$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa File: 167c2022-ea91-49dd-a73e-cd5a040c15b6.roa (raw, json) Hash identifier: kiSqYfEFCDEfzE4/bClbag9NCB1Zm0zTGvlUmdD029g= Subject key identifier: E1:92:E9:8A:7F:C6:8E:49:C7:31:1C:C5:21:41:C4:A0:E4:3D:D3:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17D3D42CED39A3452B9FCF4EAF4CCD836487B4CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa Signing time: Mon 18 Aug 2025 15:21:59 +0000 ROA not before: Mon 18 Aug 2025 15:21:59 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d3:d4:2c:ed:39:a3:45:2b:9f:cf:4e:af:4c:cd:83:64:87:b4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:21:59 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=538ac5332dafdb03a162c010c1f73028361338228fe48e4142701dc1d9269e1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:e4:45:95:b2:86:67:95:86:2f:69:3a:ae: 7f:34:52:4d:50:e7:1e:7c:6c:d7:20:5c:98:c8:68: 0b:03:3c:12:a4:de:98:6d:02:03:bd:ad:95:37:6e: aa:42:9b:11:7d:8f:0f:cd:63:c9:76:62:d5:54:27: 4a:cd:89:0e:1e:ad:1b:af:12:56:5b:9d:8c:ba:2b: 58:6c:be:b0:c1:69:09:c0:b1:77:2d:76:4b:64:55: b6:be:e5:f9:a5:72:98:c5:56:0e:52:d1:73:63:e1: e5:04:51:cc:c6:3a:2e:d0:2f:b8:4c:bb:26:2c:0b: 1a:09:7f:f5:8c:97:41:0e:bf:10:46:af:43:3a:68: 81:e5:f2:5e:b6:a4:6d:0a:da:27:c4:1c:78:27:30: ab:ca:8e:9b:5a:c9:ae:41:12:ef:14:22:dd:6e:f2: 84:1b:86:fa:67:b6:5c:a5:df:5c:bf:3c:f8:84:c0: 9c:e4:69:f5:20:ce:1d:cc:45:e9:ac:fc:d7:ca:f0: 15:93:23:84:e0:4f:8c:72:b0:87:59:bf:48:2f:23: 37:32:68:75:9d:cf:7d:a5:d9:3c:46:7d:44:f3:91: 4a:bf:51:2a:f6:50:85:7c:16:9b:2d:1b:0b:44:f9: ab:37:0b:cf:e0:d5:02:78:99:7d:f4:1b:6c:de:a9: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:E9:8A:7F:C6:8E:49:C7:31:1C:C5:21:41:C4:A0:E4:3D:D3:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption 93:f3:77:f9:1d:85:21:e8:99:dd:7a:bb:dd:de:b5:b3:3f:c5: 0f:d0:cf:78:f2:e1:cd:99:15:a5:f4:22:1b:2d:fe:e8:f3:d6: 21:27:87:97:49:18:07:8a:63:82:25:25:cc:aa:a9:ec:fb:59: 61:42:c7:8f:6f:08:d4:76:d6:bf:b6:07:fa:4f:35:78:7f:34: 2f:a9:44:04:42:6e:14:ab:45:1e:13:bc:4d:5d:78:6a:67:d7: 3f:91:42:14:53:54:35:77:09:b8:1e:93:22:00:43:f8:66:93: b6:6a:00:3c:d5:ad:54:90:25:0e:08:f9:d1:05:b3:52:be:bb: 40:bd:21:d4:5e:d1:02:a2:68:2c:70:66:08:02:e2:28:a0:d6: d7:3c:a8:19:12:3d:8b:15:7a:26:01:89:c7:7b:72:39:5d:c5: db:f7:56:44:dd:e0:1d:7e:41:8a:ab:19:cf:ab:6f:94:9e:54: 05:ad:79:d5:49:be:52:1e:91:bd:da:05:72:10:44:95:ce:93: fb:27:aa:ec:59:95:7d:9a:d5:d4:1a:17:bf:0a:e9:a9:33:f0: 60:6c:7b:c6:25:6f:34:6f:0b:b9:4e:98:ca:12:cc:e5:0e:ce: 5d:f1:eb:f4:4a:11:6e:2c:de:39:81:46:74:c8:62:f2:95:c2: f0:3a:76:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF9PULO05o0Urn89Or0zNg2SHtMowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUyMTU5WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzhhYzUzMzJkYWZkYjAzYTE2MmMwMTBjMWY3MzAyODM2 MTMzODIyOGZlNDhlNDE0MjcwMWRjMWQ5MjY5ZTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCF9ORFlbKGZ5WGL2k6rn80Uk1Q5x58bNcgXJjIaAsDPBKk 3phtAgO9rZU3bqpCmxF9jw/NY8l2YtVUJ0rNiQ4erRuvElZbnYy6K1hsvrDBaQnA sXctdktkVba+5fmlcpjFVg5S0XNj4eUEUczGOi7QL7hMuyYsCxoJf/WMl0EOvxBG r0M6aIHl8l62pG0K2ifEHHgnMKvKjptaya5BEu8UIt1u8oQbhvpntlyl31y/PPiE wJzkafUgzh3MRems/NfK8BWTI4TgT4xysIdZv0gvIzcyaHWdz32l2TxGfUTzkUq/ USr2UIV8FpstGwtE+as3C8/g1QJ4mX30G2zeqf5RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4ZLpin/GjknHMRzFIUHEoOQ9008wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2N2MyMDIyLWVhOTEtNDlkZC1hNzNlLWNkNWEwNDBjMTViNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa4SEAwDQYJKoZIhvcNAQELBQADggEBAJPzd/kdhSHomd16u93etbM/xQ/Q z3jy4c2ZFaX0Ihst/ujz1iEnh5dJGAeKY4IlJcyqqez7WWFCx49vCNR21r+2B/pP NXh/NC+pRARCbhSrRR4TvE1deGpn1z+RQhRTVDV3CbgekyIAQ/hmk7ZqADzVrVSQ JQ4I+dEFs1K+u0C9IdRe0QKiaCxwZggC4iig1tc8qBkSPYsVeiYBicd7cjldxdv3 VkTd4B1+QYqrGc+rb5SeVAWtedVJvlIekb3aBXIQRJXOk/snquxZlX2a1dQaF78K 6akz8GBse8YlbzRvC7lOmMoSzOUOzl3x6/RKEW4s3jmBRnTIYvKVwvA6dko= -----END CERTIFICATE-----Generated at Sat Aug 23 06:37:02 2025 by rpki-client