$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa File: 4b2544fb-aa2e-41f9-bbfc-780593774257.roa (raw, json) Hash identifier: 18+WK5h6kdbjuFr+8nwNN8qFLNlfuVM4giMB336/AsI= Subject key identifier: F2:C9:83:6B:DA:BF:C5:CB:74:1C:F0:81:39:97:B9:33:03:BF:7F:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 106D4E575ABE5F86341B1BA602DAA38134D790DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa Signing time: Sat 16 Aug 2025 00:10:27 +0000 ROA not before: Sat 16 Aug 2025 00:10:27 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.146.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6d:4e:57:5a:be:5f:86:34:1b:1b:a6:02:da:a3:81:34:d7:90:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:10:27 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=eee3a23b3d10d6375608ac2ef7a2a1d62d24e2e6e177398d14c724844e5b3db4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:a8:a6:e7:19:fe:c6:18:33:d7:f7:3a:a6: 47:a5:22:cf:a0:6d:9a:de:ab:75:0e:fe:9e:e2:f6: a8:6c:42:c5:ef:dd:56:93:6e:78:e8:9e:0a:55:c8: 69:6d:33:9f:71:ce:e8:a7:d4:f1:6e:aa:30:a3:b4: 20:65:83:a6:3e:93:c4:14:ee:3b:bb:7b:19:99:6b: 58:1a:a9:2b:94:ec:b1:5b:8f:4c:4d:55:9c:9e:dd: 47:d2:f5:81:66:52:69:53:74:1b:3d:08:81:4e:23: ea:23:2c:f0:6c:ee:35:f2:db:2e:d1:ed:65:3a:9b: b1:2d:d7:45:ab:ff:86:2e:0e:69:6a:70:9f:6e:c5: a3:48:13:64:53:d4:77:a4:8f:a2:84:ba:b6:0b:a2: 5e:e7:15:d3:e1:32:d4:56:83:c4:88:58:92:ab:2d: 9d:ba:ed:b5:fc:c4:19:c0:f8:b3:dc:da:2e:d3:f5: 0d:f3:30:b0:75:dc:96:4b:14:96:8f:b8:48:1e:75: 3c:a0:a3:33:88:29:8f:0b:20:ff:59:d6:64:ac:f2: 8a:e7:31:89:5a:c9:2b:41:63:75:72:8d:69:16:86: 9b:9c:ee:07:95:ed:21:cc:c4:d3:87:6d:5b:26:01: 9c:40:f9:f0:d4:08:d3:ac:56:97:44:da:a2:ab:0c: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:83:6B:DA:BF:C5:CB:74:1C:F0:81:39:97:B9:33:03:BF:7F:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.146.32.0/21 Signature Algorithm: sha256WithRSAEncryption 91:7a:88:59:0f:0e:67:c1:f2:fe:db:d5:21:a5:76:ff:b9:58: d7:95:9c:29:bb:b6:e9:24:05:86:0a:64:34:af:f7:3b:13:4f: bd:13:4a:a1:ef:fe:a6:b9:81:43:e2:e2:4a:aa:e0:7b:e0:3b: 52:e0:30:1c:ee:e5:62:84:2e:64:8e:ae:a2:e4:bb:ee:e5:59: 55:f7:52:b4:5d:15:72:60:e2:30:31:2b:71:99:2e:e4:a0:41: 51:4a:63:74:10:af:59:e5:5a:21:03:36:db:f5:05:1d:a1:de: 6b:48:d0:2f:28:57:df:c9:a8:9b:33:58:38:e5:3a:6b:a4:57: 45:71:5f:40:5d:b4:be:44:f6:db:5a:24:3d:ea:90:35:58:35: a8:72:5c:f7:12:79:b4:ab:c1:20:70:ef:7e:ce:2a:3e:11:de: 0d:a7:30:ff:09:23:b6:b3:b7:be:39:25:dd:00:07:37:17:5b: 3b:59:83:9d:d2:ef:b8:b5:de:7e:b6:cc:4a:f9:fb:04:b5:70: 68:5f:92:a7:7f:3e:e0:80:4a:98:49:32:5e:45:2a:cb:bb:51: a5:e7:0e:37:e8:fc:7e:68:11:6c:21:86:c0:1f:ef:61:f0:cf: 00:d2:6e:85:3a:fe:41:0a:54:f5:eb:a3:6d:2f:4b:c0:68:16: 1d:db:e9:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEG1OV1q+X4Y0GxumAtqjgTTXkN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAxMDI3WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWUzYTIzYjNkMTBkNjM3NTYwOGFjMmVmN2EyYTFkNjJk MjRlMmU2ZTE3NzM5OGQxNGM3MjQ4NDRlNWIzZGI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCG4Kim5xn+xhgz1/c6pkelIs+gbZreq3UO/p7i9qhsQsXv 3VaTbnjongpVyGltM59xzuin1PFuqjCjtCBlg6Y+k8QU7ju7exmZa1gaqSuU7LFb j0xNVZye3UfS9YFmUmlTdBs9CIFOI+ojLPBs7jXy2y7R7WU6m7Et10Wr/4YuDmlq cJ9uxaNIE2RT1Hekj6KEurYLol7nFdPhMtRWg8SIWJKrLZ267bX8xBnA+LPc2i7T 9Q3zMLB13JZLFJaPuEgedTygozOIKY8LIP9Z1mSs8ornMYlayStBY3VyjWkWhpuc 7geV7SHMxNOHbVsmAZxA+fDUCNOsVpdE2qKrDDhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8smDa9q/xct0HPCBOZe5MwO/f8cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiMjU0NGZiLWFhMmUtNDFmOS1iYmZjLTc4MDU5Mzc3NDI1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNkiAwDQYJKoZIhvcNAQELBQADggEBAJF6iFkPDmfB8v7b1SGldv+5WNeV nCm7tukkBYYKZDSv9zsTT70TSqHv/qa5gUPi4kqq4HvgO1LgMBzu5WKELmSOrqLk u+7lWVX3UrRdFXJg4jAxK3GZLuSgQVFKY3QQr1nlWiEDNtv1BR2h3mtI0C8oV9/J qJszWDjlOmukV0VxX0BdtL5E9ttaJD3qkDVYNahyXPcSebSrwSBw737OKj4R3g2n MP8JI7azt745Jd0ABzcXWztZg53S77i13n62zEr5+wS1cGhfkqd/PuCASphJMl5F Ksu7UaXnDjfo/H5oEWwhhsAf72HwzwDSboU6/kEKVPXro20vS8BoFh3b6bE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:17 2025 by rpki-client