$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa File: e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa (raw, json) Hash identifier: PsECIdFeievHTvQTry4T5qefcFPebr2a1tV9FAg6H6o= Subject key identifier: 50:DA:3B:D4:03:0C:6E:6E:4F:8A:37:DB:AA:BD:5E:E7:C7:AA:62:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36A9C0EF3108649A875A278FBA45F8DCCB4C3E56 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa Signing time: Sat 19 Jul 2025 00:31:04 +0000 ROA not before: Sat 19 Jul 2025 00:31:04 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a9:c0:ef:31:08:64:9a:87:5a:27:8f:ba:45:f8:dc:cb:4c:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:31:04 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=4ee4f3c592f782313dc438d962d3dd11bde49349b64bb983d4c8aaf44ff3ed98, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:aa:95:8f:c5:22:59:73:9f:2b:cb:ba:6a: 9a:44:36:41:db:df:9a:97:70:2c:ab:5c:0b:7b:b2: d5:b1:5a:0f:f0:6e:a4:64:f6:1f:76:48:f3:a0:89: 8e:28:b6:d4:9c:5a:fc:d8:56:d2:0f:21:50:65:2f: f3:9c:a1:bc:f1:a2:f0:3f:fb:dc:44:41:f8:46:c1: 30:01:51:59:e5:ed:66:d2:c3:8e:03:39:3a:90:0b: 24:ec:f5:05:83:a2:5a:80:9b:b8:64:c6:bc:48:d5: c6:95:7c:85:34:c1:fc:c1:93:d4:e5:3d:f9:23:74: 3f:b9:c0:72:4a:5c:a1:27:d1:03:37:20:87:7e:34: a0:c1:13:25:25:a2:34:47:b0:87:99:fa:5d:b4:22: 69:14:9f:d6:32:90:17:b8:2f:0c:d4:06:48:66:66: 56:cc:60:f5:da:dd:ae:4d:8b:ef:06:ae:b6:62:bb: 66:55:be:f6:14:bc:5f:62:dc:84:c4:26:80:db:23: 9b:57:86:ff:c8:a6:06:1a:dd:21:d4:70:90:c6:56: 15:7c:cf:02:8f:a6:3a:8f:1d:27:92:fd:15:26:3a: de:ca:c1:06:32:25:db:33:0b:a7:a2:5a:b9:54:91: 35:c5:95:27:f5:d2:dd:83:68:aa:5d:ce:5d:aa:56: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:3B:D4:03:0C:6E:6E:4F:8A:37:DB:AA:BD:5E:E7:C7:AA:62:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.121.0/24 Signature Algorithm: sha256WithRSAEncryption 88:30:78:d0:a7:4a:c6:ff:e5:25:66:b0:c0:14:6c:fa:47:86: c3:5d:d5:5f:9d:d3:2c:87:07:96:fc:26:7f:7b:d8:9a:e8:bb: 52:3b:35:24:97:65:ca:ce:d7:08:f6:e1:71:cb:e2:60:e6:01: a8:31:a0:6d:64:45:f1:df:d0:de:65:f0:c6:66:59:c9:cc:2a: 5f:1a:10:a9:de:f2:05:7f:97:8a:dc:3d:00:70:8c:19:90:c1: c3:e7:d4:13:51:fa:94:59:84:1f:97:43:a3:a7:c9:58:76:c6: 64:ba:36:e0:b2:19:e6:28:7a:24:7b:d0:87:83:cb:b6:7e:50: 6c:c2:fb:d8:2e:8c:5a:3c:22:4e:d6:0f:08:90:6e:e4:83:49: 9e:b1:03:68:bd:6d:ca:ab:2c:12:da:73:aa:a8:fd:87:70:6d: d0:a4:ee:ad:08:bf:63:5c:b5:6f:cd:93:f3:d5:30:89:d7:1d: 87:ea:0e:71:4b:51:c2:3d:34:de:ff:da:ba:85:3d:65:99:15: 62:7c:51:5b:c8:d8:4f:a1:7e:07:f8:95:18:19:64:c4:32:13: 0b:41:48:3d:d4:e8:0f:03:15:25:d9:1b:7e:aa:96:24:c4:70: d0:e7:3c:dc:98:55:91:04:25:c1:5c:1d:95:d0:5e:ef:d4:0c: 3a:85:6f:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNqnA7zEIZJqHWiePukX43MtMPlYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAzMTA0WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWU0ZjNjNTkyZjc4MjMxM2RjNDM4ZDk2MmQzZGQxMWJk ZTQ5MzQ5YjY0YmI5ODNkNGM4YWFmNDRmZjNlZDk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDOaqVj8UiWXOfK8u6appENkHb35qXcCyrXAt7stWxWg/w bqRk9h92SPOgiY4ottScWvzYVtIPIVBlL/OcobzxovA/+9xEQfhGwTABUVnl7WbS w44DOTqQCyTs9QWDolqAm7hkxrxI1caVfIU0wfzBk9TlPfkjdD+5wHJKXKEn0QM3 IId+NKDBEyUlojRHsIeZ+l20ImkUn9YykBe4LwzUBkhmZlbMYPXa3a5Ni+8GrrZi u2ZVvvYUvF9i3ITEJoDbI5tXhv/IpgYa3SHUcJDGVhV8zwKPpjqPHSeS/RUmOt7K wQYyJdszC6eiWrlUkTXFlSf10t2DaKpdzl2qVpFPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUNo71AMMbm5Pijfbqr1e58eqYgYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4Zjc1ZDUxLTdjZjktNGY0OC04YjM3LTlhOWI2YTJmYzU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HkwDQYJKoZIhvcNAQELBQADggEBAIgweNCnSsb/5SVmsMAUbPpHhsNd 1V+d0yyHB5b8Jn972Jrou1I7NSSXZcrO1wj24XHL4mDmAagxoG1kRfHf0N5l8MZm WcnMKl8aEKne8gV/l4rcPQBwjBmQwcPn1BNR+pRZhB+XQ6OnyVh2xmS6NuCyGeYo eiR70IeDy7Z+UGzC+9gujFo8Ik7WDwiQbuSDSZ6xA2i9bcqrLBLac6qo/YdwbdCk 7q0Iv2NctW/Nk/PVMInXHYfqDnFLUcI9NN7/2rqFPWWZFWJ8UVvI2E+hfgf4lRgZ ZMQyEwtBSD3U6A8DFSXZG36qliTEcNDnPNyYVZEEJcFcHZXQXu/UDDqFb+M= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:58 2025 by rpki-client