$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa File: e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa (raw, json) Hash identifier: +KoqXsoLcv5WxgRy2UxtDxf38mCaZ/5OXdw17QHlSr0= Subject key identifier: BE:61:04:F3:EF:DB:00:71:BC:33:AC:55:AE:24:D8:4E:CF:6F:6F:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AA2FF9279F8556CBA059783765D8B6F98244E49 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa Signing time: Sat 19 Jul 2025 00:30:30 +0000 ROA not before: Sat 19 Jul 2025 00:30:30 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a2:ff:92:79:f8:55:6c:ba:05:97:83:76:5d:8b:6f:98:24:4e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:30:30 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=3fb2d2d7860854070d0af7338a6ebe6f0be2faebf5bd808486c1e55e2f4ef0c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:b0:f0:c4:e2:fb:98:85:f0:e1:6a:4a:07: 69:ce:c7:84:a3:d3:f7:ea:26:03:88:fa:9d:18:7b: fc:2c:94:15:dc:eb:c2:58:33:b4:90:2e:b5:97:98: f9:d4:4c:91:59:d6:db:f5:6d:f8:b8:f9:22:b3:dc: e9:a6:00:2d:99:d4:3f:81:c0:e1:37:e1:c6:3a:1a: 32:ca:71:22:df:6d:5e:c9:3c:fa:c3:60:aa:52:cd: 45:6a:90:0d:2e:88:02:4b:83:28:00:23:a9:29:f0: ea:24:c5:8b:9c:dc:51:d9:9e:4c:20:77:f6:c8:f6: 5e:b5:d2:85:38:b3:a7:dc:1b:06:79:2f:c3:eb:d1: c5:8b:b1:45:9c:9b:24:49:ca:98:1d:b9:0e:e1:82: 0f:18:29:b7:04:03:eb:81:80:1e:0c:91:1c:0d:f9: 86:6d:5b:6a:33:ee:98:1e:61:fb:b5:df:26:53:0e: 08:64:68:40:f6:bc:af:8a:23:29:a3:ab:17:f4:e9: 78:0d:f2:08:c8:87:c3:51:a9:d2:bf:21:8e:99:b5: a0:4b:32:fc:dd:11:c2:d0:24:3f:60:00:8a:39:4a: 59:4f:61:cf:63:be:f4:6d:54:bc:a0:33:9a:90:32: 2d:a0:59:69:8b:42:05:07:cb:43:32:13:3f:ad:90: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:04:F3:EF:DB:00:71:BC:33:AC:55:AE:24:D8:4E:CF:6F:6F:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption d7:1a:4f:77:7b:e5:d1:25:ac:5b:9f:44:bc:e5:1f:c2:ca:82: 75:89:16:c2:49:ff:18:84:b9:b5:91:6a:1e:03:c4:9a:22:18: 67:59:71:7a:df:c2:3a:38:8c:e8:34:94:89:4c:22:fd:c6:25: d1:d5:6e:7f:95:5f:9f:0a:f6:e2:a2:59:05:c2:e5:03:8a:96: 9d:eb:83:39:34:44:4c:00:d6:7f:7d:7f:67:98:51:69:c7:ed: 90:57:30:08:d3:6d:b9:95:b1:cc:93:f3:6b:81:22:48:7c:58: 79:6c:2d:ec:52:64:32:5c:26:05:cf:74:60:ff:d3:33:71:41: 67:0f:f7:31:a8:ab:41:82:f6:25:55:d7:bd:25:6a:71:c5:e5: 37:74:d7:e9:74:0b:12:61:5d:9c:8f:23:6a:32:5a:63:cf:84: c6:01:19:10:97:5a:fe:04:76:90:3d:5a:c7:b0:ca:f7:75:89: 65:1d:f2:12:63:08:f3:e7:14:a7:36:f8:d5:7c:18:9f:e1:d2: cb:39:67:b7:43:c5:62:15:77:c6:90:6c:8f:cf:54:f2:c8:72: ff:ff:46:a3:ec:26:c2:b0:b0:84:4e:06:08:ba:31:06:2f:85: f5:cf:57:0a:dc:63:08:38:8d:b1:7c:2a:01:9a:b7:e0:7d:4a: 29:ff:03:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGqL/knn4VWy6BZeDdl2Lb5gkTkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAzMDMwWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmIyZDJkNzg2MDg1NDA3MGQwYWY3MzM4YTZlYmU2ZjBi ZTJmYWViZjViZDgwODQ4NmMxZTU1ZTJmNGVmMGMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVA7DwxOL7mIXw4WpKB2nOx4Sj0/fqJgOI+p0Ye/wslBXc 68JYM7SQLrWXmPnUTJFZ1tv1bfi4+SKz3OmmAC2Z1D+BwOE34cY6GjLKcSLfbV7J PPrDYKpSzUVqkA0uiAJLgygAI6kp8OokxYuc3FHZnkwgd/bI9l610oU4s6fcGwZ5 L8Pr0cWLsUWcmyRJypgduQ7hgg8YKbcEA+uBgB4MkRwN+YZtW2oz7pgeYfu13yZT DghkaED2vK+KIymjqxf06XgN8gjIh8NRqdK/IY6ZtaBLMvzdEcLQJD9gAIo5SllP Yc9jvvRtVLygM5qQMi2gWWmLQgUHy0MyEz+tkNMNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvmEE8+/bAHG8M6xVriTYTs9vb+gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NWUyNTczLTczY2MtNGQ3MC1iZTZiLTRiNjFkZDBmMzRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBE2TANBgkqhkiG9w0BAQsFAAOCAQEA1xpPd3vl0SWsW59EvOUfwsqCdYkW wkn/GIS5tZFqHgPEmiIYZ1lxet/COjiM6DSUiUwi/cYl0dVuf5Vfnwr24qJZBcLl A4qWneuDOTRETADWf31/Z5hRacftkFcwCNNtuZWxzJPza4EiSHxYeWwt7FJkMlwm Bc90YP/TM3FBZw/3MairQYL2JVXXvSVqccXlN3TX6XQLEmFdnI8jajJaY8+ExgEZ EJda/gR2kD1ax7DK93WJZR3yEmMI8+cUpzb41XwYn+HSyzlnt0PFYhV3xpBsj89U 8shy//9Go+wmwrCwhE4GCLoxBi+F9c9XCtxjCDiNsXwqAZq34H1KKf8Dbw== -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:38 2025 by rpki-client