$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ad6d67f-32c6-4000-a330-e97b55cfef2e.roa File: 4ad6d67f-32c6-4000-a330-e97b55cfef2e.roa (raw, json) Hash identifier: P5n5Ld78r9RFS25GhSEjCsy/qDcTQNAvDJWflHL0aiw= Subject key identifier: C5:8E:C6:93:2E:5A:4B:33:92:3B:C0:D9:4B:9D:27:C9:C9:E1:3D:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E8744D4A02172A0B8A2339E60164B3AB3AC3C3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ad6d67f-32c6-4000-a330-e97b55cfef2e.roa Signing time: Wed 13 Aug 2025 00:10:20 +0000 ROA not before: Wed 13 Aug 2025 00:10:20 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:87:44:d4:a0:21:72:a0:b8:a2:33:9e:60:16:4b:3a:b3:ac:3c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:10:20 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=89e0b1f2234bc5bd2dcea8167f939056756fb70ec832ee63062643cb4f3ab942, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:e9:c0:bb:12:8b:31:51:ea:8a:ae:05:85: ec:51:b2:56:fd:76:5c:ca:e3:b4:f8:8c:7e:c5:10: e6:4d:4e:51:c6:7a:91:5f:75:05:c8:f8:98:a7:5d: ba:bb:82:7b:d4:b6:9c:02:3a:ac:cc:47:74:91:f4: 17:52:23:5e:78:d8:76:90:6f:6c:2e:53:61:3b:2d: f9:18:51:8c:9b:0b:f5:12:53:1b:c0:9b:b4:18:e1: a3:d2:f4:f0:4d:4d:c0:a2:b9:97:e8:32:49:2b:4b: 44:76:68:79:22:6e:2d:ab:2e:9b:6f:bb:1a:ce:d7: ff:d5:e1:3b:16:89:b8:b5:e1:95:7a:cb:0c:6e:94: 1b:e0:53:87:03:78:50:0b:b3:78:69:64:c8:d6:e7: 6f:6d:47:e2:96:64:35:07:38:b4:7c:de:06:b8:f6: d6:c7:6d:ae:91:4b:23:7e:ba:f5:29:6a:0a:bc:bc: 6d:69:d3:79:53:1f:45:46:75:23:06:f4:f2:48:cc: a5:a4:64:34:4b:5c:db:31:35:aa:24:6d:29:1a:5d: 79:4d:6e:95:a8:fe:fd:01:e4:2b:47:e6:1b:a3:bf: a8:1e:4f:04:e0:db:b9:84:1c:4d:42:46:9a:4b:c1: df:9a:f6:5f:76:5d:e6:69:5a:b1:1b:c5:03:2b:c1: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:C6:93:2E:5A:4B:33:92:3B:C0:D9:4B:9D:27:C9:C9:E1:3D:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ad6d67f-32c6-4000-a330-e97b55cfef2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.23.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:5c:11:f6:db:e5:f9:b8:6f:f4:01:18:38:26:9d:f3:f8:16: df:76:a5:cb:9e:04:2d:1d:97:90:99:87:94:69:10:4a:91:fe: 9b:61:eb:f3:b1:48:8b:9f:f3:82:3c:cd:d5:66:e2:1a:66:f2: f1:c6:43:49:24:c4:c4:1e:c4:4b:3a:2c:fb:bb:b4:fe:01:99: d1:bb:03:b8:63:27:30:bb:f6:f7:e6:e1:ce:1e:79:c0:01:14: 73:d6:82:bc:a9:00:af:02:70:01:30:41:06:75:3d:64:c7:6b: a6:56:a2:88:16:77:af:0e:47:29:8a:d1:f4:e5:3a:87:dd:48: 3c:cb:cc:fd:92:f6:2a:8e:5f:dc:40:d2:7d:1b:91:c8:49:80: 91:2d:8a:80:95:11:e2:9d:0d:a6:74:92:14:4c:73:2d:35:0c: 9a:b4:9e:b5:a1:5a:6a:5c:a9:62:39:f8:01:95:6d:9f:18:50: 72:d3:29:57:ba:83:84:e5:ab:df:ee:fd:0d:5d:41:b5:f5:f5: e5:5a:a5:83:a4:c5:c7:51:f9:52:20:01:fb:69:78:36:48:a1: c2:96:f3:2f:8a:ed:23:b5:a2:bf:38:9e:89:3a:b2:27:55:f5: 82:25:f1:6d:9b:96:4a:55:bf:bf:48:ae:a4:d9:62:8e:51:e5: 2e:6e:8d:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULodE1KAhcqC4ojOeYBZLOrOsPDswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAxMDIwWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWUwYjFmMjIzNGJjNWJkMmRjZWE4MTY3ZjkzOTA1Njc1 NmZiNzBlYzgzMmVlNjMwNjI2NDNjYjRmM2FiOTQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRp+nAuxKLMVHqiq4FhexRslb9dlzK47T4jH7FEOZNTlHG epFfdQXI+JinXbq7gnvUtpwCOqzMR3SR9BdSI1542HaQb2wuU2E7LfkYUYybC/US UxvAm7QY4aPS9PBNTcCiuZfoMkkrS0R2aHkibi2rLptvuxrO1//V4TsWibi14ZV6 ywxulBvgU4cDeFALs3hpZMjW529tR+KWZDUHOLR83ga49tbHba6RSyN+uvUpagq8 vG1p03lTH0VGdSMG9PJIzKWkZDRLXNsxNaokbSkaXXlNbpWo/v0B5CtH5hujv6ge TwTg27mEHE1CRppLwd+a9l92XeZpWrEbxQMrwVC5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxY7Gky5aSzOSO8DZS50nycnhPZQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhZDZkNjdmLTMyYzYtNDAwMC1hMzMwLWU5N2I1NWNmZWYyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX/hcwDQYJKoZIhvcNAQELBQADggEBAH5cEfbb5fm4b/QBGDgmnfP4Ft92 pcueBC0dl5CZh5RpEEqR/pth6/OxSIuf84I8zdVm4hpm8vHGQ0kkxMQexEs6LPu7 tP4BmdG7A7hjJzC79vfm4c4eecABFHPWgrypAK8CcAEwQQZ1PWTHa6ZWoogWd68O RymK0fTlOofdSDzLzP2S9iqOX9xA0n0bkchJgJEtioCVEeKdDaZ0khRMcy01DJq0 nrWhWmpcqWI5+AGVbZ8YUHLTKVe6g4Tlq9/u/Q1dQbX19eVapYOkxcdR+VIgAftp eDZIocKW8y+K7SO1or84nok6sidV9YIl8W2blkpVv79IrqTZYo5R5S5ujaI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:23 2025 by rpki-client