$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa File: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (raw, json) Hash identifier: y8NlLeHiVJCHUMC558s/rmYdqAVyOa2D3tNOa2mUX2k= Subject key identifier: 06:8A:36:47:6B:44:A0:8B:D7:C8:E5:E7:1C:16:80:A9:0F:1E:A6:BE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 418F42EA569FF9EF2C0B057B4143BF65BF273D10 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa Signing time: Sat 26 Jul 2025 00:20:39 +0000 ROA not before: Sat 26 Jul 2025 00:20:39 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8f:42:ea:56:9f:f9:ef:2c:0b:05:7b:41:43:bf:65:bf:27:3d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jul 26 00:20:39 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=d67a530e2e24bf9d4abfe4e51f0ccb2fb346edb557c930fe3e6e5cea2d7136b9, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:14:4f:34:b2:95:23:93:12:b9:b5:05:8a: f4:33:63:e3:11:b1:75:cd:c6:6f:1c:37:c4:30:a5: b2:e7:95:4e:14:3c:f4:44:06:44:0b:6d:2b:82:16: f6:81:32:bf:84:99:6e:1a:fb:05:e9:48:c1:85:4d: 7d:03:e3:83:bd:52:b8:77:03:d5:8b:4c:81:85:fa: 97:ed:91:44:e0:cb:4c:8b:cf:1a:d0:f6:64:df:da: d1:3a:3a:99:de:3b:0f:b8:5d:35:0b:23:b5:9b:28: 62:de:b3:20:63:ab:6c:c2:f2:8e:7d:f7:22:44:a1: 1e:e8:ca:0a:47:cd:c3:80:83:4c:0b:96:39:35:d5: 23:f4:2c:00:77:3c:e7:a0:74:90:4c:d6:87:d4:c2: ba:90:a0:6d:14:94:b7:e7:bc:1f:b8:30:5d:c4:d0: bf:5a:08:b9:83:ab:55:11:d5:d5:f3:21:0d:0a:5a: aa:e0:ff:1d:7e:c9:a5:9e:80:a7:d6:21:87:4a:9d: 76:bb:8c:e4:b0:06:56:a7:2f:c2:95:0a:c3:4f:87: 44:69:2c:01:2f:2f:12:ef:0c:4c:64:88:e5:4a:95: d5:70:14:1f:e6:a5:55:71:5e:78:4d:06:7b:aa:ff: d9:bd:f2:9f:84:73:6b:f5:3a:a0:89:3a:e7:41:63: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8A:36:47:6B:44:A0:8B:D7:C8:E5:E7:1C:16:80:A9:0F:1E:A6:BE X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption b1:3c:7a:26:9e:8f:30:cc:cd:39:59:35:36:2e:3a:58:11:0e: b0:1f:56:53:9a:16:9d:75:2d:eb:b0:3a:c3:1b:79:1c:47:c2: e2:51:f8:a9:2d:b4:b4:dd:a9:d3:7c:8c:b4:1b:01:73:c1:95: 63:ce:ca:67:06:cb:c4:aa:f3:c5:94:aa:22:e6:48:4a:4f:84: a4:a4:df:2e:7a:14:a2:78:12:3c:b3:50:26:a6:38:a3:3c:e5: c3:4b:36:06:e5:b9:51:4c:83:0d:b6:9d:40:e8:eb:94:ad:e3: d6:fa:1a:32:b6:51:9e:fe:42:21:6f:58:db:f9:a2:bb:75:5e: 0c:66:83:de:e6:7a:dc:4f:84:b3:58:ad:26:fe:64:aa:4e:86: ca:d3:96:be:1e:7b:bf:b8:25:d6:0a:4f:9b:23:be:89:72:c9: f9:ab:6c:8e:4a:46:72:1f:d9:f5:1f:0b:c0:f3:3b:e6:5d:cf: f9:76:eb:71:c1:3c:95:f0:8d:d4:3d:14:f7:ce:80:a9:97:62: 7e:3e:c6:25:36:5c:08:04:de:65:96:48:4a:93:b1:c4:9e:d7: 9d:1a:c0:61:ea:29:a8:a9:a1:cc:d3:63:d9:d9:90:3b:15:1b: a5:b3:d9:dc:d6:d1:8a:a3:a0:db:43:6d:07:58:0c:c0:bf:07: f9:50:a0:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQY9C6laf+e8sCwV7QUO/Zb8nPRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNzI2MDAyMDM5WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjdhNTMwZTJlMjRiZjlkNGFiZmU0ZTUxZjBjY2IyZmIz NDZlZGI1NTdjOTMwZmUzZTZlNWNlYTJkNzEzNmI5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZqxRPNLKVI5MSubUFivQzY+MRsXXNxm8cN8QwpbLnlU4U PPREBkQLbSuCFvaBMr+EmW4a+wXpSMGFTX0D44O9Urh3A9WLTIGF+pftkUTgy0yL zxrQ9mTf2tE6OpneOw+4XTULI7WbKGLesyBjq2zC8o599yJEoR7oygpHzcOAg0wL ljk11SP0LAB3POegdJBM1ofUwrqQoG0UlLfnvB+4MF3E0L9aCLmDq1UR1dXzIQ0K Wqrg/x1+yaWegKfWIYdKnXa7jOSwBlanL8KVCsNPh0RpLAEvLxLvDExkiOVKldVw FB/mpVVxXnhNBnuq/9m98p+Ec2v1OqCJOudBY1QtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBoo2R2tEoIvXyOXnHBaAqQ8epr4wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzhiYWUwNDVmLTM2NWItNDNjZi05OWZjLTEyY2JjYmNlNWY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBALE8eiaejzDMzTlZNTYuOlgRDrAf VlOaFp11LeuwOsMbeRxHwuJR+KkttLTdqdN8jLQbAXPBlWPOymcGy8Sq88WUqiLm SEpPhKSk3y56FKJ4EjyzUCamOKM85cNLNgbluVFMgw22nUDo65St49b6GjK2UZ7+ QiFvWNv5ort1Xgxmg97metxPhLNYrSb+ZKpOhsrTlr4ee7+4JdYKT5sjvolyyfmr bI5KRnIf2fUfC8DzO+Zdz/l263HBPJXwjdQ9FPfOgKmXYn4+xiU2XAgE3mWWSEqT scSe150awGHqKaipoczTY9nZkDsVG6Wz2dzW0YqjoNtDbQdYDMC/B/lQoAk= -----END CERTIFICATE-----Generated at Sat Aug 9 20:44:45 2025 by rpki-client