$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa File: 3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa (raw, json) Hash identifier: TV9ysuf9m9+91GlJ24uoQZ1OVsbn9bhRg0acrtH8qQg= Subject key identifier: 9C:EA:D7:0F:F2:40:1F:AA:57:CE:FD:80:52:FC:4C:ED:91:F0:99:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43282E0E945DD9BFC5170EC3D77D4F4909E798C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa Signing time: Tue 12 Aug 2025 00:41:20 +0000 ROA not before: Tue 12 Aug 2025 00:41:20 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:28:2e:0e:94:5d:d9:bf:c5:17:0e:c3:d7:7d:4f:49:09:e7:98:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:41:20 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=34a65a2c9f7e213d5bf3929aa778a631368b4a0ca9eea04c8750e4f7909b2d1d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:fd:0c:40:e8:b3:67:45:7f:4f:b1:af:82: 0c:96:1d:5c:aa:ee:62:0f:35:ff:70:e8:c5:58:d5: a5:df:d0:5f:a6:75:e2:d8:e1:c1:fc:5d:5b:63:4d: 80:52:f5:e6:13:ac:4e:77:57:83:48:82:a5:22:58: 56:95:01:3e:36:ce:78:88:94:78:59:ef:d7:36:5a: e4:25:fc:78:57:f2:7f:c0:fe:f6:3a:58:09:be:82: fa:5e:ec:e8:20:5d:4b:7e:23:56:70:3d:ef:87:ed: c6:7e:51:3a:fc:68:9c:c5:17:d5:53:fc:d3:e9:1c: 45:0a:64:32:75:6d:2a:af:46:78:e4:25:d3:47:be: 2f:7f:0d:be:71:9b:89:10:55:4a:66:43:9f:e0:c5: e5:85:c6:92:0f:8b:8b:53:92:29:3a:68:a7:f8:31: 0b:77:93:a6:a4:82:72:19:a2:a8:c1:72:ea:73:61: 7f:af:c9:76:c1:64:d3:6b:be:e4:57:0c:b8:53:d3: 3a:cb:1b:04:28:b7:73:c5:b3:4d:76:01:d7:ac:02: ca:b5:40:9e:30:76:69:30:57:4a:22:c5:a6:f8:b8: d7:98:35:6e:be:b2:bb:a3:fc:32:af:4a:d6:0b:65: 6d:ac:3d:bf:fb:51:a8:17:16:ed:ca:51:5d:d0:37: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:D7:0F:F2:40:1F:AA:57:CE:FD:80:52:FC:4C:ED:91:F0:99:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.70.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a8:b6:02:53:08:89:76:15:b7:7c:93:1e:68:2f:f2:ce:f5: a8:35:4a:8f:a3:9e:3f:c4:68:30:b6:52:ec:dd:17:24:c2:f4: 78:c7:30:d6:40:ad:d7:73:95:d4:8e:11:b5:19:2d:b0:40:21: f4:8e:c5:3f:d7:7d:1b:53:f1:10:e1:9b:5c:92:66:5f:7d:d1: 28:ff:01:32:d5:74:31:01:2d:8b:cf:7b:78:cc:61:91:d1:14: c2:a4:9f:a8:1d:9b:74:bc:ec:c9:df:81:11:46:9f:fa:89:40: a1:c3:65:c6:29:48:ef:c8:4a:70:d9:ce:d7:cc:00:e0:32:ee: 8a:cd:ad:24:04:ce:87:76:38:10:fe:fd:6e:ae:05:7c:e7:ea: a1:8e:ea:6a:6e:18:37:3b:28:bc:76:e1:3c:ef:16:ea:70:13: 1d:fd:42:e9:d7:14:4c:b4:24:27:d4:c4:d7:60:71:f7:4c:38: 2f:ed:54:25:9f:f8:2f:0c:bc:dd:5d:dc:5c:dd:ff:29:ac:d9: 3e:ab:55:d4:4f:fe:2a:ff:80:ea:ce:23:9f:82:57:b1:c0:d9: 86:b0:28:5f:c0:78:78:b4:6e:cf:5b:c0:94:fd:a0:a2:45:12: b5:4d:f4:65:8e:8d:43:40:b8:c0:0d:5c:9a:09:fa:2b:43:32: 87:6f:8a:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQyguDpRd2b/FFw7D131PSQnnmMEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MTIwWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGE2NWEyYzlmN2UyMTNkNWJmMzkyOWFhNzc4YTYzMTM2 OGI0YTBjYTllZWEwNGM4NzUwZTRmNzkwOWIyZDFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqzP0MQOizZ0V/T7GvggyWHVyq7mIPNf9w6MVY1aXf0F+m deLY4cH8XVtjTYBS9eYTrE53V4NIgqUiWFaVAT42zniIlHhZ79c2WuQl/HhX8n/A /vY6WAm+gvpe7OggXUt+I1ZwPe+H7cZ+UTr8aJzFF9VT/NPpHEUKZDJ1bSqvRnjk JdNHvi9/Db5xm4kQVUpmQ5/gxeWFxpIPi4tTkik6aKf4MQt3k6akgnIZoqjBcupz YX+vyXbBZNNrvuRXDLhT0zrLGwQot3PFs012AdesAsq1QJ4wdmkwV0oixab4uNeY NW6+sruj/DKvStYLZW2sPb/7UagXFu3KUV3QN1WHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnOrXD/JAH6pXzv2AUvxM7ZHwmUowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZDgxN2JjLWZlMzQtNDFmZC1iNWQ0LWI3ODA1ZWNkMmQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EYwDQYJKoZIhvcNAQELBQADggEBAFKotgJTCIl2Fbd8kx5oL/LO9ag1 So+jnj/EaDC2UuzdFyTC9HjHMNZArddzldSOEbUZLbBAIfSOxT/XfRtT8RDhm1yS Zl990Sj/ATLVdDEBLYvPe3jMYZHRFMKkn6gdm3S87MnfgRFGn/qJQKHDZcYpSO/I SnDZztfMAOAy7orNrSQEzod2OBD+/W6uBXzn6qGO6mpuGDc7KLx24TzvFupwEx39 QunXFEy0JCfUxNdgcfdMOC/tVCWf+C8MvN1d3Fzd/yms2T6rVdRP/ir/gOrOI5+C V7HA2YawKF/AeHi0bs9bwJT9oKJFErVN9GWOjUNAuMANXJoJ+itDModvigk= -----END CERTIFICATE-----Generated at Sat Aug 23 09:10:34 2025 by rpki-client