$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa File: b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa (raw, json) Hash identifier: Q68CVLPCqkxLUR122bul8wYYepI+bhbcrH7l+neLYf8= Subject key identifier: 28:31:FA:CC:7C:A0:24:FB:23:5A:54:7B:18:11:EA:C5:89:5C:BD:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D826D9E2CB6D69A2FF4E00E6C57717E9BE51B57 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa Signing time: Tue 22 Jul 2025 00:01:02 +0000 ROA not before: Tue 22 Jul 2025 00:01:02 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:82:6d:9e:2c:b6:d6:9a:2f:f4:e0:0e:6c:57:71:7e:9b:e5:1b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:01:02 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=cfde64d01015d3ec514d4abfda964548e25809f161f4aa077319aef0cb92c025, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:c8:50:58:4c:89:9b:33:25:43:39:96:fc: 61:c0:5f:b8:a9:86:10:bb:54:5d:04:86:5f:0d:31: 4c:55:43:26:d4:e1:4c:98:d5:00:81:04:41:b9:0d: 25:b8:36:ad:05:d3:78:4f:a7:b3:e5:3e:77:80:50: 9f:19:e2:16:da:bb:16:05:85:db:26:cd:ba:ba:2a: 5e:9f:47:2a:12:1a:5b:2b:2e:27:71:ab:d0:ae:4c: c9:17:0f:20:0a:f9:88:2c:00:7c:e4:ee:fe:05:4e: fd:2c:b9:c0:f6:68:90:e1:98:9a:70:6b:a9:cb:fe: 54:96:ea:59:17:4b:2a:27:8f:84:8a:25:08:5b:b5: b6:1a:3c:c2:08:94:7c:a3:76:80:05:ed:f2:3f:3f: 6d:03:9c:f6:99:f7:b0:e2:5a:07:5a:ec:e8:78:46: fb:a1:c7:6d:74:9d:53:4f:12:94:01:99:ac:7b:2f: e8:64:ce:26:86:8b:ac:1c:20:c5:d5:03:8c:b0:1f: 77:d8:03:bb:27:e3:6d:5e:9c:a2:34:5d:2e:31:48: e9:aa:45:18:ad:ec:1d:64:bb:0d:86:00:b2:8c:ef: c3:92:60:52:c8:50:67:db:e9:59:e5:df:a0:c2:69: 80:ca:55:02:91:f9:88:cd:26:3b:cf:29:66:d5:48: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:31:FA:CC:7C:A0:24:FB:23:5A:54:7B:18:11:EA:C5:89:5C:BD:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.160.0/19 Signature Algorithm: sha256WithRSAEncryption 71:2d:5d:32:90:ca:e3:82:ec:6c:0f:7d:b7:32:4f:bc:57:19: 40:29:f4:91:f3:a4:05:e0:22:a2:9e:e6:f0:d4:a5:a5:1d:94: 30:e0:ad:10:bb:c6:b3:3c:e6:b5:37:27:37:72:6a:79:75:1a: 40:86:66:be:10:f9:d5:8c:4b:af:8b:49:1d:e1:de:d8:2e:b4: 72:be:0e:30:1b:d3:89:a3:38:14:b2:ae:09:d6:7d:5c:f7:24: 4e:7a:b5:6f:24:4a:00:eb:f0:61:9a:f9:70:a9:17:f2:ab:06: f4:ca:79:bd:20:f8:60:44:c7:84:a6:05:2b:e3:9e:66:aa:06: f2:e4:1f:b5:d8:b1:db:84:cb:4f:b5:08:9e:ae:23:08:ea:a7: 33:db:af:11:9d:52:9e:6b:50:32:26:cc:ef:52:bc:e8:0e:3c: 68:b3:bd:1c:62:4e:71:de:58:80:14:4c:76:bb:d0:fd:a7:e2: 83:19:b4:d0:0d:93:75:83:15:24:5d:63:53:6c:26:2f:43:da: 5e:b2:80:fd:20:97:97:c1:b3:6f:b2:05:b4:e7:fa:fe:75:aa: 81:f4:ba:19:52:65:bc:6d:21:d1:b7:b0:20:c3:20:49:d4:15: 53:02:94:55:69:f2:5a:b9:b6:00:27:7b:26:a3:ed:91:28:7e: 59:ab:1b:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbYJtniy21pov9OAObFdxfpvlG1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAwMTAyWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmRlNjRkMDEwMTVkM2VjNTE0ZDRhYmZkYTk2NDU0OGUy NTgwOWYxNjFmNGFhMDc3MzE5YWVmMGNiOTJjMDI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk3shQWEyJmzMlQzmW/GHAX7iphhC7VF0Ehl8NMUxVQybU 4UyY1QCBBEG5DSW4Nq0F03hPp7PlPneAUJ8Z4hbauxYFhdsmzbq6Kl6fRyoSGlsr Lidxq9CuTMkXDyAK+YgsAHzk7v4FTv0sucD2aJDhmJpwa6nL/lSW6lkXSyonj4SK JQhbtbYaPMIIlHyjdoAF7fI/P20DnPaZ97DiWgda7Oh4Rvuhx210nVNPEpQBmax7 L+hkziaGi6wcIMXVA4ywH3fYA7sn421enKI0XS4xSOmqRRit7B1kuw2GALKM78OS YFLIUGfb6Vnl36DCaYDKVQKR+YjNJjvPKWbVSJbPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKDH6zHygJPsjWlR7GBHqxYlcvUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5OWQ1YzE3LTE0NDEtNGNkYi05NTc2LTBkOWY3ZWI1ODQ3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUNgKAwDQYJKoZIhvcNAQELBQADggEBAHEtXTKQyuOC7GwPfbcyT7xXGUAp 9JHzpAXgIqKe5vDUpaUdlDDgrRC7xrM85rU3Jzdyanl1GkCGZr4Q+dWMS6+LSR3h 3tgutHK+DjAb04mjOBSyrgnWfVz3JE56tW8kSgDr8GGa+XCpF/KrBvTKeb0g+GBE x4SmBSvjnmaqBvLkH7XYsduEy0+1CJ6uIwjqpzPbrxGdUp5rUDImzO9SvOgOPGiz vRxiTnHeWIAUTHa70P2n4oMZtNANk3WDFSRdY1NsJi9D2l6ygP0gl5fBs2+yBbTn +v51qoH0uhlSZbxtIdG3sCDDIEnUFVMClFVp8lq5tgAneyaj7ZEoflmrG0s= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:35 2025 by rpki-client