$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa File: c7176065-06ff-4cc3-8f45-037bf533d7c4.roa (raw, json) Hash identifier: SMo7w6wShSbmJP4G/XUKgrYDPZinY1Mxb0i2OjA4/8s= Subject key identifier: 03:56:4B:09:2B:0E:BF:17:E6:C6:89:60:3E:A3:5D:F6:4A:C6:D1:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4802393D25C2E950E1626EA41F43EAB92E2FC085 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa Signing time: Wed 06 Aug 2025 04:08:54 +0000 ROA not before: Wed 06 Aug 2025 04:08:54 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.56.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:02:39:3d:25:c2:e9:50:e1:62:6e:a4:1f:43:ea:b9:2e:2f:c0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 04:08:54 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=ec3224cf4902d980253b38f6f25dcf5da6cc7ec6be937bc84bb5a65a5c678430, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:0a:88:ff:85:bc:29:a6:9e:60:d2:86:f9: 90:0d:6a:d6:05:0f:56:78:bf:f4:89:a8:5f:db:cd: 2b:c5:da:00:c7:34:19:87:56:f8:94:da:30:5b:bc: fc:72:3d:7c:63:3a:43:28:b2:10:66:98:68:94:e5: 6b:fe:23:1d:0a:b7:72:3b:9b:2b:2f:7c:a6:6e:81: c8:e7:b9:5c:02:4c:e0:6b:43:d9:95:c2:53:cb:9d: cf:8e:94:6b:f6:08:36:11:43:04:3e:7d:dd:db:97: b3:46:be:5d:4c:f3:e1:c6:33:65:76:84:fe:79:be: 77:11:a3:0f:38:fc:5a:7b:b8:4d:ab:84:7d:07:32: 12:27:db:b8:88:0b:bf:93:5d:f5:1d:eb:3e:c2:0a: 07:20:5e:00:d0:e4:50:71:82:45:e4:64:08:49:b4: 1f:fc:75:56:14:eb:e1:8a:b3:f0:cf:62:64:5c:60: 7e:47:4f:05:74:77:73:62:de:92:64:b3:a8:54:88: 49:ff:7f:ee:88:1c:91:94:37:22:07:45:d3:90:42: a7:1a:bb:40:a9:77:3a:46:3e:6d:df:68:98:72:6b: 33:de:7e:6b:b7:64:a0:8e:a2:39:23:a8:c3:7a:6a: 86:ea:48:74:ab:f9:24:fb:e8:f9:00:b8:6a:84:45: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:4B:09:2B:0E:BF:17:E6:C6:89:60:3E:A3:5D:F6:4A:C6:D1:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.56.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7c:2e:db:08:90:ec:db:6e:e9:f3:77:84:36:26:6a:99:67:1c: 29:a5:ff:c5:12:fe:1e:ef:78:4f:d0:28:99:ac:df:f2:0e:91: 51:eb:5a:c6:9f:4c:e8:40:e9:b7:e9:8b:78:4a:c9:2a:73:64: 36:0a:97:55:7f:4e:3f:b0:6c:63:63:82:c8:0e:a4:a4:c6:7a: 7c:1c:17:fa:c0:f1:ed:bd:f4:fc:2a:5c:8d:59:17:22:cf:90: 21:38:cf:1b:eb:3f:95:f5:a1:40:35:4d:37:ce:f7:2e:d0:0e: b0:1c:04:35:64:e7:21:47:45:a1:9c:72:48:ca:3d:16:c7:b3: c7:9f:90:3f:3c:bd:05:66:92:52:cb:90:73:f3:42:eb:1f:0f: 5b:28:d1:66:4d:1d:8e:93:15:86:f5:c3:23:4e:3a:9b:be:00: 05:42:d0:e2:b7:9e:da:c5:68:09:5f:39:81:89:3a:a2:23:6c: 32:8a:4e:7c:25:7e:a9:c4:34:7b:47:23:61:22:c8:e5:ce:2c: 19:ca:60:3b:a6:aa:4f:23:8a:01:f8:a1:fa:91:ea:89:50:7f: 0c:a5:42:ae:9e:1f:d2:93:54:59:91:45:cd:4c:f3:06:d2:ef: ab:b3:9d:03:4b:8b:9e:36:30:ac:b0:54:08:d4:68:ca:5d:9c: be:d6:92:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSAI5PSXC6VDhYm6kH0PquS4vwIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDQwODU0WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzMyMjRjZjQ5MDJkOTgwMjUzYjM4ZjZmMjVkY2Y1ZGE2 Y2M3ZWM2YmU5MzdiYzg0YmI1YTY1YTVjNjc4NDMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBwgqI/4W8KaaeYNKG+ZANatYFD1Z4v/SJqF/bzSvF2gDH NBmHVviU2jBbvPxyPXxjOkMoshBmmGiU5Wv+Ix0Kt3I7mysvfKZugcjnuVwCTOBr Q9mVwlPLnc+OlGv2CDYRQwQ+fd3bl7NGvl1M8+HGM2V2hP55vncRow84/Fp7uE2r hH0HMhIn27iIC7+TXfUd6z7CCgcgXgDQ5FBxgkXkZAhJtB/8dVYU6+GKs/DPYmRc YH5HTwV0d3Ni3pJks6hUiEn/f+6IHJGUNyIHRdOQQqcau0CpdzpGPm3faJhyazPe fmu3ZKCOojkjqMN6aobqSHSr+ST76PkAuGqERQ2TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUA1ZLCSsOvxfmxolgPqNd9krG0YswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MTc2MDY1LTA2ZmYtNGNjMy04ZjQ1LTAzN2JmNTMzZDdjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjODANBgkqhkiG9w0BAQsFAAOCAQEAfC7bCJDs227p83eENiZqmWccKaX/ xRL+Hu94T9Aomazf8g6RUetaxp9M6EDpt+mLeErJKnNkNgqXVX9OP7BsY2OCyA6k pMZ6fBwX+sDx7b30/CpcjVkXIs+QITjPG+s/lfWhQDVNN873LtAOsBwENWTnIUdF oZxySMo9Fsezx5+QPzy9BWaSUsuQc/NC6x8PWyjRZk0djpMVhvXDI046m74ABULQ 4ree2sVoCV85gYk6oiNsMopOfCV+qcQ0e0cjYSLI5c4sGcpgO6aqTyOKAfih+pHq iVB/DKVCrp4f0pNUWZFFzUzzBtLvq7OdA0uLnjYwrLBUCNRoyl2cvtaS/w== -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:45 2025 by rpki-client