$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa File: 11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa (raw, json) Hash identifier: BsUeCpQutOK4AsigH8sigZ5eWMmswkHDdxeBHBgNLLA= Subject key identifier: 2B:73:39:1E:64:4E:97:C0:4C:7E:07:A4:F4:CB:38:06:99:4C:4E:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 448CC8FDD95786F2A966887D74793D03F9CA46CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa Signing time: Mon 11 Aug 2025 15:01:06 +0000 ROA not before: Mon 11 Aug 2025 15:01:06 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 141.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8c:c8:fd:d9:57:86:f2:a9:66:88:7d:74:79:3d:03:f9:ca:46:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:01:06 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=330ac02cdd9e3e50dadf64cafd42ff497f216a226d551796bb0d09d13614cd63, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:b0:33:d9:83:bb:81:f7:1c:cd:33:25:ed: 89:f3:80:45:22:d0:24:5d:99:71:0c:39:f1:a5:0b: bf:69:64:57:4e:85:34:91:61:6e:21:32:e2:82:06: fb:95:d0:b4:2d:b7:e3:c3:ed:e7:f3:3c:e9:74:c2: 93:27:4f:cd:be:fe:95:05:96:c3:4f:01:70:07:5e: 04:07:5a:84:d8:6d:a1:55:93:92:4b:66:4c:50:cc: f6:fa:95:1a:82:30:a9:9e:7f:7c:47:1f:71:bc:41: 06:30:cc:cc:2f:b2:c1:79:94:fd:95:e2:18:0a:40: d2:43:30:13:1a:fc:a6:16:11:e4:7d:71:b0:02:06: e9:dc:d6:16:1f:b9:89:45:5a:03:87:6b:13:8f:cc: 31:a6:dc:df:22:ec:0a:7b:74:df:24:ed:03:c2:c7: 99:36:f0:2c:28:db:cf:c0:4a:70:93:b5:c4:a1:0d: a8:1b:b9:2b:45:02:07:91:05:37:c9:f0:7e:04:6d: e2:34:8d:29:4f:49:ee:5b:83:85:a8:33:05:26:66: 48:df:16:73:9c:e8:0d:b7:9c:3b:14:9a:aa:ea:df: ba:6e:b1:61:24:d1:47:70:3c:14:e3:f1:bf:07:9e: 84:33:92:95:16:f3:b3:75:f8:b6:4a:4f:ac:81:c5: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:39:1E:64:4E:97:C0:4C:7E:07:A4:F4:CB:38:06:99:4C:4E:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:bb:61:4e:d5:04:86:6b:8b:fe:db:d8:a1:17:05:02:e3:69: d7:48:4c:72:57:1d:19:a0:33:d4:2a:77:3b:a3:4e:2b:28:36: 8a:7d:54:15:6b:07:36:bf:f4:6f:3f:d6:5d:52:6f:9c:18:e0: 4d:2d:34:e5:7f:e1:ee:ba:a0:77:49:c9:56:f0:5d:a8:1a:6d: 2b:85:6f:7c:65:01:65:ab:c3:d6:92:99:bc:66:fd:50:54:e4: 79:7e:3f:d6:e2:1f:c2:01:91:55:ef:55:0b:d6:92:ea:ed:d1: 71:52:33:68:e4:25:23:ca:af:b6:89:4d:2a:53:ef:2a:f4:71: ee:bb:8a:95:0a:71:cf:54:13:75:15:1f:e8:6b:90:43:67:88: 73:63:d3:c6:9a:a0:f0:3a:68:a4:0f:d9:1c:d4:fc:0a:b5:1b: 6b:62:0f:d4:70:8e:93:e5:09:b2:b7:ba:28:91:3e:62:32:1f: 5f:bd:87:05:8f:14:df:26:98:67:91:af:12:0f:91:c4:e0:3e: 64:f4:6c:54:8c:53:de:91:a5:43:c9:fc:2f:5a:75:63:a5:48: 15:09:4b:0b:a8:af:26:d1:e0:eb:2f:7a:46:3a:9a:dd:9b:6f: bc:03:4f:f2:d9:b0:79:5f:83:a6:79:4d:3f:c6:16:b4:b5:87: 05:9e:d7:a2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURIzI/dlXhvKpZoh9dHk9A/nKRsswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUwMTA2WhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzBhYzAyY2RkOWUzZTUwZGFkZjY0Y2FmZDQyZmY0OTdm MjE2YTIyNmQ1NTE3OTZiYjBkMDlkMTM2MTRjZDYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2VLAz2YO7gfcczTMl7YnzgEUi0CRdmXEMOfGlC79pZFdO hTSRYW4hMuKCBvuV0LQtt+PD7efzPOl0wpMnT82+/pUFlsNPAXAHXgQHWoTYbaFV k5JLZkxQzPb6lRqCMKmef3xHH3G8QQYwzMwvssF5lP2V4hgKQNJDMBMa/KYWEeR9 cbACBunc1hYfuYlFWgOHaxOPzDGm3N8i7Ap7dN8k7QPCx5k28Cwo28/ASnCTtcSh DagbuStFAgeRBTfJ8H4EbeI0jSlPSe5bg4WoMwUmZkjfFnOc6A23nDsUmqrq37pu sWEk0UdwPBTj8b8HnoQzkpUW87N1+LZKT6yBxf2FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUK3M5HmROl8BMfgek9Ms4BplMTiUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExZDg2ZDVlLWNhZjQtNDZiZC1iOTYyLWEyYzQzYWQwZjU2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCN5jANBgkqhkiG9w0BAQsFAAOCAQEAbbthTtUEhmuL/tvYoRcFAuNp10hM clcdGaAz1Cp3O6NOKyg2in1UFWsHNr/0bz/WXVJvnBjgTS005X/h7rqgd0nJVvBd qBptK4VvfGUBZavD1pKZvGb9UFTkeX4/1uIfwgGRVe9VC9aS6u3RcVIzaOQlI8qv tolNKlPvKvRx7ruKlQpxz1QTdRUf6GuQQ2eIc2PTxpqg8DpopA/ZHNT8CrUba2IP 1HCOk+UJsre6KJE+YjIfX72HBY8U3yaYZ5GvEg+RxOA+ZPRsVIxT3pGlQ8n8L1p1 Y6VIFQlLC6ivJtHg6y96Rjqa3ZtvvANP8tmweV+DpnlNP8YWtLWHBZ7Xog== -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:41 2025 by rpki-client