$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e5a0-ebc8-4347-b2e8-81f02008fa59.roa File: 2997e5a0-ebc8-4347-b2e8-81f02008fa59.roa (raw, json) Hash identifier: Rg3UZj657RJQ9/rE/7GvkFL6bf4iadvd2luC01PRwM0= Subject key identifier: A6:50:E3:6E:37:D7:82:5B:2E:55:73:39:AD:58:F4:C5:F4:B0:19:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 760897A4539BFCA27FC43F7EED5EA73EF33CF793 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e5a0-ebc8-4347-b2e8-81f02008fa59.roa Signing time: Tue 19 Aug 2025 00:10:46 +0000 ROA not before: Tue 19 Aug 2025 00:10:46 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:08:97:a4:53:9b:fc:a2:7f:c4:3f:7e:ed:5e:a7:3e:f3:3c:f7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:10:46 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=23613cd37e96a98dd4438b20ce45d510a30e3902b63398816ae293e7be76ec12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:fa:a5:d0:41:10:a8:00:6d:d8:c6:30:8b: 44:12:d2:b5:a3:f8:bb:41:9e:02:e0:86:df:50:2a: de:e0:b7:b1:68:66:01:49:b9:20:7e:81:fc:e0:28: 65:f4:c5:c8:7f:aa:ae:ab:0b:74:1e:e8:c6:64:03: 16:f7:ae:7c:63:de:72:d2:3a:6c:36:c5:8b:aa:42: 09:66:07:32:e9:cf:ae:e5:52:42:18:a9:e7:ba:21: 3d:ac:b7:f8:ac:b9:5a:a8:b7:bd:66:ca:bd:be:a1: bc:0b:53:90:8c:ff:fe:36:b6:9c:78:42:e3:5e:5c: 6f:cb:b7:6d:d7:55:b1:87:af:a8:5f:67:f4:03:49: a4:de:8e:2c:ea:2a:76:29:2b:92:7f:11:b6:4e:63: e1:3a:ff:74:9c:20:db:2a:82:ed:fb:9f:96:fc:11: 0a:d9:af:9d:82:1a:77:6a:23:a6:7c:0c:73:4a:46: d6:fe:c6:4f:1b:66:7a:76:0b:1f:8f:04:b6:f1:58: a9:fa:df:9e:0b:82:91:54:8c:0c:55:c5:65:c6:bc: b5:17:e8:b3:05:52:ad:04:d6:a9:06:69:c3:66:37: 7a:b0:29:00:8d:bb:ac:7f:85:5e:8d:e3:21:04:f0: 23:9c:d8:a6:be:3b:c0:54:02:96:69:e4:57:01:ba: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:E3:6E:37:D7:82:5B:2E:55:73:39:AD:58:F4:C5:F4:B0:19:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e5a0-ebc8-4347-b2e8-81f02008fa59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.92.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:31:ba:48:ee:16:c9:c9:3c:25:15:8c:be:d2:fe:20:32:3d: ba:43:c3:86:ac:cf:00:d7:31:e5:6c:4b:fe:e2:d2:38:e0:73: 1d:e2:bf:98:40:4b:ea:29:23:2f:dc:7b:73:cd:c1:dd:e6:b2: 63:05:46:b8:94:f6:3c:9e:4f:3a:e2:cf:3f:67:47:b6:80:1f: 60:33:89:a6:ef:b2:49:12:36:34:07:d2:45:d6:c7:88:ed:f7: 3b:16:f2:81:43:84:be:db:5b:38:8e:a1:17:57:9b:c9:15:8d: 9c:2f:98:d9:ec:d5:69:d1:c4:19:fe:d1:39:49:f1:57:b8:6d: 8d:35:7f:32:4f:bc:bc:7e:50:b9:3b:97:17:6f:5a:f5:c2:b2: b1:0b:14:e1:95:cc:88:68:4e:f4:29:b1:04:60:49:8f:b3:24: 24:9b:72:07:02:c5:2c:40:f9:ef:35:af:7f:0c:56:1b:68:76: 5c:6a:2a:d0:3e:ca:0e:01:7d:0f:1b:c0:20:1e:e3:94:8d:7d: 1d:ab:e0:d8:58:4e:c7:36:04:15:87:60:bc:92:61:6c:57:a4: 3e:aa:e4:9a:38:09:44:9e:63:ee:f7:30:5f:de:15:4d:07:5e: 39:8b:f8:46:fd:92:72:89:b6:93:78:3c:21:40:e3:6c:7e:53: 9a:0c:ac:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdgiXpFOb/KJ/xD9+7V6nPvM895MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMDQ2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzYxM2NkMzdlOTZhOThkZDQ0MzhiMjBjZTQ1ZDUxMGEz MGUzOTAyYjYzMzk4ODE2YWUyOTNlN2JlNzZlYzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYgfql0EEQqABt2MYwi0QS0rWj+LtBngLght9QKt7gt7Fo ZgFJuSB+gfzgKGX0xch/qq6rC3Qe6MZkAxb3rnxj3nLSOmw2xYuqQglmBzLpz67l UkIYqee6IT2st/isuVqot71myr2+obwLU5CM//42tpx4QuNeXG/Lt23XVbGHr6hf Z/QDSaTejizqKnYpK5J/EbZOY+E6/3ScINsqgu37n5b8EQrZr52CGndqI6Z8DHNK Rtb+xk8bZnp2Cx+PBLbxWKn6354LgpFUjAxVxWXGvLUX6LMFUq0E1qkGacNmN3qw KQCNu6x/hV6N4yEE8COc2Ka+O8BUApZp5FcBusIXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUplDjbjfXglsuVXM5rVj0xfSwGdcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5OTdlNWEwLWViYzgtNDM0Ny1iMmU4LTgxZjAyMDA4ZmE1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRXFwwDQYJKoZIhvcNAQELBQADggEBAF4xukjuFsnJPCUVjL7S/iAyPbpD w4aszwDXMeVsS/7i0jjgcx3iv5hAS+opIy/ce3PNwd3msmMFRriU9jyeTzrizz9n R7aAH2AziabvskkSNjQH0kXWx4jt9zsW8oFDhL7bWziOoRdXm8kVjZwvmNns1WnR xBn+0TlJ8Ve4bY01fzJPvLx+ULk7lxdvWvXCsrELFOGVzIhoTvQpsQRgSY+zJCSb cgcCxSxA+e81r38MVhtodlxqKtA+yg4BfQ8bwCAe45SNfR2r4NhYTsc2BBWHYLyS YWxXpD6q5Jo4CUSeY+73MF/eFU0HXjmL+Eb9knKJtpN4PCFA42x+U5oMrEQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:22 2025 by rpki-client