$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa File: d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa (raw, json) Hash identifier: 4XYOKUPRBnciReiiXStBMxI2jeyqLdThIOxHP0NCJgk= Subject key identifier: 9B:9A:70:F4:19:50:0B:14:01:81:BB:4A:B9:75:03:B5:D4:54:D6:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73DABF9D732D28DE964A9C2EC394FA8E03141472 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa Signing time: Fri 01 Aug 2025 15:10:31 +0000 ROA not before: Fri 01 Aug 2025 15:10:31 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.120.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:bf:9d:73:2d:28:de:96:4a:9c:2e:c3:94:fa:8e:03:14:14:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:10:31 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=3a8a8139462ca94e3b7241cafcfa0a4204ab539f66653d0419151a5c2b0361cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:a4:ca:e6:c8:8d:f1:09:59:06:d6:3f:10: db:91:e3:55:67:1b:32:a6:7f:18:94:fa:78:fe:0a: 19:dc:f8:5c:67:81:00:e8:ca:ef:db:06:4f:a3:5c: 13:1d:2a:85:58:16:3c:1c:67:0b:48:eb:d0:81:25: f8:d2:d5:82:0a:71:a1:04:ff:1a:b1:9b:27:b7:6d: 30:21:dd:da:ef:ee:98:1e:54:0c:96:44:7c:58:93: 53:bb:88:5b:4e:31:fc:12:b3:08:88:d2:cd:91:8e: c5:95:c7:de:73:df:e4:c2:02:54:2d:e7:b5:d3:8d: 38:2f:13:24:bd:21:07:a4:40:83:06:a4:4a:e7:75: 68:6b:8f:ec:f5:e4:e6:c5:2c:2e:65:f0:cc:19:d4: 57:f2:87:33:7a:60:be:9b:d2:9f:a9:7d:2a:73:c3: 3a:77:49:a5:9c:90:42:44:3a:c7:81:32:bd:fd:25: 33:df:b7:6a:7b:65:c9:9b:18:81:10:50:e0:50:e3: e9:84:b3:9a:dc:75:2a:1b:64:f1:97:06:a5:51:9a: 41:3f:fe:80:de:c2:fb:38:04:7c:a0:53:ce:4d:f4: 82:5f:0e:dd:e3:35:9e:d0:dd:0f:7e:b8:bc:01:a7: 95:5c:9e:91:ac:04:c3:59:01:95:32:86:36:62:bf: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9A:70:F4:19:50:0B:14:01:81:BB:4A:B9:75:03:B5:D4:54:D6:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.120.56.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:3a:a1:df:d3:dd:12:4f:7f:0b:ea:d0:00:f2:28:dc:06:33: 0f:1a:c8:57:c1:29:64:ef:7f:3a:2d:89:a6:0c:23:cb:92:81: 6b:fc:6f:79:a8:ed:4d:1a:80:c3:cd:db:82:2d:e1:a0:a3:ff: e7:71:eb:9c:27:34:0b:5a:60:74:0b:51:23:29:4a:21:50:bd: 3a:26:b2:3f:8d:5e:87:4e:f3:f0:e6:7d:b2:47:2e:9c:5b:79: 6f:42:0d:4a:b9:fb:48:db:e3:58:be:a6:2f:ac:d7:c8:e1:b5: df:95:49:b1:3e:62:a9:20:ee:76:ad:5f:25:99:9d:08:b9:04: 9a:cf:25:9c:da:d4:1f:b0:ee:fa:18:83:1d:3e:b2:27:32:50: 73:c6:37:7f:9a:07:82:ae:26:36:a1:0c:da:21:00:ea:bc:33: 66:05:2e:f8:76:9e:02:2f:84:36:63:5e:1e:67:17:02:40:a5: f6:7f:b0:8b:f3:5e:fc:54:16:63:4a:6f:93:6e:3e:93:12:fd: 1a:77:90:e9:79:d1:98:a2:2b:26:83:e7:ad:a3:bc:eb:f6:94: 3d:75:dd:f5:82:21:df:d9:10:ee:ed:42:b2:ae:fc:89:4d:97: 6d:75:bd:f8:e0:2a:9a:18:95:6f:01:2b:16:fb:51:0e:39:5d: 02:36:f4:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc9q/nXMtKN6WSpwuw5T6jgMUFHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMDMxWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYThhODEzOTQ2MmNhOTRlM2I3MjQxY2FmY2ZhMGE0MjA0 YWI1MzlmNjY2NTNkMDQxOTE1MWE1YzJiMDM2MWNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+fqTK5siN8QlZBtY/ENuR41VnGzKmfxiU+nj+Chnc+Fxn gQDoyu/bBk+jXBMdKoVYFjwcZwtI69CBJfjS1YIKcaEE/xqxmye3bTAh3drv7pge VAyWRHxYk1O7iFtOMfwSswiI0s2RjsWVx95z3+TCAlQt57XTjTgvEyS9IQekQIMG pErndWhrj+z15ObFLC5l8MwZ1FfyhzN6YL6b0p+pfSpzwzp3SaWckEJEOseBMr39 JTPft2p7ZcmbGIEQUOBQ4+mEs5rcdSobZPGXBqVRmkE//oDewvs4BHygU85N9IJf Dt3jNZ7Q3Q9+uLwBp5VcnpGsBMNZAZUyhjZiv4lDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm5pw9BlQCxQBgbtKuXUDtdRU1kowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNGE0ZDdmLTgzMDctNDI2Yy1iMmQzLTJkYjg4MjBmMjVkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOieDgwDQYJKoZIhvcNAQELBQADggEBAF06od/T3RJPfwvq0ADyKNwGMw8a yFfBKWTvfzotiaYMI8uSgWv8b3mo7U0agMPN24It4aCj/+dx65wnNAtaYHQLUSMp SiFQvTomsj+NXodO8/DmfbJHLpxbeW9CDUq5+0jb41i+pi+s18jhtd+VSbE+Yqkg 7natXyWZnQi5BJrPJZza1B+w7voYgx0+sicyUHPGN3+aB4KuJjahDNohAOq8M2YF Lvh2ngIvhDZjXh5nFwJApfZ/sIvzXvxUFmNKb5NuPpMS/Rp3kOl50ZiiKyaD562j vOv2lD113fWCId/ZEO7tQrKu/IlNl211vfjgKpoYlW8BKxb7UQ45XQI29M0= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:35 2025 by rpki-client