$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa File: b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa (raw, json) Hash identifier: O8fE7hqwxdY7/jQ716jESAvREKVzzYSEcu2p0wzaDJs= Subject key identifier: 46:CB:05:7D:82:51:F0:6C:20:75:37:32:B4:9D:B3:82:65:D3:B8:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A8E543A870CF80673D61A753FEF615DD1ECCED0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa Signing time: Wed 06 Aug 2025 00:21:13 +0000 ROA not before: Wed 06 Aug 2025 00:21:13 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.130.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8e:54:3a:87:0c:f8:06:73:d6:1a:75:3f:ef:61:5d:d1:ec:ce:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:21:13 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=15b01bef6b810171876e64591f80a92335cca918cee5cb965abca0c50bb63a0d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:08:04:2d:c2:72:fc:3f:86:60:5f:40:ea: d5:9d:d9:11:98:31:c2:a0:ba:3e:71:09:37:a2:22: f4:83:49:37:c6:a2:e2:19:07:e4:cd:f7:d2:5d:04: c7:cb:2f:f6:67:79:d8:0a:bb:b4:62:59:71:0e:d3: 7b:54:24:bd:59:93:a6:cf:43:87:d6:90:1e:4b:2f: 33:d0:9d:ff:98:cf:10:20:a3:d3:96:81:21:d6:8f: bc:1d:23:06:0f:66:2f:e3:1d:93:8c:6f:02:c2:51: 16:8e:9b:dc:65:16:af:24:5c:17:f7:fb:79:f2:a9: 29:8d:60:de:a4:d1:54:b8:45:8f:d2:cb:eb:cc:e5: 3a:39:3d:07:25:bb:3a:13:d1:cc:6a:f8:d1:c5:5c: 8f:5f:03:2b:85:c1:39:ad:b6:40:44:e3:a7:95:eb: 2b:6a:dd:9c:89:a0:8b:11:52:8e:20:f1:e7:52:e9: c8:8a:e6:3a:92:f4:46:1a:5e:f3:91:27:01:70:f9: 07:a1:a9:b5:ec:d7:8e:7c:3f:d9:f4:d3:0c:a7:21: 71:4c:d7:5f:9e:cc:ff:6a:91:62:ce:8a:b7:56:04: 39:2c:5b:95:c7:8a:88:59:8c:aa:51:c2:34:51:d8: ca:37:5d:7a:39:ea:ba:e0:da:81:26:75:04:24:6c: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CB:05:7D:82:51:F0:6C:20:75:37:32:B4:9D:B3:82:65:D3:B8:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.130.202.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ba:e5:d7:1d:c6:fb:b1:96:41:b6:06:d5:c9:b7:08:c0:9c: 28:2c:af:38:49:7a:db:48:29:2c:33:ad:5d:b9:7d:1a:85:bd: 98:45:65:6f:08:f7:3f:ac:6f:04:98:61:00:6b:53:fd:75:94: c0:62:74:ad:47:92:59:09:b5:47:62:c6:77:58:67:67:68:e3: 13:15:8e:02:f3:81:3a:b6:7f:ee:de:02:79:30:42:08:b2:97: e6:be:1a:51:29:d0:7a:1a:61:9a:f0:4d:df:50:e2:fd:5c:96: 7a:1f:9b:36:0f:8b:12:b5:54:c1:0e:58:01:b5:b9:42:dd:cf: 1b:63:f8:00:00:5b:e4:b1:0f:e0:a4:00:d0:36:1b:f2:34:2e: c7:bc:67:ad:76:cf:fd:1b:ed:2f:5a:72:71:f2:2e:b9:47:b4: e8:14:23:0a:13:cf:41:6f:64:81:6c:e4:91:77:64:bd:be:3c: cd:19:9e:57:75:39:59:7a:08:8d:49:78:0b:ea:79:b1:eb:be: 5f:7b:58:a9:fa:d0:ad:76:e3:69:b8:45:9f:7a:46:d8:dd:00: 74:e6:90:75:72:ff:d2:8e:f9:b9:03:73:99:80:55:9f:97:09: a0:fd:95:16:23:0e:77:5c:63:f4:94:de:27:71:6f:e5:ce:8e: e8:ca:c8:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWo5UOocM+AZz1hp1P+9hXdHsztAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAyMTEzWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWIwMWJlZjZiODEwMTcxODc2ZTY0NTkxZjgwYTkyMzM1 Y2NhOTE4Y2VlNWNiOTY1YWJjYTBjNTBiYjYzYTBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDwggELcJy/D+GYF9A6tWd2RGYMcKguj5xCTeiIvSDSTfG ouIZB+TN99JdBMfLL/ZnedgKu7RiWXEO03tUJL1Zk6bPQ4fWkB5LLzPQnf+YzxAg o9OWgSHWj7wdIwYPZi/jHZOMbwLCURaOm9xlFq8kXBf3+3nyqSmNYN6k0VS4RY/S y+vM5To5PQcluzoT0cxq+NHFXI9fAyuFwTmttkBE46eV6ytq3ZyJoIsRUo4g8edS 6ciK5jqS9EYaXvORJwFw+QehqbXs1458P9n00wynIXFM11+ezP9qkWLOirdWBDks W5XHiohZjKpRwjRR2Mo3XXo56rrg2oEmdQQkbBbpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURssFfYJR8GwgdTcytJ2zgmXTuJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YzBjYjc0LWZlOTktNGQ2MC1hM2FkLWQ0YzI5OTg3NTk3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADMgsowDQYJKoZIhvcNAQELBQADggEBAIq65dcdxvuxlkG2BtXJtwjAnCgs rzhJettIKSwzrV25fRqFvZhFZW8I9z+sbwSYYQBrU/11lMBidK1HklkJtUdixndY Z2do4xMVjgLzgTq2f+7eAnkwQgiyl+a+GlEp0HoaYZrwTd9Q4v1clnofmzYPixK1 VMEOWAG1uULdzxtj+AAAW+SxD+CkANA2G/I0Lse8Z612z/0b7S9acnHyLrlHtOgU IwoTz0FvZIFs5JF3ZL2+PM0Znld1OVl6CI1JeAvqebHrvl97WKn60K1242m4RZ96 RtjdAHTmkHVy/9KO+bkDc5mAVZ+XCaD9lRYjDndcY/SU3idxb+XOjujKyKk= -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:51 2025 by rpki-client