$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa File: 386ccd05-1fa4-42cd-8a87-843146c1c015.roa (raw, json) Hash identifier: 8/n94wX9d2GZGW3uIMgdnGEnYUd57P0N5sU7WP76n8w= Subject key identifier: 4C:2D:1F:B9:8C:2A:7B:ED:71:F7:75:AB:E0:E8:7E:47:D8:2C:69:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C8CD929C9CDA293C47D49E4F8AAEE49C29A0EFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa Signing time: Tue 05 Aug 2025 00:50:36 +0000 ROA not before: Tue 05 Aug 2025 00:50:36 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 83.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8c:d9:29:c9:cd:a2:93:c4:7d:49:e4:f8:aa:ee:49:c2:9a:0e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:50:36 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=f3fb7cf6c6b3642d161c893cd94bcb78488aab0ed641855fedc83ac58d506821, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a3:a8:ee:4e:7a:2b:0c:f8:9d:f1:63:b4:59: 44:f8:60:bc:89:d1:d9:f7:ad:91:d2:fd:97:8d:10: 48:ce:7f:9a:62:ab:27:98:6f:2a:86:2e:41:a8:69: fd:33:9f:05:b9:90:f8:77:ce:73:87:04:3d:4b:5f: 66:5d:87:d9:aa:13:d8:0d:ab:4c:d5:4e:c1:32:a2: 52:38:bb:f1:71:c5:8c:62:15:c9:a3:6d:b8:ab:17: 12:6e:c5:56:24:b2:a5:53:ac:89:be:24:81:57:12: 7c:7d:be:b7:c1:64:e5:dd:ca:2c:91:07:73:7d:fb: b3:90:bb:dd:02:3c:59:98:3e:db:44:cf:28:fd:b2: 5c:a2:1d:4a:39:2c:1c:68:39:59:00:ff:59:8d:e8: 80:be:7d:27:6f:44:64:88:bc:e9:b7:73:77:d4:a9: a8:8b:91:6a:e6:f5:58:38:06:c4:e5:b3:fb:92:8d: f8:0d:21:fd:63:a9:84:26:ca:ca:95:ac:fd:48:97: 35:46:86:fc:a1:0b:87:8f:9a:15:49:9e:f8:f2:f7: 1a:fd:06:00:96:46:72:bb:1d:20:c4:86:ac:f9:b6: 14:ca:e7:1a:9c:4d:fd:94:e1:83:c2:1a:f5:27:f8: e9:c4:19:1c:6d:4a:1f:ec:84:88:8f:7d:ee:4b:39: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:1F:B9:8C:2A:7B:ED:71:F7:75:AB:E0:E8:7E:47:D8:2C:69:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:8d:64:1d:21:98:45:9a:b9:24:9b:a7:45:49:ad:b1:4e:fb: a5:69:cb:61:d7:57:73:a0:0f:f0:84:b5:0b:27:b9:fe:82:84: d6:e4:ec:a3:3b:7c:87:aa:05:9e:a4:bb:c0:c0:58:c9:fa:6f: 9f:e7:a6:e5:05:86:2a:8c:97:73:b9:95:b2:46:47:82:d1:4a: c9:65:55:12:98:e0:b4:7f:65:46:47:fa:04:0a:d7:da:ad:0e: 5b:fe:4f:83:d5:9a:78:93:f6:24:8e:aa:5d:76:9f:0e:af:c6: 5d:18:35:04:ba:b2:ae:26:19:48:3e:b3:20:a9:e6:4d:7d:09: 2c:19:06:08:30:9e:20:64:7b:9b:aa:5d:fb:a5:47:d9:78:47: 83:12:d0:08:29:e6:ca:cc:b3:27:e4:f6:d9:e0:da:ff:34:8c: 71:3f:aa:05:1c:5d:e1:c7:19:55:87:ed:d0:ac:8e:01:58:24: 8f:c6:75:7c:be:58:63:58:26:b9:0b:22:f0:29:23:53:93:1b: ab:39:92:e4:79:80:e6:7d:3a:20:1b:82:47:5c:a2:bd:9d:9d: 96:5f:b6:fc:2a:ec:17:7b:0d:02:ea:4a:b2:a0:b3:a5:94:af: da:b5:06:ea:ed:f1:7b:fd:94:26:bf:ed:de:5e:37:d1:d2:e6: a6:a0:90:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXIzZKcnNopPEfUnk+KruScKaDvswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDA1MDM2WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2ZiN2NmNmM2YjM2NDJkMTYxYzg5M2NkOTRiY2I3ODQ4 OGFhYjBlZDY0MTg1NWZlZGM4M2FjNThkNTA2ODIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDo6juTnorDPid8WO0WUT4YLyJ0dn3rZHS/ZeNEEjOf5pi qyeYbyqGLkGoaf0znwW5kPh3znOHBD1LX2Zdh9mqE9gNq0zVTsEyolI4u/FxxYxi FcmjbbirFxJuxVYksqVTrIm+JIFXEnx9vrfBZOXdyiyRB3N9+7OQu90CPFmYPttE zyj9slyiHUo5LBxoOVkA/1mN6IC+fSdvRGSIvOm3c3fUqaiLkWrm9Vg4BsTls/uS jfgNIf1jqYQmysqVrP1IlzVGhvyhC4ePmhVJnvjy9xr9BgCWRnK7HSDEhqz5thTK 5xqcTf2U4YPCGvUn+OnEGRxtSh/shIiPfe5LOSalAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTC0fuYwqe+1x93Wr4Oh+R9gsaQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4NmNjZDA1LTFmYTQtNDJjZC04YTg3LTg0MzE0NmMxYzAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBTgDANBgkqhkiG9w0BAQsFAAOCAQEADI1kHSGYRZq5JJunRUmtsU77pWnL YddXc6AP8IS1Cye5/oKE1uTsozt8h6oFnqS7wMBYyfpvn+em5QWGKoyXc7mVskZH gtFKyWVVEpjgtH9lRkf6BArX2q0OW/5Pg9WaeJP2JI6qXXafDq/GXRg1BLqyriYZ SD6zIKnmTX0JLBkGCDCeIGR7m6pd+6VH2XhHgxLQCCnmysyzJ+T22eDa/zSMcT+q BRxd4ccZVYft0KyOAVgkj8Z1fL5YY1gmuQsi8CkjU5MbqzmS5HmA5n06IBuCR1yi vZ2dll+2/CrsF3sNAupKsqCzpZSv2rUG6u3xe/2UJr/t3l430dLmpqCQPA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:16 2025 by rpki-client