$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa File: 7671e404-27d3-4739-9da3-e9ffff3d4e14.roa (raw, json) Hash identifier: ikFonPW66EmQulkC+nIqYZMawm/D9OKJfiq7aJH1HnY= Subject key identifier: A2:54:7B:4A:BB:7B:C2:00:E4:14:3A:F6:18:ED:FD:67:DF:4D:F6:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5959EA0B118E2A5B4F3CAEF0700BB4D1694E84B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa Signing time: Tue 12 Aug 2025 00:50:15 +0000 ROA not before: Tue 12 Aug 2025 00:50:15 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.76.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:59:ea:0b:11:8e:2a:5b:4f:3c:ae:f0:70:0b:b4:d1:69:4e:84:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:50:15 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=bda77a54d2d63a5aec7443d0be91a8cfa514b29d84c330a677546d220dba8e26, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:5a:ce:8c:bd:87:7f:ce:99:20:d2:97:8d: c5:57:c3:8d:02:b4:f3:58:a3:b0:2b:ab:7a:e9:77: 52:30:f0:a6:88:c4:18:77:00:9a:6e:e5:d2:7c:96: 5f:1e:48:c1:7e:94:8a:84:70:c2:31:0b:dd:fa:27: cf:76:e0:0d:14:5e:b6:2b:0a:c7:06:fe:c8:ae:b6: 42:da:42:0b:a6:7a:b0:86:f5:04:63:12:35:b7:c3: 34:26:03:da:31:43:e9:ff:88:d7:8f:22:c0:ee:f9: 16:44:45:d6:84:c8:17:f3:1a:d5:cd:b2:bc:e5:fc: 20:53:f2:ba:3b:11:53:3f:bb:6f:2f:5e:6e:b5:bb: bd:85:c4:97:b8:ec:9c:f2:b5:3d:09:a8:7d:d7:22: 4b:a4:c6:41:2e:84:b5:dc:58:74:a9:24:b2:54:7b: 03:86:84:96:5f:a6:05:5c:66:9f:59:8b:40:ff:62: 41:b2:46:f7:3b:f1:bd:9f:3c:ff:58:5c:d5:b0:47: 5d:7f:b3:28:72:18:63:9c:02:ab:c2:af:08:e6:df: e7:73:11:b9:15:02:51:5b:ea:b9:6e:e3:ce:db:bd: 5e:0e:c6:88:ed:e8:13:8c:bf:12:53:24:ef:78:10: f3:9c:14:70:80:38:1e:4f:5f:f3:f8:a2:0c:3e:b5: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:7B:4A:BB:7B:C2:00:E4:14:3A:F6:18:ED:FD:67:DF:4D:F6:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.76.64.0/18 Signature Algorithm: sha256WithRSAEncryption 67:ee:74:93:aa:fc:2a:75:c1:35:be:3a:a9:32:dc:9b:86:e4: 06:46:58:da:89:da:84:f8:d0:9d:92:a7:13:00:f1:e7:79:75: b6:10:be:74:77:78:e4:fb:64:bc:ae:be:f1:a2:ad:02:6e:de: 02:b4:03:8f:6a:5d:4a:9c:e0:aa:bc:ca:05:28:21:ef:b8:e4: 55:b4:b2:63:4c:53:bd:95:87:5d:ed:fb:a6:10:55:c2:c8:0b: 99:b2:70:58:9f:9d:79:2b:8a:c0:01:df:3a:7c:e5:4c:6f:e9: 1a:31:75:48:a6:1d:3a:7d:95:29:d2:bf:a9:64:b1:b4:15:5d: 7b:6f:75:44:71:8f:42:23:0f:93:fc:67:bf:d5:bc:c5:7b:dd: 62:2c:18:18:3b:27:f0:77:6d:51:27:20:72:71:49:75:b5:e2: 9c:c7:6e:8e:e5:a5:3d:2d:4f:a1:59:a3:39:f7:3e:6f:62:27: b5:35:44:30:ff:b7:44:90:18:26:a0:45:24:05:9b:7b:51:19: 6a:84:4e:e9:0f:e6:8d:d6:9f:45:76:7a:24:6c:bd:9e:ab:61: e5:e0:dd:76:29:1f:c2:32:73:5c:34:df:b8:e2:cd:8e:b6:f6: a9:a7:87:ec:c8:64:f4:aa:fd:c1:76:87:a5:e2:a8:08:b2:16: 0a:e7:de:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWVnqCxGOKltPPK7wcAu00WlOhLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MDE1WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGE3N2E1NGQyZDYzYTVhZWM3NDQzZDBiZTkxYThjZmE1 MTRiMjlkODRjMzMwYTY3NzU0NmQyMjBkYmE4ZTI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCE/1rOjL2Hf86ZINKXjcVXw40CtPNYo7Arq3rpd1Iw8KaI xBh3AJpu5dJ8ll8eSMF+lIqEcMIxC936J8924A0UXrYrCscG/siutkLaQgumerCG 9QRjEjW3wzQmA9oxQ+n/iNePIsDu+RZERdaEyBfzGtXNsrzl/CBT8ro7EVM/u28v Xm61u72FxJe47JzytT0JqH3XIkukxkEuhLXcWHSpJLJUewOGhJZfpgVcZp9Zi0D/ YkGyRvc78b2fPP9YXNWwR11/syhyGGOcAqvCrwjm3+dzEbkVAlFb6rlu487bvV4O xojt6BOMvxJTJO94EPOcFHCAOB5PX/P4ogw+tUohAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUolR7Srt7wgDkFDr2GO39Z99N9hAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2NzFlNDA0LTI3ZDMtNDczOS05ZGEzLWU5ZmZmZjNkNGUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTEAwDQYJKoZIhvcNAQELBQADggEBAGfudJOq/Cp1wTW+Oqky3JuG5AZG WNqJ2oT40J2SpxMA8ed5dbYQvnR3eOT7ZLyuvvGirQJu3gK0A49qXUqc4Kq8ygUo Ie+45FW0smNMU72Vh13t+6YQVcLIC5mycFifnXkrisAB3zp85Uxv6RoxdUimHTp9 lSnSv6lksbQVXXtvdURxj0IjD5P8Z7/VvMV73WIsGBg7J/B3bVEnIHJxSXW14pzH bo7lpT0tT6FZozn3Pm9iJ7U1RDD/t0SQGCagRSQFm3tRGWqETukP5o3Wn0V2eiRs vZ6rYeXg3XYpH8Iyc1w037jizY629qmnh+zIZPSq/cF2h6XiqAiyFgrn3qg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:12 2025 by rpki-client