$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490b7b12-05f8-4df5-8030-0eeb12f02c31.roa File: 490b7b12-05f8-4df5-8030-0eeb12f02c31.roa (raw, json) Hash identifier: SOllGm25UEXzYOyXbIseJsV6k3ut1pePWsBKB6Vd00k= Subject key identifier: 6E:AD:47:D2:80:BA:04:39:B2:F5:3F:40:D9:BE:9A:8E:D3:69:A9:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71E4AE4832B987A49B3C036A33A4C4100E22A441 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490b7b12-05f8-4df5-8030-0eeb12f02c31.roa Signing time: Tue 19 Aug 2025 00:31:00 +0000 ROA not before: Tue 19 Aug 2025 00:31:00 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e4:ae:48:32:b9:87:a4:9b:3c:03:6a:33:a4:c4:10:0e:22:a4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:00 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=36b272a30ba13eaeaaa3bf8536be65891f603d5eea9ccb489b6f0bf5c49de6cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:88:2d:7b:e0:dc:f1:a1:2b:e1:5b:d2:3a: 23:d9:52:a8:2a:1a:26:f9:01:dc:6d:63:01:24:e9: b5:11:f2:bd:f6:f1:c2:2f:fa:86:9f:32:91:43:fe: 22:3d:65:38:b9:4d:23:06:f9:ce:fa:40:39:28:9c: 3c:34:e0:c4:3e:e5:31:ab:f1:fe:d9:5b:de:c8:fe: a9:cb:3c:0f:c8:94:20:cd:ca:b5:22:41:6d:b9:c9: fb:fd:7d:09:c8:4e:30:ff:d1:b0:ec:d9:e3:f7:7c: 1d:93:e1:41:a3:18:20:94:ca:1d:3d:e8:b8:4a:62: d4:03:26:0e:44:4e:1a:3a:e5:ba:48:a8:f6:5e:db: 29:d4:32:85:37:1f:98:82:04:b9:be:08:f9:d2:5f: ec:f7:79:68:d2:7b:bb:47:17:52:40:0c:76:19:7b: 95:4c:64:aa:42:76:55:e1:3e:3d:12:38:7b:58:b3: ff:a2:7e:af:2a:cc:ea:7a:f5:88:65:84:35:08:6c: 80:2b:74:b4:01:9f:81:fa:e3:a4:7d:b2:2b:5f:35: f5:9e:02:79:b8:09:9f:32:0d:b0:8e:a1:6f:e4:d9: e8:8a:f8:66:fb:a2:38:1e:ee:fe:e4:f0:7e:21:ad: 3b:2a:57:35:de:e1:8f:40:87:1b:33:17:21:62:d8: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:47:D2:80:BA:04:39:B2:F5:3F:40:D9:BE:9A:8E:D3:69:A9:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490b7b12-05f8-4df5-8030-0eeb12f02c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.8.0/21 Signature Algorithm: sha256WithRSAEncryption 97:bf:cd:48:e1:9c:09:47:b5:0e:ef:2c:7b:e9:ee:e6:ba:98: b4:a1:fd:c8:4c:c6:5e:cc:3e:33:f4:8c:1c:95:a9:b5:93:14: a1:ad:30:4f:b3:a3:0c:aa:9d:52:4d:88:a0:05:6f:fc:d1:eb: 7a:6d:4f:d8:b4:e2:d7:a4:cd:90:c9:96:c4:dd:1c:51:3e:db: 71:f9:c1:3f:3a:e1:a6:47:b9:8b:69:37:7c:10:a7:84:7c:d2: a6:31:9a:01:df:83:30:14:21:64:bd:b9:61:f9:b8:6b:de:48: e6:33:19:9b:99:04:43:2a:32:60:87:e1:7f:f0:d9:06:06:79: 64:cc:b7:09:1a:3d:a1:05:a7:a3:a8:c2:64:e2:e0:b3:80:24: ed:75:97:21:13:71:82:6b:36:9e:3a:dc:83:0a:ea:7d:31:58: 1d:98:86:a7:78:70:ed:ea:90:28:6b:71:c8:bf:b2:5d:c5:bb: 51:66:b3:e8:1f:53:ad:ea:16:8d:89:ca:37:1a:dc:9f:85:ae: f5:26:a3:36:84:42:30:46:a4:d3:f3:13:c8:5f:7b:47:c2:27: 33:49:f2:46:93:a6:a2:df:2e:ec:fc:85:66:39:c4:38:7f:25: 35:d4:64:28:55:7d:5a:fc:05:f5:4f:de:b5:8c:f6:d1:c0:82: be:73:a9:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUceSuSDK5h6SbPANqM6TEEA4ipEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMTAwWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmIyNzJhMzBiYTEzZWFlYWFhM2JmODUzNmJlNjU4OTFm NjAzZDVlZWE5Y2NiNDg5YjZmMGJmNWM0OWRlNmNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaXYgte+Dc8aEr4VvSOiPZUqgqGib5AdxtYwEk6bUR8r32 8cIv+oafMpFD/iI9ZTi5TSMG+c76QDkonDw04MQ+5TGr8f7ZW97I/qnLPA/IlCDN yrUiQW25yfv9fQnITjD/0bDs2eP3fB2T4UGjGCCUyh096LhKYtQDJg5ETho65bpI qPZe2ynUMoU3H5iCBLm+CPnSX+z3eWjSe7tHF1JADHYZe5VMZKpCdlXhPj0SOHtY s/+ifq8qzOp69YhlhDUIbIArdLQBn4H646R9sitfNfWeAnm4CZ8yDbCOoW/k2eiK +Gb7ojge7v7k8H4hrTsqVzXe4Y9AhxszFyFi2HdpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbq1H0oC6BDmy9T9A2b6ajtNpqVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5MGI3YjEyLTA1ZjgtNGRmNS04MDMwLTBlZWIxMmYwMmMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlggwDQYJKoZIhvcNAQELBQADggEBAJe/zUjhnAlHtQ7vLHvp7ua6mLSh /chMxl7MPjP0jByVqbWTFKGtME+zowyqnVJNiKAFb/zR63ptT9i04tekzZDJlsTd HFE+23H5wT864aZHuYtpN3wQp4R80qYxmgHfgzAUIWS9uWH5uGveSOYzGZuZBEMq MmCH4X/w2QYGeWTMtwkaPaEFp6OowmTi4LOAJO11lyETcYJrNp463IMK6n0xWB2Y hqd4cO3qkChrcci/sl3Fu1Fms+gfU63qFo2Jyjca3J+FrvUmozaEQjBGpNPzE8hf e0fCJzNJ8kaTpqLfLuz8hWY5xDh/JTXUZChVfVr8BfVP3rWM9tHAgr5zqeA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:17 2025 by rpki-client