$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa File: 3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa (raw, json) Hash identifier: +i8I8ObV0+jdUSutRh8d60qHOa42h2rCMaN5kbM/lmU= Subject key identifier: 05:D0:6F:09:9D:1A:6C:CB:E6:D0:06:75:E6:66:23:90:A9:DB:8D:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CCD453C1A0A5BDD71F0DB54EC181EB63CFBB752 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa Signing time: Wed 06 Aug 2025 00:21:13 +0000 ROA not before: Wed 06 Aug 2025 00:21:13 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.52.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cd:45:3c:1a:0a:5b:dd:71:f0:db:54:ec:18:1e:b6:3c:fb:b7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:21:13 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=05025962de316c37a4b054632315195dce61351746f5dd68b9824b833a6e7f3f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:17:06:09:b9:3f:a3:b1:e0:60:69:15:99: a3:56:0a:b3:f2:e6:a1:e5:b3:d1:06:ea:1d:07:cc: 33:fa:1f:5b:62:c1:54:99:0f:d8:3d:60:f1:8e:f7: a5:48:85:08:e8:27:fe:84:62:5e:71:89:2a:07:49: 74:98:7d:0e:90:36:84:65:fc:ac:5c:b5:d6:6f:1e: 23:91:da:f7:23:50:78:74:33:89:a5:27:16:55:7f: 6b:1f:b8:1e:2e:c9:dd:0e:18:72:ba:e6:4d:85:3d: 99:80:0b:8c:50:f1:e0:29:6f:3b:fe:08:a5:87:56: 5a:57:7c:df:17:d3:35:da:18:1f:d2:e4:94:26:b6: 30:bb:01:d3:97:8c:24:1b:df:55:6a:0f:7c:8d:48: b5:8a:15:67:1b:18:b1:45:55:27:77:04:19:59:40: b6:ee:b4:5a:ab:9c:d3:71:f7:d9:5a:34:16:ed:7c: 0d:cd:17:d6:49:f7:2a:f9:c1:5e:bf:ed:21:d5:f8: 2c:36:67:ff:1d:c3:61:01:5a:34:cf:16:f3:4b:03: 97:cc:fc:56:19:54:87:6f:fd:b5:c0:fa:ea:7d:7c: bb:56:7f:b2:68:c0:9c:a5:bf:a5:e5:ba:45:8d:aa: c0:b3:60:5e:ed:73:ea:00:ca:4a:69:1d:cf:6c:aa: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D0:6F:09:9D:1A:6C:CB:E6:D0:06:75:E6:66:23:90:A9:DB:8D:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption 23:17:6f:64:6a:86:a7:c6:5b:0d:9c:d7:8d:d2:51:9c:70:5a: f3:ed:41:15:b9:05:9a:1f:bb:59:12:c4:5b:ea:f2:33:1f:89: 37:e2:62:49:30:07:03:7c:25:40:2c:9d:e1:1c:08:12:97:ec: f8:e5:fd:30:d2:26:3d:5f:f9:1f:55:98:57:80:aa:b6:3a:3c: 00:c3:ad:7c:7d:2e:cb:9d:39:5c:ae:7f:cc:b5:b5:79:21:3c: f4:29:b3:a3:9a:6d:f5:7a:3d:27:1a:4d:70:1d:1e:a1:7b:ee: 95:98:41:23:85:9d:6a:b0:7a:cf:80:12:5d:94:80:c3:fb:39: 9c:b8:18:49:7f:57:36:f0:f2:36:72:01:c6:0a:e1:4b:fa:2c: 4a:9f:8f:03:76:ee:ed:56:1e:d9:e8:9d:f2:b7:6d:52:30:58: 5a:c9:c9:6a:b5:72:e0:ba:e3:37:05:b6:57:48:fd:06:ab:58: 49:7a:6f:20:46:f5:0d:96:c9:60:93:71:51:86:d0:01:57:67: c6:a7:00:58:64:0a:46:53:f9:47:84:87:5e:50:dc:9b:09:45: fb:fc:21:77:13:7d:9f:b0:45:aa:aa:be:c8:ef:24:f1:ea:d1: a2:20:cf:31:c3:8e:52:6e:bc:cf:4a:11:31:e1:7e:f8:b5:05: ed:b8:8f:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDM1FPBoKW91x8NtU7Bgetjz7t1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAyMTEzWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTAyNTk2MmRlMzE2YzM3YTRiMDU0NjMyMzE1MTk1ZGNl NjEzNTE3NDZmNWRkNjhiOTgyNGI4MzNhNmU3ZjNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXRxcGCbk/o7HgYGkVmaNWCrPy5qHls9EG6h0HzDP6H1ti wVSZD9g9YPGO96VIhQjoJ/6EYl5xiSoHSXSYfQ6QNoRl/KxctdZvHiOR2vcjUHh0 M4mlJxZVf2sfuB4uyd0OGHK65k2FPZmAC4xQ8eApbzv+CKWHVlpXfN8X0zXaGB/S 5JQmtjC7AdOXjCQb31VqD3yNSLWKFWcbGLFFVSd3BBlZQLbutFqrnNNx99laNBbt fA3NF9ZJ9yr5wV6/7SHV+Cw2Z/8dw2EBWjTPFvNLA5fM/FYZVIdv/bXA+up9fLtW f7JowJylv6XlukWNqsCzYF7tc+oAykppHc9sqp2FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBdBvCZ0abMvm0AZ15mYjkKnbjX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MjZlOGY5LTNmNDEtNGEwNi04ZTZkLTQ1NmFiZTFmZmE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMNCAwDQYJKoZIhvcNAQELBQADggEBACMXb2RqhqfGWw2c143SUZxwWvPt QRW5BZofu1kSxFvq8jMfiTfiYkkwBwN8JUAsneEcCBKX7Pjl/TDSJj1f+R9VmFeA qrY6PADDrXx9LsudOVyuf8y1tXkhPPQps6OabfV6PScaTXAdHqF77pWYQSOFnWqw es+AEl2UgMP7OZy4GEl/Vzbw8jZyAcYK4Uv6LEqfjwN27u1WHtnonfK3bVIwWFrJ yWq1cuC64zcFtldI/QarWEl6byBG9Q2WyWCTcVGG0AFXZ8anAFhkCkZT+UeEh15Q 3JsJRfv8IXcTfZ+wRaqqvsjvJPHq0aIgzzHDjlJuvM9KETHhfvi1Be24j/s= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:53 2025 by rpki-client