$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa File: fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa (raw, json) Hash identifier: S3VzgymFtIH9cSY9PDEIu49dJiI0qvdB02cCj1FFsLk= Subject key identifier: 6D:27:92:61:A9:ED:45:E9:B8:A6:5E:E9:AA:F8:76:A4:CE:41:84:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7EEBF39569D3BD3BAAC87EB24C718ECB9E462CEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa Signing time: Mon 04 Aug 2025 17:22:11 +0000 ROA not before: Mon 04 Aug 2025 17:22:11 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.2.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:eb:f3:95:69:d3:bd:3b:aa:c8:7e:b2:4c:71:8e:cb:9e:46:2c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:22:11 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=fb18d36d26176c45f5c66306bd5d912d438384e2a053e2fa483d2e16b6b9ed2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:c7:6e:03:66:8c:08:70:de:7f:a7:4b:23: 1a:73:81:f8:7a:10:8f:3c:11:65:1e:81:61:fe:d3: 17:10:52:d9:68:b2:cd:f6:28:7e:4a:cd:b0:02:c2: 0f:64:09:d2:24:b6:be:0a:bb:fd:0f:30:8c:8d:be: b4:98:01:0f:ed:f5:51:4c:42:07:77:89:ec:54:ab: 2d:e0:11:05:9c:53:79:dd:b7:ac:b8:8c:87:e7:51: 53:d5:1a:b8:4f:19:ed:3b:d5:d0:28:53:2a:2a:f3: 2f:63:a3:ec:cf:59:3b:57:4a:93:14:bc:17:b5:29: e8:7d:0c:43:2a:6f:64:d0:c8:03:fd:b7:90:ba:1e: 10:96:d0:14:c5:1c:7b:35:7c:cf:53:42:72:b0:b7: d7:99:1f:22:37:2e:28:be:56:bd:99:6b:90:3d:fd: 2f:a5:fb:47:01:f8:d3:f1:2d:4e:29:ad:ab:26:84: e3:27:49:7e:94:20:28:41:85:10:60:5e:a6:db:6d: 2c:74:14:58:a7:2d:42:3d:2d:b7:38:19:2b:3e:86: 6c:43:4c:14:c7:4b:2d:53:55:0c:9f:9d:61:b0:dd: 61:b3:3f:ec:2d:d0:71:3b:34:7e:b2:d9:22:30:60: ba:2c:4e:2d:de:1f:56:50:ef:60:a9:4b:b3:74:23: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:27:92:61:A9:ED:45:E9:B8:A6:5E:E9:AA:F8:76:A4:CE:41:84:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.2.0.0/17 Signature Algorithm: sha256WithRSAEncryption ab:9f:90:d2:12:a9:83:d5:3c:93:ed:56:e1:9f:27:f8:8b:d8: 12:d9:a1:3f:c1:df:50:64:2a:e0:a9:49:9a:ec:ad:55:89:9d: e5:4a:03:9e:db:b8:c8:09:aa:5a:5c:dc:2f:f9:e9:28:6c:16: 43:fc:a1:fd:cf:c5:cc:4d:7e:16:2b:a8:a6:e3:74:5f:ba:45: 07:c0:03:1f:c3:9d:5e:de:40:43:8d:51:77:65:4e:67:81:27: 00:e5:5c:4b:af:70:c9:d8:ec:7b:9c:92:1c:ab:09:09:aa:00: 8b:ac:7a:08:af:99:06:91:c7:30:59:a9:74:85:33:3e:08:ef: ff:e9:3d:ab:13:4c:54:43:ad:34:5f:92:10:94:df:33:bd:a0: 21:6b:64:4e:3a:2c:29:bc:78:0a:13:3e:e9:d7:3a:b1:d9:b2: e6:02:21:9b:37:6a:00:0a:7c:07:a6:13:9d:1c:9a:f7:06:75: c4:ad:63:d2:09:40:87:28:22:64:de:b2:bb:ad:ce:02:ee:43: c0:fc:a0:18:4c:06:36:a3:37:e3:04:76:9c:03:70:ca:7d:0f: ed:1a:6d:0d:c5:6b:bd:65:f5:52:6b:1c:72:49:d4:82:74:39: 49:03:82:41:34:22:61:9b:88:4d:fe:f6:18:85:4e:fd:81:fa: 26:bd:0c:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfuvzlWnTvTuqyH6yTHGOy55GLO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcyMjExWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjE4ZDM2ZDI2MTc2YzQ1ZjVjNjYzMDZiZDVkOTEyZDQz ODM4NGUyYTA1M2UyZmE0ODNkMmUxNmI2YjllZDJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqicduA2aMCHDef6dLIxpzgfh6EI88EWUegWH+0xcQUtlo ss32KH5KzbACwg9kCdIktr4Ku/0PMIyNvrSYAQ/t9VFMQgd3iexUqy3gEQWcU3nd t6y4jIfnUVPVGrhPGe071dAoUyoq8y9jo+zPWTtXSpMUvBe1Keh9DEMqb2TQyAP9 t5C6HhCW0BTFHHs1fM9TQnKwt9eZHyI3Lii+Vr2Za5A9/S+l+0cB+NPxLU4prasm hOMnSX6UIChBhRBgXqbbbSx0FFinLUI9Lbc4GSs+hmxDTBTHSy1TVQyfnWGw3WGz P+wt0HE7NH6y2SIwYLosTi3eH1ZQ72CpS7N0I0qLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbSeSYantRem4pl7pqvh2pM5BhJgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlYzk3ZTg1LWZiMzQtNDgyNi05N2NjLTUzZTVmZTJkOTBiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcfAgAwDQYJKoZIhvcNAQELBQADggEBAKufkNISqYPVPJPtVuGfJ/iL2BLZ oT/B31BkKuCpSZrsrVWJneVKA57buMgJqlpc3C/56ShsFkP8of3PxcxNfhYrqKbj dF+6RQfAAx/DnV7eQEONUXdlTmeBJwDlXEuvcMnY7HuckhyrCQmqAIusegivmQaR xzBZqXSFMz4I7//pPasTTFRDrTRfkhCU3zO9oCFrZE46LCm8eAoTPunXOrHZsuYC IZs3agAKfAemE50cmvcGdcStY9IJQIcoImTesrutzgLuQ8D8oBhMBjajN+MEdpwD cMp9D+0abQ3Fa71l9VJrHHJJ1IJ0OUkDgkE0ImGbiE3+9hiFTv2B+ia9DLs= -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:34 2025 by rpki-client