$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa File: efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa (raw, json) Hash identifier: oii3CBzAIeJcH2xmfFosOgqyQNYz+wd8QaYxlpY4ItI= Subject key identifier: E8:BA:57:9E:E2:A8:5F:A5:D9:67:D7:2F:72:CC:FE:A5:9A:7B:23:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BBEDCFEEEE64EAA74B70A7979956B4FB1C7D962 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa Signing time: Sat 02 Aug 2025 00:41:14 +0000 ROA not before: Sat 02 Aug 2025 00:41:14 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.222.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:dc:fe:ee:e6:4e:aa:74:b7:0a:79:79:95:6b:4f:b1:c7:d9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:41:14 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=03fbd772686292e0e6faa8814ac1000061a219a5dd17578fdecd32b8dd654a73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:8e:f5:7b:f4:f8:45:1c:e4:a6:a5:fb:1e: a9:1c:c5:91:22:d2:4b:cc:2c:4f:2c:36:63:e9:1f: fe:c7:68:0a:0d:0f:81:cb:bf:f7:e2:99:a1:e7:c2: ed:ef:de:6c:7a:06:4b:39:55:66:b6:a3:62:02:48: 99:05:34:92:cc:ab:3d:67:a7:6e:20:43:37:e8:ef: 2f:73:6b:49:42:49:a7:97:d3:3d:19:2d:43:71:6f: 65:84:93:a2:52:e3:bf:b4:4d:1a:2d:b5:70:1c:76: 63:56:b6:30:8a:94:ce:6c:f3:f8:b3:07:8d:7b:9a: 4c:37:9a:75:df:98:24:58:23:26:25:ca:6c:6a:8d: e0:34:fc:ef:d9:1a:a6:74:8a:97:9e:32:2f:12:f4: 0b:69:d5:60:38:5f:41:ea:a8:de:26:e7:8a:95:62: b4:c0:73:97:d3:29:c9:86:e8:0a:f3:b0:69:a6:c2: 47:d0:e7:1b:75:11:ef:32:d1:f8:1e:cf:86:b6:9c: 67:82:51:d2:0e:c1:fb:90:90:1b:fa:23:8a:77:c4: d5:64:11:b4:93:3e:6a:d2:69:31:3d:1f:9e:2e:7b: 43:9a:c2:a5:76:1f:7d:38:fa:c0:3c:dc:5b:61:6f: 88:67:50:7a:7d:58:47:ab:03:da:9b:01:1e:ac:bc: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BA:57:9E:E2:A8:5F:A5:D9:67:D7:2F:72:CC:FE:A5:9A:7B:23:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.222.150.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:83:f0:76:78:f0:df:6f:f2:24:a6:fa:cf:eb:3d:1e:50:fa: 49:cc:79:a0:08:00:39:49:b8:63:8b:e7:4f:6a:1e:cc:df:da: e6:65:42:25:47:fd:b3:e4:62:b5:30:a9:6f:ef:6d:08:bd:a4: a4:7a:fc:79:3a:dc:b8:12:63:13:98:d1:9f:a0:d1:69:66:4a: f1:e8:12:02:a5:d0:06:87:12:13:f5:ae:79:37:f2:ef:4a:f2: fb:af:39:72:98:bc:9f:bc:cd:40:7f:e0:8a:71:23:57:e2:c3: e9:12:dd:b3:0a:36:78:77:33:90:5e:0a:0b:e1:a5:fb:a9:82: 0b:5e:7c:b7:e4:be:b1:98:f7:7f:64:35:09:aa:ad:49:41:2b: 5b:70:fc:e3:1e:da:65:4b:06:f6:28:ed:1b:d4:bb:49:b9:0b: 02:90:cf:4b:a0:a2:63:a4:db:d9:06:a5:0a:bf:66:0a:81:04: ae:85:7f:86:77:b5:13:25:14:cf:8a:71:b7:29:c9:cc:78:76: 32:70:7c:37:18:20:39:74:03:9b:e1:cc:29:89:1b:29:8f:af: 4f:c9:cd:63:53:a5:0a:80:ad:5d:b4:76:58:dd:fb:39:ff:ef: 11:26:35:9f:46:bb:7c:7a:93:7a:71:0d:21:9d:91:24:42:4c: 04:dd:c8:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS77c/u7mTqp0twp5eZVrT7HH2WIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA0MTE0WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2ZiZDc3MjY4NjI5MmUwZTZmYWE4ODE0YWMxMDAwMDYx YTIxOWE1ZGQxNzU3OGZkZWNkMzJiOGRkNjU0YTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbuY71e/T4RRzkpqX7HqkcxZEi0kvMLE8sNmPpH/7HaAoN D4HLv/fimaHnwu3v3mx6Bks5VWa2o2ICSJkFNJLMqz1np24gQzfo7y9za0lCSaeX 0z0ZLUNxb2WEk6JS47+0TRottXAcdmNWtjCKlM5s8/izB417mkw3mnXfmCRYIyYl ymxqjeA0/O/ZGqZ0ipeeMi8S9Atp1WA4X0HqqN4m54qVYrTAc5fTKcmG6ArzsGmm wkfQ5xt1Ee8y0fgez4a2nGeCUdIOwfuQkBv6I4p3xNVkEbSTPmrSaTE9H54ue0Oa wqV2H304+sA83Fthb4hnUHp9WEerA9qbAR6svF/FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6LpXnuKoX6XZZ9cvcsz+pZp7I9EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmZDc1NmQ0LWUwYjUtNDFlOS05YWY1LTBjNmUzYWQ2YmUwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi3pYwDQYJKoZIhvcNAQELBQADggEBAF+D8HZ48N9v8iSm+s/rPR5Q+knM eaAIADlJuGOL509qHszf2uZlQiVH/bPkYrUwqW/vbQi9pKR6/Hk63LgSYxOY0Z+g 0WlmSvHoEgKl0AaHEhP1rnk38u9K8vuvOXKYvJ+8zUB/4IpxI1fiw+kS3bMKNnh3 M5BeCgvhpfupggtefLfkvrGY939kNQmqrUlBK1tw/OMe2mVLBvYo7RvUu0m5CwKQ z0ugomOk29kGpQq/ZgqBBK6Ff4Z3tRMlFM+Kcbcpycx4djJwfDcYIDl0A5vhzCmJ GymPr0/JzWNTpQqArV20dljd+zn/7xEmNZ9Gu3x6k3pxDSGdkSRCTATdyC4= -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:07 2025 by rpki-client