$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa File: 33c001ad-e3cd-4c29-8dde-4c620faee346.roa (raw, json) Hash identifier: DYdkQ5Q9Ob6SZ0eG9fycfAXw1Cli8TKUlaLzmW7xOfY= Subject key identifier: EB:39:07:BF:C1:82:CD:99:16:45:9B:9A:80:F8:29:E1:28:41:96:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C38D4B47D2DB7F3654B8782A51D6C5B6AFAAE37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa Signing time: Sat 16 Aug 2025 00:31:14 +0000 ROA not before: Sat 16 Aug 2025 00:31:14 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:38:d4:b4:7d:2d:b7:f3:65:4b:87:82:a5:1d:6c:5b:6a:fa:ae:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:31:14 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=11b0ed9db02f5de9913bd1d6b1b7ca9462b882f3f7d00dd1e468bc63b3b00c21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:12:82:7b:a2:2e:c6:60:6b:07:e0:c0:ae: e9:b4:76:3f:b3:38:5c:03:7d:9a:e8:8f:74:e3:3e: 7b:d8:a7:fd:ab:ae:b3:b5:89:3b:f1:87:80:26:0f: b8:dc:06:ac:fc:12:86:31:44:07:70:cc:b3:ca:77: 37:a2:c5:b4:db:99:d4:5f:5e:0e:3a:15:02:a4:75: 2b:3c:a6:68:05:1f:9a:5a:d8:ac:95:59:5d:26:44: a2:97:f6:cf:25:63:d3:be:08:67:27:f6:a5:13:fb: ea:7e:a7:32:eb:f7:21:5c:75:b1:1c:d2:16:a2:1c: d3:a1:9b:ff:82:50:7a:eb:25:f8:18:a6:3c:8a:31: 64:54:f3:ce:55:04:82:ea:0e:b2:70:3e:11:9b:2e: 85:61:fe:76:1f:db:26:3a:ca:67:b0:9a:fb:db:c6: c8:8e:c5:96:fb:d8:68:87:eb:78:f3:40:c1:78:0b: 73:2d:1d:57:4f:85:1c:b0:21:bc:cf:2c:8b:b9:c2: c4:5c:0d:7f:3e:a7:ba:b5:88:20:fa:cb:5f:cb:39: b8:98:da:35:7d:3c:c3:10:63:8d:d6:f0:fe:18:95: ed:4a:d5:e0:dd:e4:51:a8:5d:d4:96:3e:c5:a0:f4: 1a:6e:40:66:9c:6a:bf:76:8c:45:72:80:09:05:30: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:07:BF:C1:82:CD:99:16:45:9B:9A:80:F8:29:E1:28:41:96:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.160.0/21 Signature Algorithm: sha256WithRSAEncryption 06:99:ee:64:38:e0:6d:70:69:5c:a9:54:d8:3b:a7:18:2d:e2: 2d:d6:e5:b5:be:e5:be:bf:62:12:26:91:40:a8:3f:58:5f:67: 36:58:80:d6:bb:dc:42:70:fd:5e:f7:b3:b0:a3:5a:60:d3:7a: 27:c4:2c:fa:93:ce:41:00:f1:d7:9a:ef:d0:cd:d9:6c:66:75: 07:78:08:cb:a6:e3:20:f2:1e:82:ad:07:1d:3c:23:08:12:c6: 47:8b:54:e9:28:95:92:0d:72:11:e8:76:82:82:5d:2c:a1:b4: 44:f8:38:71:98:28:56:24:b3:3e:44:a8:35:a8:3b:c6:e9:f1: d5:93:ec:47:6d:6c:37:3d:32:1c:ca:ec:c5:79:04:dc:84:8b: 73:d4:f1:47:29:56:73:c5:2e:ad:db:05:24:e5:18:8d:76:15: 87:20:eb:fc:ce:6e:11:07:0c:41:0c:4d:ff:8a:6d:00:ee:f7: b7:0c:4d:6f:17:e6:05:0d:cb:1f:72:87:4d:4f:03:e3:1c:12: 87:fb:8e:fd:d0:d3:6b:3d:29:ad:bd:b0:07:71:85:f0:9b:89: e7:67:70:70:d2:6f:0c:85:e6:a6:3d:c3:ad:3b:96:34:69:3e: 3f:60:83:7c:c0:c4:af:75:81:f4:cb:6a:e7:22:c8:47:9b:51: aa:28:f3:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDjUtH0tt/NlS4eCpR1sW2r6rjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMTE0WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWIwZWQ5ZGIwMmY1ZGU5OTEzYmQxZDZiMWI3Y2E5NDYy Yjg4MmYzZjdkMDBkZDFlNDY4YmM2M2IzYjAwYzIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC31BKCe6IuxmBrB+DArum0dj+zOFwDfZroj3TjPnvYp/2r rrO1iTvxh4AmD7jcBqz8EoYxRAdwzLPKdzeixbTbmdRfXg46FQKkdSs8pmgFH5pa 2KyVWV0mRKKX9s8lY9O+CGcn9qUT++p+pzLr9yFcdbEc0haiHNOhm/+CUHrrJfgY pjyKMWRU885VBILqDrJwPhGbLoVh/nYf2yY6ymewmvvbxsiOxZb72GiH63jzQMF4 C3MtHVdPhRywIbzPLIu5wsRcDX8+p7q1iCD6y1/LObiY2jV9PMMQY43W8P4Yle1K 1eDd5FGoXdSWPsWg9BpuQGacar92jEVygAkFMBd5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6zkHv8GCzZkWRZuagPgp4ShBlpswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYzAwMWFkLWUzY2QtNGMyOS04ZGRlLTRjNjIwZmFlZTM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMFrqAwDQYJKoZIhvcNAQELBQADggEBAAaZ7mQ44G1waVypVNg7pxgt4i3W 5bW+5b6/YhImkUCoP1hfZzZYgNa73EJw/V73s7CjWmDTeifELPqTzkEA8dea79DN 2WxmdQd4CMum4yDyHoKtBx08IwgSxkeLVOkolZINchHodoKCXSyhtET4OHGYKFYk sz5EqDWoO8bp8dWT7EdtbDc9MhzK7MV5BNyEi3PU8UcpVnPFLq3bBSTlGI12FYcg 6/zObhEHDEEMTf+KbQDu97cMTW8X5gUNyx9yh01PA+McEof7jv3Q02s9Ka29sAdx hfCbiedncHDSbwyF5qY9w607ljRpPj9gg3zAxK91gfTLauciyEebUaoo81A= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:16 2025 by rpki-client