$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ab338b-49ab-4221-a66e-0f528ce31066.roa File: e2ab338b-49ab-4221-a66e-0f528ce31066.roa (raw, json) Hash identifier: Q3q3DWtgT81XNkMz3PT6bTWtWsLncpe7gfmkr2kRRPo= Subject key identifier: 40:AB:2C:63:C4:9A:1A:6F:C5:A4:6A:C7:94:9E:B1:07:2C:83:B7:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DCBFB0563245120B43A47462BEFC5649AC0C431 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ab338b-49ab-4221-a66e-0f528ce31066.roa Signing time: Mon 04 Aug 2025 17:31:43 +0000 ROA not before: Mon 04 Aug 2025 17:31:43 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.172.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cb:fb:05:63:24:51:20:b4:3a:47:46:2b:ef:c5:64:9a:c0:c4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:43 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=60c030d7373269d0d4ce035d6a93e63b51dad95f6753c35ae2bed02dc155641e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:5e:a5:f1:21:ee:36:ca:6e:35:1f:2e:0e: 7d:80:d9:15:b4:58:1d:60:5b:b6:a3:c2:4a:2a:cc: 98:80:6a:5d:9b:74:c3:d9:0c:01:5e:0c:48:58:89: 0d:f8:94:10:ab:8c:bf:c6:66:b7:7b:73:ef:a4:2f: 18:b5:31:2e:2a:a0:0b:b2:95:e4:9c:6e:d5:e6:3f: c9:cd:c4:8e:15:59:89:1f:cd:d6:a0:b9:20:db:d3: b3:65:a5:71:3f:e2:b8:80:ab:59:60:1d:8e:05:2d: 0f:7d:40:d3:da:c6:e2:7c:9a:ee:0a:24:47:c9:67: 1d:74:e0:c0:f0:71:fe:76:e6:d0:82:41:33:32:fd: 1d:88:e2:26:a0:00:e5:ea:f1:45:c1:5b:6c:be:08: 08:f1:4b:9d:43:61:61:70:f6:1f:06:1a:62:f2:3b: 27:db:63:61:3a:fe:19:f9:f3:fe:61:f3:d9:22:88: ce:69:1f:e9:e6:a8:4a:08:a2:5c:20:c7:87:f1:88: 09:88:57:2d:1c:dc:cc:78:73:3e:4c:d6:f9:2d:7a: 65:c5:d4:a6:72:08:75:99:03:d7:f2:c8:fc:da:5f: 3a:9d:55:d0:d1:48:57:dc:ec:37:eb:ce:30:42:39: 64:e4:a4:18:fb:1c:da:23:99:40:9c:79:c1:7f:29: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:2C:63:C4:9A:1A:6F:C5:A4:6A:C7:94:9E:B1:07:2C:83:B7:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ab338b-49ab-4221-a66e-0f528ce31066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.172.0.0/14 Signature Algorithm: sha256WithRSAEncryption 16:18:95:4a:98:c8:cf:16:79:de:dd:9b:ce:b8:47:43:bf:7d: c2:b7:02:14:fd:7e:0d:3c:43:95:47:8c:62:6f:8c:57:1d:b9: 3c:6a:b5:10:09:73:45:b0:e7:56:fd:a8:e2:99:f3:c8:cc:86: 2a:cb:40:a4:e0:4c:df:81:ef:e7:ed:90:53:81:e5:ee:11:40: 35:f3:44:91:a6:2b:ff:bb:ac:39:19:20:6a:fc:61:e9:b5:8d: c7:00:77:cc:2b:a6:00:48:68:9b:2d:a4:74:1c:d3:55:28:b4: dd:01:89:0b:08:de:df:6d:cf:73:b2:fc:8d:62:34:6b:53:ee: d4:a4:d0:07:33:d1:38:56:4b:85:72:74:8f:d5:6d:06:67:d6: f9:2c:c9:fc:79:8c:04:7f:8c:3f:44:f2:5b:d7:27:5d:19:96: 4e:fa:7d:93:81:aa:bf:de:ae:52:8e:6b:a3:25:2b:83:20:a1: 76:81:d0:59:5c:a6:79:e5:71:6c:0d:bd:28:b8:ad:e1:7d:7f: 21:a5:16:5e:6e:84:d6:47:ee:c0:ab:c9:60:14:ab:ef:c6:28: a1:da:4c:6e:49:99:36:8b:a9:9c:19:07:88:4a:6d:32:e2:28: 37:c3:13:4b:22:35:38:9c:17:f5:64:f8:6c:64:8d:bb:7b:7b: aa:d2:8d:d7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDcv7BWMkUSC0OkdGK+/FZJrAxDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTQzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGMwMzBkNzM3MzI2OWQwZDRjZTAzNWQ2YTkzZTYzYjUx ZGFkOTVmNjc1M2MzNWFlMmJlZDAyZGMxNTU2NDFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqsl6l8SHuNspuNR8uDn2A2RW0WB1gW7ajwkoqzJiAal2b dMPZDAFeDEhYiQ34lBCrjL/GZrd7c++kLxi1MS4qoAuyleScbtXmP8nNxI4VWYkf zdaguSDb07NlpXE/4riAq1lgHY4FLQ99QNPaxuJ8mu4KJEfJZx104MDwcf525tCC QTMy/R2I4iagAOXq8UXBW2y+CAjxS51DYWFw9h8GGmLyOyfbY2E6/hn58/5h89ki iM5pH+nmqEoIolwgx4fxiAmIVy0c3Mx4cz5M1vktemXF1KZyCHWZA9fyyPzaXzqd VdDRSFfc7DfrzjBCOWTkpBj7HNojmUCcecF/KflHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQKssY8SaGm/FpGrHlJ6xByyDt4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyYWIzMzhiLTQ5YWItNDIyMS1hNjZlLTBmNTI4Y2UzMTA2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIorDANBgkqhkiG9w0BAQsFAAOCAQEAFhiVSpjIzxZ53t2bzrhHQ799wrcC FP1+DTxDlUeMYm+MVx25PGq1EAlzRbDnVv2o4pnzyMyGKstApOBM34Hv5+2QU4Hl 7hFANfNEkaYr/7usORkgavxh6bWNxwB3zCumAEhomy2kdBzTVSi03QGJCwje323P c7L8jWI0a1Pu1KTQBzPROFZLhXJ0j9VtBmfW+SzJ/HmMBH+MP0TyW9cnXRmWTvp9 k4Gqv96uUo5royUrgyChdoHQWVymeeVxbA29KLit4X1/IaUWXm6E1kfuwKvJYBSr 78YoodpMbkmZNoupnBkHiEptMuIoN8MTSyI1OJwX9WT4bGSNu3t7qtKN1w== -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:37 2025 by rpki-client