$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa File: 7840150d-90b6-4a97-8609-5a40556c4e1b.roa (raw, json) Hash identifier: pt0SrGG9WJ1jk4ZgTy5fJPgqNFNnM5kLZ+3ouBtVoPE= Subject key identifier: 95:7E:26:2A:9E:18:0E:3A:15:85:DC:C9:16:B8:89:16:53:E7:47:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EF7943089DEED50F0387E3952D9B93E637CC97F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa Signing time: Wed 13 Aug 2025 00:00:57 +0000 ROA not before: Wed 13 Aug 2025 00:00:57 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f7:94:30:89:de:ed:50:f0:38:7e:39:52:d9:b9:3e:63:7c:c9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:00:57 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=6bdc93d87b5b5ef3410d3161deaf8a71dd9184348ec35ba9fb80b3e46fba6b9e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:be:d5:7c:8f:e4:72:67:47:b7:96:6d:20: 89:ea:58:ad:21:60:c3:07:71:f5:56:2e:f6:42:1e: c9:a4:aa:fb:51:d2:01:06:11:14:fb:4b:32:91:b8: f1:ff:17:97:f7:2d:ef:6a:4b:e3:2d:df:70:26:0c: 3a:38:c7:62:e3:86:fc:c1:57:ec:33:79:c9:43:dc: 90:13:1b:c5:64:a8:1a:c2:13:96:4e:82:bf:9e:68: 7e:45:1c:c2:a5:f5:e1:c4:cd:5b:6b:3e:36:ad:e6: 2c:07:b7:53:dc:49:1c:0a:b0:1e:be:03:04:c8:0e: 62:a6:f2:6a:1f:d5:7f:0a:dd:53:26:ce:ed:89:c3: ea:c5:b7:88:0f:1b:aa:da:1c:a9:f3:a7:a5:3c:47: 93:31:0a:2f:f8:af:d3:ec:13:70:fd:8e:27:85:f2: 22:12:ab:d1:f0:ad:d4:4a:43:41:d8:90:6d:a9:12: cb:a9:ad:f2:fa:cc:dd:13:c6:0d:93:04:9e:31:b4: a3:c3:4c:b5:27:8a:2f:26:a8:c3:30:b9:26:b8:2e: 7a:83:61:b4:57:08:3a:58:82:60:61:aa:ab:f8:51: dc:5d:11:69:4c:20:fd:a0:dc:e3:20:1d:4e:31:e3: 38:e0:d0:c4:23:4a:66:cd:f7:af:e0:f7:17:d8:e0: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7E:26:2A:9E:18:0E:3A:15:85:DC:C9:16:B8:89:16:53:E7:47:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.149.32.0/19 Signature Algorithm: sha256WithRSAEncryption ae:87:77:f9:42:5b:d4:69:36:59:3c:5c:4d:5f:9b:a8:13:02: b1:a1:96:35:93:2c:7f:65:47:4e:07:29:d5:89:61:53:a5:ab: c6:4c:fd:08:26:9e:55:60:9d:0e:d1:ba:28:25:a8:bb:77:e9: 17:a3:8d:e9:75:79:5e:83:20:a9:8f:b8:46:30:fd:59:92:ff: 62:51:f6:32:b4:08:86:16:ea:87:9a:af:ea:20:78:57:6f:95: 67:ef:e1:07:bf:7b:16:af:85:01:e6:bb:bc:ea:12:57:a8:e8: ad:29:91:84:f1:c3:cb:f1:88:5a:50:ba:6f:21:0f:18:44:ba: 9c:3b:37:ce:75:04:c0:90:10:bb:f4:61:6a:8e:8c:3a:1b:2a: c8:06:4d:61:03:0c:d8:ed:8c:55:3e:3b:ea:73:e5:2c:72:a9: 83:b2:d8:a8:03:4e:6d:ed:ee:40:23:21:cf:36:f2:fe:52:dc: d0:8c:18:53:84:d6:51:12:25:f3:38:00:d6:5b:5f:f8:07:67: f8:fb:a7:53:0b:16:4f:2a:58:ee:c1:bb:43:4f:37:0b:3b:7c: b8:a3:68:57:ec:93:4e:50:71:02:3f:fc:70:02:d0:79:3a:36: 2d:22:6c:66:0d:b9:b2:f6:02:56:62:ea:4c:d8:c1:a9:67:6b: 29:2c:53:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTveUMIne7VDwOH45Utm5PmN8yX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMDU3WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmRjOTNkODdiNWI1ZWYzNDEwZDMxNjFkZWFmOGE3MWRk OTE4NDM0OGVjMzViYTlmYjgwYjNlNDZmYmE2YjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeH77VfI/kcmdHt5ZtIInqWK0hYMMHcfVWLvZCHsmkqvtR 0gEGERT7SzKRuPH/F5f3Le9qS+Mt33AmDDo4x2LjhvzBV+wzeclD3JATG8VkqBrC E5ZOgr+eaH5FHMKl9eHEzVtrPjat5iwHt1PcSRwKsB6+AwTIDmKm8mof1X8K3VMm zu2Jw+rFt4gPG6raHKnzp6U8R5MxCi/4r9PsE3D9jieF8iISq9HwrdRKQ0HYkG2p EsuprfL6zN0Txg2TBJ4xtKPDTLUnii8mqMMwuSa4LnqDYbRXCDpYgmBhqqv4Udxd EWlMIP2g3OMgHU4x4zjg0MQjSmbN96/g9xfY4DEVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlX4mKp4YDjoVhdzJFriJFlPnR8QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4NDAxNTBkLTkwYjYtNGE5Ny04NjA5LTVhNDA1NTZjNGUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXNlSAwDQYJKoZIhvcNAQELBQADggEBAK6Hd/lCW9RpNlk8XE1fm6gTArGh ljWTLH9lR04HKdWJYVOlq8ZM/QgmnlVgnQ7RuiglqLt36Rejjel1eV6DIKmPuEYw /VmS/2JR9jK0CIYW6oear+ogeFdvlWfv4Qe/exavhQHmu7zqEleo6K0pkYTxw8vx iFpQum8hDxhEupw7N851BMCQELv0YWqOjDobKsgGTWEDDNjtjFU+O+pz5SxyqYOy 2KgDTm3t7kAjIc828v5S3NCMGFOE1lESJfM4ANZbX/gHZ/j7p1MLFk8qWO7Bu0NP Nws7fLijaFfsk05QcQI//HAC0Hk6Ni0ibGYNubL2AlZi6kzYwalnayksUzY= -----END CERTIFICATE-----Generated at Sat Aug 23 07:02:14 2025 by rpki-client