$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d78b8d-9d24-4b82-95d5-b283fa71e677.roa File: 53d78b8d-9d24-4b82-95d5-b283fa71e677.roa (raw, json) Hash identifier: kw4y3J2A8yP669dCRekTGBONt2N8D7B71HWwL3OZCEQ= Subject key identifier: D1:A0:FB:38:08:89:10:72:E0:41:CE:0B:05:11:B8:75:97:AD:D9:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37D23057F61729E527EADF090E09839BE4730399 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d78b8d-9d24-4b82-95d5-b283fa71e677.roa Signing time: Wed 20 Aug 2025 00:10:10 +0000 ROA not before: Wed 20 Aug 2025 00:10:10 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 65.48.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d2:30:57:f6:17:29:e5:27:ea:df:09:0e:09:83:9b:e4:73:03:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:10:10 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=e061369215c51b1bd270f434c1a6ed21a7b3f3c409a5919001bd35b1025a1996, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:78:bb:20:d7:e9:b9:39:3e:8d:4c:dd:68: 43:50:66:ac:dd:be:55:ec:87:ba:40:a8:ae:94:54: 41:97:df:4f:44:cc:7e:fa:65:73:03:43:66:50:32: 0f:fa:46:3a:da:ec:e8:0d:f8:f2:71:88:6b:e0:d0: a8:ca:1f:31:96:19:12:41:ef:2a:b5:bc:09:78:15: 72:04:e4:79:24:9d:4f:56:ce:f8:21:53:1a:bc:d0: 41:61:c6:36:b5:95:98:22:b4:85:fc:70:08:ba:07: 27:0c:5f:e0:8c:a4:15:44:2b:e9:11:8c:77:b8:21: 6e:94:59:59:27:78:ed:e1:90:2a:42:30:30:4a:ff: df:13:b1:89:94:59:8a:95:d8:81:59:38:bf:50:1d: 7e:b2:3a:fc:65:8e:c3:01:25:58:49:24:12:dd:7e: b1:9a:0f:e2:b1:dc:81:7e:81:10:95:d2:d5:2b:21: 60:92:6d:45:04:2f:9f:ea:fe:6c:26:c4:d5:33:32: 19:a0:59:16:16:4c:5b:75:f3:34:60:dc:fd:9d:aa: 90:81:7c:4d:c0:e5:70:ae:15:30:5d:8f:ff:65:c3: 05:ac:83:d3:dd:b1:d6:e7:b2:1f:e4:11:98:56:88: 67:30:18:f6:68:e6:94:b3:2d:1c:71:51:b2:7a:ab: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A0:FB:38:08:89:10:72:E0:41:CE:0B:05:11:B8:75:97:AD:D9:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d78b8d-9d24-4b82-95d5-b283fa71e677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.48.0.0/18 Signature Algorithm: sha256WithRSAEncryption 48:3c:24:b4:5a:ee:0f:05:ec:85:86:ab:d5:ca:a6:58:f8:7c: 70:38:f4:2c:1c:9f:9b:46:89:09:34:be:07:24:45:d3:b2:4e: b7:25:f9:d7:e8:d8:f4:84:df:25:47:e3:a7:6a:04:fa:22:7b: cb:d1:d4:6d:f4:4c:38:48:a0:de:d1:9f:76:e3:c9:6a:e2:dc: 68:3c:66:10:6f:d1:33:e1:4a:9d:c7:51:f9:c7:27:33:0a:bf: 08:e4:d7:a5:27:3e:6e:db:f6:3e:b7:9e:c1:59:55:e2:7b:dd: ba:07:14:d6:d6:16:05:1e:71:6b:c9:7c:eb:03:2e:5d:72:0b: 57:42:b2:a0:a3:12:bb:6a:45:07:8b:77:fa:91:99:f9:fb:3c: 0e:9f:92:38:8c:f0:79:80:03:1d:3f:30:03:88:4c:96:2a:97: 34:1a:8a:5d:4f:ef:58:00:f1:d9:2a:de:60:ad:8b:20:35:79: e1:98:a1:c1:03:75:0b:45:01:e0:11:74:e9:67:a7:73:9f:ce: 77:68:33:93:76:6c:dc:41:8e:6e:81:f7:f2:55:b4:85:b3:0b: 95:56:c2:1e:e8:bc:ef:30:43:ba:6b:c2:03:16:9b:e0:de:64: 11:4e:7b:db:f7:47:4d:90:3c:61:2b:8e:4e:28:c4:41:87:12: 70:cd:81:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN9IwV/YXKeUn6t8JDgmDm+RzA5kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAxMDEwWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDYxMzY5MjE1YzUxYjFiZDI3MGY0MzRjMWE2ZWQyMWE3 YjNmM2M0MDlhNTkxOTAwMWJkMzViMTAyNWExOTk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtY3i7INfpuTk+jUzdaENQZqzdvlXsh7pAqK6UVEGX309E zH76ZXMDQ2ZQMg/6Rjra7OgN+PJxiGvg0KjKHzGWGRJB7yq1vAl4FXIE5HkknU9W zvghUxq80EFhxja1lZgitIX8cAi6BycMX+CMpBVEK+kRjHe4IW6UWVkneO3hkCpC MDBK/98TsYmUWYqV2IFZOL9QHX6yOvxljsMBJVhJJBLdfrGaD+Kx3IF+gRCV0tUr IWCSbUUEL5/q/mwmxNUzMhmgWRYWTFt18zRg3P2dqpCBfE3A5XCuFTBdj/9lwwWs g9Pdsdbnsh/kEZhWiGcwGPZo5pSzLRxxUbJ6q1T3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0aD7OAiJEHLgQc4LBRG4dZet2S0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzZDc4YjhkLTlkMjQtNGI4Mi05NWQ1LWIyODNmYTcxZTY3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZBMAAwDQYJKoZIhvcNAQELBQADggEBAEg8JLRa7g8F7IWGq9XKplj4fHA4 9Cwcn5tGiQk0vgckRdOyTrcl+dfo2PSE3yVH46dqBPoie8vR1G30TDhIoN7Rn3bj yWri3Gg8ZhBv0TPhSp3HUfnHJzMKvwjk16UnPm7b9j63nsFZVeJ73boHFNbWFgUe cWvJfOsDLl1yC1dCsqCjErtqRQeLd/qRmfn7PA6fkjiM8HmAAx0/MAOITJYqlzQa il1P71gA8dkq3mCtiyA1eeGYocEDdQtFAeARdOlnp3OfzndoM5N2bNxBjm6B9/JV tIWzC5VWwh7ovO8wQ7prwgMWm+DeZBFOe9v3R02QPGErjk4oxEGHEnDNgRs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:13 2025 by rpki-client