$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa File: ce9b44e8-c731-4450-962f-6cad76033edf.roa (raw, json) Hash identifier: GMSpgjD0upp+LUeYCJZunWiZ3sdNxxD0FU0zRARN8tQ= Subject key identifier: 0B:15:F1:D4:B2:11:46:F0:23:27:09:7C:87:96:B0:82:D4:17:B1:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0404133A76F4A38985548D3F4CE12E97814370F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa Signing time: Tue 05 Aug 2025 22:36:48 +0000 ROA not before: Tue 05 Aug 2025 22:36:48 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:04:13:3a:76:f4:a3:89:85:54:8d:3f:4c:e1:2e:97:81:43:70:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 22:36:48 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=5d74a1fc8e32ad6895c6f7da5e22f83e868f9042c47a3e54d50da6c5c890eb9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:ed:9f:32:20:c0:43:a7:56:81:1c:e9:1e: ea:1b:10:89:79:18:3b:f9:71:cd:ea:7b:d0:37:4a: f3:45:7f:99:8f:fd:68:c3:26:e3:7c:a3:78:84:e7: 81:a9:46:5f:de:61:cd:63:9d:f7:b4:e6:ce:c9:48: 98:d5:79:86:47:1c:e3:81:cb:b7:6a:b4:77:f8:42: e2:37:21:c4:f3:5f:fa:20:8e:ca:4c:f6:fb:8d:15: 69:5d:e1:44:bd:13:33:ed:b7:80:c2:19:f0:75:cd: 54:e0:24:76:e3:33:20:5d:8e:96:6f:e2:d9:80:e4: 08:32:96:8d:cf:6b:e1:7e:9b:96:c7:4c:9d:ef:8d: 38:b6:df:0c:cc:14:40:53:e6:5e:3d:20:d8:44:53: 05:2e:74:23:a1:c5:42:0f:03:1b:47:14:cd:40:76: 54:24:ab:ca:c5:a6:78:97:7e:17:20:5f:a4:18:1b: 5b:bf:08:3b:a1:81:06:e9:52:20:fa:32:de:43:a6: 02:53:71:6a:32:c3:13:85:01:27:e7:64:92:3b:27: 62:40:37:37:1d:9c:39:77:7e:08:7d:17:3d:69:63: c6:ec:6d:85:48:03:96:7a:b4:80:64:8a:67:77:fd: 72:ec:e0:a6:fb:7c:45:2a:43:7b:53:18:83:63:5f: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:15:F1:D4:B2:11:46:F0:23:27:09:7C:87:96:B0:82:D4:17:B1:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:47:a1:c3:21:2a:e5:93:d4:d7:5a:c7:af:31:69:38:34:d1: b9:7e:57:28:65:59:37:ea:58:c8:6f:7c:85:21:15:c9:38:9a: 81:f8:a9:65:72:e1:89:f8:1b:3c:2e:e6:9b:3d:d3:dd:a0:7b: 1f:eb:0c:5c:df:bf:f5:35:c7:aa:cd:53:9a:ca:f0:e9:2c:d6: b3:61:cf:25:29:90:55:6a:a5:fc:92:5c:58:67:3f:d0:7a:3d: 23:3c:2c:5e:d5:55:1a:ce:19:33:f0:1a:a0:a2:fd:4d:bf:da: 51:82:09:24:72:84:a3:ad:d6:bd:77:52:4d:64:84:72:c7:5c: 33:fa:71:d4:f7:c0:4c:a1:3a:33:69:05:86:ac:c2:39:0d:d8: 8a:83:79:af:a6:fb:0f:79:82:02:b2:9c:3c:e9:33:d3:74:2a: 03:09:c6:2e:ce:58:73:44:cc:6a:69:d1:ab:cc:15:87:30:03: 00:24:44:ad:7c:3f:24:32:4e:fc:fb:ec:7b:27:17:33:f0:b8: bf:27:ab:45:d7:ab:2c:33:a8:1a:d1:5e:05:4a:a6:4b:18:30: 63:59:df:8b:94:20:e3:b3:0f:22:94:28:d2:c7:6a:c2:be:8f: 3f:97:6e:a0:48:73:ce:44:e0:97:5d:94:52:3a:b3:84:fb:65: 7a:ff:63:2e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBAQTOnb0o4mFVI0/TOEul4FDcPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MjIzNjQ4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDc0YTFmYzhlMzJhZDY4OTVjNmY3ZGE1ZTIyZjgzZTg2 OGY5MDQyYzQ3YTNlNTRkNTBkYTZjNWM4OTBlYjlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdou2fMiDAQ6dWgRzpHuobEIl5GDv5cc3qe9A3SvNFf5mP /WjDJuN8o3iE54GpRl/eYc1jnfe05s7JSJjVeYZHHOOBy7dqtHf4QuI3IcTzX/og jspM9vuNFWld4US9EzPtt4DCGfB1zVTgJHbjMyBdjpZv4tmA5Agylo3Pa+F+m5bH TJ3vjTi23wzMFEBT5l49INhEUwUudCOhxUIPAxtHFM1AdlQkq8rFpniXfhcgX6QY G1u/CDuhgQbpUiD6Mt5DpgJTcWoywxOFASfnZJI7J2JANzcdnDl3fgh9Fz1pY8bs bYVIA5Z6tIBkimd3/XLs4Kb7fEUqQ3tTGINjXx45AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCxXx1LIRRvAjJwl8h5awgtQXsa4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlOWI0NGU4LWM3MzEtNDQ1MC05NjJmLTZjYWQ3NjAzM2VkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTTANBgkqhkiG9w0BAQsFAAOCAQEAOkehwyEq5ZPU11rHrzFpODTRuX5X KGVZN+pYyG98hSEVyTiagfipZXLhifgbPC7mmz3T3aB7H+sMXN+/9TXHqs1Tmsrw 6SzWs2HPJSmQVWql/JJcWGc/0Ho9IzwsXtVVGs4ZM/AaoKL9Tb/aUYIJJHKEo63W vXdSTWSEcsdcM/px1PfATKE6M2kFhqzCOQ3YioN5r6b7D3mCArKcPOkz03QqAwnG Ls5Yc0TMamnRq8wVhzADACRErXw/JDJO/PvseycXM/C4vyerRderLDOoGtFeBUqm SxgwY1nfi5Qg47MPIpQo0sdqwr6PP5duoEhzzkTgl12UUjqzhPtlev9jLg== -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:01 2025 by rpki-client