$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa File: 75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa (raw, json) Hash identifier: tKEYVe/eSwEZtJ1qr5ze+Eai7UUWQPfrgxerDbQtCfE= Subject key identifier: 76:B2:0A:A3:36:E8:55:30:54:E8:17:10:88:B7:F4:44:87:74:58:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2701B921BD17C085DCB4C3F0BBFEAADC4BC7F3ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa Signing time: Fri 15 Aug 2025 00:51:37 +0000 ROA not before: Fri 15 Aug 2025 00:51:37 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.238.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:01:b9:21:bd:17:c0:85:dc:b4:c3:f0:bb:fe:aa:dc:4b:c7:f3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:51:37 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=cc2d3734441c2a2fa091bb7c943b0e21004e2a856d54fb4e7433db4fe4b75912, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:7f:ce:53:c6:e1:11:06:a5:78:bb:88:b5: b8:c0:48:83:b8:5b:94:fc:0e:84:2a:11:72:60:b8: 53:34:1b:67:c7:d3:9c:ca:94:c7:a9:66:54:d8:02: ae:a0:23:ef:8f:74:0d:55:52:af:0d:95:de:86:f0: 07:8e:cb:f6:68:80:05:1b:36:2b:2a:68:e8:e0:8b: 49:ff:cc:eb:01:d3:e6:e6:09:d6:4a:00:33:64:ee: ab:33:91:7e:56:f3:f0:d4:e5:db:57:30:5c:67:66: 57:13:02:0f:59:f8:65:d1:61:11:22:17:b3:fc:48: d1:4b:a9:47:21:02:f3:ec:04:0c:40:81:ba:d1:e3: e2:3a:8f:60:d5:79:7e:cb:f9:60:10:43:75:29:cc: 19:8b:5a:a3:26:20:ab:13:b7:91:ed:59:83:0d:b2: ad:d9:08:79:83:6e:87:73:bc:f3:ff:53:2c:a6:59: ea:1b:fe:a3:8b:00:32:ab:20:cb:b6:c8:23:17:40: 81:5e:ee:ea:b7:09:f7:91:4e:fa:b9:52:03:cf:12: 92:6b:60:46:9e:5c:7f:b8:5d:dc:1c:e0:13:5f:8c: 44:dc:ae:f6:de:ca:54:55:3d:d8:51:02:d6:fe:3a: 29:29:08:3f:b4:15:f9:67:a5:64:2c:6d:78:99:cf: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B2:0A:A3:36:E8:55:30:54:E8:17:10:88:B7:F4:44:87:74:58:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.238.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:af:98:f1:96:3a:e7:fb:ca:15:11:7b:7b:da:9d:c0:70:36: cc:b2:ad:38:b1:72:33:d4:2f:50:ed:54:38:8b:cf:30:0c:5e: b8:09:0c:90:ac:97:f0:65:0e:0b:4a:ed:2f:0d:b3:db:c1:fe: 41:85:79:c3:d1:0f:88:dd:d2:87:fa:e0:6d:77:83:d3:19:6f: 52:56:e1:f5:42:4a:c5:30:4c:8e:0b:00:82:71:bc:32:3b:de: 50:d8:99:d9:b4:e2:db:58:5f:9e:a6:fa:36:ec:fe:34:5a:f8: b4:64:bc:b8:24:ac:69:13:0f:84:46:44:39:37:09:7d:f6:f6: 31:54:4c:bd:de:91:a9:de:da:3a:91:cd:48:87:0a:b5:b6:44: 5a:f5:7d:f9:04:fa:f7:7c:95:79:dc:96:72:68:02:66:58:8b: ff:bc:f4:ab:c0:28:c3:c1:02:2f:20:e0:c6:be:cb:99:36:0d: e6:cd:be:7d:61:49:bb:39:16:a2:fe:67:cd:be:3f:e0:2d:c8: 69:a3:dc:e0:0e:d5:8d:14:ae:02:ae:ce:49:11:e8:fc:f3:db: 6d:9b:7c:2f:06:f4:c3:88:8a:7c:25:c5:5c:0b:17:21:e7:02: a5:e8:64:b6:39:aa:a6:cf:49:1a:40:0b:70:a4:29:15:d9:ad: b9:7a:c6:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJwG5Ib0XwIXctMPwu/6q3EvH8+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDA1MTM3WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzJkMzczNDQ0MWMyYTJmYTA5MWJiN2M5NDNiMGUyMTAw NGUyYTg1NmQ1NGZiNGU3NDMzZGI0ZmU0Yjc1OTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHI3/OU8bhEQaleLuItbjASIO4W5T8DoQqEXJguFM0G2fH 05zKlMepZlTYAq6gI++PdA1VUq8Nld6G8AeOy/ZogAUbNisqaOjgi0n/zOsB0+bm CdZKADNk7qszkX5W8/DU5dtXMFxnZlcTAg9Z+GXRYREiF7P8SNFLqUchAvPsBAxA gbrR4+I6j2DVeX7L+WAQQ3UpzBmLWqMmIKsTt5HtWYMNsq3ZCHmDbodzvPP/Uyym Weob/qOLADKrIMu2yCMXQIFe7uq3CfeRTvq5UgPPEpJrYEaeXH+4Xdwc4BNfjETc rvbeylRVPdhRAtb+OikpCD+0FflnpWQsbXiZz9+HAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdrIKozboVTBU6BcQiLf0RId0WF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZDAxYWZlLTE1NDItNGFiNy1hYWI5LTljMjhlMDc4ZWEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo7jANBgkqhkiG9w0BAQsFAAOCAQEAPK+Y8ZY65/vKFRF7e9qdwHA2zLKt OLFyM9QvUO1UOIvPMAxeuAkMkKyX8GUOC0rtLw2z28H+QYV5w9EPiN3Sh/rgbXeD 0xlvUlbh9UJKxTBMjgsAgnG8MjveUNiZ2bTi21hfnqb6Nuz+NFr4tGS8uCSsaRMP hEZEOTcJffb2MVRMvd6Rqd7aOpHNSIcKtbZEWvV9+QT693yVedyWcmgCZliL/7z0 q8Aow8ECLyDgxr7LmTYN5s2+fWFJuzkWov5nzb4/4C3IaaPc4A7VjRSuAq7OSRHo /PPbbZt8Lwb0w4iKfCXFXAsXIecCpehktjmqps9JGkALcKQpFdmtuXrG7Q== -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:35 2025 by rpki-client