$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa File: 1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json) Hash identifier: WDBbKSgHkn9y3z/CiQPEuibuAZE7RzKDfh6ihHMU34g= Subject key identifier: BD:53:1E:D4:62:62:C2:99:F3:42:1E:E5:2C:58:4A:66:2F:30:45:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3926A94866D2DAF7997642B703B40DAADECCACF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa Signing time: Tue 19 Aug 2025 00:30:22 +0000 ROA not before: Tue 19 Aug 2025 00:30:22 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:a9:48:66:d2:da:f7:99:76:42:b7:03:b4:0d:aa:de:cc:ac:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:30:22 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=efc6511895a7ae874406da2b4b750430669ead3a912f80f090a961597781f4f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:bf:fc:7a:4a:bd:b9:25:45:7e:92:04:61: f8:28:ca:36:32:ca:78:21:9d:7f:7e:39:ba:54:cf: 65:fb:d3:a1:1c:68:cf:b9:eb:b9:60:8d:f4:68:b8: 52:3f:17:84:f5:0c:8b:a0:56:fc:40:4a:f9:d2:7b: 0d:c9:28:ce:16:a5:70:09:96:80:41:fd:c1:23:d5: 0e:cb:2c:1c:81:3d:b3:f1:fb:3f:ab:2f:d3:30:76: bb:7c:58:b1:fe:21:87:d6:4d:1c:24:90:1b:d4:6a: ed:c0:2a:78:5e:48:52:8e:df:e4:28:28:d7:fa:9f: 84:d5:7a:e8:50:4b:18:b9:a1:f5:13:ba:08:41:30: 6c:9e:10:34:4e:86:4d:3d:79:11:1e:c9:bb:52:ae: 39:d2:1c:62:a6:f6:68:dd:a4:48:82:aa:69:43:29: a4:a7:e6:0c:12:09:92:3a:ea:49:f9:87:51:be:75: 85:86:f7:83:53:bc:5b:79:09:fd:82:1e:f6:ac:31: 32:ca:00:84:81:3d:94:31:a0:0a:74:04:5c:38:8b: 50:8d:76:4d:ac:b6:0d:c1:3b:c4:ad:e0:5d:e2:f8: eb:a4:c0:7b:e6:06:4b:ad:df:b8:21:be:45:97:d0: dc:95:8e:14:eb:33:35:3d:a4:44:cb:08:4e:af:5f: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:53:1E:D4:62:62:C2:99:F3:42:1E:E5:2C:58:4A:66:2F:30:45:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.188.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ca:76:44:47:14:e7:ec:22:45:58:8f:cc:31:a2:95:20:4e: 6e:64:dd:dc:00:e5:6f:af:0b:be:f9:98:ad:5e:4b:01:7b:12: 80:2e:4d:41:d7:98:57:7c:69:57:0d:c0:73:6f:83:6b:04:5c: fa:f4:83:73:83:41:13:0b:3f:de:0d:ad:5b:f2:16:d1:33:21: 0e:7a:ac:e1:b1:52:31:69:48:f5:97:95:68:e7:48:0a:3a:50: af:64:a6:6d:f6:50:1c:71:1a:d8:73:1c:44:14:2c:40:5a:85: be:1a:99:b6:e0:9e:0e:8a:9d:02:da:70:50:c9:bd:b3:a2:4e: 97:fd:14:97:93:5c:1e:f3:b1:50:25:e1:6d:63:80:87:d1:89: 47:10:39:c1:e0:4b:e6:31:83:b2:44:f1:e3:59:d7:e3:07:2b: bd:0d:d5:85:42:fd:74:db:4d:44:38:d7:05:94:ce:13:81:32: 48:ea:f9:1f:0c:7b:87:dd:10:b3:87:85:1d:f4:6a:53:cf:34: 28:0a:72:74:f5:0a:91:2b:8f:0d:89:ae:ea:e8:59:5e:71:f7: fd:51:b5:15:09:63:3c:94:3e:01:44:f9:8e:7f:8a:51:93:0f: 6e:3d:35:ab:2e:7e:14:36:96:21:9f:79:90:75:39:46:c5:db: 16:de:95:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOSapSGbS2veZdkK3A7QNqt7MrPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMDIyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmM2NTExODk1YTdhZTg3NDQwNmRhMmI0Yjc1MDQzMDY2 OWVhZDNhOTEyZjgwZjA5MGE5NjE1OTc3ODFmNGYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMPb/8ekq9uSVFfpIEYfgoyjYyynghnX9+ObpUz2X706Ec aM+567lgjfRouFI/F4T1DIugVvxASvnSew3JKM4WpXAJloBB/cEj1Q7LLByBPbPx +z+rL9Mwdrt8WLH+IYfWTRwkkBvUau3AKnheSFKO3+QoKNf6n4TVeuhQSxi5ofUT ughBMGyeEDROhk09eREeybtSrjnSHGKm9mjdpEiCqmlDKaSn5gwSCZI66kn5h1G+ dYWG94NTvFt5Cf2CHvasMTLKAISBPZQxoAp0BFw4i1CNdk2stg3BO8St4F3i+Ouk wHvmBkut37ghvkWX0NyVjhTrMzU9pETLCE6vX1W/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvVMe1GJiwpnzQh7lLFhKZi8wRQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmNDcwMTYwLTBmM2QtNGM1YS1hNzVmLTg3NDBmMjAwN2UyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7wwDQYJKoZIhvcNAQELBQADggEBAGXKdkRHFOfsIkVYj8wxopUgTm5k 3dwA5W+vC775mK1eSwF7EoAuTUHXmFd8aVcNwHNvg2sEXPr0g3ODQRMLP94NrVvy FtEzIQ56rOGxUjFpSPWXlWjnSAo6UK9kpm32UBxxGthzHEQULEBahb4ambbgng6K nQLacFDJvbOiTpf9FJeTXB7zsVAl4W1jgIfRiUcQOcHgS+Yxg7JE8eNZ1+MHK70N 1YVC/XTbTUQ41wWUzhOBMkjq+R8Me4fdELOHhR30alPPNCgKcnT1CpErjw2Jruro WV5x9/1RtRUJYzyUPgFE+Y5/ilGTD249NasufhQ2liGfeZB1OUbF2xbelTM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:52 2025 by rpki-client