$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67e5d32-78e9-4f9d-a953-f4c9e52d5ab1.roa File: b67e5d32-78e9-4f9d-a953-f4c9e52d5ab1.roa (raw, json) Hash identifier: NbakPT6/XADJISa3mtbhrAH/saNqc3GPY2DU81VnOgA= Subject key identifier: E8:69:DF:87:70:C8:38:36:56:56:BA:B6:17:28:38:D1:AC:40:21:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16243076F920F187017D3DB29C081BC83E48AC5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67e5d32-78e9-4f9d-a953-f4c9e52d5ab1.roa Signing time: Wed 06 Aug 2025 03:52:08 +0000 ROA not before: Wed 06 Aug 2025 03:52:08 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:24:30:76:f9:20:f1:87:01:7d:3d:b2:9c:08:1b:c8:3e:48:ac:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 03:52:08 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=044dd59a6116f48b76026d022bd3186d0ed9528fbc423c4ae1443cdecb3b0057, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:7e:f4:6f:9c:7b:17:48:f8:9b:25:2e:9f: 59:ec:cf:d0:4c:42:41:49:4b:b3:be:4c:03:32:3a: 13:28:f4:ec:23:0c:92:c2:1e:17:58:b5:0e:ed:e8: 46:d3:18:04:91:ed:d0:1e:df:36:7e:19:cf:18:3a: 5c:32:7c:5d:1c:b7:03:1b:c8:69:0f:ed:e0:eb:35: bf:04:70:72:47:b4:1c:1e:36:30:d9:ed:b5:e3:b0: 1a:e6:32:6e:f4:9e:b9:04:4c:a2:49:86:3d:55:ff: 73:0d:51:d8:57:a7:21:05:b5:97:da:2e:6a:12:0f: 91:92:de:8d:cb:bb:6c:94:4c:f9:6c:35:2a:1b:be: af:05:cc:6e:1b:fd:61:4e:22:e3:69:53:86:c0:1e: d2:f1:15:d8:7d:0d:a4:d5:a2:47:4e:6f:ff:c7:1a: da:62:fa:85:8a:ba:ee:62:89:c9:57:c6:55:ff:64: 8b:8b:db:d5:a5:0a:d0:b6:22:00:55:57:89:5d:cc: ea:5d:9d:28:1b:b9:e7:30:0f:d4:56:81:fd:e7:9b: 02:7e:89:9b:85:cd:6a:68:cf:d5:07:8d:bc:a0:49: 6b:10:86:11:31:a8:08:ed:5a:0b:d3:64:7d:57:6a: 07:8a:f7:ee:34:7a:21:78:14:17:3a:db:0a:35:20: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:69:DF:87:70:C8:38:36:56:56:BA:B6:17:28:38:D1:AC:40:21:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67e5d32-78e9-4f9d-a953-f4c9e52d5ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:1e:5d:28:25:2f:05:87:5a:3c:bc:e5:35:ff:92:f6:1e:1e: 85:77:b1:02:7e:8e:01:62:97:a2:2b:de:8c:10:16:a2:42:15: 65:6a:64:22:ec:40:ef:b1:b8:01:67:f8:77:d1:22:50:91:aa: fd:aa:02:dc:ef:87:af:6e:0a:26:39:ab:56:76:56:c2:8e:14: f0:71:33:bb:7b:ed:80:6a:fc:d7:04:85:df:e9:7e:d3:c5:23: f8:b0:76:38:87:7f:58:21:22:5e:5a:b3:77:c8:08:48:ec:d2: 85:c1:78:9b:83:10:4a:75:70:62:a2:4b:8f:71:c4:11:e0:69: 34:37:21:ff:ab:11:89:61:20:05:7a:82:08:32:41:32:a2:a8: ec:90:c5:54:62:35:62:b1:15:92:a9:d2:8d:26:a4:ee:48:19: 35:1d:d6:57:9d:52:69:08:85:66:18:f3:6d:d9:01:5c:35:6f: c4:8c:e4:53:3c:87:08:1f:e7:20:d2:21:35:70:cd:81:b7:d8: b0:65:04:7b:9b:09:40:37:d2:ae:ae:82:ae:5a:8e:67:2d:4e: 05:f7:f6:cd:2b:06:68:60:50:46:e5:4d:31:da:fb:16:3a:74: 88:f8:58:df:15:6d:3c:10:30:89:f7:b0:da:9e:da:ae:37:ba: 4e:69:14:dd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFiQwdvkg8YcBfT2ynAgbyD5IrFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDM1MjA4WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDRkZDU5YTYxMTZmNDhiNzYwMjZkMDIyYmQzMTg2ZDBl ZDk1MjhmYmM0MjNjNGFlMTQ0M2NkZWNiM2IwMDU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmin70b5x7F0j4myUun1nsz9BMQkFJS7O+TAMyOhMo9Owj DJLCHhdYtQ7t6EbTGASR7dAe3zZ+Gc8YOlwyfF0ctwMbyGkP7eDrNb8EcHJHtBwe NjDZ7bXjsBrmMm70nrkETKJJhj1V/3MNUdhXpyEFtZfaLmoSD5GS3o3Lu2yUTPls NSobvq8FzG4b/WFOIuNpU4bAHtLxFdh9DaTVokdOb//HGtpi+oWKuu5iiclXxlX/ ZIuL29WlCtC2IgBVV4ldzOpdnSgbuecwD9RWgf3nmwJ+iZuFzWpoz9UHjbygSWsQ hhExqAjtWgvTZH1XageK9+40eiF4FBc62wo1IK93AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6Gnfh3DIODZWVrq2Fyg40axAIQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2N2U1ZDMyLTc4ZTktNGY5ZC1hOTUzLWY0YzllNTJkNWFiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKzANBgkqhkiG9w0BAQsFAAOCAQEAMR5dKCUvBYdaPLzlNf+S9h4ehXex An6OAWKXoivejBAWokIVZWpkIuxA77G4AWf4d9EiUJGq/aoC3O+Hr24KJjmrVnZW wo4U8HEzu3vtgGr81wSF3+l+08Uj+LB2OId/WCEiXlqzd8gISOzShcF4m4MQSnVw YqJLj3HEEeBpNDch/6sRiWEgBXqCCDJBMqKo7JDFVGI1YrEVkqnSjSak7kgZNR3W V51SaQiFZhjzbdkBXDVvxIzkUzyHCB/nINIhNXDNgbfYsGUEe5sJQDfSrq6CrlqO Zy1OBff2zSsGaGBQRuVNMdr7Fjp0iPhY3xVtPBAwifew2p7arje6TmkU3Q== -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:24 2025 by rpki-client