$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa File: 6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa (raw, json) Hash identifier: JT5kXSf92WacJaAmHFHmQQDaIZq9snrhsGUgiroqUbw= Subject key identifier: 53:13:BA:E1:A1:8A:56:93:68:40:90:D1:52:3C:04:D1:95:61:F2:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B627812E53BC9FC38D334EBFFD305CA454FE255 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa Signing time: Wed 13 Aug 2025 00:40:25 +0000 ROA not before: Wed 13 Aug 2025 00:40:25 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.46.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:62:78:12:e5:3b:c9:fc:38:d3:34:eb:ff:d3:05:ca:45:4f:e2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:40:25 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=808fcb260b897b7fc99730742c184816ace8fe19e27718d0cc24f21b0ec1faee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:bc:dd:67:9c:ab:10:ef:31:7d:fb:ce:cc: 0a:69:16:c0:f0:49:10:27:97:0e:90:41:43:17:f1: cc:a1:a3:dc:4d:b7:3e:65:2b:d3:a0:e7:37:41:3b: f5:23:06:df:2a:52:c2:7d:c0:94:4c:35:3c:60:b2: 9e:ba:aa:6f:b6:96:da:17:36:a0:d3:9f:22:e5:16: 19:8b:b6:02:a8:c2:c3:81:ed:a9:43:24:ab:61:a6: e1:f8:a9:0d:12:41:4c:f9:cd:ea:02:1a:96:25:47: 52:24:58:a6:1e:b1:91:7c:2d:12:5a:59:94:1c:b4: 7b:13:69:31:b2:03:5c:c5:91:34:55:5b:cf:19:b8: 81:0d:9e:b9:07:6a:4b:10:8c:cc:59:ff:c0:7b:80: fe:c4:d3:67:6b:57:8c:89:8c:ea:1e:7b:3e:94:96: 53:ed:2f:85:10:10:c0:97:67:26:22:88:91:3d:b1: f6:33:86:43:04:78:9b:84:e1:d2:1a:4f:e6:2b:3d: 33:51:b3:61:82:c8:e0:cb:c7:2b:d3:3a:86:79:34: d7:10:79:c5:5b:05:a9:ef:7d:25:21:6b:f1:63:ea: bd:14:07:f5:83:09:41:87:7c:ac:9b:a0:bf:7b:34: 1c:9f:21:a6:a4:0f:72:92:22:57:bb:9d:27:53:a5: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:BA:E1:A1:8A:56:93:68:40:90:D1:52:3C:04:D1:95:61:F2:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.46.0.0/16 Signature Algorithm: sha256WithRSAEncryption c9:20:d6:bd:5f:b6:3f:06:32:18:b2:79:bc:c8:8d:3a:09:4b: 12:66:c3:10:5b:24:39:f1:ec:9b:06:19:4c:9d:54:e5:52:d0: ba:11:d3:d0:97:33:83:81:3e:d3:c4:a4:2c:1f:31:e1:a1:9e: 1d:4f:0d:ea:b9:79:4b:3f:5b:7b:31:c9:28:0b:35:52:28:d4: 50:f1:9b:9d:c8:24:5f:62:ba:d5:88:e5:f4:a6:2d:3d:3d:2e: df:e5:2f:73:b4:11:6f:c2:37:c1:1b:d7:11:46:92:e5:a3:33: 3c:3c:e0:ce:45:f0:0d:59:40:13:84:a9:74:67:a1:71:d5:1d: 42:c1:00:53:c4:29:f6:bd:2e:e6:b4:2c:53:00:5a:8f:72:32: d3:6f:55:ff:e4:6b:38:ad:42:93:5d:8b:d4:3c:bd:b3:e3:5e: 7d:97:d7:9a:75:7f:ae:6f:b0:a4:d6:e7:b0:ef:08:f4:82:6f: 7d:e1:d0:c0:66:ae:aa:a9:63:80:81:ec:aa:c2:c2:dc:04:23: 6f:53:37:1c:70:6f:af:b9:0f:db:4a:cb:7e:70:c5:8f:0a:22: ba:da:2f:b3:2c:5d:6a:22:66:56:52:19:b3:c1:f0:20:88:33: a3:3c:f4:ee:a4:f9:2c:a5:ed:be:a9:6d:d4:a1:76:17:19:16: 2e:b0:8e:1a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe2J4EuU7yfw40zTr/9MFykVP4lUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDA0MDI1WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDhmY2IyNjBiODk3YjdmYzk5NzMwNzQyYzE4NDgxNmFj ZThmZTE5ZTI3NzE4ZDBjYzI0ZjIxYjBlYzFmYWVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvArzdZ5yrEO8xffvOzAppFsDwSRAnlw6QQUMX8cyho9xN tz5lK9Og5zdBO/UjBt8qUsJ9wJRMNTxgsp66qm+2ltoXNqDTnyLlFhmLtgKowsOB 7alDJKthpuH4qQ0SQUz5zeoCGpYlR1IkWKYesZF8LRJaWZQctHsTaTGyA1zFkTRV W88ZuIENnrkHaksQjMxZ/8B7gP7E02drV4yJjOoeez6UllPtL4UQEMCXZyYiiJE9 sfYzhkMEeJuE4dIaT+YrPTNRs2GCyODLxyvTOoZ5NNcQecVbBanvfSUha/Fj6r0U B/WDCUGHfKyboL97NByfIaakD3KSIle7nSdTpSTTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUxO64aGKVpNoQJDRUjwE0ZVh8t4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhMGEyOTVhLWU5YjQtNDY1NC04ZGNlLTg4YjRmNjRmMDgwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBGLjANBgkqhkiG9w0BAQsFAAOCAQEAySDWvV+2PwYyGLJ5vMiNOglLEmbD EFskOfHsmwYZTJ1U5VLQuhHT0Jczg4E+08SkLB8x4aGeHU8N6rl5Sz9bezHJKAs1 UijUUPGbncgkX2K61Yjl9KYtPT0u3+Uvc7QRb8I3wRvXEUaS5aMzPDzgzkXwDVlA E4SpdGehcdUdQsEAU8Qp9r0u5rQsUwBaj3Iy029V/+RrOK1Ck12L1Dy9s+NefZfX mnV/rm+wpNbnsO8I9IJvfeHQwGauqqljgIHsqsLC3AQjb1M3HHBvr7kP20rLfnDF jwoiutovsyxdaiJmVlIZs8HwIIgzozz07qT5LKXtvqlt1KF2FxkWLrCOGg== -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:08 2025 by rpki-client