$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa File: 074a6652-0769-407c-8a7b-8b362f4c155f.roa (raw, json) Hash identifier: juUVMxQQGlzqp2BiAM1bHz3ZFDXiRxKyqJhoSicV4w0= Subject key identifier: 87:4E:70:2A:4B:F6:82:B7:89:2E:38:AD:28:C9:C2:67:CE:6C:F9:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A3DE60B9ECD7D433F7291A8D005EBE7610C8899 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa Signing time: Wed 13 Aug 2025 00:01:58 +0000 ROA not before: Wed 13 Aug 2025 00:01:58 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 174.141.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:e6:0b:9e:cd:7d:43:3f:72:91:a8:d0:05:eb:e7:61:0c:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:01:58 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=e58f04f6d87702d562c3d34f41408b5768d679e09c8b767f547090a53fa72fd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:7d:ab:65:06:94:ef:25:4d:5b:6a:33:bc: 0b:b7:74:2c:1b:78:25:53:0e:e2:1a:74:b6:37:d9: 55:dc:a7:60:7d:1c:59:80:6a:56:b3:ac:59:ad:bf: 01:bb:fc:b4:29:50:44:fc:95:76:9b:e1:71:11:b6: e1:cc:f9:a0:35:48:5d:2c:78:f0:5d:f0:41:fb:f0: cd:8c:19:93:c0:21:2b:12:3f:ef:02:b6:4e:a5:33: f4:a1:a7:ea:e5:1d:be:19:6a:b6:e5:cf:6a:be:fb: 64:04:54:be:b2:09:04:30:16:0c:fb:f7:23:ce:0e: 32:e1:3b:88:33:56:7c:41:66:bd:10:15:7e:f9:0d: 12:3b:13:92:0d:c4:b5:20:a1:b4:5b:80:b0:96:9a: 2b:13:20:e2:df:4c:c1:c8:11:81:a1:57:2c:d9:22: 33:8f:d0:93:37:1c:d5:98:b0:fd:61:b9:b2:bd:16: 59:f9:fb:87:cd:ea:c2:ac:29:ea:cc:71:4c:60:3d: 86:0c:21:0c:dd:79:49:7f:92:47:d4:7f:04:a2:4b: 5d:14:be:e1:48:b9:21:ff:08:ba:07:f1:c9:2d:af: 2d:0e:95:28:6d:7b:c6:ba:23:87:f5:62:85:e9:c9: 76:79:22:3f:b5:91:00:89:11:d4:a2:88:91:28:13: a4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4E:70:2A:4B:F6:82:B7:89:2E:38:AD:28:C9:C2:67:CE:6C:F9:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.141.0.0/17 Signature Algorithm: sha256WithRSAEncryption d6:25:ad:83:b8:3e:e2:97:4d:9b:50:1a:40:d9:d8:f5:2e:27: 45:f2:7c:a2:79:77:ad:0f:5c:22:54:0c:7d:3d:cc:d6:56:3c: c5:19:22:f6:d8:78:be:ad:33:9b:c3:1b:30:d9:67:6b:95:bb: 99:76:54:c3:6a:62:0b:0f:0b:84:12:b1:1c:96:31:a2:f1:9a: ac:d4:9e:96:9b:f6:ce:da:a9:aa:d2:f6:54:8b:52:0d:76:08: fe:ec:45:34:dc:9a:18:4e:eb:9c:41:49:22:dd:dc:7b:24:d5: c7:25:c3:74:ea:e9:e7:e9:71:a1:9e:90:ae:7d:b1:e5:ab:37: a1:4e:a2:07:9d:71:3c:7b:88:9e:e7:e7:c0:6a:e1:60:5b:2a: b9:47:dd:ab:f7:1d:dd:97:15:81:a3:dc:5a:8e:7b:82:43:4c: ec:26:95:0c:91:53:cd:3d:f0:47:b2:5c:a7:13:f0:41:b2:d0: 93:83:8c:54:e3:44:c6:24:d0:24:c4:86:69:68:82:23:2c:33: 33:5a:17:5a:c6:df:03:ed:96:5d:a6:b6:0f:d8:0d:70:80:23: 9d:68:f3:e4:47:95:4b:42:0a:85:78:c2:4e:b9:45:43:cd:90: 15:0b:5b:10:c1:31:1a:1c:43:93:78:12:92:1c:7d:bf:ba:f3: a0:7c:5a:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWj3mC57NfUM/cpGo0AXr52EMiJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMTU4WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNThmMDRmNmQ4NzcwMmQ1NjJjM2QzNGY0MTQwOGI1NzY4 ZDY3OWUwOWM4Yjc2N2Y1NDcwOTBhNTNmYTcyZmQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOx32rZQaU7yVNW2ozvAu3dCwbeCVTDuIadLY32VXcp2B9 HFmAalazrFmtvwG7/LQpUET8lXab4XERtuHM+aA1SF0sePBd8EH78M2MGZPAISsS P+8Ctk6lM/Shp+rlHb4Zarblz2q++2QEVL6yCQQwFgz79yPODjLhO4gzVnxBZr0Q FX75DRI7E5INxLUgobRbgLCWmisTIOLfTMHIEYGhVyzZIjOP0JM3HNWYsP1hubK9 Fln5+4fN6sKsKerMcUxgPYYMIQzdeUl/kkfUfwSiS10UvuFIuSH/CLoH8cktry0O lShte8a6I4f1YoXpyXZ5Ij+1kQCJEdSiiJEoE6STAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh05wKkv2greJLjitKMnCZ85s+V0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3NGE2NjUyLTA3NjktNDA3Yy04YTdiLThiMzYyZjRjMTU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeujQAwDQYJKoZIhvcNAQELBQADggEBANYlrYO4PuKXTZtQGkDZ2PUuJ0Xy fKJ5d60PXCJUDH09zNZWPMUZIvbYeL6tM5vDGzDZZ2uVu5l2VMNqYgsPC4QSsRyW MaLxmqzUnpab9s7aqarS9lSLUg12CP7sRTTcmhhO65xBSSLd3Hsk1cclw3Tq6efp caGekK59seWrN6FOogedcTx7iJ7n58Bq4WBbKrlH3av3Hd2XFYGj3FqOe4JDTOwm lQyRU8098EeyXKcT8EGy0JODjFTjRMYk0CTEhmlogiMsMzNaF1rG3wPtll2mtg/Y DXCAI51o8+RHlUtCCoV4wk65RUPNkBULWxDBMRocQ5N4EpIcfb+686B8WjI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:31 2025 by rpki-client