$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa File: 4644ff0b-fedf-419f-93c4-1665a93ad50b.roa (raw, json) Hash identifier: e+YbxyJVvUiZl6ny+bBY7gYHTRRpqbq6FY1pv8jXJV0= Subject key identifier: C9:51:3A:96:AA:6A:B0:75:4F:7B:E3:D5:B9:D8:84:96:E2:00:20:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40828083BA60071C155D394D7130ABF27D561F12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa Signing time: Tue 19 Aug 2025 00:41:51 +0000 ROA not before: Tue 19 Aug 2025 00:41:51 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:82:80:83:ba:60:07:1c:15:5d:39:4d:71:30:ab:f2:7d:56:1f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:41:51 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=6ffcbee1a9f169a4de2a0b786c15cd34f5bd6f47bb18e9a9effa83314da5f00b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:27:f5:6b:24:46:33:09:3b:26:d4:02:39: 52:d1:56:eb:64:6e:eb:59:84:1d:f0:85:f9:c8:49: f4:aa:3e:53:86:3f:0e:8e:c9:97:98:72:d9:db:62: 94:4e:6f:be:0f:10:ea:9e:c4:38:0c:59:90:75:b3: 5f:44:b9:db:6c:91:33:b1:a8:00:ca:a2:ab:d0:3c: 8e:14:07:97:36:04:16:40:58:9e:b5:52:59:00:dd: 39:01:87:10:7b:d8:b0:8b:86:f5:e4:e1:c5:04:89: f0:22:83:da:48:ae:e7:a5:07:77:26:fc:a1:db:ee: c8:2b:21:6a:17:0a:30:19:fd:02:35:75:82:6e:70: 51:55:17:46:1e:30:bd:66:1d:e7:71:f7:8c:54:bd: 59:d4:d3:ee:1a:20:b3:28:71:61:8e:ec:5a:bc:7a: 69:1e:57:d7:b3:25:d3:06:50:2d:ea:cc:ce:5b:15: 21:54:8b:e4:b8:a9:21:ab:de:b0:62:f0:5d:99:d5: 4e:3f:f6:d2:ba:19:02:64:12:ab:ed:d1:83:43:3e: 9f:7a:54:91:76:82:fc:56:c4:00:b8:1e:8e:2a:3b: 76:d5:a6:37:82:f2:a2:d1:4b:f6:44:d1:a9:e1:30: 18:15:a0:a5:ed:04:47:af:d0:28:d4:a5:a4:4f:c7: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:3A:96:AA:6A:B0:75:4F:7B:E3:D5:B9:D8:84:96:E2:00:20:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.80.0/21 Signature Algorithm: sha256WithRSAEncryption 42:b8:e4:7a:56:c4:9e:2b:e2:23:cc:84:12:ba:27:86:45:d5: a0:a1:77:2e:42:71:65:6a:d6:98:69:f9:b0:19:61:a1:9f:30: 1f:45:da:cd:16:ca:6e:eb:1e:3a:9a:81:67:78:6c:da:3c:96: 4e:d3:4b:48:9e:d1:b2:8b:d4:71:00:23:f7:17:cf:18:c4:4f: 94:5d:a8:5f:bf:da:1e:16:39:7c:99:40:3c:ad:6c:2b:54:01: 44:4b:0d:9d:1a:a5:a1:80:e3:4e:8f:a4:76:82:07:2a:ea:86: 1e:33:be:c1:6c:5f:e2:67:82:79:26:03:d8:7d:9f:b8:42:1c: 7d:3d:6a:88:42:7f:fd:3d:49:ec:c6:2b:c5:85:bc:e1:1e:da: 9d:d5:2d:45:f4:b7:5d:2f:d7:3c:0f:58:b5:02:61:2b:d2:5a: 99:4e:45:ae:cc:c3:fc:80:fc:e6:51:d7:b9:77:b3:05:00:29: 21:12:e9:50:cc:dd:44:a8:4f:82:b0:19:43:59:34:1e:01:f1: e0:75:79:4d:20:19:ee:1c:da:e1:23:f7:44:c4:38:b2:6a:f6: 23:6e:eb:c1:e2:83:ed:71:19:64:de:b2:e1:65:b6:bb:96:f9: d7:88:77:40:77:a8:9d:8d:e8:80:81:e6:df:02:e7:91:40:9f: 3c:fb:af:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQIKAg7pgBxwVXTlNcTCr8n1WHxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDA0MTUxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmZjYmVlMWE5ZjE2OWE0ZGUyYTBiNzg2YzE1Y2QzNGY1 YmQ2ZjQ3YmIxOGU5YTllZmZhODMzMTRkYTVmMDBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRXSf1ayRGMwk7JtQCOVLRVutkbutZhB3whfnISfSqPlOG Pw6OyZeYctnbYpROb74PEOqexDgMWZB1s19EudtskTOxqADKoqvQPI4UB5c2BBZA WJ61UlkA3TkBhxB72LCLhvXk4cUEifAig9pIruelB3cm/KHb7sgrIWoXCjAZ/QI1 dYJucFFVF0YeML1mHedx94xUvVnU0+4aILMocWGO7Fq8emkeV9ezJdMGUC3qzM5b FSFUi+S4qSGr3rBi8F2Z1U4/9tK6GQJkEqvt0YNDPp96VJF2gvxWxAC4Ho4qO3bV pjeC8qLRS/ZE0anhMBgVoKXtBEev0CjUpaRPxztpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyVE6lqpqsHVPe+PVudiEluIAIMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NDRmZjBiLWZlZGYtNDE5Zi05M2M0LTE2NjVhOTNhZDUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl1AwDQYJKoZIhvcNAQELBQADggEBAEK45HpWxJ4r4iPMhBK6J4ZF1aCh dy5CcWVq1php+bAZYaGfMB9F2s0Wym7rHjqagWd4bNo8lk7TS0ie0bKL1HEAI/cX zxjET5RdqF+/2h4WOXyZQDytbCtUAURLDZ0apaGA406PpHaCByrqhh4zvsFsX+Jn gnkmA9h9n7hCHH09aohCf/09SezGK8WFvOEe2p3VLUX0t10v1zwPWLUCYSvSWplO Ra7Mw/yA/OZR17l3swUAKSES6VDM3USoT4KwGUNZNB4B8eB1eU0gGe4c2uEj90TE OLJq9iNu68Hig+1xGWTesuFltruW+deId0B3qJ2N6ICB5t8C55FAnzz7rzk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:17 2025 by rpki-client