$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa File: 062eaeae-ddf7-4703-bf27-2c878b44bc68.roa (raw, json) Hash identifier: uc98tdkSM2WD6qORf1Y2wHz0HD3Rjy8p14qILZUD15g= Subject key identifier: AA:87:77:56:D0:2D:65:BB:BE:F3:C2:D1:E1:42:3C:77:82:59:2E:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4631E4F0ABF0ED75BE04034265A49323EF200DAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa Signing time: Wed 13 Aug 2025 00:51:24 +0000 ROA not before: Wed 13 Aug 2025 00:51:24 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.85.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:31:e4:f0:ab:f0:ed:75:be:04:03:42:65:a4:93:23:ef:20:0d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:51:24 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=00d4ac178344823b953d6b9291cd9d0dc1f25e0f3587cfec09cfc7ebbeea90cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:c1:3b:1b:e3:4d:59:70:12:03:6f:9b:3f: 53:5f:68:51:6a:ba:99:1b:f7:fd:b6:3a:f7:5b:29: 03:3d:90:30:5c:c5:be:2b:62:2a:65:f0:d8:98:7d: eb:db:96:a4:00:2d:f8:75:99:f1:05:53:c0:b3:80: 90:ea:07:39:86:f4:c8:23:0b:5d:72:88:ba:91:7e: ee:18:d1:0b:42:e3:7a:ac:c2:c8:49:1d:82:fa:89: 74:4b:72:3b:35:ac:6a:88:e4:d6:81:c6:f2:3b:a9: d8:39:db:78:45:be:7d:b0:f8:91:53:1f:31:d9:d1: 26:6f:ab:da:37:99:b7:f5:2f:84:e1:f6:5f:d8:98: 20:53:ad:7f:75:27:9a:7b:47:a1:bf:8c:70:a0:6d: 5f:46:8e:75:62:d4:f5:1e:be:d7:53:b3:d9:74:e1: 2f:b2:10:c7:39:f8:a4:58:49:9c:25:70:ca:9a:39: 8d:16:fd:23:71:7d:9e:96:70:d8:94:47:34:b8:36: e7:14:61:96:2b:b0:33:86:d6:90:77:ec:8a:f5:a1: c7:3d:cc:7d:70:57:ee:f9:64:74:d1:84:b9:11:e1: 21:3a:33:e8:b6:d6:2e:41:12:81:4e:0d:c7:5a:4c: 05:8d:c9:b2:e7:8b:95:5d:02:58:d7:9f:b5:80:11: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:87:77:56:D0:2D:65:BB:BE:F3:C2:D1:E1:42:3C:77:82:59:2E:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.85.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9c:08:45:a3:49:5f:a6:ac:a1:28:20:64:ac:a4:8f:89:8d:83: 91:22:de:cd:a3:15:6d:c9:95:16:83:af:bc:ee:fd:83:7f:a8: ba:d4:19:ef:3b:3a:37:b6:1c:2e:0f:4b:94:e3:e5:9b:4f:56: 2d:9f:73:18:b3:59:7e:fb:88:4e:2c:6d:6f:81:74:62:80:94: 82:35:37:3f:11:0d:04:c5:29:50:04:28:7a:92:5a:00:11:64: f4:43:45:f6:b7:6f:f7:6d:c3:6d:9a:00:25:f5:0f:64:69:69: ae:0c:ca:0b:1e:3f:04:aa:26:42:65:c5:02:7c:9a:97:05:e8: 26:b1:f5:61:96:36:3a:51:e4:e5:b6:c8:2c:49:2a:d0:c0:20: 71:08:06:af:6b:38:2b:26:03:2c:bd:6f:b2:80:0e:ed:76:82: c7:9d:fd:e5:be:bb:58:5d:16:ae:d8:b1:6b:01:5f:a9:f0:a5: 7a:bb:66:47:60:7b:7c:3c:21:68:4b:33:64:89:1e:19:eb:1c: 18:b7:95:c6:32:87:bc:55:11:0f:e9:6b:19:da:70:06:00:ec: ff:63:de:f4:cd:fb:f4:3e:f8:33:9c:7f:e1:bc:5a:90:5b:81: 55:23:20:67:ed:d9:e1:51:01:ee:bf:2e:47:8b:40:7a:bb:fd: fa:86:a5:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURjHk8Kvw7XW+BANCZaSTI+8gDaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDA1MTI0WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGQ0YWMxNzgzNDQ4MjNiOTUzZDZiOTI5MWNkOWQwZGMx ZjI1ZTBmMzU4N2NmZWMwOWNmYzdlYmJlZWE5MGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5n8E7G+NNWXASA2+bP1NfaFFqupkb9/22OvdbKQM9kDBc xb4rYipl8NiYfevblqQALfh1mfEFU8CzgJDqBzmG9MgjC11yiLqRfu4Y0QtC43qs wshJHYL6iXRLcjs1rGqI5NaBxvI7qdg523hFvn2w+JFTHzHZ0SZvq9o3mbf1L4Th 9l/YmCBTrX91J5p7R6G/jHCgbV9GjnVi1PUevtdTs9l04S+yEMc5+KRYSZwlcMqa OY0W/SNxfZ6WcNiURzS4NucUYZYrsDOG1pB37Ir1occ9zH1wV+75ZHTRhLkR4SE6 M+i21i5BEoFODcdaTAWNybLni5VdAljXn7WAEceLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqod3VtAtZbu+88LR4UI8d4JZLnQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2MmVhZWFlLWRkZjctNDcwMy1iZjI3LTJjODc4YjQ0YmM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjVYAwDQYJKoZIhvcNAQELBQADggEBAJwIRaNJX6asoSggZKykj4mNg5Ei 3s2jFW3JlRaDr7zu/YN/qLrUGe87Oje2HC4PS5Tj5ZtPVi2fcxizWX77iE4sbW+B dGKAlII1Nz8RDQTFKVAEKHqSWgARZPRDRfa3b/dtw22aACX1D2Rpaa4MygsePwSq JkJlxQJ8mpcF6Cax9WGWNjpR5OW2yCxJKtDAIHEIBq9rOCsmAyy9b7KADu12gsed /eW+u1hdFq7YsWsBX6nwpXq7Zkdge3w8IWhLM2SJHhnrHBi3lcYyh7xVEQ/paxna cAYA7P9j3vTN+/Q++DOcf+G8WpBbgVUjIGft2eFRAe6/LkeLQHq7/fqGpbM= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:12 2025 by rpki-client