwCyANK+5Dba RR2Ra6DzAkXLEu8dw9PXLYvgIqvpxJI2IPLv9Ht+hp8VFxnaLXEnO0OYwIVQmSsL HRqLL6ytZVy2knwugyXGKxfw+jgCF+/7Yl04bqnbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAIlT/j5KuGRKb/DJ89uLPoNPxGQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiNzZhZTcxLTc4ZTgtNGQ3My1iNDBiLTY4OGExOGM3ODQ0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjIoAwDQYJKoZIhvcNAQELBQADggEBAMFmjXWU0XkF6jYIXVzly1Bb1Ayc YUAKPy/cE1r3nXCqan45IRXjC93DlEj6DVp9WAgqL1piCPFKhEYEVqhyOJ5QFZSa 7KbH2mdX+rPoRChvzSJhfnK5ARUV1wOHJ6c2GXCbbbJc73IP7MGkTyRJuz1fxopA aG7R48lmX8x7uv2vOxgQtTa9+k7zQPkX9trl6M5lyRKTlVbyE5XFnA+8eD/UI1tU RGdIu7sXgfr2l/vnlrL4bnGF/onE7u5LxLJRcHFZylzzLvgYsv8WD99k889YaQfh oBtlTvEGDjx6+yoh3JR8k9G/sND9O9+ri1R0HyUddEkCR8JjhRALlqUybFk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:28:01 2025 by rpki-client