$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa File: 15633e1f-54bc-4c9a-8294-0c707f053f2a.roa (raw, json) Hash identifier: AS4lYkGEM224lDcTMEWRFar82+V9Niwo8iuUkA2hp/k= Subject key identifier: 03:85:BC:E1:40:35:5B:16:1C:AA:39:62:27:BB:72:95:1C:AB:C5:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08414D4D8D23126A9E8FF0F814AA04269E260F52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa Signing time: Fri 08 Aug 2025 00:30:33 +0000 ROA not before: Fri 08 Aug 2025 00:30:33 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:41:4d:4d:8d:23:12:6a:9e:8f:f0:f8:14:aa:04:26:9e:26:0f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:30:33 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=d8aaf1665048470314fdad725cc5d376c5560209ff77f65befdd1eddb90ee9e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:45:ca:92:7e:4a:33:72:2f:05:82:3c:1a:24: e4:3a:71:e1:25:2d:98:46:ab:c8:46:d5:22:4e:fc: 4a:8d:fb:62:06:5d:a1:3c:a3:7e:5f:9f:d2:e7:59: 8c:0f:8f:8f:e1:41:8d:7c:d5:00:4a:35:d6:bb:b5: bc:be:64:95:65:c4:69:48:28:2c:1f:0d:e4:26:5d: 06:3b:71:73:f2:1b:d5:69:49:0c:0d:4c:41:ab:09: 9c:fd:f1:e8:46:66:3a:42:4e:38:a5:04:51:e8:e3: af:6c:91:d1:5c:ab:c7:be:5b:0d:44:48:9a:f5:43: 5d:af:50:10:be:ba:e6:ad:63:de:a8:75:3f:68:30: 09:98:86:99:52:b9:08:59:b7:5b:34:95:fe:90:f4: 18:b9:47:58:d7:4a:29:fd:a2:12:ce:23:4d:e6:67: 3a:2d:dc:84:ba:16:3c:99:76:78:62:82:08:6d:e0: 72:f9:21:e8:39:74:fd:e7:a9:0e:7d:1c:80:b7:9d: c9:5c:cb:33:99:a2:11:d2:4d:f8:2a:f1:f8:4c:6a: f1:a2:62:a4:2d:8d:94:b0:48:8c:60:b6:82:6b:66: 7d:6a:87:86:d0:72:12:7c:23:e9:92:2f:00:9a:e3: 20:3d:d8:b8:a5:56:e9:c0:88:1d:95:9d:67:6b:bd: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:85:BC:E1:40:35:5B:16:1C:AA:39:62:27:BB:72:95:1C:AB:C5:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.190.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:42:77:2d:b9:98:b4:64:2e:d6:c1:63:f4:d2:41:b3:0b:05: 86:20:cb:65:f0:e9:83:b4:35:2b:d5:e6:99:fd:6d:94:ca:44: ac:fe:f0:30:9b:c2:0f:be:e8:96:cd:ca:19:97:9e:51:5b:41: fd:b5:52:60:0a:75:19:7f:42:00:ad:7d:4f:a4:8f:da:b7:88: c2:04:95:a8:8f:b0:28:d6:35:72:28:ad:ff:48:5a:b7:d0:4b: 14:e1:80:8e:b1:3a:a1:78:63:d3:38:aa:cf:c7:18:b6:10:d5: 73:d7:26:5f:06:fb:db:4b:1d:82:57:02:cf:64:5f:19:4d:f6: 01:ab:5e:2d:a4:9c:09:09:57:9a:9d:d4:8c:bf:44:56:c2:35: e2:0a:1b:2a:f7:fe:20:74:7c:42:16:28:b8:51:ea:c3:27:ae: 21:ce:07:3e:d1:fd:ca:25:29:06:2f:9a:38:d1:04:ec:61:72: 9c:7d:23:03:85:2f:c1:e9:ae:a1:03:c8:b2:76:08:cc:ef:d7: 55:85:a6:51:72:9b:7f:aa:6e:15:33:96:6a:74:9e:be:30:ef: c3:4f:48:30:e9:c5:21:46:ce:89:33:fd:60:37:56:ca:3c:47: e9:9e:5c:de:df:d4:88:d3:1e:92:78:aa:a7:c2:c6:68:be:e9: 4d:1f:4a:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCEFNTY0jEmqej/D4FKoEJp4mD1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAzMDMzWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGFhZjE2NjUwNDg0NzAzMTRmZGFkNzI1Y2M1ZDM3NmM1 NTYwMjA5ZmY3N2Y2NWJlZmRkMWVkZGI5MGVlOWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1RcqSfkozci8FgjwaJOQ6ceElLZhGq8hG1SJO/EqN+2IG XaE8o35fn9LnWYwPj4/hQY181QBKNda7tby+ZJVlxGlIKCwfDeQmXQY7cXPyG9Vp SQwNTEGrCZz98ehGZjpCTjilBFHo469skdFcq8e+Ww1ESJr1Q12vUBC+uuatY96o dT9oMAmYhplSuQhZt1s0lf6Q9Bi5R1jXSin9ohLOI03mZzot3IS6FjyZdnhigght 4HL5Ieg5dP3nqQ59HIC3nclcyzOZohHSTfgq8fhMavGiYqQtjZSwSIxgtoJrZn1q h4bQchJ8I+mSLwCa4yA92LilVunAiB2VnWdrvQCLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA4W84UA1WxYcqjliJ7tylRyrxccwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1NjMzZTFmLTU0YmMtNGM5YS04Mjk0LTBjNzA3ZjA1M2YyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTb4wDQYJKoZIhvcNAQELBQADggEBAC1Cdy25mLRkLtbBY/TSQbMLBYYg y2Xw6YO0NSvV5pn9bZTKRKz+8DCbwg++6JbNyhmXnlFbQf21UmAKdRl/QgCtfU+k j9q3iMIElaiPsCjWNXIorf9IWrfQSxThgI6xOqF4Y9M4qs/HGLYQ1XPXJl8G+9tL HYJXAs9kXxlN9gGrXi2knAkJV5qd1Iy/RFbCNeIKGyr3/iB0fEIWKLhR6sMnriHO Bz7R/colKQYvmjjRBOxhcpx9IwOFL8HprqEDyLJ2CMzv11WFplFym3+qbhUzlmp0 nr4w78NPSDDpxSFGzokz/WA3Vso8R+meXN7f1IjTHpJ4qqfCxmi+6U0fSpU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:29:55 2025 by rpki-client