$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9c5c08-7b7e-4bf3-815e-35f9962ced9e.roa File: 2c9c5c08-7b7e-4bf3-815e-35f9962ced9e.roa (raw, json) Hash identifier: aBzm0gYEReg+AAnRC9MC6EqK8mduBUieATwtrMKlvAs= Subject key identifier: AA:64:AC:B8:E3:23:8F:08:54:6C:FC:A6:38:A4:38:FB:FA:95:5C:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D12AD28255D86DC54E21D875B941CFA040CF6FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9c5c08-7b7e-4bf3-815e-35f9962ced9e.roa Signing time: Wed 06 Aug 2025 00:40:12 +0000 ROA not before: Wed 06 Aug 2025 00:40:12 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 95.69.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:12:ad:28:25:5d:86:dc:54:e2:1d:87:5b:94:1c:fa:04:0c:f6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:40:12 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=394eb5738bed684d749151658986831fad507d51f54576bbbf380507fb3816ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:81:40:3e:2a:68:26:f6:f3:d2:b6:27:91: 9c:09:fe:1e:b4:09:78:e9:bb:43:38:79:08:fc:a7: d3:0d:04:33:78:75:af:4a:58:1d:e7:ce:1f:cb:ca: cd:18:49:cf:f6:ff:5b:b2:da:a6:f0:cb:44:f1:98: 34:db:fd:4e:86:c4:7b:85:95:0c:d5:1b:03:9a:e4: 19:bd:a4:67:79:49:2b:1e:1d:00:3e:97:f7:cc:dd: 39:7b:26:9e:48:32:4e:30:97:57:94:ab:30:dd:9a: b1:57:81:83:c2:ef:00:a6:75:a4:87:db:d2:d1:65: b4:81:4a:16:75:21:7b:7f:ea:32:d4:ef:91:e1:7d: d0:da:fe:03:7d:2a:e0:f1:e4:7f:be:2a:66:25:e9: 13:72:e9:6c:f5:de:d9:39:c5:fa:7e:30:33:bd:2a: 7c:cd:01:6f:d0:eb:d5:30:bb:74:32:fa:78:44:12: 26:66:32:78:46:a1:4b:23:70:79:03:ac:26:c2:c7: 6e:a5:eb:a1:ae:9e:db:71:e4:2d:e6:dc:b1:27:7d: c1:bd:f4:2f:18:ce:70:78:bc:a7:09:4f:91:74:fa: 1d:28:1f:15:2c:2d:9a:ef:86:52:bc:db:26:48:55: 17:7d:07:a9:63:69:0a:67:b4:52:8b:aa:62:15:9d: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:AC:B8:E3:23:8F:08:54:6C:FC:A6:38:A4:38:FB:FA:95:5C:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9c5c08-7b7e-4bf3-815e-35f9962ced9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.69.128.0/17 Signature Algorithm: sha256WithRSAEncryption d6:ff:9e:16:17:47:8c:e0:1a:c0:87:17:c7:d4:47:7e:26:5e: 17:61:f5:88:99:f3:49:34:fd:d2:93:4a:b1:ec:79:15:a7:74: a3:74:da:00:1b:2e:fd:8f:72:13:bd:c7:47:21:8d:8f:1f:51: 3e:f6:93:51:77:30:66:96:92:95:84:08:b5:30:9b:7c:1e:95: 3d:42:36:8b:89:60:31:b9:a3:02:b5:63:20:70:ab:85:0f:ea: 0d:05:18:f9:ee:4b:13:74:97:5e:8d:d9:f5:78:da:63:55:48: 55:ff:8e:0f:fe:d3:d7:2c:56:60:36:02:95:7b:01:51:ba:ec: b7:35:5e:2c:e9:96:6d:17:99:b8:85:c2:d4:52:d8:e7:74:11: 1c:bd:a1:91:f4:8c:be:b4:e0:8b:c0:31:e6:85:6e:fb:c4:7a: ef:4e:1c:ad:40:24:96:08:ec:22:ea:b5:80:d8:1a:f6:b4:71: 7f:73:1e:dd:d4:96:b3:75:00:02:36:11:ac:ad:57:a5:0b:e7: ee:a7:f8:2e:6d:72:30:5f:6e:1b:22:f7:8d:ac:42:d3:69:5e: 11:1b:4c:c3:44:70:d3:19:65:5c:66:c3:56:a0:00:05:e8:7b: ff:d7:5f:05:31:37:d3:89:09:19:64:50:04:ed:c2:b1:82:fe: eb:3f:90:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHRKtKCVdhtxU4h2HW5Qc+gQM9vwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDA0MDEyWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTRlYjU3MzhiZWQ2ODRkNzQ5MTUxNjU4OTg2ODMxZmFk NTA3ZDUxZjU0NTc2YmJiZjM4MDUwN2ZiMzgxNmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDek4FAPipoJvbz0rYnkZwJ/h60CXjpu0M4eQj8p9MNBDN4 da9KWB3nzh/Lys0YSc/2/1uy2qbwy0TxmDTb/U6GxHuFlQzVGwOa5Bm9pGd5SSse HQA+l/fM3Tl7Jp5IMk4wl1eUqzDdmrFXgYPC7wCmdaSH29LRZbSBShZ1IXt/6jLU 75HhfdDa/gN9KuDx5H++KmYl6RNy6Wz13tk5xfp+MDO9KnzNAW/Q69Uwu3Qy+nhE EiZmMnhGoUsjcHkDrCbCx26l66Gunttx5C3m3LEnfcG99C8YznB4vKcJT5F0+h0o HxUsLZrvhlK82yZIVRd9B6ljaQpntFKLqmIVncypAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqmSsuOMjjwhUbPymOKQ4+/qVXAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjOWM1YzA4LTdiN2UtNGJmMy04MTVlLTM1Zjk5NjJjZWQ5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdfRYAwDQYJKoZIhvcNAQELBQADggEBANb/nhYXR4zgGsCHF8fUR34mXhdh 9YiZ80k0/dKTSrHseRWndKN02gAbLv2PchO9x0chjY8fUT72k1F3MGaWkpWECLUw m3welT1CNouJYDG5owK1YyBwq4UP6g0FGPnuSxN0l16N2fV42mNVSFX/jg/+09cs VmA2ApV7AVG67Lc1Xizplm0XmbiFwtRS2Od0ERy9oZH0jL604IvAMeaFbvvEeu9O HK1AJJYI7CLqtYDYGva0cX9zHt3UlrN1AAI2EaytV6UL5+6n+C5tcjBfbhsi942s QtNpXhEbTMNEcNMZZVxmw1agAAXoe//XXwUxN9OJCRlkUATtwrGC/us/kCQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:41 2025 by rpki-client