$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf32fab-999e-4279-b732-33c0fe0c95ad.roa File: 8cf32fab-999e-4279-b732-33c0fe0c95ad.roa (raw, json) Hash identifier: 8SxispSjn75gImmUcbmig+7d5mVNbyai3fiYE1BcsuU= Subject key identifier: 3B:BA:77:90:D2:A9:32:71:E0:6D:9E:1E:0A:B0:67:62:54:3B:9F:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2966A05A7BC7EC66049FFE783B01CCAE7939E335 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf32fab-999e-4279-b732-33c0fe0c95ad.roa Signing time: Fri 22 Aug 2025 00:40:57 +0000 ROA not before: Fri 22 Aug 2025 00:40:57 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:66:a0:5a:7b:c7:ec:66:04:9f:fe:78:3b:01:cc:ae:79:39:e3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:40:57 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=89577f492057dc53ef8fdbdfab38f909a72df7ae94840fb133e05f6cdf71aaa8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:2a:99:da:80:d2:14:b9:45:ab:98:17:13: 96:14:b5:69:9e:1b:b2:8f:d7:3d:49:fe:55:1b:66: 87:e0:16:16:aa:31:ff:6e:d5:4e:fc:80:0c:a8:03: c3:be:a8:62:5e:03:72:21:9e:e0:bf:ed:b8:c9:0b: 2e:42:3f:6a:4f:0e:1d:e1:6f:74:75:db:5c:f4:ca: 40:7f:5c:b1:b2:94:8d:97:93:0c:35:25:c5:ea:68: a9:53:06:5b:62:9b:a5:5b:2f:9f:8e:89:1f:41:b6: e5:dd:9a:b0:1e:3a:00:39:a4:28:c3:28:1c:99:a0: f3:3e:0a:9e:ad:e5:f9:cb:b1:c5:0e:b1:10:a2:d6: f6:82:17:ab:8b:a0:74:85:60:61:95:28:fa:3c:61: 5e:3f:7e:b2:36:16:2b:4e:db:d0:c4:20:9d:d4:4b: d7:a6:fa:f9:42:08:14:ab:b9:2e:87:6e:bc:34:52: ee:e4:2a:7c:af:4b:06:ea:47:ad:7c:8f:cf:8e:4a: 73:1f:32:bf:5f:5f:c1:c2:f1:1a:15:83:e5:12:05: 0b:f2:42:78:f5:ab:41:f1:f1:f9:b7:27:47:33:af: 1e:95:01:9b:52:08:e3:42:17:17:0d:07:48:59:a4: 7e:01:b8:7b:a7:e4:f4:41:8f:2b:25:98:85:eb:78: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:77:90:D2:A9:32:71:E0:6D:9E:1E:0A:B0:67:62:54:3B:9F:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf32fab-999e-4279-b732-33c0fe0c95ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.188.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:2a:25:0e:c4:44:48:3d:2a:01:2f:44:cc:3d:6d:aa:3b:ef: 69:11:0f:a2:f7:f8:07:2a:d1:b9:3c:8e:7b:af:7b:00:1a:11: 81:12:62:aa:6e:bb:d8:19:98:f5:3e:99:dd:a8:01:a7:db:3f: e7:7d:4e:6f:0a:9a:55:41:a7:31:63:19:83:44:af:ee:ae:44: f0:11:82:6b:21:ff:18:78:c9:f4:3b:c2:72:d8:65:09:33:58: d5:f4:6a:22:59:6b:c2:f7:be:ea:fd:c4:56:c8:6e:63:ed:b3: 9d:d1:db:ee:95:67:bc:3a:9b:d6:35:67:b0:09:e5:4f:b9:ca: a8:cf:43:0a:da:13:28:f5:84:06:c4:da:aa:28:07:c5:98:77: 67:96:fa:c2:2c:2f:06:92:7a:7d:cb:45:12:ca:66:22:e6:87: 36:56:39:99:91:f9:ec:76:94:a6:5d:76:bc:0e:6a:aa:7c:4d: e4:ba:3a:c8:d8:02:12:84:bf:b7:2a:d8:77:79:26:db:87:cf: 02:38:41:5b:ff:e4:09:e1:60:a6:18:05:41:26:bb:17:fd:3e: fb:15:64:7d:05:a3:fd:64:3c:8d:c8:24:fc:e1:8f:d0:80:84: e9:df:7b:c3:43:8d:e8:86:7c:b4:c1:12:ce:b8:ca:c7:31:97: c3:f9:93:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKWagWnvH7GYEn/54OwHMrnk54zUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDA0MDU3WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTU3N2Y0OTIwNTdkYzUzZWY4ZmRiZGZhYjM4ZjkwOWE3 MmRmN2FlOTQ4NDBmYjEzM2UwNWY2Y2RmNzFhYWE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5PCqZ2oDSFLlFq5gXE5YUtWmeG7KP1z1J/lUbZofgFhaq Mf9u1U78gAyoA8O+qGJeA3IhnuC/7bjJCy5CP2pPDh3hb3R121z0ykB/XLGylI2X kww1JcXqaKlTBltim6VbL5+OiR9BtuXdmrAeOgA5pCjDKByZoPM+Cp6t5fnLscUO sRCi1vaCF6uLoHSFYGGVKPo8YV4/frI2FitO29DEIJ3US9em+vlCCBSruS6Hbrw0 Uu7kKnyvSwbqR618j8+OSnMfMr9fX8HC8RoVg+USBQvyQnj1q0Hx8fm3J0czrx6V AZtSCONCFxcNB0hZpH4BuHun5PRBjyslmIXreP0JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO7p3kNKpMnHgbZ4eCrBnYlQ7n98wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjZjMyZmFiLTk5OWUtNDI3OS1iNzMyLTMzYzBmZTBjOTVhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFALwwDQYJKoZIhvcNAQELBQADggEBABoqJQ7EREg9KgEvRMw9bao772kR D6L3+Acq0bk8jnuvewAaEYESYqpuu9gZmPU+md2oAafbP+d9Tm8KmlVBpzFjGYNE r+6uRPARgmsh/xh4yfQ7wnLYZQkzWNX0aiJZa8L3vur9xFbIbmPts53R2+6VZ7w6 m9Y1Z7AJ5U+5yqjPQwraEyj1hAbE2qooB8WYd2eW+sIsLwaSen3LRRLKZiLmhzZW OZmR+ex2lKZddrwOaqp8TeS6OsjYAhKEv7cq2Hd5JtuHzwI4QVv/5AnhYKYYBUEm uxf9PvsVZH0Fo/1kPI3IJPzhj9CAhOnfe8NDjeiGfLTBEs64yscxl8P5k/g= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:26 2025 by rpki-client