$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa File: 92b458a2-d204-4a0e-8f7d-f24851619bef.roa (raw, json) Hash identifier: /Y4RNI9OS3E4D6b9C2ntc1SMSiNpK4M0JBkn5gNJC3g= Subject key identifier: B6:76:D2:8E:F3:15:63:EC:29:DC:C9:76:1F:4E:63:26:6C:27:FC:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43AA7705F4F9D9423877BE38DA5A93FE7BC4A884 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa Signing time: Sat 28 Jun 2025 00:20:34 +0000 ROA not before: Sat 28 Jun 2025 00:20:34 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:aa:77:05:f4:f9:d9:42:38:77:be:38:da:5a:93:fe:7b:c4:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:20:34 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=4ac8474e18608181ca611b6fa4b2ae8d9111beef2dbddcde24a620f625fbc8cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:27:4d:c6:95:6a:64:f7:36:e2:c6:ff:f0: be:8d:ca:23:92:d2:cd:34:65:78:98:72:47:1a:7b: d0:bd:b3:6b:dd:29:ce:9f:01:ca:dd:70:f8:94:8f: ed:2e:db:d5:06:4e:82:89:d3:66:94:31:61:7b:30: 5a:c3:3f:0c:87:dd:47:b4:e2:cc:18:37:6a:5a:83: d4:48:da:73:68:54:10:15:cc:cd:4d:d0:27:19:a6: 28:f5:9d:cc:ad:62:06:49:94:2c:ed:21:c5:2a:62: 9b:99:6b:f2:43:7b:c5:97:6b:5e:41:d8:ef:52:e2: 9a:30:be:42:5b:ac:99:b6:d0:53:bf:16:e2:61:27: 63:ca:cd:04:94:49:4b:67:a9:11:2c:dd:e8:1a:15: 58:e0:55:1d:07:4f:ed:a6:0c:47:e9:c6:4e:1f:bf: f7:86:d5:18:4a:8d:bd:18:11:86:75:47:bf:3e:44: 9d:ac:75:a1:1a:37:5a:e2:fb:1d:43:7a:1e:e4:fc: 22:b5:2a:9d:74:ec:46:4f:c1:f6:ee:0a:95:9e:9e: c0:6e:ac:e5:6d:01:af:ea:36:95:61:58:92:c9:84: 55:9b:c7:47:c5:37:1b:93:6d:72:7f:49:e8:b2:a9: 81:61:cf:a3:e6:de:1d:0e:7a:58:c7:c5:7f:87:a4: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:76:D2:8E:F3:15:63:EC:29:DC:C9:76:1F:4E:63:26:6C:27:FC:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.208.0/21 Signature Algorithm: sha256WithRSAEncryption 79:4e:bf:22:50:81:62:09:2b:6f:a7:c5:4c:79:c4:60:66:d5: 07:2c:3a:67:d5:bc:89:a5:94:d7:64:08:6f:79:eb:ab:0b:9f: 26:7e:55:b4:be:d4:2e:00:b0:06:92:be:5b:94:4e:33:2c:b0: 72:66:13:1d:77:89:c1:fd:bf:d6:67:3c:87:5b:b0:f7:d6:19: 5a:57:cb:72:94:fc:cb:a0:80:1f:fb:4c:23:de:9b:04:68:be: 48:b3:eb:05:6e:26:da:60:1e:e8:b0:66:b5:da:59:10:16:44: 56:a0:b0:a9:7c:97:44:29:b2:79:ed:98:b9:ed:0f:f8:a4:4c: bb:38:21:34:57:58:f4:27:cb:06:a5:24:44:f6:57:9a:5f:4e: 03:3a:e7:bd:f3:72:62:9f:bf:39:7d:fc:8a:d7:0e:65:21:e1: 89:57:1e:f9:b2:06:4d:2b:18:5d:f2:64:e8:93:60:6f:68:e3: 7c:43:07:9f:a8:a1:f9:06:eb:04:6b:67:a9:55:21:5a:af:ad: 28:03:68:fe:85:8d:5a:2b:67:ed:da:73:c5:f2:d2:57:16:9a: e1:41:d0:76:16:da:29:45:9a:2e:fe:6e:87:e4:77:15:cd:e1: 04:29:f7:f4:f9:29:18:31:c3:7a:51:8d:d7:fb:ac:fc:80:52: ac:4a:a9:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ6p3BfT52UI4d7442lqT/nvEqIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAyMDM0WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWM4NDc0ZTE4NjA4MTgxY2E2MTFiNmZhNGIyYWU4ZDkx MTFiZWVmMmRiZGRjZGUyNGE2MjBmNjI1ZmJjOGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI9ydNxpVqZPc24sb/8L6NyiOS0s00ZXiYckcae9C9s2vd Kc6fAcrdcPiUj+0u29UGToKJ02aUMWF7MFrDPwyH3Ue04swYN2pag9RI2nNoVBAV zM1N0CcZpij1ncytYgZJlCztIcUqYpuZa/JDe8WXa15B2O9S4powvkJbrJm20FO/ FuJhJ2PKzQSUSUtnqREs3egaFVjgVR0HT+2mDEfpxk4fv/eG1RhKjb0YEYZ1R78+ RJ2sdaEaN1ri+x1Deh7k/CK1Kp107EZPwfbuCpWensBurOVtAa/qNpVhWJLJhFWb x0fFNxuTbXJ/SeiyqYFhz6Pm3h0OeljHxX+HpA/rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtnbSjvMVY+wp3Ml2H05jJmwn/IIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyYjQ1OGEyLWQyMDQtNGEwZS04ZjdkLWYyNDg1MTYxOWJlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SNAwDQYJKoZIhvcNAQELBQADggEBAHlOvyJQgWIJK2+nxUx5xGBm1Qcs OmfVvImllNdkCG9566sLnyZ+VbS+1C4AsAaSvluUTjMssHJmEx13icH9v9ZnPIdb sPfWGVpXy3KU/MuggB/7TCPemwRovkiz6wVuJtpgHuiwZrXaWRAWRFagsKl8l0Qp snntmLntD/ikTLs4ITRXWPQnywalJET2V5pfTgM6573zcmKfvzl9/IrXDmUh4YlX HvmyBk0rGF3yZOiTYG9o43xDB5+oofkG6wRrZ6lVIVqvrSgDaP6FjVorZ+3ac8Xy 0lcWmuFB0HYW2ilFmi7+bofkdxXN4QQp9/T5KRgxw3pRjdf7rPyAUqxKqZg= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:08 2025 by rpki-client