$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa File: b30f0045-88bf-4cab-804d-bca257af8bb6.roa (raw, json) Hash identifier: QxFtbRKDvRSXKTd0rPPm8naOoTck1jO/VNJkSA/hxCQ= Subject key identifier: C6:81:0B:B5:BA:F2:A8:75:B3:4A:1F:2F:BB:15:8E:0E:91:E1:EE:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27F82E158D5487FAD5B2D1CA1879A98097A4B0DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa Signing time: Fri 08 Aug 2025 00:01:29 +0000 ROA not before: Fri 08 Aug 2025 00:01:29 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.207.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f8:2e:15:8d:54:87:fa:d5:b2:d1:ca:18:79:a9:80:97:a4:b0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:29 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=f3716dec73aa65f91573557ef00b2f886da0f2128371d1c70102e2f3b7832b70, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:02:c1:de:6c:bb:8c:74:6c:63:1f:93:5c: 69:20:41:ec:46:63:1a:39:f4:b2:be:a0:a3:62:0c: 5b:f4:3e:04:07:d1:02:29:e6:2a:c2:f0:9b:3e:12: b7:61:8a:cf:16:bc:c6:c9:e4:be:ef:e1:cd:ce:49: ce:29:2b:9c:b4:97:62:47:5c:06:05:34:f5:b8:d7: 14:81:fd:84:34:94:27:55:ed:16:6c:d8:24:d6:6a: 41:8e:06:68:48:0e:41:e9:2d:7f:84:41:23:c3:dd: 7b:08:eb:d4:cc:9f:94:73:ef:e7:b2:92:58:a3:29: 0a:41:7f:22:2f:37:94:6c:18:ba:d8:2b:97:85:26: 0a:a6:30:a4:43:88:bb:ba:64:52:68:69:69:40:97: e5:4f:71:25:79:82:82:f2:ac:56:e4:aa:fc:a1:f0: e2:39:8c:21:81:c5:1a:fb:b2:5c:df:4a:7b:7d:51: 2d:99:f2:2a:c9:b7:1b:12:22:16:ce:51:2e:a3:13: 65:c7:ce:58:5c:1c:a7:ac:3b:a7:e5:65:26:a4:8c: 3e:df:db:eb:5c:ab:e8:e5:53:31:5f:37:ae:bc:9d: c9:e4:12:9c:a4:13:05:27:76:e0:c9:b8:19:2f:2d: 9c:81:08:a0:e7:4a:0b:d1:94:cd:4e:3a:d3:21:1f: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:0B:B5:BA:F2:A8:75:B3:4A:1F:2F:BB:15:8E:0E:91:E1:EE:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.207.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:ba:7a:33:c6:be:0d:39:3a:b2:7a:7c:68:4a:7e:a7:ba:02: d4:e7:7c:3b:a0:ed:21:81:de:d7:f7:27:0c:d2:fe:7a:dc:d2: 2f:3e:f2:44:73:96:d5:62:cf:df:30:0e:05:dc:ec:78:5e:56: 6b:6d:68:37:b6:50:a7:10:0b:6d:b2:fd:9d:f9:28:bf:1c:67: 57:a1:4b:b5:3f:07:b0:75:e5:c7:2f:9d:ad:83:30:8b:84:3f: 4d:4f:f6:a0:53:df:e8:d7:6e:02:c1:92:c6:18:5e:7d:8b:1c: 14:97:60:c3:11:12:0d:27:3c:b9:e0:53:a2:05:2c:0d:26:a0: c1:b8:e5:97:49:a2:11:72:0b:20:9e:57:a1:96:60:24:e1:58: 94:f3:97:0c:fd:56:26:e2:75:ee:09:dc:e2:ab:d1:db:1e:73: 12:0f:65:df:66:94:66:03:e7:66:45:80:7d:17:8c:f6:bb:26: 30:9e:fb:88:59:9a:41:03:f8:c1:fd:e8:b6:02:f9:ce:73:3a: 07:0c:a9:77:e8:90:17:3f:08:17:0f:90:3c:e5:a3:37:10:2a: 99:b9:90:9b:17:10:66:13:51:b2:5e:9a:7e:ea:ee:79:88:80: 21:52:50:9a:8c:e1:52:67:08:c9:4e:33:1c:ff:9a:5a:28:3f: ec:ab:46:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ/guFY1Uh/rVstHKGHmpgJeksN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMTI5WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzcxNmRlYzczYWE2NWY5MTU3MzU1N2VmMDBiMmY4ODZk YTBmMjEyODM3MWQxYzcwMTAyZTJmM2I3ODMyYjcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkNALB3my7jHRsYx+TXGkgQexGYxo59LK+oKNiDFv0PgQH 0QIp5irC8Js+Erdhis8WvMbJ5L7v4c3OSc4pK5y0l2JHXAYFNPW41xSB/YQ0lCdV 7RZs2CTWakGOBmhIDkHpLX+EQSPD3XsI69TMn5Rz7+eyklijKQpBfyIvN5RsGLrY K5eFJgqmMKRDiLu6ZFJoaWlAl+VPcSV5goLyrFbkqvyh8OI5jCGBxRr7slzfSnt9 US2Z8irJtxsSIhbOUS6jE2XHzlhcHKesO6flZSakjD7f2+tcq+jlUzFfN668ncnk EpykEwUnduDJuBkvLZyBCKDnSgvRlM1OOtMhH5x/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxoELtbryqHWzSh8vuxWODpHh7lowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMGYwMDQ1LTg4YmYtNGNhYi04MDRkLWJjYTI1N2FmOGJiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXPz0AwDQYJKoZIhvcNAQELBQADggEBAF+6ejPGvg05OrJ6fGhKfqe6AtTn fDug7SGB3tf3JwzS/nrc0i8+8kRzltViz98wDgXc7HheVmttaDe2UKcQC22y/Z35 KL8cZ1ehS7U/B7B15ccvna2DMIuEP01P9qBT3+jXbgLBksYYXn2LHBSXYMMREg0n PLngU6IFLA0moMG45ZdJohFyCyCeV6GWYCThWJTzlwz9Vibide4J3OKr0dsecxIP Zd9mlGYD52ZFgH0XjPa7JjCe+4hZmkED+MH96LYC+c5zOgcMqXfokBc/CBcPkDzl ozcQKpm5kJsXEGYTUbJemn7q7nmIgCFSUJqM4VJnCMlOMxz/mlooP+yrRlc= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:24 2025 by rpki-client