$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa File: 69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa (raw, json) Hash identifier: ztAF275xYFhEFYePlLEe4MDeZQypecW0Cp9jpDVl9Ec= Subject key identifier: 46:57:98:22:20:75:82:F4:E0:F1:73:EF:A8:4F:3E:3D:64:F7:84:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22F36644DC48318DB83E39346D34B54122CAF47A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa Signing time: Sat 16 Aug 2025 00:10:55 +0000 ROA not before: Sat 16 Aug 2025 00:10:55 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.160.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f3:66:44:dc:48:31:8d:b8:3e:39:34:6d:34:b5:41:22:ca:f4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:10:55 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=d0f89282434b5b551b191ca483778ebbed1c2b8f73ec02c6f3b78b570ee71b1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:a8:c5:c2:8e:f7:91:e3:68:24:1e:67:da: f5:40:20:81:dd:0d:5b:0d:ca:01:93:11:07:04:ef: b5:78:49:bf:fa:c4:01:98:24:8e:81:21:ac:70:2b: 4f:41:cf:1a:d5:e9:16:2c:3b:e2:55:6b:ad:8d:3c: 62:c4:b0:d0:ef:ae:6d:bc:70:fb:27:cc:ef:e5:82: 54:51:01:6f:3c:9a:86:9a:15:00:d6:28:e1:c7:40: e5:10:03:34:a6:5a:65:3f:54:cf:c6:9a:10:44:32: cb:15:7e:57:33:73:4d:f9:68:96:3c:5e:35:16:4a: 95:20:e7:67:47:6d:00:15:43:1d:4a:d3:a3:52:b3: 31:3a:38:58:f8:14:d3:6b:d1:c0:1e:57:a6:77:9e: e2:0f:14:6b:24:94:b5:ac:a9:68:f1:70:25:a7:75: 12:0d:a1:bc:74:41:4c:c7:db:b3:23:d0:b9:a1:cb: 3f:0e:f2:00:71:5b:51:6e:79:44:31:f0:26:29:b6: 5c:7b:09:aa:56:47:66:e1:59:f7:e9:24:16:80:5f: f9:3f:73:02:c3:de:cb:2b:77:04:ef:27:81:c0:bc: 6d:46:3b:2e:b8:f3:12:15:85:a4:f1:51:d9:5c:17: ce:59:0b:5e:45:de:09:8a:40:cf:5a:8b:9d:20:8d: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:57:98:22:20:75:82:F4:E0:F1:73:EF:A8:4F:3E:3D:64:F7:84:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.160.32.0/21 Signature Algorithm: sha256WithRSAEncryption 75:4e:cc:56:6f:5e:48:20:1a:11:c8:e1:9d:73:9e:87:14:4e: d7:13:a1:ed:aa:2b:59:a0:c6:34:ef:b5:5b:5c:1c:e6:2f:f4: d8:2f:88:76:8f:38:6f:ed:3e:e6:12:21:d9:14:0f:44:65:92: 16:ba:28:c2:f2:1d:ad:a2:2e:19:70:e2:04:d8:9d:e0:37:4c: 70:62:1a:6b:fa:08:7d:92:27:f5:05:0c:b7:a0:0f:ec:6b:83: 52:fc:12:bf:8f:df:de:2e:a7:c4:1e:0f:c3:fc:30:ff:cb:b8: 5a:04:f7:93:2a:fd:01:69:a3:87:8d:2c:cb:2c:b7:14:8e:aa: 40:e8:2d:69:08:f7:72:b4:00:95:ec:c7:8c:ad:c3:4b:ea:bb: b1:06:53:cc:81:5b:af:79:78:8f:d5:30:ff:22:3f:ad:38:f3: 26:8e:3a:d3:f1:47:45:9d:6e:9c:af:ec:95:94:96:47:08:05: d1:46:9a:8b:23:a8:93:d3:22:50:31:c6:7f:d3:03:42:0f:38: 2b:05:79:34:ef:fe:a2:a4:71:a0:67:e5:6a:11:dd:7f:76:8e: 5d:37:d5:6b:51:13:13:bf:69:41:42:d9:37:8c:0a:99:47:55: 91:1e:d4:eb:38:c5:57:7a:95:d6:53:43:fe:be:1d:31:b1:22: f5:7f:01:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIvNmRNxIMY24Pjk0bTS1QSLK9HowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAxMDU1WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGY4OTI4MjQzNGI1YjU1MWIxOTFjYTQ4Mzc3OGViYmVk MWMyYjhmNzNlYzAyYzZmM2I3OGI1NzBlZTcxYjFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAKKjFwo73keNoJB5n2vVAIIHdDVsNygGTEQcE77V4Sb/6 xAGYJI6BIaxwK09BzxrV6RYsO+JVa62NPGLEsNDvrm28cPsnzO/lglRRAW88moaa FQDWKOHHQOUQAzSmWmU/VM/GmhBEMssVflczc035aJY8XjUWSpUg52dHbQAVQx1K 06NSszE6OFj4FNNr0cAeV6Z3nuIPFGsklLWsqWjxcCWndRINobx0QUzH27Mj0Lmh yz8O8gBxW1FueUQx8CYptlx7CapWR2bhWffpJBaAX/k/cwLD3ssrdwTvJ4HAvG1G Oy648xIVhaTxUdlcF85ZC15F3gmKQM9ai50gjfa3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURleYIiB1gvTg8XPvqE8+PWT3hGcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5ZWE1ZTM3LWFkOTUtNDgxNS04ZTgyLTFhYTRmNGYzN2VjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNoCAwDQYJKoZIhvcNAQELBQADggEBAHVOzFZvXkggGhHI4Z1znocUTtcT oe2qK1mgxjTvtVtcHOYv9NgviHaPOG/tPuYSIdkUD0Rlkha6KMLyHa2iLhlw4gTY neA3THBiGmv6CH2SJ/UFDLegD+xrg1L8Er+P394up8QeD8P8MP/LuFoE95Mq/QFp o4eNLMsstxSOqkDoLWkI93K0AJXsx4ytw0vqu7EGU8yBW695eI/VMP8iP6048yaO OtPxR0Wdbpyv7JWUlkcIBdFGmosjqJPTIlAxxn/TA0IPOCsFeTTv/qKkcaBn5WoR 3X92jl031WtRExO/aUFC2TeMCplHVZEe1Os4xVd6ldZTQ/6+HTGxIvV/AdA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:21 2025 by rpki-client