$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8766e16-a2c3-4078-aa9e-504e17a360f9.roa File: c8766e16-a2c3-4078-aa9e-504e17a360f9.roa (raw, json) Hash identifier: ZOHCyguBMLHBqMyC2LoLW7fO0NP6V+jQPNRYB4Pouts= Subject key identifier: FE:67:E2:60:E0:68:02:91:A5:2E:7C:66:40:2C:AE:45:16:D4:5D:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 047828E7A440015A01405AC7DCBF50A40AA465B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8766e16-a2c3-4078-aa9e-504e17a360f9.roa Signing time: Sat 02 Aug 2025 00:42:00 +0000 ROA not before: Sat 02 Aug 2025 00:42:00 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.178.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:78:28:e7:a4:40:01:5a:01:40:5a:c7:dc:bf:50:a4:0a:a4:65:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:42:00 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=6df9fdb76f90dc3678258413a4a7897ac19fac7077da53e6e0777dcd5e200fc6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:81:4d:9d:bc:f7:54:d0:1d:30:bf:a0:3c: 91:3e:9f:29:97:e1:a5:13:23:c9:a7:5a:85:ff:81: 26:4d:18:36:9f:25:84:80:aa:dc:c2:4f:e8:d3:dc: f4:dd:28:d1:8c:90:1e:5b:5b:2c:99:4b:37:54:cd: 25:47:11:ee:38:fd:f6:30:7b:26:bf:83:29:05:93: e7:48:cc:99:61:d5:03:1a:a8:18:78:06:de:7e:fa: e4:c4:e6:f5:2d:a2:7c:0e:42:3b:bd:7c:f1:80:c1: 79:ee:45:e7:b7:3c:c4:fc:7e:77:6a:5c:d6:94:bc: b4:a9:3a:30:7c:e5:7b:4d:4a:49:e8:4f:3d:45:1d: f3:fd:80:25:e4:6d:5a:c6:a8:1a:b2:ab:23:57:06: 9b:86:67:83:d2:bf:0e:c1:b2:98:05:06:d5:0d:1b: aa:b5:d5:c8:d1:bd:99:6e:3d:fb:af:14:e2:9a:79: e3:7f:1d:67:67:46:b6:73:fe:2a:bf:51:6e:c6:71: 1a:c6:fb:85:18:59:67:f1:75:0d:63:46:a3:9a:eb: 11:7e:a9:12:17:ec:47:a5:6e:47:02:4d:96:ee:eb: c7:6f:e5:77:ad:29:bf:fb:b7:82:1f:bb:20:9e:44: 43:cd:71:67:c2:8a:bd:26:3d:08:4b:2e:51:19:d3: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:67:E2:60:E0:68:02:91:A5:2E:7C:66:40:2C:AE:45:16:D4:5D:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8766e16-a2c3-4078-aa9e-504e17a360f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.0.0/18 Signature Algorithm: sha256WithRSAEncryption a1:ed:c7:42:74:82:84:75:bb:9c:c3:db:41:20:42:b1:3d:dc: 66:33:97:ff:e5:d7:ff:f6:53:e8:b9:49:50:af:70:e3:0f:2f: a7:3d:42:71:a9:8e:7e:5b:cb:1d:74:52:e9:50:6b:47:8b:97: dc:2d:9c:5b:06:c6:dd:c3:f5:d5:9a:25:6b:10:f2:6e:fa:2a: 04:aa:4d:1c:2c:ba:01:e9:8a:f6:cb:82:1a:6e:1d:6b:e3:95: 44:0f:91:5e:43:37:d3:be:9f:b1:ff:1d:9c:fb:31:62:75:a8: b8:6e:1d:a2:5a:0b:cd:1d:73:79:4f:c2:80:c0:c0:9e:50:87: 87:9b:2c:3d:c6:40:a4:9e:5a:3b:ed:ec:5a:23:39:b9:8e:be: b8:e1:8d:7f:2a:da:cb:4f:4e:3a:2e:10:ad:00:8e:95:5a:3b: ff:de:f2:c7:8a:9b:d2:5f:90:77:cf:91:15:82:26:6c:dc:d0: 50:cc:71:a4:a8:c5:ea:5e:24:b4:6e:75:2a:52:54:04:29:1c: bc:27:b9:18:17:5a:bb:95:0e:5a:6b:61:15:55:3f:02:1b:9d: 9d:f8:be:e2:6f:8a:bc:34:ad:59:29:5f:9f:57:9a:23:07:a0: a7:bd:8d:f9:d3:fc:d8:fc:75:2e:bc:e1:11:c8:11:14:f3:1b: 78:9e:19:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBHgo56RAAVoBQFrH3L9QpAqkZbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA0MjAwWhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGY5ZmRiNzZmOTBkYzM2NzgyNTg0MTNhNGE3ODk3YWMx OWZhYzcwNzdkYTUzZTZlMDc3N2RjZDVlMjAwZmM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/1YFNnbz3VNAdML+gPJE+nymX4aUTI8mnWoX/gSZNGDaf JYSAqtzCT+jT3PTdKNGMkB5bWyyZSzdUzSVHEe44/fYweya/gykFk+dIzJlh1QMa qBh4Bt5++uTE5vUtonwOQju9fPGAwXnuRee3PMT8fndqXNaUvLSpOjB85XtNSkno Tz1FHfP9gCXkbVrGqBqyqyNXBpuGZ4PSvw7BspgFBtUNG6q11cjRvZluPfuvFOKa eeN/HWdnRrZz/iq/UW7GcRrG+4UYWWfxdQ1jRqOa6xF+qRIX7EelbkcCTZbu68dv 5XetKb/7t4IfuyCeREPNcWfCir0mPQhLLlEZ040VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/mfiYOBoApGlLnxmQCyuRRbUXTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4NzY2ZTE2LWEyYzMtNDA3OC1hYTllLTUwNGUxN2EzNjBmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahsgAwDQYJKoZIhvcNAQELBQADggEBAKHtx0J0goR1u5zD20EgQrE93GYz l//l1//2U+i5SVCvcOMPL6c9QnGpjn5byx10UulQa0eLl9wtnFsGxt3D9dWaJWsQ 8m76KgSqTRwsugHpivbLghpuHWvjlUQPkV5DN9O+n7H/HZz7MWJ1qLhuHaJaC80d c3lPwoDAwJ5Qh4ebLD3GQKSeWjvt7FojObmOvrjhjX8q2stPTjouEK0AjpVaO//e 8seKm9JfkHfPkRWCJmzc0FDMcaSoxepeJLRudSpSVAQpHLwnuRgXWruVDlprYRVV PwIbnZ34vuJvirw0rVkpX59XmiMHoKe9jfnT/Nj8dS684RHIERTzG3ieGQE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:59 2025 by rpki-client