$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa File: be176b94-da1d-4662-89c3-9c11623079c8.roa (raw, json) Hash identifier: tApcQvG9E4DPH5hxuHTzo3JNTGhi3S1Q2uY1Pdmqy2w= Subject key identifier: 49:C7:CD:F1:39:6F:51:A0:0F:CD:BB:A9:EF:33:0F:53:85:A4:B2:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7ACD9FBFE5DACFC622DAED868299790147E82C26 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa Signing time: Sat 02 Aug 2025 00:51:52 +0000 ROA not before: Sat 02 Aug 2025 00:51:52 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cd:9f:bf:e5:da:cf:c6:22:da:ed:86:82:99:79:01:47:e8:2c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:51:52 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=c8ee8dc4146108d70bd22fd730536d87f9dc0b6e1f8198a31557b372be354742, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:4a:a1:92:f2:62:26:41:0f:ff:5f:44:08: 0d:75:2d:41:6f:3f:1b:e6:c2:ab:58:78:4c:51:79: 9b:68:eb:5a:40:70:e3:23:5d:43:d0:92:ef:e2:72: a2:23:c2:64:b1:e8:ac:8c:e0:68:43:52:fe:dc:19: ea:75:92:50:87:2f:7d:a3:1c:64:fb:ae:08:81:1e: 06:d5:52:77:1f:48:b1:d4:31:57:e4:94:08:bf:60: 38:f3:a0:3a:a2:bd:a6:b0:6b:0e:8a:f7:25:de:f9: 2a:4a:36:aa:f0:10:91:1e:96:84:b8:d1:ba:46:47: b7:cd:42:83:c2:65:62:6b:33:f9:97:88:3c:4c:61: fd:1d:aa:95:d9:34:9a:3f:83:1f:30:ed:f4:50:a8: 08:3c:20:cc:f1:f8:92:c7:6b:eb:e4:a5:41:62:fc: ea:b1:64:00:aa:e6:63:af:9d:d2:41:4f:ff:29:de: 37:9c:eb:28:28:a0:95:04:50:e4:b5:40:85:24:9a: 16:92:f3:c5:44:66:02:72:90:a4:af:37:09:18:21: 67:81:eb:2d:ba:c3:71:35:d1:d4:ac:d2:5f:50:a6: aa:c5:47:0a:c3:c0:45:2a:de:c7:59:7b:9a:c0:5a: e7:f5:f3:cf:f1:c9:5c:96:37:cf:95:ae:b0:ad:af: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:CD:F1:39:6F:51:A0:0F:CD:BB:A9:EF:33:0F:53:85:A4:B2:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.208.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:7c:23:44:5f:15:97:16:fb:7f:f1:f5:db:43:5d:99:70:6b: 90:44:2c:af:36:11:e4:76:d6:49:86:63:da:b3:4c:b9:89:76: 2a:7b:17:b9:a4:97:e5:a4:84:9d:07:74:0f:df:95:3d:76:06: 0d:3c:35:56:1d:00:f9:46:f4:97:c2:ca:d9:2c:f4:1d:19:d9: de:75:13:86:c2:be:66:72:9d:9b:61:d3:f1:ed:ff:d2:f1:3f: fd:57:98:ca:de:9f:ce:e1:b6:ca:3e:6f:82:c6:b9:d2:72:33: 09:93:59:11:38:2d:ec:b3:5c:96:2c:10:47:5b:7a:9a:97:ef: 5e:18:7e:ff:38:01:85:22:29:64:33:84:de:41:f2:77:9c:81: 28:3e:47:c1:95:75:7c:40:e6:35:52:92:17:dd:34:d9:e7:1e: 5c:27:03:92:d7:12:59:c4:54:74:62:9a:1f:c2:4d:43:74:79: 12:bb:23:fd:b0:43:70:0e:3b:e1:16:67:ad:d9:2b:b5:27:da: 6c:28:63:1f:3e:39:98:97:72:dd:92:8a:79:af:a7:4d:46:84: fa:b5:38:97:b0:1b:79:90:c4:d9:5c:78:bd:98:ef:cc:cc:2c: 65:79:90:02:23:ef:f7:e4:67:8d:d4:96:f8:87:18:8e:9d:95: 94:89:31:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUes2fv+Xaz8Yi2u2Ggpl5AUfoLCYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA1MTUyWhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGVlOGRjNDE0NjEwOGQ3MGJkMjJmZDczMDUzNmQ4N2Y5 ZGMwYjZlMWY4MTk4YTMxNTU3YjM3MmJlMzU0NzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVk0qhkvJiJkEP/19ECA11LUFvPxvmwqtYeExReZto61pA cOMjXUPQku/icqIjwmSx6KyM4GhDUv7cGep1klCHL32jHGT7rgiBHgbVUncfSLHU MVfklAi/YDjzoDqivaawaw6K9yXe+SpKNqrwEJEeloS40bpGR7fNQoPCZWJrM/mX iDxMYf0dqpXZNJo/gx8w7fRQqAg8IMzx+JLHa+vkpUFi/OqxZACq5mOvndJBT/8p 3jec6ygooJUEUOS1QIUkmhaS88VEZgJykKSvNwkYIWeB6y26w3E10dSs0l9QpqrF RwrDwEUq3sdZe5rAWuf188/xyVyWN8+VrrCtr3txAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUScfN8TlvUaAPzbup7zMPU4Wksv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlMTc2Yjk0LWRhMWQtNDY2Mi04OWMzLTljMTE2MjMwNzljOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPM7NAwDQYJKoZIhvcNAQELBQADggEBAG18I0RfFZcW+3/x9dtDXZlwa5BE LK82EeR21kmGY9qzTLmJdip7F7mkl+WkhJ0HdA/flT12Bg08NVYdAPlG9JfCytks 9B0Z2d51E4bCvmZynZth0/Ht/9LxP/1XmMren87htso+b4LGudJyMwmTWRE4Leyz XJYsEEdbepqX714Yfv84AYUiKWQzhN5B8necgSg+R8GVdXxA5jVSkhfdNNnnHlwn A5LXElnEVHRimh/CTUN0eRK7I/2wQ3AOO+EWZ63ZK7Un2mwoYx8+OZiXct2Sinmv p01GhPq1OJewG3mQxNlceL2Y78zMLGV5kAIj7/fkZ43UlviHGI6dlZSJMbs= -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:59 2025 by rpki-client