$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa File: 235994eb-0dcc-451c-aa65-4ce458218f3a.roa (raw, json) Hash identifier: bcFFSeMesC/I7sQnPQYfhqAVUhiJ2cuHkcC5Sc3qIgY= Subject key identifier: EA:B3:20:99:DF:3E:F1:75:1C:8B:23:1C:F1:0C:A3:FF:EC:B1:8A:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 017DD716322752797BB0CE69AA51897581E6AA75 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa Signing time: Tue 19 Aug 2025 00:31:55 +0000 ROA not before: Tue 19 Aug 2025 00:31:55 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7d:d7:16:32:27:52:79:7b:b0:ce:69:aa:51:89:75:81:e6:aa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:55 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=ba8778649917f7e28d30e3421c0c39015dc792a69f12368322c8a137d9f0c15e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:61:ef:87:ca:d2:50:1c:ad:e7:87:9b:64: b6:2c:c1:e2:c6:26:27:52:e8:24:0a:b7:85:9d:e5: 6c:44:e8:b7:03:d9:45:6e:8b:e8:b2:24:5e:da:3c: b9:10:be:e9:54:a6:7f:db:c5:42:c8:c9:49:21:f2: 5b:8f:48:4a:bd:c7:9f:76:6c:d1:53:74:ec:f4:aa: 92:54:a3:2d:20:56:a8:92:09:c4:ca:07:46:a0:d5: 18:eb:fc:1b:3f:29:aa:09:dd:d1:3e:f1:ea:bd:f1: 67:86:4f:f0:f1:67:88:02:23:16:14:d9:cd:42:09: d5:1f:f2:4b:2f:65:ef:01:b5:e1:5a:26:9a:9a:5c: 64:54:7b:40:89:ab:ca:07:72:12:89:fa:29:26:0b: d9:5c:94:e8:86:1a:26:2a:b9:8c:cc:f0:b7:9d:a4: 41:07:eb:cf:88:a5:6b:24:9d:63:a5:0e:81:09:4b: 84:fa:d7:61:1e:9e:e8:f0:b9:19:2f:33:25:5b:95: 4a:7a:75:0e:30:22:f7:e8:fb:32:d9:ff:ba:05:ee: 49:90:35:eb:7f:1d:27:8f:b4:5b:67:39:e3:52:07: fe:ec:94:17:b8:9c:90:dc:7c:0c:7a:54:cb:bd:1e: 7f:66:36:b2:95:30:c5:36:18:af:25:0b:29:82:a0: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:20:99:DF:3E:F1:75:1C:8B:23:1C:F1:0C:A3:FF:EC:B1:8A:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.40.0/21 Signature Algorithm: sha256WithRSAEncryption 07:67:3e:c6:6b:72:1c:ec:20:d4:6c:e4:b6:e1:71:9c:83:2d: b3:1a:0d:09:e1:1a:a7:40:b6:30:74:5c:cf:09:f3:5f:9b:18: 65:e5:42:c2:2c:df:cb:f8:19:55:a7:80:1a:83:dc:3d:6c:c9: 02:87:6b:27:46:e7:cf:1b:d2:07:2a:c8:92:33:31:32:c1:37: 25:93:8e:a7:cb:27:d5:d5:1d:2a:4c:ae:f3:ce:e8:a6:4b:64: cd:60:6b:07:4a:90:93:76:f8:15:90:63:ae:76:9e:e7:71:c0: e2:7b:ac:ed:1e:43:d0:92:7c:ff:8c:ba:0f:64:f3:03:6d:30: 14:61:1f:ed:24:96:86:f7:9c:e2:7c:16:3e:ca:0f:95:d9:5c: ec:d5:a0:d2:c6:03:73:bc:b7:d9:48:af:79:59:74:1c:38:b1: 8a:c8:8f:b4:12:94:66:81:35:cd:22:b5:9f:88:98:12:38:c1: f8:29:ec:79:89:35:8a:40:4f:61:49:70:c1:a0:be:10:d5:50: 17:60:7d:28:8c:63:f5:2b:d9:06:c4:85:bd:f9:31:f0:82:b4: c9:f4:03:9e:3c:52:11:d2:47:6a:d8:c9:ca:78:25:91:56:c5: 43:2a:c3:7c:17:c3:b2:f4:c7:5b:16:41:ae:ee:4b:98:1e:4e: d7:85:c7:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAX3XFjInUnl7sM5pqlGJdYHmqnUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMTU1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTg3Nzg2NDk5MTdmN2UyOGQzMGUzNDIxYzBjMzkwMTVk Yzc5MmE2OWYxMjM2ODMyMmM4YTEzN2Q5ZjBjMTVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9F2Hvh8rSUByt54ebZLYsweLGJidS6CQKt4Wd5WxE6LcD 2UVui+iyJF7aPLkQvulUpn/bxULIyUkh8luPSEq9x592bNFTdOz0qpJUoy0gVqiS CcTKB0ag1Rjr/Bs/KaoJ3dE+8eq98WeGT/DxZ4gCIxYU2c1CCdUf8ksvZe8BteFa JpqaXGRUe0CJq8oHchKJ+ikmC9lclOiGGiYquYzM8LedpEEH68+IpWsknWOlDoEJ S4T612EenujwuRkvMyVblUp6dQ4wIvfo+zLZ/7oF7kmQNet/HSePtFtnOeNSB/7s lBe4nJDcfAx6VMu9Hn9mNrKVMMU2GK8lCymCoJD9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6rMgmd8+8XUciyMc8Qyj/+yxisIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNTk5NGViLTBkY2MtNDUxYy1hYTY1LTRjZTQ1ODIxOGYzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjligwDQYJKoZIhvcNAQELBQADggEBAAdnPsZrchzsINRs5LbhcZyDLbMa DQnhGqdAtjB0XM8J81+bGGXlQsIs38v4GVWngBqD3D1syQKHaydG588b0gcqyJIz MTLBNyWTjqfLJ9XVHSpMrvPO6KZLZM1gawdKkJN2+BWQY652nudxwOJ7rO0eQ9CS fP+Mug9k8wNtMBRhH+0klob3nOJ8Fj7KD5XZXOzVoNLGA3O8t9lIr3lZdBw4sYrI j7QSlGaBNc0itZ+ImBI4wfgp7HmJNYpAT2FJcMGgvhDVUBdgfSiMY/Ur2QbEhb35 MfCCtMn0A548UhHSR2rYycp4JZFWxUMqw3wXw7L0x1sWQa7uS5geTteFxw8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:48 2025 by rpki-client