$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa File: b7a02b21-64a7-4629-8149-a98f47ed09a5.roa (raw, json) Hash identifier: KPm5pwgywKU5n4gB+RAsFwwje5y7SZbAImlAB+Ipito= Subject key identifier: 1B:05:8C:A0:C7:05:A1:F7:A1:36:24:9F:E5:5E:64:4D:E4:D5:68:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26856F0A418549E83E6701EB7DBF350E3B98B5F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa Signing time: Tue 12 Aug 2025 00:40:22 +0000 ROA not before: Tue 12 Aug 2025 00:40:22 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:85:6f:0a:41:85:49:e8:3e:67:01:eb:7d:bf:35:0e:3b:98:b5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:40:22 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=744a33fb04e9bb42bde6e0baaa34dcd47dda0d4357bac52a4c611e0bc3ead993, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:76:98:a8:c8:8c:6d:b4:ca:e1:ed:ad:36: 2a:56:1f:c5:43:b2:33:9e:50:ed:5a:cb:1d:75:82: 5b:b5:8c:5e:6c:6e:5d:4b:7c:a6:40:d9:ae:a7:dc: d8:8e:1b:b3:13:94:d5:3c:7e:16:27:b5:d3:71:2d: c8:49:ec:fb:f6:e5:e6:98:d1:d7:82:00:7f:77:f2: 05:4c:f3:62:f5:15:ec:55:81:8c:e7:c9:86:77:03: d8:28:60:a7:cb:9d:51:73:00:6e:d2:e9:0c:66:38: e1:99:a5:45:29:f8:a2:82:e7:cd:61:c9:9d:15:a9: 71:6a:c6:81:15:83:08:e7:6f:2b:b5:76:79:80:58: 42:50:91:4d:af:c1:cb:fb:dd:3b:88:d6:49:62:7b: 7d:2e:a5:88:ae:c6:38:86:e5:e8:6d:c1:a4:15:3d: 3a:73:ba:fa:fc:7f:99:a0:a7:ea:aa:9c:35:67:3a: 0d:b1:05:ac:95:1c:e4:9b:f3:eb:46:05:6c:f4:a2: 57:70:38:a0:55:d8:36:f5:f0:bd:91:f5:d6:dd:00: 26:27:98:83:77:0b:20:ca:75:ea:fd:d6:f2:9d:f0: 4c:c1:62:88:c3:66:10:1f:7a:2e:02:43:0b:8c:91: 04:22:2e:ea:66:a4:ec:ec:29:86:fe:93:cd:33:8b: 0d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:05:8C:A0:C7:05:A1:F7:A1:36:24:9F:E5:5E:64:4D:E4:D5:68:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:bc:bc:f0:33:86:2e:b0:ca:19:45:f9:9c:4a:b0:50:21:53: be:fd:ac:47:05:bf:d9:6b:37:9a:94:fb:02:c9:ce:2d:29:1c: ab:a3:32:f7:1c:04:0c:78:0f:7b:22:b5:3b:7e:5e:62:66:30: 10:5b:ae:4f:5b:e1:58:e1:97:09:0b:f2:86:7a:5d:ac:65:86: 45:00:e2:11:0a:2b:c2:ed:89:7c:22:86:35:4a:49:75:1a:69: ad:a8:b1:53:de:b6:64:58:f6:93:75:a2:1b:bf:e9:92:dc:d1: 96:bb:2a:ec:fc:70:4b:5d:64:3a:7d:d4:5d:10:c3:09:ed:46: 90:0e:0b:e8:13:50:41:2b:d0:fa:22:8f:cd:9c:14:c5:cf:84: 28:a2:57:43:8b:65:13:1c:be:bc:da:78:39:78:cc:93:73:40: 2a:0b:64:88:90:72:c8:8c:61:00:92:b6:e0:b7:76:b1:04:49: 64:7a:7f:df:49:ea:8e:c2:b7:dd:c8:6c:9e:f9:d1:11:36:b5: 59:a6:f6:93:50:29:d1:fd:29:d0:22:fc:6b:21:76:33:22:05: 88:fb:21:09:c2:a9:72:8b:09:e1:68:06:16:16:b9:8e:70:c7: 4d:4b:e3:64:01:1b:1f:3c:ae:2f:52:68:df:ab:d1:9c:2e:81: b3:46:c5:fe -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJoVvCkGFSeg+ZwHrfb81DjuYtfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MDIyWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDRhMzNmYjA0ZTliYjQyYmRlNmUwYmFhYTM0ZGNkNDdk ZGEwZDQzNTdiYWM1MmE0YzYxMWUwYmMzZWFkOTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNeXaYqMiMbbTK4e2tNipWH8VDsjOeUO1ayx11glu1jF5s bl1LfKZA2a6n3NiOG7MTlNU8fhYntdNxLchJ7Pv25eaY0deCAH938gVM82L1FexV gYznyYZ3A9goYKfLnVFzAG7S6QxmOOGZpUUp+KKC581hyZ0VqXFqxoEVgwjnbyu1 dnmAWEJQkU2vwcv73TuI1klie30upYiuxjiG5ehtwaQVPTpzuvr8f5mgp+qqnDVn Og2xBayVHOSb8+tGBWz0oldwOKBV2Db18L2R9dbdACYnmIN3CyDKder91vKd8EzB YojDZhAfei4CQwuMkQQiLupmpOzsKYb+k80ziw1pAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGwWMoMcFofehNiSf5V5kTeTVaB0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YTAyYjIxLTY0YTctNDYyOS04MTQ5LWE5OGY0N2VkMDlhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBC3TANBgkqhkiG9w0BAQsFAAOCAQEAKby88DOGLrDKGUX5nEqwUCFTvv2s RwW/2Ws3mpT7AsnOLSkcq6My9xwEDHgPeyK1O35eYmYwEFuuT1vhWOGXCQvyhnpd rGWGRQDiEQorwu2JfCKGNUpJdRppraixU962ZFj2k3WiG7/pktzRlrsq7PxwS11k On3UXRDDCe1GkA4L6BNQQSvQ+iKPzZwUxc+EKKJXQ4tlExy+vNp4OXjMk3NAKgtk iJByyIxhAJK24Ld2sQRJZHp/30nqjsK33chsnvnRETa1Wab2k1Ap0f0p0CL8ayF2 MyIFiPshCcKpcosJ4WgGFha5jnDHTUvjZAEbHzyuL1Jo36vRnC6Bs0bF/g== -----END CERTIFICATE-----Generated at Sat Aug 23 06:51:05 2025 by rpki-client