$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa File: 5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa (raw, json) Hash identifier: 3X4GV18UcmN16lLkwvubjulnG3ioyQO+QiQf6zSBZzM= Subject key identifier: 85:D6:61:BE:CD:6B:A2:47:9A:EF:18:D2:7A:36:7A:7B:C3:3C:D5:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44CAFB9B6B2C3F8776121627A92E48486615806D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa Signing time: Tue 19 Aug 2025 00:40:22 +0000 ROA not before: Tue 19 Aug 2025 00:40:22 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ca:fb:9b:6b:2c:3f:87:76:12:16:27:a9:2e:48:48:66:15:80:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:40:22 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a0a0c4970917dcfb2f9c075c62c88bfb2a6b09f8b16e6b1960ad7b49528332b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:4e:c3:70:8a:d5:d6:4f:ef:e9:70:7c:15: 25:46:80:20:4f:b9:d1:af:6a:52:d7:e6:65:8e:05: c9:c3:56:a1:b0:00:10:6d:e4:5f:e7:4d:75:ea:f2: eb:af:cb:c5:81:86:b9:df:3f:ce:c6:75:1d:3a:50: 8c:ee:65:28:dc:ad:1e:86:9e:24:47:a4:85:42:7d: c4:0b:e0:b4:27:fb:97:b4:ee:4f:30:cc:98:2f:d6: f6:db:ed:9f:c4:e5:2f:f8:86:91:61:ba:6c:07:3a: 70:cb:ee:8f:c6:a6:61:f2:ac:bd:f4:66:8f:49:39: 67:a4:ef:3e:66:d1:cb:38:f9:8d:24:b8:da:f6:fd: 6a:4f:30:b7:7b:81:62:73:2c:9d:16:d0:89:08:d7: e5:51:d0:26:b4:65:5a:d2:c7:f9:83:aa:d1:96:20: f1:37:d6:e3:55:3d:9a:69:b4:ed:23:53:2d:ee:c2: 46:64:ea:1d:99:12:97:b1:22:06:ad:7d:80:87:4e: 7b:8d:b6:b4:f9:72:76:04:a2:46:32:0e:95:11:be: e4:48:bd:3b:c8:b1:52:13:f3:87:d1:6d:27:86:f2: 43:69:1c:2f:a5:d6:91:b5:7b:c9:ff:02:6a:7d:3e: 80:fc:ae:b6:9a:f9:59:dc:7b:6f:7e:8b:d9:81:76: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:61:BE:CD:6B:A2:47:9A:EF:18:D2:7A:36:7A:7B:C3:3C:D5:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.120.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:af:f6:f2:9c:ed:d1:4b:2f:96:01:30:e8:eb:c2:1f:50:41: b0:31:83:a2:a2:7e:e9:12:f9:a0:19:76:18:04:68:02:3f:5f: 8c:b5:e5:78:60:a6:3c:3d:a9:1b:a6:d7:4f:63:e9:e8:5c:86: 61:9f:0d:84:f6:e6:9c:83:d9:9b:28:44:df:89:4b:36:ba:8e: 68:87:b8:80:02:9f:0b:04:f8:35:db:64:81:08:d9:03:b7:c3: 0a:a7:8a:a6:54:2d:d7:4f:d0:84:0f:2b:0d:cc:e2:d9:bd:37: 91:46:c5:95:78:0e:df:39:8a:8e:f8:8b:f2:cd:a6:46:f3:75: 94:ce:3f:a7:35:8f:50:e1:e5:e6:bf:dd:03:78:90:50:8e:12: cb:a6:06:87:d3:32:17:52:a1:a0:8f:be:f1:3f:fc:46:02:af: 19:da:bf:53:c0:ac:5c:80:57:1b:a2:38:7b:c5:f2:89:c8:2c: 37:13:b9:78:ff:53:84:aa:b3:86:99:61:e8:2b:64:6b:f0:1b: a1:b0:3f:86:e7:83:69:d5:eb:26:f9:5a:5d:53:e8:12:22:3d: 4a:63:48:7e:d3:a1:2a:96:a7:57:33:50:d0:ed:d6:9f:97:5d: ae:a1:29:f8:9e:5b:2b:e7:f9:df:d8:8b:ac:a7:47:a5:55:26: 79:8d:aa:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURMr7m2ssP4d2EhYnqS5ISGYVgG0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDA0MDIyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGEwYzQ5NzA5MTdkY2ZiMmY5YzA3NWM2MmM4OGJmYjJh NmIwOWY4YjE2ZTZiMTk2MGFkN2I0OTUyODMzMmIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwJU7DcIrV1k/v6XB8FSVGgCBPudGvalLX5mWOBcnDVqGw ABBt5F/nTXXq8uuvy8WBhrnfP87GdR06UIzuZSjcrR6GniRHpIVCfcQL4LQn+5e0 7k8wzJgv1vbb7Z/E5S/4hpFhumwHOnDL7o/GpmHyrL30Zo9JOWek7z5m0cs4+Y0k uNr2/WpPMLd7gWJzLJ0W0IkI1+VR0Ca0ZVrSx/mDqtGWIPE31uNVPZpptO0jUy3u wkZk6h2ZEpexIgatfYCHTnuNtrT5cnYEokYyDpURvuRIvTvIsVIT84fRbSeG8kNp HC+l1pG1e8n/Amp9PoD8rraa+Vnce29+i9mBdsa9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhdZhvs1rokea7xjSejZ6e8M81QIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjOWQ5YTVlLTNkMDAtNGJmMS04NWFmLTcyOTZlNGQxOTYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl3gwDQYJKoZIhvcNAQELBQADggEBAByv9vKc7dFLL5YBMOjrwh9QQbAx g6KifukS+aAZdhgEaAI/X4y15Xhgpjw9qRum109j6ehchmGfDYT25pyD2ZsoRN+J Sza6jmiHuIACnwsE+DXbZIEI2QO3wwqniqZULddP0IQPKw3M4tm9N5FGxZV4Dt85 io74i/LNpkbzdZTOP6c1j1Dh5ea/3QN4kFCOEsumBofTMhdSoaCPvvE//EYCrxna v1PArFyAVxuiOHvF8onILDcTuXj/U4Sqs4aZYegrZGvwG6GwP4bng2nV6yb5Wl1T 6BIiPUpjSH7ToSqWp1czUNDt1p+XXa6hKfieWyvn+d/Yi6ynR6VVJnmNqtQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:45 2025 by rpki-client