$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7717889e-c371-48ff-a08c-1bac4d892dd4.roa File: 7717889e-c371-48ff-a08c-1bac4d892dd4.roa (raw, json) Hash identifier: lmEOdmIhT9zf4mzaM5bvYZvnNjSmO4D5KZPHztVUF6Q= Subject key identifier: 9A:3B:7A:2A:A7:3C:D4:73:1A:32:7C:17:0F:07:BF:5E:EF:85:58:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62A7DC7D48EC37C9D2709DC1224DCCCA812367A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7717889e-c371-48ff-a08c-1bac4d892dd4.roa Signing time: Tue 19 Aug 2025 00:31:55 +0000 ROA not before: Tue 19 Aug 2025 00:31:55 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a7:dc:7d:48:ec:37:c9:d2:70:9d:c1:22:4d:cc:ca:81:23:67:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:55 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=511b673f42c364da00f871b6a77026be1311a2bb829881a88637d945065a5fc8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:cd:3f:7b:6d:76:9a:65:d5:b1:29:32:0a: 5f:f9:4b:f5:bf:40:82:2b:62:07:58:70:1b:14:b1: 7e:4a:ee:25:39:5d:de:c1:8f:a8:74:bc:1c:6a:97: 22:f2:51:ec:61:39:51:2a:35:15:40:4d:26:07:b6: ce:f9:bf:e1:7c:25:87:9e:e2:1a:e7:96:5d:8f:ff: 9a:bd:77:bb:f5:f8:d9:43:ac:32:bb:8b:89:f8:3f: 36:d3:ff:e2:c9:bd:34:af:7d:7c:3a:33:59:11:51: f9:fc:8a:2c:30:1f:2d:85:91:19:83:78:04:a9:87: 27:71:6f:80:e2:6e:12:81:7b:ff:c6:65:9f:4e:96: 8e:12:9b:3c:25:36:6f:c2:05:0c:be:ee:62:09:ea: f3:b9:1b:b4:69:69:fe:ba:ba:a5:65:62:d0:f2:37: e2:f2:28:a1:a9:aa:63:ac:a0:32:ff:88:c5:60:a6: 74:86:39:a1:5e:fd:3c:f9:bb:04:a4:d8:e5:eb:be: 55:ba:66:11:e7:b5:86:54:a4:b1:7f:70:fd:5f:18: 8d:45:de:e0:44:91:e9:2c:fb:13:62:5c:b4:86:79: 6e:8e:3c:63:4d:8b:75:c6:16:13:78:82:ee:9b:71: 0c:cd:01:9b:22:2f:ac:44:35:d4:a8:ff:d5:67:74: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3B:7A:2A:A7:3C:D4:73:1A:32:7C:17:0F:07:BF:5E:EF:85:58:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7717889e-c371-48ff-a08c-1bac4d892dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.80.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:1d:3b:36:af:59:55:25:1f:2e:0d:e1:1b:de:04:9f:4b:df: be:3e:c1:2e:ba:0d:1d:58:da:ef:45:ab:c9:c7:6b:91:1a:1f: 70:7b:e2:08:90:ef:05:cf:0b:04:7f:0c:fe:45:4d:c8:e0:87: fc:09:d9:16:70:7a:57:12:93:35:0e:b4:40:be:97:ab:f4:25: 48:d2:c2:86:d1:f5:dd:2e:89:4d:6f:27:16:e2:86:90:1e:99: 56:5f:19:15:71:b4:bc:1d:88:7f:fb:27:82:8a:69:f7:fe:68: 25:ff:18:06:f1:d6:3c:a6:d6:4c:08:14:d2:23:78:7d:bf:1e: 7c:f6:84:0e:1f:c4:21:f6:f3:44:22:43:5d:9f:e8:4d:bc:ba: e0:3e:ce:cb:9b:91:2a:fc:dc:0e:ef:d2:ab:95:9c:d1:ba:b3: 0c:36:4e:ba:d3:a3:b2:b9:fb:39:db:9e:29:3f:25:e9:1b:4b: 82:22:6c:f0:0e:71:ae:4c:85:11:d3:cf:58:7f:b1:b0:bf:10: 5d:c4:f7:fe:c5:46:56:d3:3c:43:91:4d:9c:0d:7c:71:08:79: 64:b7:f0:39:76:f6:df:e8:ad:36:dd:f4:95:6e:c3:f4:bb:a0: 0a:04:f7:da:14:89:05:03:b6:46:6e:81:23:7f:cb:b3:00:6f: 35:cb:05:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYqfcfUjsN8nScJ3BIk3MyoEjZ6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMTU1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTFiNjczZjQyYzM2NGRhMDBmODcxYjZhNzcwMjZiZTEz MTFhMmJiODI5ODgxYTg4NjM3ZDk0NTA2NWE1ZmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSoM0/e212mmXVsSkyCl/5S/W/QIIrYgdYcBsUsX5K7iU5 Xd7Bj6h0vBxqlyLyUexhOVEqNRVATSYHts75v+F8JYee4hrnll2P/5q9d7v1+NlD rDK7i4n4PzbT/+LJvTSvfXw6M1kRUfn8iiwwHy2FkRmDeASphydxb4DibhKBe//G ZZ9Olo4SmzwlNm/CBQy+7mIJ6vO5G7Rpaf66uqVlYtDyN+LyKKGpqmOsoDL/iMVg pnSGOaFe/Tz5uwSk2OXrvlW6ZhHntYZUpLF/cP1fGI1F3uBEkeks+xNiXLSGeW6O PGNNi3XGFhN4gu6bcQzNAZsiL6xENdSo/9VndHxPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmjt6Kqc81HMaMnwXDwe/Xu+FWDgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc3MTc4ODllLWMzNzEtNDhmZi1hMDhjLTFiYWM0ZDg5MmRkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjllAwDQYJKoZIhvcNAQELBQADggEBAAsdOzavWVUlHy4N4RveBJ9L374+ wS66DR1Y2u9Fq8nHa5EaH3B74giQ7wXPCwR/DP5FTcjgh/wJ2RZwelcSkzUOtEC+ l6v0JUjSwobR9d0uiU1vJxbihpAemVZfGRVxtLwdiH/7J4KKaff+aCX/GAbx1jym 1kwIFNIjeH2/Hnz2hA4fxCH280QiQ12f6E28uuA+zsubkSr83A7v0quVnNG6sww2 TrrTo7K5+znbnik/JekbS4IibPAOca5MhRHTz1h/sbC/EF3E9/7FRlbTPEORTZwN fHEIeWS38Dl29t/orTbd9JVuw/S7oAoE99oUiQUDtkZugSN/y7MAbzXLBVU= -----END CERTIFICATE-----Generated at Sat Aug 23 06:48:21 2025 by rpki-client