$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa File: 4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa (raw, json) Hash identifier: SAmakugJG6pcLwFpGC2jcr0v9vDgJ6+8nP/iE9PkevA= Subject key identifier: FE:91:4B:B9:2C:87:90:71:6A:9C:A8:63:3A:C5:D3:FD:9D:65:3D:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 348FE3EC490C5238B8757006D4CE4877CE735BE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa Signing time: Wed 20 Aug 2025 00:10:29 +0000 ROA not before: Wed 20 Aug 2025 00:10:29 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.12.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8f:e3:ec:49:0c:52:38:b8:75:70:06:d4:ce:48:77:ce:73:5b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:10:29 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=fc60ba9145e058e5b4aa078972767fbb5bcd6ee5ffffc5ff9d3fe28535628b54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:4a:03:37:6e:88:f4:1d:90:e5:38:9a:2b: 1a:30:88:bc:87:90:e3:fa:98:ae:91:49:72:f7:ad: bd:e5:bb:b6:38:ed:f7:dd:30:0d:12:88:21:2b:42: cf:50:4b:8e:ca:60:3c:c6:cc:72:26:6b:f2:3f:dc: d2:71:11:ac:a7:46:50:b4:10:65:ef:ea:96:9f:52: 02:37:c9:c8:f4:36:20:bd:10:af:cf:d7:e9:92:58: 6a:4d:ea:1f:79:ac:0b:7f:ee:71:82:0c:4d:91:82: f7:43:a2:1f:81:87:10:f4:14:96:19:0e:b5:ca:63: 90:51:be:4e:5e:d4:80:9a:1e:5b:78:3e:cd:e9:9b: ea:01:e8:75:0f:40:82:9e:da:5c:c8:a3:ec:6f:e7: dd:01:76:99:5f:88:1a:1c:fb:72:a0:d8:9d:52:79: f1:78:c0:99:80:66:cc:95:b1:43:7e:05:17:2b:7f: 10:06:0b:30:29:68:c8:0b:c4:c0:d4:d6:ed:9e:8f: 70:3e:0d:30:eb:8c:2e:57:e1:17:ee:d0:21:76:65: 3a:d1:9e:aa:26:82:b5:8a:0c:75:ab:a7:8f:b9:5b: bb:b6:36:7a:bb:f0:73:02:56:2c:84:b2:de:bb:45: 8d:6a:bb:d9:c6:05:b2:a7:e2:96:2f:c1:d4:1e:b9: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:4B:B9:2C:87:90:71:6A:9C:A8:63:3A:C5:D3:FD:9D:65:3D:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.12.58.0/24 Signature Algorithm: sha256WithRSAEncryption c3:a0:ee:28:1e:50:a7:89:8c:63:8f:cf:53:5f:49:cd:a1:62: 0f:38:ee:ee:6e:84:b5:1b:83:8c:92:ee:b3:cd:3f:90:b3:8f: 40:76:78:a1:70:3c:7e:50:5a:e9:da:99:6d:4a:11:39:57:71: 4e:76:03:4b:72:72:65:ca:53:61:08:e5:69:16:05:45:47:78: cb:e8:a0:b2:4a:e6:49:89:60:90:7c:4a:72:a4:c1:cb:49:8d: 85:a6:ff:2a:d9:5b:0d:a3:0b:9f:da:bf:be:8c:62:01:e7:08: 49:2f:a6:fb:1d:1c:7f:49:e1:73:bf:6a:8e:96:33:5c:f3:fb: d0:09:c6:9d:c7:41:4f:57:29:c2:31:b2:52:04:37:8b:aa:8e: 71:d0:47:99:a5:27:e6:69:97:7c:f1:16:06:7c:8d:a8:4f:35: 5a:d6:7b:08:26:66:93:14:c1:9e:2b:99:ef:fd:b7:11:49:a1: bd:fb:2c:ec:55:9d:f4:5a:3a:68:5c:a7:fa:6c:8f:31:02:93: 40:e5:54:39:c9:c7:89:ee:2a:8d:5f:a0:53:d7:40:a9:1f:87: 91:cb:10:76:6e:d2:82:da:81:fe:b8:22:a7:54:66:de:3d:1d: c8:f4:c0:5f:e8:6e:5b:1a:b6:b4:37:fa:2e:aa:d7:95:a7:96: 7f:b2:23:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNI/j7EkMUji4dXAG1M5Id85zW+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAxMDI5WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzYwYmE5MTQ1ZTA1OGU1YjRhYTA3ODk3Mjc2N2ZiYjVi Y2Q2ZWU1ZmZmZmM1ZmY5ZDNmZTI4NTM1NjI4YjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC57UoDN26I9B2Q5TiaKxowiLyHkOP6mK6RSXL3rb3lu7Y4 7ffdMA0SiCErQs9QS47KYDzGzHIma/I/3NJxEaynRlC0EGXv6pafUgI3ycj0NiC9 EK/P1+mSWGpN6h95rAt/7nGCDE2RgvdDoh+BhxD0FJYZDrXKY5BRvk5e1ICaHlt4 Ps3pm+oB6HUPQIKe2lzIo+xv590BdplfiBoc+3Kg2J1SefF4wJmAZsyVsUN+BRcr fxAGCzApaMgLxMDU1u2ej3A+DTDrjC5X4Rfu0CF2ZTrRnqomgrWKDHWrp4+5W7u2 Nnq78HMCViyEst67RY1qu9nGBbKn4pYvwdQeueb/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/pFLuSyHkHFqnKhjOsXT/Z1lPfgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkNTRhZDc0LTI3MDQtNDVkOS04Y2E0LWIxY2VjN2IwM2Y3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABODDowDQYJKoZIhvcNAQELBQADggEBAMOg7igeUKeJjGOPz1NfSc2hYg84 7u5uhLUbg4yS7rPNP5Czj0B2eKFwPH5QWunamW1KETlXcU52A0tycmXKU2EI5WkW BUVHeMvooLJK5kmJYJB8SnKkwctJjYWm/yrZWw2jC5/av76MYgHnCEkvpvsdHH9J 4XO/ao6WM1zz+9AJxp3HQU9XKcIxslIEN4uqjnHQR5mlJ+Zpl3zxFgZ8jahPNVrW ewgmZpMUwZ4rme/9txFJob37LOxVnfRaOmhcp/psjzECk0DlVDnJx4nuKo1foFPX QKkfh5HLEHZu0oLagf64IqdUZt49Hcj0wF/oblsatrQ3+i6q15Wnln+yIw8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:32 2025 by rpki-client