$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa File: 703d892d-ff7a-4463-88f7-014e2ca759c0.roa (raw, json) Hash identifier: tu69u4cBIVtC1OcBk2OlHyyQyHDkAODXAonM1EORgMI= Subject key identifier: C5:12:0E:D4:9C:31:5E:F0:A6:E2:A0:60:0B:BD:07:44:7E:CB:96:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48D35B485DEE6E138BC85AFC498A530CC3D597A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa Signing time: Tue 12 Aug 2025 00:40:16 +0000 ROA not before: Tue 12 Aug 2025 00:40:16 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d3:5b:48:5d:ee:6e:13:8b:c8:5a:fc:49:8a:53:0c:c3:d5:97:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:40:16 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=fb689d975bf9fffbde174ee4cd0ec3ef0bdf0e771f046dcf79d1d0c3de333ef2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:61:3e:90:2f:56:23:e6:e1:f7:62:97:69: fb:49:df:29:e3:3d:71:1d:20:75:b8:c3:33:86:42: 86:e5:92:42:95:2b:8b:47:8b:68:f6:4f:e6:f1:ef: ce:00:20:f5:99:6c:cb:9e:93:5f:89:99:74:45:94: 9b:5d:1d:bf:92:ed:57:c7:c6:8e:b1:ed:25:ce:d9: 6a:64:3b:3a:fe:03:ba:70:4a:2b:9c:1f:ac:13:1e: 9c:40:ff:c7:f6:a7:61:e8:23:58:f4:d0:1c:9b:23: fb:07:ab:d1:28:60:15:96:be:67:6c:20:65:2d:eb: b2:53:0d:fa:6e:4d:b2:cf:01:d8:6b:d6:5d:4f:b6: ab:27:3a:61:a5:03:23:54:01:b4:e5:55:70:f0:32: ef:c2:98:64:a0:a2:00:92:87:68:74:12:1e:8d:56: 29:b9:ca:0b:71:c2:c4:9e:77:5b:e6:b8:1b:e9:8f: 79:d8:8c:7a:18:cd:85:27:a4:b2:f1:49:04:88:30: 56:eb:e6:14:33:43:06:fc:96:b1:2d:c9:55:a6:9f: 0d:7a:ec:b2:98:f6:c6:37:65:4e:e3:84:b1:a6:3e: 47:01:e3:c6:ae:89:97:58:ea:41:31:8d:f3:08:ad: 95:26:78:b6:b1:d2:9d:c8:6b:06:99:8f:dd:f3:d5: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:0E:D4:9C:31:5E:F0:A6:E2:A0:60:0B:BD:07:44:7E:CB:96:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption 88:6a:bb:4a:1b:39:97:a7:c2:12:21:60:b1:3a:4c:e9:9a:fb: 8a:40:0e:ab:0e:1d:51:26:3c:6a:e6:85:d7:79:b9:9a:54:76: 49:6e:18:5a:77:2d:35:18:3c:fe:0d:4f:56:c4:d9:96:43:84: 8d:8f:37:34:3a:10:20:50:8d:1c:af:34:e8:c5:92:e4:4e:bb: 60:6d:b3:60:f9:4b:74:d8:a9:e9:02:3b:2b:88:09:c7:17:f3: e3:6f:07:cb:0f:5e:74:bc:c3:6b:47:9e:5d:92:6a:fa:62:96: 71:89:50:04:f2:3d:dc:7d:06:7e:35:f6:b4:86:da:89:bb:67: d9:df:f5:2a:18:bf:f5:79:47:98:68:b8:b2:11:62:14:29:67: e3:bf:59:65:bd:fe:cc:55:40:b3:18:71:9f:0d:74:8b:cf:e7: 5b:d1:f7:35:bf:8b:09:c8:55:e7:6f:89:1e:88:14:56:46:72: eb:a8:51:87:95:24:5b:e0:1b:27:68:fe:e8:90:d2:ed:39:15: 66:68:b9:b5:be:99:5d:f3:c0:35:6d:5a:2e:36:0d:33:c3:e4: f1:27:25:62:1f:17:67:63:13:86:79:58:17:60:e1:ed:57:8d: 2f:4a:c2:d0:14:ab:4c:b0:5b:be:58:e7:41:0c:1a:22:d0:38: 08:ef:8a:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSNNbSF3ubhOLyFr8SYpTDMPVl6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MDE2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjY4OWQ5NzViZjlmZmZiZGUxNzRlZTRjZDBlYzNlZjBi ZGYwZTc3MWYwNDZkY2Y3OWQxZDBjM2RlMzMzZWYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+vGE+kC9WI+bh92KXaftJ3ynjPXEdIHW4wzOGQoblkkKV K4tHi2j2T+bx784AIPWZbMuek1+JmXRFlJtdHb+S7VfHxo6x7SXO2WpkOzr+A7pw SiucH6wTHpxA/8f2p2HoI1j00BybI/sHq9EoYBWWvmdsIGUt67JTDfpuTbLPAdhr 1l1PtqsnOmGlAyNUAbTlVXDwMu/CmGSgogCSh2h0Eh6NVim5ygtxwsSed1vmuBvp j3nYjHoYzYUnpLLxSQSIMFbr5hQzQwb8lrEtyVWmnw167LKY9sY3ZU7jhLGmPkcB 48auiZdY6kExjfMIrZUmeLax0p3IawaZj93z1celAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxRIO1JwxXvCm4qBgC70HRH7LljwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwM2Q4OTJkLWZmN2EtNDQ2My04OGY3LTAxNGUyY2E3NTljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAW4AwDQYJKoZIhvcNAQELBQADggEBAIhqu0obOZenwhIhYLE6TOma+4pA DqsOHVEmPGrmhdd5uZpUdkluGFp3LTUYPP4NT1bE2ZZDhI2PNzQ6ECBQjRyvNOjF kuROu2Bts2D5S3TYqekCOyuICccX8+NvB8sPXnS8w2tHnl2SavpilnGJUATyPdx9 Bn419rSG2om7Z9nf9SoYv/V5R5houLIRYhQpZ+O/WWW9/sxVQLMYcZ8NdIvP51vR 9zW/iwnIVedviR6IFFZGcuuoUYeVJFvgGydo/uiQ0u05FWZoubW+mV3zwDVtWi42 DTPD5PEnJWIfF2djE4Z5WBdg4e1XjS9KwtAUq0ywW75Y50EMGiLQOAjvijs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:46 2025 by rpki-client