$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cab9a16e-f84b-44eb-9173-65b33fa5df85.roa File: cab9a16e-f84b-44eb-9173-65b33fa5df85.roa (raw, json) Hash identifier: yDdt0+h/hvHWzBWtEzkxrYppJeS2Xve77ul9RVgV4D8= Subject key identifier: 1C:0C:D3:9D:2B:DD:B0:C0:FE:CB:EF:D0:0D:81:49:19:C2:0E:38:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 396BB5CB7F91B8712EB2E226629EA547EADD581A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cab9a16e-f84b-44eb-9173-65b33fa5df85.roa Signing time: Tue 22 Jul 2025 00:31:10 +0000 ROA not before: Tue 22 Jul 2025 00:31:10 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.213.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6b:b5:cb:7f:91:b8:71:2e:b2:e2:26:62:9e:a5:47:ea:dd:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:31:10 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=0346f026d7412e3b6eadf171be49954988b646b241d577744102bb76306a1a2a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:3e:11:66:90:e8:90:96:66:70:63:e5:f7: bc:e0:a1:dd:13:b5:74:97:53:23:70:38:a2:01:62: 1c:1c:28:76:58:e2:20:97:df:4b:10:7e:0e:da:70: cf:65:d6:5f:b6:3c:4b:4b:4c:65:aa:78:91:99:17: e0:c4:bc:b1:71:9e:03:9f:ef:ab:e6:21:5e:34:e2: b3:95:f0:ef:99:1a:da:71:c1:61:08:f3:36:74:09: 6c:be:e5:08:66:5e:f9:9f:f3:dc:d4:82:1f:19:6c: fd:81:54:5a:87:9c:77:c6:3b:02:b9:51:ac:a0:0d: f9:f9:7e:5f:1f:01:c6:7b:82:ad:cd:8a:32:b4:90: 97:59:b9:01:11:84:9e:15:bb:38:49:19:9f:42:8e: 21:be:8f:4b:4a:4a:15:84:45:42:ae:e8:a9:61:1b: 31:76:8b:7d:95:19:e7:c0:e7:c3:91:12:2a:6f:de: ef:f7:54:11:a5:2f:0d:47:0a:4d:58:f9:a0:b8:e8: 04:d0:56:4a:1b:62:d2:d0:5b:12:d3:a4:12:10:b8: 74:db:74:c7:d5:00:a3:64:4a:6e:58:75:73:d7:83: 01:33:ed:86:e4:cf:12:9c:d6:22:d1:f4:61:66:a1: c9:c0:25:fd:03:8a:fe:4b:26:28:cd:5b:37:52:be: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:D3:9D:2B:DD:B0:C0:FE:CB:EF:D0:0D:81:49:19:C2:0E:38:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cab9a16e-f84b-44eb-9173-65b33fa5df85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.213.98.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b9:0f:80:7f:e4:25:6b:28:b3:e8:cf:ea:69:af:11:bb:fc: 98:88:62:26:0d:ea:9a:3a:ef:c9:c4:79:64:1c:ff:c8:e6:5a: 63:d8:7c:81:c2:e8:be:03:ae:be:c3:8b:23:25:88:a7:50:00: 16:d9:6a:32:03:28:43:28:5c:aa:fb:91:6c:73:91:e3:b6:f6: e0:a2:45:e8:4a:1e:48:ab:1f:68:0e:7e:34:3b:1d:ff:f4:db: ea:44:60:3f:e3:ac:35:11:b6:e5:4a:56:72:a3:59:3d:0f:2d: 28:3d:ce:2c:98:b8:6d:a0:9b:07:5d:a2:53:b3:d7:e2:53:7a: a0:7c:35:11:ce:31:68:32:0d:bd:0b:60:c9:99:21:c7:95:af: 4d:e4:16:29:0f:41:36:1e:c1:a2:25:c1:90:8d:44:27:ea:0c: 4a:ae:b6:f3:a2:a5:a0:30:3c:0a:be:56:92:a4:48:fb:f3:86: 7e:88:ba:28:f8:40:74:d8:63:5f:1b:22:5a:b9:35:b9:e2:a6: 19:5e:3c:d4:67:94:35:84:50:16:97:cd:04:26:cd:bf:3c:5f: 85:dd:ed:f0:da:0e:59:ee:9e:22:b3:e6:bc:9e:90:aa:7f:03: 0c:1c:b2:c5:78:e9:9e:57:a6:f7:6e:61:8c:8d:c7:1f:00:d4: 5d:0a:b9:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOWu1y3+RuHEusuImYp6lR+rdWBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAzMTEwWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzQ2ZjAyNmQ3NDEyZTNiNmVhZGYxNzFiZTQ5OTU0OTg4 YjY0NmIyNDFkNTc3NzQ0MTAyYmI3NjMwNmExYTJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOLj4RZpDokJZmcGPl97zgod0TtXSXUyNwOKIBYhwcKHZY 4iCX30sQfg7acM9l1l+2PEtLTGWqeJGZF+DEvLFxngOf76vmIV404rOV8O+ZGtpx wWEI8zZ0CWy+5QhmXvmf89zUgh8ZbP2BVFqHnHfGOwK5UaygDfn5fl8fAcZ7gq3N ijK0kJdZuQERhJ4VuzhJGZ9CjiG+j0tKShWERUKu6KlhGzF2i32VGefA58OREipv 3u/3VBGlLw1HCk1Y+aC46ATQVkobYtLQWxLTpBIQuHTbdMfVAKNkSm5YdXPXgwEz 7YbkzxKc1iLR9GFmocnAJf0Div5LJijNWzdSvoRfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHAzTnSvdsMD+y+/QDYFJGcIOOEwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhYjlhMTZlLWY4NGItNDRlYi05MTczLTY1YjMzZmE1ZGY4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs1WIwDQYJKoZIhvcNAQELBQADggEBAFK5D4B/5CVrKLPoz+pprxG7/JiI YiYN6po678nEeWQc/8jmWmPYfIHC6L4Drr7DiyMliKdQABbZajIDKEMoXKr7kWxz keO29uCiRehKHkirH2gOfjQ7Hf/02+pEYD/jrDURtuVKVnKjWT0PLSg9ziyYuG2g mwddolOz1+JTeqB8NRHOMWgyDb0LYMmZIceVr03kFikPQTYewaIlwZCNRCfqDEqu tvOipaAwPAq+VpKkSPvzhn6Iuij4QHTYY18bIlq5NbniphlePNRnlDWEUBaXzQQm zb88X4Xd7fDaDlnuniKz5ryekKp/AwwcssV46Z5XpvduYYyNxx8A1F0KuZ0= -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:14 2025 by rpki-client