$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa File: 28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa (raw, json) Hash identifier: GSiYTY+QVFW+KLy72TiFoebdXdIMSv/a4QP8jJwHaB4= Subject key identifier: 94:6F:74:9C:32:29:82:96:38:27:EF:06:2E:DC:08:07:92:59:55:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D0ADA6854868561663A26BABF6E7036F48F6370 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa Signing time: Fri 22 Aug 2025 00:40:16 +0000 ROA not before: Fri 22 Aug 2025 00:40:16 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 24.223.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:da:68:54:86:85:61:66:3a:26:ba:bf:6e:70:36:f4:8f:63:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:40:16 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=f20a0347fd958e2af18779dab8950ddb8a93afca8cf8bf4b91291e8930077576, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:00:75:6f:26:0e:33:c4:44:22:c4:c1:0f: fc:54:81:e8:87:0d:1f:dc:5b:bd:d2:23:8a:51:2a: 22:50:5d:8b:68:aa:d6:13:28:6c:d1:4e:b7:ee:67: ce:60:27:a9:21:fc:db:df:0f:e0:17:ac:0a:28:81: b7:81:52:97:08:7a:29:56:43:56:f9:76:84:c8:a6: aa:a6:33:78:51:6d:bd:7d:a4:f4:05:a3:29:85:b9: c4:16:65:98:12:dc:4c:74:e0:c8:df:c2:6c:7b:93: 8e:01:f0:3c:e8:5b:76:51:ac:78:59:3a:16:b8:51: c9:3b:f8:d0:12:18:a6:4f:dd:4c:fe:87:46:82:35: 41:f5:57:8d:7c:77:0e:c4:09:d6:ab:b7:49:79:74: 63:5a:cc:7a:ac:fb:15:e4:ec:77:d3:d3:01:fc:0b: 88:55:bc:3c:72:75:0a:94:36:da:07:f9:d6:d1:f5: a2:0e:f0:01:6c:5a:89:79:f2:7e:4d:0b:b5:ad:65: 9b:36:fb:ce:aa:2f:47:bc:f4:f9:6f:cd:08:3f:3c: ef:8c:9d:a8:0d:be:85:6b:a1:5a:88:49:20:60:e5: b6:12:8e:c3:2f:5f:7b:c9:1f:3c:0b:47:ec:ee:f1: db:b0:02:12:dd:bb:da:fe:53:f8:85:a5:9a:ca:e8: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6F:74:9C:32:29:82:96:38:27:EF:06:2E:DC:08:07:92:59:55:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption 65:ff:5f:df:29:e4:90:14:d4:2a:49:db:a1:7d:c1:5b:cf:4c: db:5e:76:e9:d4:c6:9d:54:98:9a:ac:cb:15:25:6d:7f:db:f5: ae:92:03:8b:8b:5d:dd:72:eb:55:08:b0:0b:04:bb:19:c4:a0: 06:89:d9:3f:c4:64:ab:3b:8b:30:85:60:dc:de:59:51:7d:aa: 5f:c8:f7:d7:21:de:ef:dc:ed:bc:89:9b:57:bc:0a:3c:c6:57: 1f:4f:c5:01:14:f5:6d:c7:95:b5:ae:81:7b:c1:8f:52:33:e4: 1b:38:b6:f6:f4:af:e9:e8:a7:9a:c0:e9:44:30:4e:81:7f:01: 59:0c:3f:01:b6:9d:f4:a8:5e:67:fd:c8:00:dc:47:44:12:15: de:c1:cb:04:de:79:7c:7b:48:86:99:68:2e:25:03:ea:57:f0: f0:6b:8f:bc:a2:9c:66:1f:9b:ca:c5:27:44:32:3a:57:93:3a: d4:38:15:d9:53:a8:34:d0:18:bc:73:d0:1e:2d:df:bc:18:20: 1b:8a:97:9f:f1:4c:fb:0f:e3:3d:8e:0c:12:e6:f1:ec:1e:a0: dc:9b:1f:1b:25:c6:00:94:bf:15:dc:fb:a7:6a:b4:0c:01:eb: 28:0c:29:1c:59:70:0c:cf:9a:b7:be:4b:5e:3f:a5:3d:7b:53: f2:d5:52:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPQraaFSGhWFmOia6v25wNvSPY3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDA0MDE2WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjBhMDM0N2ZkOTU4ZTJhZjE4Nzc5ZGFiODk1MGRkYjhh OTNhZmNhOGNmOGJmNGI5MTI5MWU4OTMwMDc3NTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoHAB1byYOM8REIsTBD/xUgeiHDR/cW73SI4pRKiJQXYto qtYTKGzRTrfuZ85gJ6kh/NvfD+AXrAoogbeBUpcIeilWQ1b5doTIpqqmM3hRbb19 pPQFoymFucQWZZgS3Ex04Mjfwmx7k44B8DzoW3ZRrHhZOha4Uck7+NASGKZP3Uz+ h0aCNUH1V418dw7ECdart0l5dGNazHqs+xXk7HfT0wH8C4hVvDxydQqUNtoH+dbR 9aIO8AFsWol58n5NC7WtZZs2+86qL0e89PlvzQg/PO+MnagNvoVroVqISSBg5bYS jsMvX3vJHzwLR+zu8duwAhLdu9r+U/iFpZrK6InnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlG90nDIpgpY4J+8GLtwIB5JZVa0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4MDExZTFlLTlkNDYtNGQ2ZC1hNGEyLWNhZDk5Yjk2ODE3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcY34AwDQYJKoZIhvcNAQELBQADggEBAGX/X98p5JAU1CpJ26F9wVvPTNte dunUxp1UmJqsyxUlbX/b9a6SA4uLXd1y61UIsAsEuxnEoAaJ2T/EZKs7izCFYNze WVF9ql/I99ch3u/c7byJm1e8CjzGVx9PxQEU9W3HlbWugXvBj1Iz5Bs4tvb0r+no p5rA6UQwToF/AVkMPwG2nfSoXmf9yADcR0QSFd7BywTeeXx7SIaZaC4lA+pX8PBr j7yinGYfm8rFJ0QyOleTOtQ4FdlTqDTQGLxz0B4t37wYIBuKl5/xTPsP4z2ODBLm 8eweoNybHxslxgCUvxXc+6dqtAwB6ygMKRxZcAzPmre+S14/pT17U/LVUos= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:31 2025 by rpki-client