$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ff18c8-d898-4227-9a20-f8e06243cf2f.roa File: 51ff18c8-d898-4227-9a20-f8e06243cf2f.roa (raw, json) Hash identifier: NrP1+PejzysWL1WbveWO9632jFI8Q3y1fZ1l9s3Q2VY= Subject key identifier: 9F:90:FC:F0:A2:B8:BF:1A:CE:B2:7F:6E:CC:C8:82:FC:96:54:73:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FEBE4E28234E4043AB397542FF78C2AC7BCC01A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ff18c8-d898-4227-9a20-f8e06243cf2f.roa Signing time: Sat 16 Aug 2025 00:30:24 +0000 ROA not before: Sat 16 Aug 2025 00:30:24 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.215.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:eb:e4:e2:82:34:e4:04:3a:b3:97:54:2f:f7:8c:2a:c7:bc:c0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:30:24 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=8c47e0fdf420b801d06b9adb23d27a651f256d5218181b0a903e3425020d32f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:b0:e8:e1:7e:cf:8c:80:7a:58:9e:65:ff: 9b:5d:08:76:a7:bc:3c:98:cf:f6:ff:8e:57:bc:12: 52:79:98:fa:78:13:d1:09:80:6c:aa:be:5c:7f:dd: 7f:ec:e2:b3:c1:0a:cc:c6:d5:7c:0d:ad:25:78:0a: 66:f4:90:00:21:28:0b:82:c4:3d:cb:42:5e:4a:a0: ac:9a:00:6d:63:5e:99:aa:ba:7b:6e:d0:1e:c2:20: 1f:f5:cf:6e:7e:96:32:70:04:b7:48:d7:e0:c5:0b: 87:91:26:80:48:c6:e6:59:20:5a:ef:53:d9:77:76: d9:07:72:e5:39:66:db:0d:cb:7b:ab:9d:ab:3a:1f: 82:43:9d:f6:b8:b2:39:f9:d8:46:49:5e:7d:ef:31: 50:fc:44:52:fc:87:9f:91:ec:30:2a:a6:b9:ac:80: d6:9d:95:f9:21:66:71:cf:dc:29:ca:0a:99:5c:22: a4:eb:76:a0:c7:43:d3:1a:1e:30:70:ec:44:00:48: fb:e6:2c:d5:53:4a:99:90:89:fd:8f:fe:22:18:5f: 86:7b:ab:f6:f3:da:a9:0b:f5:54:cb:45:9f:5e:f4: fa:05:9f:e1:4a:bb:bd:9e:06:54:6e:e1:38:13:fd: b9:eb:30:55:0d:0f:d1:45:8b:b3:21:f9:0c:12:87: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:FC:F0:A2:B8:BF:1A:CE:B2:7F:6E:CC:C8:82:FC:96:54:73:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ff18c8-d898-4227-9a20-f8e06243cf2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.140.0/22 Signature Algorithm: sha256WithRSAEncryption a3:61:bd:9a:7a:dd:dc:1e:c6:69:e9:0b:d2:ea:bb:d1:0a:73: b4:75:63:59:07:32:b3:80:b6:b0:38:e3:27:1b:79:88:27:bc: e9:da:66:c6:f9:90:48:94:4b:87:ba:69:74:3a:09:88:de:b8: fe:79:7f:b1:b2:9e:91:f3:b0:fe:ca:48:46:c1:e6:aa:6d:c3: fa:4a:fd:db:46:a6:af:17:d7:91:9c:7a:73:f3:89:6c:13:c3: f7:e0:9a:85:37:df:43:1d:34:b3:43:c2:73:30:80:ac:24:35: 32:a6:44:f6:1c:82:41:94:b6:97:62:5f:b0:56:8c:a1:b5:e6: 30:fd:9b:73:0c:27:b6:62:bd:5e:36:c2:8d:48:b3:44:d4:cf: d8:1e:c6:b2:5c:b1:2a:19:c2:7c:c1:e5:8e:54:ef:cb:70:28: 5a:83:ee:11:90:5d:7f:21:52:b9:c0:be:36:c1:f2:83:58:f9: 5e:7b:7d:e4:38:d9:79:52:ff:ff:a5:be:29:4a:83:9d:f0:f0: 3f:35:55:14:f5:53:e1:58:40:e6:69:33:b9:64:7d:a1:71:cc: 93:7f:dc:3b:4a:b1:49:7c:cb:a3:8c:69:c6:b1:5e:7f:e3:3c: 20:09:9c:1e:88:22:5c:3b:4e:39:04:f7:2b:96:79:8b:80:47: 3f:e0:79:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf+vk4oI05AQ6s5dUL/eMKse8wBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMDI0WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzQ3ZTBmZGY0MjBiODAxZDA2YjlhZGIyM2QyN2E2NTFm MjU2ZDUyMTgxODFiMGE5MDNlMzQyNTAyMGQzMmY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPZrDo4X7PjIB6WJ5l/5tdCHanvDyYz/b/jle8ElJ5mPp4 E9EJgGyqvlx/3X/s4rPBCszG1XwNrSV4Cmb0kAAhKAuCxD3LQl5KoKyaAG1jXpmq untu0B7CIB/1z25+ljJwBLdI1+DFC4eRJoBIxuZZIFrvU9l3dtkHcuU5ZtsNy3ur nas6H4JDnfa4sjn52EZJXn3vMVD8RFL8h5+R7DAqprmsgNadlfkhZnHP3CnKCplc IqTrdqDHQ9MaHjBw7EQASPvmLNVTSpmQif2P/iIYX4Z7q/bz2qkL9VTLRZ9e9PoF n+FKu72eBlRu4TgT/bnrMFUND9FFi7Mh+QwSh+FVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn5D88KK4vxrOsn9uzMiC/JZUc/EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZmYxOGM4LWQ4OTgtNDIyNy05YTIwLWY4ZTA2MjQzY2YyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14wwDQYJKoZIhvcNAQELBQADggEBAKNhvZp63dwexmnpC9Lqu9EKc7R1 Y1kHMrOAtrA44ycbeYgnvOnaZsb5kEiUS4e6aXQ6CYjeuP55f7GynpHzsP7KSEbB 5qptw/pK/dtGpq8X15GcenPziWwTw/fgmoU330MdNLNDwnMwgKwkNTKmRPYcgkGU tpdiX7BWjKG15jD9m3MMJ7ZivV42wo1Is0TUz9gexrJcsSoZwnzB5Y5U78twKFqD 7hGQXX8hUrnAvjbB8oNY+V57feQ42XlS//+lvilKg53w8D81VRT1U+FYQOZpM7lk faFxzJN/3DtKsUl8y6OMacaxXn/jPCAJnB6IIlw7TjkE9yuWeYuARz/gebA= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:14 2025 by rpki-client