$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa File: 064a098f-0b4d-4d61-8343-4a50f114e383.roa (raw, json) Hash identifier: yexYbF1snUP+AIOvvFTr1OOoBdXgCFyFXA8cG4Ngw9k= Subject key identifier: D1:9B:EA:5C:AF:76:6C:99:2E:CD:78:17:54:92:B8:47:B9:0D:35:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 262B7F6A551CDC54AB498E946ABC2F090FA695DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa Signing time: Sat 16 Aug 2025 00:31:15 +0000 ROA not before: Sat 16 Aug 2025 00:31:15 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2b:7f:6a:55:1c:dc:54:ab:49:8e:94:6a:bc:2f:09:0f:a6:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:31:15 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=d4b1f796b175422dff5dfbad60a1a80f1bcd45bdfb69a2a34db81b54b19edf33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:80:99:4a:0e:03:cf:e5:b9:63:24:4f:62: f7:57:f6:30:7a:8f:a6:43:e6:c9:e9:aa:70:87:a3: 96:fd:ae:60:a2:07:e9:29:a1:3d:cd:69:22:00:0d: bc:68:77:1b:3a:0b:47:c4:fc:51:d4:67:1e:da:93: 18:e8:39:b8:47:dd:fc:dd:ef:f1:ae:a2:ef:ef:64: 3a:c5:4b:93:bc:d1:f2:47:43:e7:98:b4:a4:63:bd: fc:78:a8:21:2e:ef:b0:35:2f:79:b9:aa:90:d6:29: df:3b:28:e5:ce:86:97:2d:b7:47:6d:32:4c:4b:ef: f0:90:89:d7:c0:9e:ac:fd:ed:45:69:6c:38:4e:f9: 98:6a:8a:c8:dc:61:da:d4:99:21:18:ed:38:c7:1f: c3:86:7f:e2:e0:96:e8:d2:63:09:97:93:75:4c:bc: c2:ad:f4:14:d7:b6:30:5c:ac:46:d7:94:84:08:75: ef:c8:c8:d3:6d:29:0f:2a:d2:7d:b3:d8:54:90:b4: ff:84:ad:26:95:90:a0:2d:dd:1a:df:98:62:14:9b: a6:ed:ee:26:a9:ee:a1:0b:f0:bd:88:20:f4:bb:5c: 33:4b:67:72:cc:39:eb:90:04:76:4f:9f:ce:ae:08: 73:6b:1e:04:b5:08:2d:44:92:ba:c6:e2:c7:49:d3: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9B:EA:5C:AF:76:6C:99:2E:CD:78:17:54:92:B8:47:B9:0D:35:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.144.0/20 Signature Algorithm: sha256WithRSAEncryption 89:d0:8e:54:f0:b1:b9:54:2f:a2:5b:cb:cc:a2:be:77:5f:08: 01:09:d6:2c:69:91:f9:61:56:d2:ea:4b:a1:33:8c:0f:4c:c8: 7f:5d:10:73:e3:59:3a:13:e1:ac:fb:9e:9d:43:fc:11:06:3b: ab:f0:d2:49:f7:86:08:6e:cb:aa:0e:81:4f:15:76:c4:9d:90: 4f:f8:5b:d7:6a:91:82:10:04:de:2a:c2:fb:86:69:99:5b:5e: 3d:91:64:83:f1:f1:39:d3:1e:aa:3d:30:4e:4d:93:c6:a3:81: a9:8a:06:81:cf:8f:73:f9:4a:41:ad:4b:4b:88:a5:50:b8:ce: a0:e8:ff:18:c5:4c:8b:f9:f7:20:c5:87:6c:74:ac:64:76:58: eb:60:0c:5c:ba:4a:1f:d3:74:14:82:e9:e1:78:b2:63:39:19: 02:43:e8:c3:25:7d:41:ae:35:ed:ff:98:63:53:73:b1:9f:f0: bf:c3:e8:03:61:4c:00:52:af:eb:0b:ee:9e:1e:34:61:6c:aa: 2c:d0:85:90:c8:cd:cd:55:56:02:3b:86:58:be:f5:93:8f:4a: 31:40:72:35:e3:73:29:9d:94:04:7a:da:e7:b4:d4:9a:ca:0a: 0a:d4:fe:1e:68:6a:64:11:87:8d:fc:e2:3c:11:e2:58:33:bb: 89:20:ea:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJit/alUc3FSrSY6UarwvCQ+mldswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMTE1WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGIxZjc5NmIxNzU0MjJkZmY1ZGZiYWQ2MGExYTgwZjFi Y2Q0NWJkZmI2OWEyYTM0ZGI4MWI1NGIxOWVkZjMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiU4CZSg4Dz+W5YyRPYvdX9jB6j6ZD5snpqnCHo5b9rmCi B+kpoT3NaSIADbxodxs6C0fE/FHUZx7akxjoObhH3fzd7/Guou/vZDrFS5O80fJH Q+eYtKRjvfx4qCEu77A1L3m5qpDWKd87KOXOhpctt0dtMkxL7/CQidfAnqz97UVp bDhO+ZhqisjcYdrUmSEY7TjHH8OGf+LglujSYwmXk3VMvMKt9BTXtjBcrEbXlIQI de/IyNNtKQ8q0n2z2FSQtP+ErSaVkKAt3RrfmGIUm6bt7iap7qEL8L2IIPS7XDNL Z3LMOeuQBHZPn86uCHNrHgS1CC1EkrrG4sdJ02IRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0ZvqXK92bJkuzXgXVJK4R7kNNf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2NGEwOThmLTBiNGQtNGQ2MS04MzQzLTRhNTBmMTE0ZTM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQFrpAwDQYJKoZIhvcNAQELBQADggEBAInQjlTwsblUL6Jby8yivndfCAEJ 1ixpkflhVtLqS6EzjA9MyH9dEHPjWToT4az7np1D/BEGO6vw0kn3hghuy6oOgU8V dsSdkE/4W9dqkYIQBN4qwvuGaZlbXj2RZIPx8TnTHqo9ME5Nk8ajgamKBoHPj3P5 SkGtS0uIpVC4zqDo/xjFTIv59yDFh2x0rGR2WOtgDFy6Sh/TdBSC6eF4smM5GQJD 6MMlfUGuNe3/mGNTc7Gf8L/D6ANhTABSr+sL7p4eNGFsqizQhZDIzc1VVgI7hli+ 9ZOPSjFAcjXjcymdlAR62ue01JrKCgrU/h5oamQRh4384jwR4lgzu4kg6gc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:26:42 2025 by rpki-client