$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa File: 819627c3-8ccc-4425-9f4f-1398f87c84d3.roa (raw, json) Hash identifier: q5+N1nRhaqdhohPjWafr5w0zh/JrqTEUYxTefgme6Xo= Subject key identifier: AC:71:8D:18:B4:37:D6:5A:84:FF:B0:B5:E6:80:C7:BD:76:CA:63:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45F96EFE1454534464B9EE1B075FC39D8824A9A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa Signing time: Fri 27 Jun 2025 00:00:57 +0000 ROA not before: Fri 27 Jun 2025 00:00:57 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f9:6e:fe:14:54:53:44:64:b9:ee:1b:07:5f:c3:9d:88:24:a9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:00:57 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=925381f9648aa2685f1d388c5c513f27b1e1d57287126796eeacc396457bd2b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ed:c9:46:91:4c:aa:40:dd:94:ad:4c:31:d0: b6:b2:c3:77:cd:46:9f:d8:5d:a6:30:5f:04:92:27: 53:d6:6d:23:32:19:ba:7e:b9:14:e1:0c:c8:39:7b: a8:44:da:2e:b2:46:2d:cc:c4:08:df:fe:f1:83:16: 4b:4e:ea:32:82:f0:a7:0c:6a:5a:e8:9a:aa:46:f7: f8:cc:2b:c8:36:c5:8d:64:63:7f:cd:f9:de:a0:54: 73:48:77:05:ec:16:85:32:9d:82:db:72:e9:82:fe: c1:3b:d5:30:15:9b:3a:7d:ae:75:f0:e6:d7:3c:88: 30:e7:2d:21:94:ed:2b:fc:f6:f2:bd:4c:db:26:00: bf:2f:1a:83:c7:f8:90:7a:ec:6f:5c:9b:fd:a5:c8: 7b:d2:03:17:5b:f5:7c:ff:f4:ae:77:58:d7:ff:9e: f2:90:c0:4b:f3:88:be:22:13:40:c1:2c:b0:dd:70: f5:18:97:1a:be:d3:ed:ff:d5:fe:26:aa:6d:5e:25: 7e:9f:06:ca:37:04:69:15:3c:d8:4f:eb:4e:04:b1: 48:16:3b:a8:29:d5:28:43:93:70:bf:25:6c:bc:53: 30:8f:4b:d6:bd:52:cd:62:f8:62:8b:29:25:67:f9: e9:aa:42:b2:34:f4:15:a3:6e:92:85:84:30:e6:60: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:8D:18:B4:37:D6:5A:84:FF:B0:B5:E6:80:C7:BD:76:CA:63:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:69:b9:08:5d:d8:14:03:83:9b:d8:25:d7:0e:b2:b7:f3:c4: 73:8a:93:ce:03:b0:ac:96:8c:08:2e:4b:43:cf:9d:c6:6d:53: 98:58:4d:80:48:29:f2:94:74:67:73:af:64:e5:4f:d6:18:a7: 29:ec:97:88:1e:f9:e6:ca:ab:9f:8e:18:c4:01:49:6d:72:a3: e3:53:bf:75:2a:03:e5:fc:2f:c7:08:8b:58:25:85:0d:5a:a4: 20:9e:50:fb:c8:22:64:db:9e:5c:fe:a1:7f:9f:49:c5:c5:a1: fb:fd:a4:17:f1:8c:3b:22:2c:cc:58:ab:6b:3b:59:4d:b3:f3: 06:43:88:e7:31:17:14:40:45:1e:65:4e:83:fd:20:2e:d7:fa: ce:69:36:0f:61:8e:2b:07:a6:8d:a8:6f:ad:e2:b3:60:a1:0b: f2:bf:16:d4:f0:44:f6:d4:f5:4e:45:35:69:33:94:09:12:49: aa:7a:34:e1:af:2d:2c:52:36:2d:82:c5:f7:69:3a:33:69:0c: fa:8e:1a:8e:7c:dd:9b:ad:35:5b:7e:d6:9a:b0:5e:40:c5:ef: 7e:38:00:a1:0b:5e:ec:59:6d:0d:da:a7:33:6c:20:4b:de:84: 47:ee:fb:fb:55:ce:45:2f:d1:2a:18:00:00:82:7b:e0:8c:e4: ca:12:74:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURflu/hRUU0Rkue4bB1/DnYgkqaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAwMDU3WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjUzODFmOTY0OGFhMjY4NWYxZDM4OGM1YzUxM2YyN2Ix ZTFkNTcyODcxMjY3OTZlZWFjYzM5NjQ1N2JkMmI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD37clGkUyqQN2UrUwx0Layw3fNRp/YXaYwXwSSJ1PWbSMy Gbp+uRThDMg5e6hE2i6yRi3MxAjf/vGDFktO6jKC8KcMalromqpG9/jMK8g2xY1k Y3/N+d6gVHNIdwXsFoUynYLbcumC/sE71TAVmzp9rnXw5tc8iDDnLSGU7Sv89vK9 TNsmAL8vGoPH+JB67G9cm/2lyHvSAxdb9Xz/9K53WNf/nvKQwEvziL4iE0DBLLDd cPUYlxq+0+3/1f4mqm1eJX6fBso3BGkVPNhP604EsUgWO6gp1ShDk3C/JWy8UzCP S9a9Us1i+GKLKSVn+emqQrI09BWjbpKFhDDmYLdbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrHGNGLQ31lqE/7C15oDHvXbKYx4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxOTYyN2MzLThjY2MtNDQyNS05ZjRmLTEzOThmODdjODRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgIAwDQYJKoZIhvcNAQELBQADggEBAAxpuQhd2BQDg5vYJdcOsrfzxHOK k84DsKyWjAguS0PPncZtU5hYTYBIKfKUdGdzr2TlT9YYpynsl4ge+ebKq5+OGMQB SW1yo+NTv3UqA+X8L8cIi1glhQ1apCCeUPvIImTbnlz+oX+fScXFofv9pBfxjDsi LMxYq2s7WU2z8wZDiOcxFxRARR5lToP9IC7X+s5pNg9hjisHpo2ob63is2ChC/K/ FtTwRPbU9U5FNWkzlAkSSap6NOGvLSxSNi2CxfdpOjNpDPqOGo583ZutNVt+1pqw XkDF7344AKELXuxZbQ3apzNsIEvehEfu+/tVzkUv0SoYAACCe+CM5MoSdDc= -----END CERTIFICATE-----Generated at Mon Jun 30 17:16:26 2025 by rpki-client