$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa File: 68af9002-6d9c-4a97-b412-41140a596dc9.roa (raw, json) Hash identifier: ML611jPB29R4wf+VPrP8rpdxI9tnH5Cg9kfvNJU93Jk= Subject key identifier: EF:18:BA:74:AE:92:A1:23:46:67:95:D0:1A:67:89:96:B2:4A:4D:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BBD3012E674840F579008D6FE7F9BB41119E399 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa Signing time: Tue 19 Aug 2025 00:31:01 +0000 ROA not before: Tue 19 Aug 2025 00:31:01 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bd:30:12:e6:74:84:0f:57:90:08:d6:fe:7f:9b:b4:11:19:e3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:01 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=74678ae86588c3f883679e585f7465a485e20d8b86dc64d5d0a0af0b217e6524, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:e9:1c:03:cf:b7:5c:08:18:b1:da:8e:e2: cc:5d:78:1f:0f:85:d5:ef:09:44:ef:30:d6:d8:ed: 61:a8:ed:24:b4:18:b3:c2:54:19:13:e4:b7:55:ca: d3:41:2d:de:c8:d3:ff:2c:61:17:96:a2:cc:36:f4: b1:95:57:bb:ac:41:03:e0:96:c8:23:d5:e2:88:2e: a9:90:30:c1:a9:24:ba:85:5d:18:e7:1c:0e:ee:8c: 60:fd:07:e9:d9:cb:ce:81:16:b7:59:b8:10:28:1e: ff:e9:51:b7:6b:f4:a4:85:89:25:2c:52:d0:a4:a6: 67:44:42:29:8e:b1:e6:c9:3a:bf:1c:46:7f:c7:c9: e3:3d:56:2d:36:fa:ae:da:f9:0d:d9:9e:18:3f:fe: 3b:92:69:8d:c7:d1:ea:94:8f:91:10:40:94:42:d8: 0d:fb:28:67:52:2d:df:07:67:9c:77:ed:05:f2:49: c0:04:51:c2:ea:5d:87:a5:11:26:e3:00:ca:13:25: 72:63:b6:31:28:d9:14:68:ef:89:34:5c:d2:41:a6: cd:2c:4c:6c:86:77:d3:e7:82:84:26:1d:9e:6a:20: e3:51:93:48:c1:e9:28:d7:c8:1a:64:4f:9b:7b:ca: 52:55:48:c3:d4:13:2f:92:7f:c4:cc:8e:29:d5:20: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:18:BA:74:AE:92:A1:23:46:67:95:D0:1A:67:89:96:B2:4A:4D:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.56.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:fd:e3:72:2b:b2:1c:d3:59:d3:2a:c4:5e:f6:da:b4:fb:68: 68:9f:10:7a:56:0a:57:bb:1d:d8:83:b7:5f:e7:29:ed:29:f0: 16:c8:95:a6:2a:01:65:ad:7c:57:d8:51:f4:01:aa:43:da:48: aa:5b:fd:6f:40:9f:68:60:66:b2:11:28:e5:f0:4a:11:59:dd: 4c:4a:6c:19:be:8d:a8:fc:d2:5d:d4:b0:e1:55:0c:da:b6:1d: cc:c9:67:1e:d1:5c:60:47:64:17:ec:dd:bd:bd:48:28:4d:04: 5f:3a:c8:09:e8:3d:7d:b4:ba:68:67:19:98:c7:f4:ac:3b:72: d4:15:5e:1b:05:aa:71:b9:25:d4:7a:3b:97:6a:3a:c6:3e:66: 2c:d9:0b:1e:59:85:00:15:33:c3:25:26:3d:b4:79:c9:f7:7e: 36:ce:70:61:81:35:91:2c:2b:10:6a:50:4a:6e:a7:e5:d7:34: ca:42:09:f9:51:0f:3b:79:0e:ab:e6:f5:51:ff:d9:ed:fd:51: ef:5f:69:5a:24:9e:2c:cd:a7:94:13:a6:06:09:50:6f:5b:23: e8:15:b5:b3:94:50:4d:86:56:9e:8a:41:35:e9:73:fa:3a:a3: da:e7:5f:ad:1f:43:b3:ac:5f:a3:87:9f:d2:3f:30:81:43:56: 8c:fd:86:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG70wEuZ0hA9XkAjW/n+btBEZ45kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMTAxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDY3OGFlODY1ODhjM2Y4ODM2NzllNTg1Zjc0NjVhNDg1 ZTIwZDhiODZkYzY0ZDVkMGEwYWYwYjIxN2U2NTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2PukcA8+3XAgYsdqO4sxdeB8PhdXvCUTvMNbY7WGo7SS0 GLPCVBkT5LdVytNBLd7I0/8sYReWosw29LGVV7usQQPglsgj1eKILqmQMMGpJLqF XRjnHA7ujGD9B+nZy86BFrdZuBAoHv/pUbdr9KSFiSUsUtCkpmdEQimOsebJOr8c Rn/HyeM9Vi02+q7a+Q3Znhg//juSaY3H0eqUj5EQQJRC2A37KGdSLd8HZ5x37QXy ScAEUcLqXYelESbjAMoTJXJjtjEo2RRo74k0XNJBps0sTGyGd9PngoQmHZ5qIONR k0jB6SjXyBpkT5t7ylJVSMPUEy+Sf8TMjinVIMzzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7xi6dK6SoSNGZ5XQGmeJlrJKTV4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YWY5MDAyLTZkOWMtNGE5Ny1iNDEyLTQxMTQwYTU5NmRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjljgwDQYJKoZIhvcNAQELBQADggEBAB7943IrshzTWdMqxF722rT7aGif EHpWCle7HdiDt1/nKe0p8BbIlaYqAWWtfFfYUfQBqkPaSKpb/W9An2hgZrIRKOXw ShFZ3UxKbBm+jaj80l3UsOFVDNq2HczJZx7RXGBHZBfs3b29SChNBF86yAnoPX20 umhnGZjH9Kw7ctQVXhsFqnG5JdR6O5dqOsY+ZizZCx5ZhQAVM8MlJj20ecn3fjbO cGGBNZEsKxBqUEpup+XXNMpCCflRDzt5Dqvm9VH/2e39Ue9faVoknizNp5QTpgYJ UG9bI+gVtbOUUE2GVp6KQTXpc/o6o9rnX60fQ7OsX6OHn9I/MIFDVoz9ho0= -----END CERTIFICATE-----Generated at Sat Aug 23 08:33:09 2025 by rpki-client