$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038e6261-a551-47c0-8ade-2acb3286755f.roa File: 038e6261-a551-47c0-8ade-2acb3286755f.roa (raw, json) Hash identifier: e7KsDE9BAwjAwokeMqdSmC04bGboe9dfRphUShcxTRM= Subject key identifier: 28:2A:06:1C:65:5D:36:E6:9A:E9:BC:C6:61:CA:25:1C:40:23:C5:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 284F6CF96F045C638BFF70C97321A42C174DA730 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038e6261-a551-47c0-8ade-2acb3286755f.roa Signing time: Sat 16 Aug 2025 00:30:33 +0000 ROA not before: Sat 16 Aug 2025 00:30:33 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.215.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4f:6c:f9:6f:04:5c:63:8b:ff:70:c9:73:21:a4:2c:17:4d:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:30:33 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=b639e63a540787593d5282f08525bef4ac16910ed07556f3b76e5eff2d42de61, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:24:4a:19:61:8c:46:eb:cb:3e:54:63:ba: 40:42:5a:97:da:e7:6e:be:bc:c3:16:4a:f8:e4:ab: b8:e8:5e:5c:12:71:e9:48:31:00:93:d3:b1:d7:e5: 06:40:ee:bb:dd:95:9a:f0:98:61:66:40:5f:07:da: f3:2a:9c:15:c3:e0:bc:0b:f3:77:18:a3:e9:55:8d: 64:01:b4:7d:47:a8:b0:2b:d6:a7:3a:8d:85:21:dd: 37:9f:93:e1:4e:06:86:a3:38:0e:83:2d:81:28:d3: 3d:5a:0e:4f:2e:62:b5:59:35:e7:bf:d2:3a:37:ba: c4:02:b0:83:2f:ab:54:67:2c:15:9e:ba:cb:8c:1e: 9c:69:0b:80:3e:8a:b2:7b:da:f1:8f:59:6d:3b:84: 34:a1:e1:1c:bd:6b:34:86:9e:e9:60:c7:9e:3a:3d: 4d:9b:23:38:21:21:0d:96:bd:30:47:60:49:63:32: a0:e2:0c:29:bb:ad:9f:be:cb:ab:53:95:d6:e0:57: b2:4e:c8:70:3a:9c:eb:c6:f7:2c:3a:5c:e3:05:6d: e7:24:6d:f2:0a:bd:97:9e:c9:83:bc:69:00:42:9d: 44:3b:f2:9a:0d:c1:d3:9d:2d:f1:a2:0f:53:f3:11: ff:ca:38:21:7b:5e:e2:7d:7a:b3:d5:f8:d6:ea:a7: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:06:1C:65:5D:36:E6:9A:E9:BC:C6:61:CA:25:1C:40:23:C5:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038e6261-a551-47c0-8ade-2acb3286755f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:6e:27:8b:26:0a:42:54:43:0d:07:30:ad:f8:e3:6b:68:12: 8a:db:a3:92:2e:4c:ef:35:7e:c0:ca:95:94:49:bb:2c:6d:d8: ea:e6:65:af:51:76:47:5c:30:4e:f9:43:0a:66:04:ce:0f:36: d2:cf:79:e0:11:e6:f3:74:8d:79:4c:dc:76:c0:75:a4:e2:24: 17:0a:2f:3a:51:97:01:e6:39:29:be:05:b4:bb:f5:b5:1a:58: 87:72:c0:42:e7:c7:bf:dd:7b:b2:51:83:1b:6d:15:2f:cf:90: ff:50:6c:5b:5b:be:41:56:46:93:f5:ab:f4:ab:3e:74:de:38: 38:b3:6a:5a:f6:93:02:f0:41:e6:89:4b:09:ec:e7:15:7d:81: 35:3b:04:da:42:be:4c:93:e2:9f:c3:cf:1b:39:6c:15:3b:33: 51:4e:26:d2:6f:83:45:a5:23:23:eb:fe:1d:3e:cd:dd:f9:44: 80:4f:31:7e:89:45:30:f3:f9:8e:93:10:a0:d3:a3:ba:52:06: 54:64:4b:80:58:4d:f6:6e:1f:d6:50:f9:66:1b:4c:63:f2:ff: 26:68:e3:31:41:74:c2:dc:b9:e0:0a:84:95:66:26:4d:58:3c: e4:eb:4a:ef:db:c0:40:81:3b:dc:93:ef:9e:31:86:05:04:42: 08:99:c2:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKE9s+W8EXGOL/3DJcyGkLBdNpzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMDMzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjM5ZTYzYTU0MDc4NzU5M2Q1MjgyZjA4NTI1YmVmNGFj MTY5MTBlZDA3NTU2ZjNiNzZlNWVmZjJkNDJkZTYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvziRKGWGMRuvLPlRjukBCWpfa526+vMMWSvjkq7joXlwS celIMQCT07HX5QZA7rvdlZrwmGFmQF8H2vMqnBXD4LwL83cYo+lVjWQBtH1HqLAr 1qc6jYUh3Tefk+FOBoajOA6DLYEo0z1aDk8uYrVZNee/0jo3usQCsIMvq1RnLBWe usuMHpxpC4A+irJ72vGPWW07hDSh4Ry9azSGnulgx546PU2bIzghIQ2WvTBHYElj MqDiDCm7rZ++y6tTldbgV7JOyHA6nOvG9yw6XOMFbeckbfIKvZeeyYO8aQBCnUQ7 8poNwdOdLfGiD1PzEf/KOCF7XuJ9erPV+Nbqp6LrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKCoGHGVdNuaa6bzGYcolHEAjxS4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzOGU2MjYxLWE1NTEtNDdjMC04YWRlLTJhY2IzMjg2NzU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14AwDQYJKoZIhvcNAQELBQADggEBAG9uJ4smCkJUQw0HMK3442toEorb o5IuTO81fsDKlZRJuyxt2OrmZa9RdkdcME75QwpmBM4PNtLPeeAR5vN0jXlM3HbA daTiJBcKLzpRlwHmOSm+BbS79bUaWIdywELnx7/de7JRgxttFS/PkP9QbFtbvkFW RpP1q/SrPnTeODizalr2kwLwQeaJSwns5xV9gTU7BNpCvkyT4p/Dzxs5bBU7M1FO JtJvg0WlIyPr/h0+zd35RIBPMX6JRTDz+Y6TEKDTo7pSBlRkS4BYTfZuH9ZQ+WYb TGPy/yZo4zFBdMLcueAKhJVmJk1YPOTrSu/bwECBO9yT754xhgUEQgiZwuM= -----END CERTIFICATE-----Generated at Sat Aug 23 06:55:57 2025 by rpki-client