$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa File: 3327cfae-d76e-433c-9489-6c1d618274a8.roa (raw, json) Hash identifier: 7PQ+cPeneXJ0W0T6jecvKo2oJFQ7E3+VDLNdLNiicYA= Subject key identifier: 78:64:FC:89:BE:68:C0:B3:49:02:7B:4D:F2:B4:2F:30:10:8A:A0:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E5C1AA1FE63957D360B29BF43C82422BEAAAD49 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa Signing time: Tue 19 Aug 2025 00:30:19 +0000 ROA not before: Tue 19 Aug 2025 00:30:19 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5c:1a:a1:fe:63:95:7d:36:0b:29:bf:43:c8:24:22:be:aa:ad:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:30:19 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=b066e4abdf38f6647a420a699e9eea8354f80c367fbdc4756fafc207cc6dba42, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:23:d2:fd:9c:6a:26:df:5e:c0:d6:83:63:91: 05:e4:47:db:7f:fa:46:58:f3:62:44:c4:d3:96:9d: ea:76:2b:8b:c4:fe:b0:49:88:01:54:e7:bb:0f:3e: 66:6d:6e:f3:ec:08:d2:fd:0e:00:80:1f:ba:54:6a: 43:1f:dc:39:b2:72:7b:cf:e5:03:6f:4d:18:df:cb: 9f:5d:41:77:1b:b1:ae:76:9c:d9:f0:11:ae:d9:16: 29:37:d9:c9:df:c1:6b:c4:ef:3b:97:c4:b4:c5:b4: d1:17:b3:5c:6f:f2:0d:52:4f:27:c4:0d:a5:27:13: 80:0b:94:51:b6:da:18:69:cd:5e:a2:af:f2:9f:1a: 7e:88:67:f9:3d:00:5f:6f:a2:02:8e:56:1f:1e:07: 65:27:cb:47:64:00:87:ec:e0:8f:06:06:86:8c:e0: a4:5a:65:55:38:9d:bc:27:25:c8:09:74:a2:0d:98: 1e:dc:17:99:13:6b:24:35:4c:84:3e:7d:f8:b7:91: 76:21:b2:95:fc:5d:97:65:3a:79:9a:eb:11:fa:54: c9:72:ac:20:cd:40:b4:66:cb:44:95:a1:d8:92:2d: 07:41:9e:fe:ab:13:a5:13:7b:f2:66:0c:03:1e:4f: 69:19:30:79:2e:24:00:ef:3e:57:29:c1:0f:63:16: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:FC:89:BE:68:C0:B3:49:02:7B:4D:F2:B4:2F:30:10:8A:A0:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.190.0/23 Signature Algorithm: sha256WithRSAEncryption 75:f3:5e:ae:37:be:cd:a6:91:2a:f4:fd:b6:49:94:32:1a:1d: 43:95:21:1d:2e:10:1f:35:8f:08:35:72:c9:8d:67:11:0e:f8: 60:3b:ad:fe:3a:a4:8b:fb:a1:fa:65:96:9c:41:1c:a5:2e:96: 05:8b:bf:e0:d0:59:a3:c1:fc:27:13:22:6e:08:c4:32:85:02: fd:5b:53:23:98:3f:39:64:26:23:10:fe:79:70:4b:e5:8f:79: 94:b6:c7:0b:16:b0:13:d9:ae:03:fc:ad:25:08:d4:54:6e:97: a2:1f:d3:91:dc:5a:db:05:56:4d:a9:60:03:8c:08:38:2b:56: 3a:e4:4f:0b:06:65:ca:aa:29:08:ae:40:ac:67:ec:18:a6:86: d3:a8:83:d7:73:01:f6:11:17:d8:3e:cb:d8:bb:50:2c:cc:3e: 31:47:24:84:62:8b:cf:c0:6f:72:9f:86:17:40:d0:ba:f0:fc: 39:2d:a8:c5:6f:a6:ca:0f:aa:65:66:65:73:23:d4:e6:2e:9f: 89:dc:67:3e:bc:be:cb:1d:95:3c:4c:f0:d0:bf:de:47:de:90: 73:0c:c1:55:6c:77:02:b1:7a:41:f3:05:7a:10:a7:01:7f:9d: c9:c8:c7:96:15:51:9b:c5:7b:b4:1a:70:73:0a:ff:d9:00:92: 22:d5:64:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPlwaof5jlX02Cym/Q8gkIr6qrUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMDE5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDY2ZTRhYmRmMzhmNjY0N2E0MjBhNjk5ZTllZWE4MzU0 ZjgwYzM2N2ZiZGM0NzU2ZmFmYzIwN2NjNmRiYTQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTI9L9nGom317A1oNjkQXkR9t/+kZY82JExNOWnep2K4vE /rBJiAFU57sPPmZtbvPsCNL9DgCAH7pUakMf3DmycnvP5QNvTRjfy59dQXcbsa52 nNnwEa7ZFik32cnfwWvE7zuXxLTFtNEXs1xv8g1STyfEDaUnE4ALlFG22hhpzV6i r/KfGn6IZ/k9AF9vogKOVh8eB2Uny0dkAIfs4I8GBoaM4KRaZVU4nbwnJcgJdKIN mB7cF5kTayQ1TIQ+ffi3kXYhspX8XZdlOnma6xH6VMlyrCDNQLRmy0SVodiSLQdB nv6rE6UTe/JmDAMeT2kZMHkuJADvPlcpwQ9jFlMpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeGT8ib5owLNJAntN8rQvMBCKoF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzMjdjZmFlLWQ3NmUtNDMzYy05NDg5LTZjMWQ2MTgyNzRhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl74wDQYJKoZIhvcNAQELBQADggEBAHXzXq43vs2mkSr0/bZJlDIaHUOV IR0uEB81jwg1csmNZxEO+GA7rf46pIv7ofpllpxBHKUulgWLv+DQWaPB/CcTIm4I xDKFAv1bUyOYPzlkJiMQ/nlwS+WPeZS2xwsWsBPZrgP8rSUI1FRul6If05HcWtsF Vk2pYAOMCDgrVjrkTwsGZcqqKQiuQKxn7BimhtOog9dzAfYRF9g+y9i7UCzMPjFH JIRii8/Ab3KfhhdA0Lrw/DktqMVvpsoPqmVmZXMj1OYun4ncZz68vssdlTxM8NC/ 3kfekHMMwVVsdwKxekHzBXoQpwF/ncnIx5YVUZvFe7QacHMK/9kAkiLVZFQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:01 2025 by rpki-client