$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b65366-8de7-4756-a36f-b27f4f98edb0.roa File: d5b65366-8de7-4756-a36f-b27f4f98edb0.roa (raw, json) Hash identifier: cA1Uy7zBRuALNLT/lTjqQDWxojm9VFt7u7UWvfwMlDA= Subject key identifier: D4:55:A8:23:8B:B1:3C:C8:2D:25:AA:70:62:AF:7A:26:F1:CF:58:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 748B6C6165F8962D4C23F5F498A499ADEC849E1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b65366-8de7-4756-a36f-b27f4f98edb0.roa Signing time: Mon 04 Aug 2025 16:12:09 +0000 ROA not before: Mon 04 Aug 2025 16:12:09 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.182.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8b:6c:61:65:f8:96:2d:4c:23:f5:f4:98:a4:99:ad:ec:84:9e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:12:09 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=2ac471ff1cbbb7c09880991be784e9b92eb96f5e0882e4f864e0ec95cbb62194, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:c2:6f:83:b8:99:be:02:18:86:a0:19:b6: d6:e7:b3:4d:8b:40:3c:16:00:b2:b4:9c:28:e5:00: 28:87:19:82:4f:1c:6f:54:b2:3a:ec:f0:64:b8:60: 88:6c:50:3c:55:d1:60:e0:ba:11:6d:b5:c6:aa:32: fe:0b:5b:03:1d:8b:3a:1a:7e:2e:d3:a4:b2:64:6f: ec:0e:12:7d:4c:76:02:f0:c1:a2:d0:d6:da:d5:fc: 57:cb:d8:57:bf:29:97:60:4b:99:cd:89:7d:f1:30: a3:9b:99:c8:47:64:3e:67:68:54:d7:38:0a:1d:cd: 98:69:d3:d6:2f:5f:e8:b9:e1:c9:2f:02:fc:31:61: 71:c0:5b:79:09:28:39:69:0c:f8:48:a6:50:c8:6e: 18:85:3a:6b:42:1c:fd:0c:95:46:e0:e3:50:9c:e4: 7b:cd:2e:c9:39:a6:f7:48:7c:55:fb:26:61:9d:ef: 8f:57:69:9c:c3:5a:bc:1c:a6:87:10:1f:58:7b:1f: b7:d4:cc:9c:c0:7d:bb:fa:82:0f:82:ba:f8:bc:fc: 98:14:65:4b:0a:89:5d:40:ed:30:c8:3d:d1:ed:e7: 4b:72:2e:d5:b9:bb:e4:c6:ac:3a:0a:59:77:fd:96: 7c:47:d4:36:7d:b3:3d:57:f9:f2:d1:75:4c:61:8e: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:55:A8:23:8B:B1:3C:C8:2D:25:AA:70:62:AF:7A:26:F1:CF:58:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b65366-8de7-4756-a36f-b27f4f98edb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.224.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:03:a9:5f:7d:1c:92:34:40:d2:cd:2b:a8:b2:ef:bc:f1:c6: 6e:01:90:2a:3d:b0:7d:18:24:42:ef:40:29:d9:47:77:bd:df: 45:13:e8:40:cc:f8:1d:56:fb:29:2a:f8:0c:f2:9a:e6:c7:1e: fa:8a:0d:6f:4e:ed:03:2f:51:e3:4f:5c:f7:43:79:07:e7:20: c3:fe:c1:02:8f:24:89:79:55:f2:e0:1b:37:27:55:00:ae:40: a0:c2:d6:c3:4e:40:0c:6d:41:3a:a8:f1:51:65:a7:6a:47:02: 10:99:c6:ec:ad:49:ea:b9:1e:94:ad:27:33:9d:43:64:91:4f: c1:fc:3d:0c:e4:07:29:8f:61:32:63:2e:b9:d2:be:c1:ca:23: d0:ed:c3:7b:74:0e:2c:d0:2d:20:d7:df:48:94:0b:60:ab:d9: 82:c9:d3:49:03:af:b0:fd:d0:a7:75:f2:ca:08:88:b1:e0:17: bf:b7:92:a9:e2:fa:40:23:7b:90:fc:fe:48:63:02:47:1e:06: 04:d4:b8:9a:e1:ce:45:75:4d:cf:d2:3b:56:6b:f8:26:1f:e4: 55:45:32:0d:28:d0:d9:03:96:b3:ba:b2:87:e9:ca:08:53:93: 7b:55:19:68:b7:8a:ff:e0:47:55:7e:29:2a:16:df:0c:7b:81: 15:9c:52:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdItsYWX4li1MI/X0mKSZreyEnh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYxMjA5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWM0NzFmZjFjYmJiN2MwOTg4MDk5MWJlNzg0ZTliOTJl Yjk2ZjVlMDg4MmU0Zjg2NGUwZWM5NWNiYjYyMTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPqcJvg7iZvgIYhqAZttbns02LQDwWALK0nCjlACiHGYJP HG9Usjrs8GS4YIhsUDxV0WDguhFttcaqMv4LWwMdizoafi7TpLJkb+wOEn1MdgLw waLQ1trV/FfL2Fe/KZdgS5nNiX3xMKObmchHZD5naFTXOAodzZhp09YvX+i54ckv AvwxYXHAW3kJKDlpDPhIplDIbhiFOmtCHP0MlUbg41Cc5HvNLsk5pvdIfFX7JmGd 749XaZzDWrwcpocQH1h7H7fUzJzAfbv6gg+Cuvi8/JgUZUsKiV1A7TDIPdHt50ty LtW5u+TGrDoKWXf9lnxH1DZ9sz1X+fLRdUxhjlpbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1FWoI4uxPMgtJapwYq96JvHPWIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1YjY1MzY2LThkZTctNDc1Ni1hMzZmLWIyN2Y0Zjk4ZWRiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATYtuAwDQYJKoZIhvcNAQELBQADggEBAEwDqV99HJI0QNLNK6iy77zxxm4B kCo9sH0YJELvQCnZR3e930UT6EDM+B1W+ykq+AzymubHHvqKDW9O7QMvUeNPXPdD eQfnIMP+wQKPJIl5VfLgGzcnVQCuQKDC1sNOQAxtQTqo8VFlp2pHAhCZxuytSeq5 HpStJzOdQ2SRT8H8PQzkBymPYTJjLrnSvsHKI9Dtw3t0DizQLSDX30iUC2Cr2YLJ 00kDr7D90Kd18soIiLHgF7+3kqni+kAje5D8/khjAkceBgTUuJrhzkV1Tc/SO1Zr +CYf5FVFMg0o0NkDlrO6sofpyghTk3tVGWi3iv/gR1V+KSoW3wx7gRWcUsY= -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:54 2025 by rpki-client