$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa File: f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa (raw, json) Hash identifier: SDquYuUN60sgG+vfjowZwMtthyryH9BZmEmhcCsCBP4= Subject key identifier: 11:40:CC:05:0B:05:B2:42:B6:2A:0D:10:C1:94:15:9B:AA:3F:5A:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35F8D4F3637A9230430A0E9C8DFB1536725FEB8E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa Signing time: Mon 04 Aug 2025 17:31:58 +0000 ROA not before: Mon 04 Aug 2025 17:31:58 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.210.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f8:d4:f3:63:7a:92:30:43:0a:0e:9c:8d:fb:15:36:72:5f:eb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:58 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=1b1b2d32ea74fdf9be267580ef0bc3eae8d592c0d0f2a249aec5987955f8f9f2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:4a:20:eb:3d:fd:e3:06:1e:15:8d:5e:ed: 84:cd:ca:f6:b4:8f:3f:07:aa:d7:7c:b9:1e:d4:37: 5c:1e:bc:37:87:4f:32:e5:f2:df:c7:5b:1a:11:8d: ae:d8:6f:7e:6c:9b:ec:bd:1d:ec:79:05:a1:84:e2: 04:e9:e8:b0:84:95:01:5e:f2:eb:fd:88:06:67:3b: da:40:68:a4:83:e1:31:2a:24:45:b8:96:9a:db:a8: 74:b6:d2:b6:57:32:2d:a1:58:5a:43:16:71:db:57: 47:b6:1a:25:09:1a:02:9e:d1:45:41:1d:cd:d0:d5: 4c:54:4b:20:a4:0b:c9:c3:ae:6a:cb:cd:a2:49:e1: 69:e7:be:12:78:74:a6:37:1b:19:8c:c8:59:65:1f: 58:e1:d6:e4:da:ea:b6:b0:4a:b2:75:12:65:0a:6a: 19:f5:da:13:b1:e6:38:09:fa:09:3d:36:af:85:ef: ec:18:a3:74:7e:ec:53:eb:45:a0:9a:8f:d6:25:12: f1:b4:2b:e9:ec:df:29:60:65:72:61:3d:80:5b:cc: da:89:e5:00:de:29:3e:77:7e:e8:26:13:4d:ff:37: 74:8f:5f:9c:33:a8:95:01:b4:d1:2a:7d:64:95:28: 6a:48:20:6e:ba:d7:7e:f5:7f:71:49:c7:56:4b:78: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:40:CC:05:0B:05:B2:42:B6:2A:0D:10:C1:94:15:9B:AA:3F:5A:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:f0:02:d9:13:76:18:98:5f:13:82:75:5a:94:90:fb:6f:0e: 82:26:06:33:00:6c:ed:ed:52:68:0f:01:93:a0:69:cf:29:77: bf:fc:76:75:6d:ae:02:2a:7e:df:5d:16:a6:19:d6:38:ac:c0: bd:a8:26:59:85:a5:66:ad:03:3b:fb:93:1b:1a:71:f7:22:53: fe:9a:2f:d9:5e:28:52:81:bf:e1:05:f7:41:cb:99:fa:95:dd: 71:37:a3:66:5a:f8:bd:65:d1:6e:50:f6:d5:1a:23:4f:49:ba: 0e:cc:8a:e5:2d:e6:0f:b2:f2:55:8c:4f:ae:c7:7f:23:98:88: f2:bc:4a:29:a0:b8:9f:74:28:22:2c:28:a1:4a:5e:91:a9:59: a5:5d:48:f4:db:dc:d8:5a:69:ae:88:b3:97:fb:68:27:26:2c: ce:b2:7b:d9:3e:93:95:09:44:34:bb:fe:4b:39:26:d7:cb:ab: 30:f3:d1:2d:ed:6d:d0:9d:40:c6:c9:87:c1:37:a1:90:88:1d: 27:49:4e:28:3c:7b:ae:12:ef:95:0e:18:23:7e:0c:18:8a:07: c6:4c:02:c6:02:33:ef:62:aa:f3:0b:19:96:30:6b:7b:81:21: 5b:cf:66:aa:f7:0c:4e:f3:7e:34:8b:1b:17:d7:5a:c3:23:ca: 4c:61:54:20 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNfjU82N6kjBDCg6cjfsVNnJf644wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTU4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjFiMmQzMmVhNzRmZGY5YmUyNjc1ODBlZjBiYzNlYWU4 ZDU5MmMwZDBmMmEyNDlhZWM1OTg3OTU1ZjhmOWYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvh0og6z394wYeFY1e7YTNyva0jz8Hqtd8uR7UN1wevDeH TzLl8t/HWxoRja7Yb35sm+y9Hex5BaGE4gTp6LCElQFe8uv9iAZnO9pAaKSD4TEq JEW4lprbqHS20rZXMi2hWFpDFnHbV0e2GiUJGgKe0UVBHc3Q1UxUSyCkC8nDrmrL zaJJ4WnnvhJ4dKY3GxmMyFllH1jh1uTa6rawSrJ1EmUKahn12hOx5jgJ+gk9Nq+F 7+wYo3R+7FPrRaCaj9YlEvG0K+ns3ylgZXJhPYBbzNqJ5QDeKT53fugmE03/N3SP X5wzqJUBtNEqfWSVKGpIIG661371f3FJx1ZLeM6XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEUDMBQsFskK2Kg0QwZQVm6o/WjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyNmE5NmNkLTk1YzktNGM1ZS05ZDBjLWZiNDM5MzAyYTUyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo0jANBgkqhkiG9w0BAQsFAAOCAQEATPAC2RN2GJhfE4J1WpSQ+28OgiYG MwBs7e1SaA8Bk6Bpzyl3v/x2dW2uAip+310WphnWOKzAvagmWYWlZq0DO/uTGxpx 9yJT/pov2V4oUoG/4QX3QcuZ+pXdcTejZlr4vWXRblD21RojT0m6DsyK5S3mD7Ly VYxPrsd/I5iI8rxKKaC4n3QoIiwooUpekalZpV1I9Nvc2Fpproizl/toJyYszrJ7 2T6TlQlENLv+Szkm18urMPPRLe1t0J1AxsmHwTehkIgdJ0lOKDx7rhLvlQ4YI34M GIoHxkwCxgIz72Kq8wsZljBre4EhW89mqvcMTvN+NIsbF9dawyPKTGFUIA== -----END CERTIFICATE-----Generated at Wed Aug 6 11:11:09 2025 by rpki-client