$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa File: 4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa (raw, json) Hash identifier: +wu8vYT/w4fzOyoZbz+rPyqtzcdHIj0zqI5rOpiWhwk= Subject key identifier: 1B:A4:E5:0A:68:D9:52:A6:E9:EE:6C:F1:E3:42:2A:0C:37:2F:43:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1249F47727F0F4F16AB1F9E9C6D24C5B77E31889 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa Signing time: Wed 20 Aug 2025 00:10:33 +0000 ROA not before: Wed 20 Aug 2025 00:10:33 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 93.76.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:49:f4:77:27:f0:f4:f1:6a:b1:f9:e9:c6:d2:4c:5b:77:e3:18:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:10:33 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=686e97b357a67e4509d1085e45334069d2cf3a328bbeacfc447011181ea9ee9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:d3:a5:5c:0c:a5:72:fc:2f:8e:4a:e9:3b: 9f:be:3d:21:45:ca:e3:63:84:11:b7:f5:8b:0a:d4: e2:5e:2a:f4:7e:1b:58:93:fe:9c:01:bf:22:d4:75: a9:52:3d:dd:2b:eb:ca:18:b1:28:89:5a:bc:9a:0c: e8:77:25:9f:a7:f6:89:fa:bd:01:ee:3c:91:e8:f2: 71:14:73:bd:e5:9f:9a:4d:a0:54:7d:d3:21:7e:4b: 52:da:cb:d5:db:10:5b:c4:2e:8c:ca:c3:a1:c0:eb: 4f:43:92:1d:55:0e:7f:ba:be:3f:11:9a:74:60:eb: d8:61:48:81:aa:bc:e8:ad:06:65:e1:10:15:5f:c9: 70:c0:9d:76:11:89:74:08:cb:6b:65:cd:33:fa:25: fb:65:d9:5f:07:7e:91:00:0f:26:03:f0:97:ac:fb: 6c:6a:89:c8:97:10:8f:22:5f:90:f6:e1:6f:b4:a4: db:b0:dc:a7:92:ee:59:9f:bb:40:1d:95:a6:b1:6a: 4a:22:b0:29:a9:f4:79:ad:a0:c8:c9:b5:7f:be:67: 5b:57:9a:3f:0f:d7:68:6f:cd:a7:fc:04:6c:4f:4c: 6b:f6:a0:39:fd:a8:68:f0:42:1e:2c:9c:4b:a9:0d: c4:b5:29:a0:9d:a2:23:41:39:ac:d1:2a:c0:0f:f2: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:E5:0A:68:D9:52:A6:E9:EE:6C:F1:E3:42:2A:0C:37:2F:43:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.76.0.0/17 Signature Algorithm: sha256WithRSAEncryption 05:e0:67:2a:66:3d:c7:46:b6:bb:ae:5f:ec:05:64:86:98:36: 36:43:3c:b4:fa:5e:78:45:26:a1:0e:ca:69:1b:21:1c:51:20: 6b:53:7a:54:4c:88:ea:88:cb:36:c6:4b:b0:49:31:db:96:ed: 37:32:6a:0d:cb:81:e8:39:de:90:7e:fe:75:cf:c4:46:56:a5: b2:8c:ed:3d:be:93:7c:47:f5:97:65:26:70:18:98:87:f4:46: a2:09:5f:98:a4:ac:9b:fe:89:08:bc:62:c1:93:11:e3:6b:41: 72:54:cb:0d:12:29:e1:33:7d:15:47:ea:5e:b5:83:83:13:d0: 29:fa:d3:6f:02:fd:7d:1b:6e:55:1e:5a:c0:32:08:45:83:96: cd:82:76:d2:49:24:a0:ef:8e:29:ed:9c:67:89:bd:91:69:9a: e0:68:65:fc:25:86:c1:4a:7d:18:1b:a0:ed:7b:10:9d:fc:b1: 61:7a:d1:cb:df:d8:76:69:4f:f5:28:f1:f9:4c:38:6f:90:10: b0:14:97:17:54:8c:2e:06:47:a0:24:eb:a6:94:1d:56:b2:05: b8:ae:42:07:de:66:b5:22:a3:26:57:bc:79:a2:c3:27:74:10: 6e:c6:7a:92:42:96:00:cc:62:4b:c9:24:61:76:19:58:51:2a: e7:7e:39:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEkn0dyfw9PFqsfnpxtJMW3fjGIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAxMDMzWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODZlOTdiMzU3YTY3ZTQ1MDlkMTA4NWU0NTMzNDA2OWQy Y2YzYTMyOGJiZWFjZmM0NDcwMTExODFlYTllZTljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu/9OlXAylcvwvjkrpO5++PSFFyuNjhBG39YsK1OJeKvR+ G1iT/pwBvyLUdalSPd0r68oYsSiJWryaDOh3JZ+n9on6vQHuPJHo8nEUc73ln5pN oFR90yF+S1Lay9XbEFvELozKw6HA609Dkh1VDn+6vj8RmnRg69hhSIGqvOitBmXh EBVfyXDAnXYRiXQIy2tlzTP6Jftl2V8HfpEADyYD8Jes+2xqiciXEI8iX5D24W+0 pNuw3KeS7lmfu0AdlaaxakoisCmp9HmtoMjJtX++Z1tXmj8P12hvzaf8BGxPTGv2 oDn9qGjwQh4snEupDcS1KaCdoiNBOazRKsAP8hYVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG6TlCmjZUqbp7mzx40IqDDcvQwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmM2U5MzgwLTVmN2UtNGZkNS1hNGU3LTA5NzMwODFhODAwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAddTAAwDQYJKoZIhvcNAQELBQADggEBAAXgZypmPcdGtruuX+wFZIaYNjZD PLT6XnhFJqEOymkbIRxRIGtTelRMiOqIyzbGS7BJMduW7Tcyag3Lgeg53pB+/nXP xEZWpbKM7T2+k3xH9ZdlJnAYmIf0RqIJX5ikrJv+iQi8YsGTEeNrQXJUyw0SKeEz fRVH6l61g4MT0Cn6028C/X0bblUeWsAyCEWDls2CdtJJJKDvjintnGeJvZFpmuBo ZfwlhsFKfRgboO17EJ38sWF60cvf2HZpT/Uo8flMOG+QELAUlxdUjC4GR6Ak66aU HVayBbiuQgfeZrUioyZXvHmiwyd0EG7GepJClgDMYkvJJGF2GVhRKud+OTE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:09 2025 by rpki-client