$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa File: 8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa (raw, json) Hash identifier: KGxp6s24WQWeo+WTqI3XxyoRMlkzEvEFpOif90qiVkc= Subject key identifier: 8E:ED:22:E0:37:2F:4B:B2:27:2F:2A:A9:3A:37:89:C6:AC:58:6D:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 501787D7CCB50E164E735FD325EE68CF130216C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa Signing time: Tue 05 Aug 2025 15:01:02 +0000 ROA not before: Tue 05 Aug 2025 15:01:02 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.80.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:17:87:d7:cc:b5:0e:16:4e:73:5f:d3:25:ee:68:cf:13:02:16:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 15:01:02 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a95b48f4a36d39ecac2e6bb52d4f0011be67f26a818410dab6bdb353ba2a9bad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:ca:16:60:eb:aa:8f:ea:7c:38:85:52:27: e4:9f:5b:bf:36:c8:3f:e5:1f:b5:db:fc:de:35:79: ef:9d:e0:e0:7d:6c:bc:af:ae:3d:f1:cc:69:c2:ab: 04:9d:41:2f:3a:55:fe:c0:9d:ac:af:4f:f6:33:7b: f1:92:a5:16:74:b2:7a:c8:6e:6d:79:c9:12:98:c9: 75:6a:60:cd:27:b9:02:6a:81:1c:c4:1b:bc:fe:87: ed:bb:f7:2a:78:66:75:ba:ba:52:13:b2:67:fa:aa: 8a:fb:1c:6d:6a:fd:b3:27:b7:40:40:43:62:16:ec: cd:e5:51:f7:63:d2:92:46:73:78:dc:ce:d6:12:75: b3:cd:d3:2a:6f:8d:d0:2a:d6:56:ba:cc:4d:5f:57: 44:b0:9e:a2:88:34:0f:75:d3:d0:6e:c7:c4:6a:e7: 5f:af:e1:80:1e:42:63:20:8d:73:c1:8f:5f:ce:35: 4a:72:04:b4:71:01:ac:3c:7c:0b:6f:88:ec:9e:85: 31:32:50:42:55:14:e9:42:2a:5f:11:c6:dd:0f:ef: 35:65:82:ba:42:bc:ba:95:f4:f9:16:a7:54:bd:3b: a9:c4:3f:4b:bd:91:3a:55:62:41:1c:b3:db:04:71: db:79:61:30:91:34:60:d4:19:03:bd:ea:6c:75:b1: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:22:E0:37:2F:4B:B2:27:2F:2A:A9:3A:37:89:C6:AC:58:6D:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.80.0.0/13 Signature Algorithm: sha256WithRSAEncryption 19:2a:ee:6d:9c:e9:6e:91:f2:4f:a7:e5:2c:b5:db:67:39:5b: a2:fb:e6:38:31:39:7a:2f:48:f9:a4:2f:df:61:57:82:a1:bc: ee:05:6a:98:71:b9:bd:24:79:74:68:ee:3d:db:98:4a:ed:30: dc:93:1f:a8:ce:0e:e0:5f:2a:90:01:73:40:75:ec:e3:95:39: af:13:63:12:41:3d:ca:18:6a:e6:72:38:15:22:3f:be:df:8f: 85:ef:d0:c1:76:de:94:2d:5b:95:40:07:64:80:39:66:15:e1: 65:b8:47:f0:86:45:dc:fc:68:bd:f2:d6:df:bd:c3:39:cf:51: 4d:c8:85:f9:c0:84:7a:67:12:68:06:19:dd:c9:4a:18:95:c7: 55:ad:be:5a:c9:b9:29:f8:8b:34:b1:bb:b8:31:f5:1e:6f:13: db:de:57:ce:0f:34:d8:34:60:2a:c7:36:93:cd:51:26:a1:9e: 12:01:7c:e8:10:5d:d4:4d:ff:2d:1e:4d:81:e0:a6:87:81:75: 3b:57:7c:1b:43:34:68:3f:63:7a:1d:6a:97:24:e0:9e:51:d6: 57:37:84:b6:32:2f:4a:c6:e2:0d:61:1e:b5:7c:b5:e3:93:f2: f6:0e:c8:b5:30:de:05:61:1f:7a:bf:5e:13:8d:25:85:ca:21: 1c:1b:59:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUBeH18y1DhZOc1/TJe5ozxMCFsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTUwMTAyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTViNDhmNGEzNmQzOWVjYWMyZTZiYjUyZDRmMDAxMWJl NjdmMjZhODE4NDEwZGFiNmJkYjM1M2JhMmE5YmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU5soWYOuqj+p8OIVSJ+SfW782yD/lH7Xb/N41ee+d4OB9 bLyvrj3xzGnCqwSdQS86Vf7AnayvT/Yze/GSpRZ0snrIbm15yRKYyXVqYM0nuQJq gRzEG7z+h+279yp4ZnW6ulITsmf6qor7HG1q/bMnt0BAQ2IW7M3lUfdj0pJGc3jc ztYSdbPN0ypvjdAq1la6zE1fV0SwnqKINA9109Bux8Rq51+v4YAeQmMgjXPBj1/O NUpyBLRxAaw8fAtviOyehTEyUEJVFOlCKl8Rxt0P7zVlgrpCvLqV9PkWp1S9O6nE P0u9kTpVYkEcs9sEcdt5YTCRNGDUGQO96mx1sfQ7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUju0i4DcvS7InLyqpOjeJxqxYbXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiY2ZjYzRmLWFkNGMtNDAyOC1iZmRiLWFkMjA1ZjdjYjJmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNiUDANBgkqhkiG9w0BAQsFAAOCAQEAGSrubZzpbpHyT6flLLXbZzlbovvm ODE5ei9I+aQv32FXgqG87gVqmHG5vSR5dGjuPduYSu0w3JMfqM4O4F8qkAFzQHXs 45U5rxNjEkE9yhhq5nI4FSI/vt+Phe/QwXbelC1blUAHZIA5ZhXhZbhH8IZF3Pxo vfLW373DOc9RTciF+cCEemcSaAYZ3clKGJXHVa2+Wsm5KfiLNLG7uDH1Hm8T295X zg802DRgKsc2k81RJqGeEgF86BBd1E3/LR5NgeCmh4F1O1d8G0M0aD9jeh1qlyTg nlHWVzeEtjIvSsbiDWEetXy145Py9g7ItTDeBWEfer9eE40lhcohHBtZfw== -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:35 2025 by rpki-client