$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa File: 9450df7f-a952-4d04-9779-708f4bfedc40.roa (raw, json) Hash identifier: FQ6y9EEDX+ZMjvnw/69NGOB2YMVhhMf8FKIhvPLYVls= Subject key identifier: C4:0E:B6:CD:4E:77:D9:FB:3C:89:C2:84:03:E9:74:F1:80:8A:0D:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A859D46EC2486B48FEF78D571CCD3A04FD15F98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa Signing time: Fri 15 Aug 2025 00:31:12 +0000 ROA not before: Fri 15 Aug 2025 00:31:12 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 151.148.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:85:9d:46:ec:24:86:b4:8f:ef:78:d5:71:cc:d3:a0:4f:d1:5f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:31:12 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=8a023fd158ad877c3a78443e6b2ccfac3b367274e8fdff24dd401f5dfb9564b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:d7:f0:5c:2e:0d:27:61:2a:fc:9b:7d:52: 65:9e:01:4d:cc:61:56:7e:fa:e2:2c:48:d7:24:a4: 44:17:c6:e2:79:54:b0:b2:99:b5:e1:26:cd:82:5a: 5a:17:93:d9:be:ea:c4:ed:d2:f6:08:a5:19:47:ab: e1:47:55:85:d4:db:fa:b5:6f:4a:7f:1f:d7:cf:c3: ac:6b:43:b9:94:ce:31:4a:6f:54:20:86:0f:71:f0: 80:05:ad:0a:eb:ee:d4:6f:42:78:0f:aa:2a:89:bb: 64:b1:8e:d8:60:ce:09:48:73:5d:4f:c8:36:25:0d: 32:1b:b0:41:ed:83:92:42:a8:17:a8:de:1e:88:1c: 97:fe:3d:b5:11:a3:90:7b:a3:40:ac:78:9a:03:a7: 38:f2:2d:78:2a:40:e1:e3:fe:fe:77:d5:b2:2b:54: 9d:20:db:ee:70:70:d1:75:af:72:d3:29:65:9e:d4: 3e:24:44:38:b4:1e:83:5e:54:54:9a:6b:8f:bf:00: b9:fc:87:ae:fc:6d:b3:12:2f:4b:1b:6f:b4:50:c1: ff:af:01:89:ee:fd:e2:e6:b1:fd:ad:93:c2:da:9b: bb:f9:3d:1a:c6:a1:73:a8:36:79:2f:4d:7d:03:34: c0:5a:10:44:04:93:80:17:d7:8e:d0:85:e7:33:ab: 1c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0E:B6:CD:4E:77:D9:FB:3C:89:C2:84:03:E9:74:F1:80:8A:0D:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.20.0/24 Signature Algorithm: sha256WithRSAEncryption 27:04:f5:8d:13:9f:f9:8f:25:f9:8a:1d:1e:ce:f3:11:b6:3c: 7e:bb:e4:b8:90:76:a1:c7:bd:b3:4f:b5:3f:08:67:6c:6f:34: 98:7c:4e:57:6c:fa:4b:d1:fd:87:7e:cf:b3:03:83:f0:2b:18: 4c:0b:c8:1f:4c:2b:a2:9b:51:1c:7b:06:e7:f9:c6:d5:08:f4: f9:23:04:08:3e:f7:99:a0:21:76:61:00:bb:a1:c1:44:26:e9: bd:8d:a6:0b:83:d5:65:88:f7:0f:d0:80:0f:44:90:d2:8c:1c: 4a:41:07:09:f9:37:9c:3c:36:74:4f:15:56:0c:f2:58:e8:49: 9c:cc:cd:c9:eb:46:3e:03:46:09:d2:d1:20:27:e4:b1:87:67: 11:f5:8a:d9:27:5f:3c:13:4d:61:51:fa:be:47:69:19:6d:4c: 10:f8:6b:63:68:94:6f:aa:0c:0c:56:c0:fa:bc:51:38:07:f8: 5e:39:5f:41:e4:f9:28:8f:24:e2:6e:1e:79:4c:40:7a:81:d1: 46:f2:b6:c3:10:4b:2c:21:08:c9:8f:9c:a9:56:3b:ac:78:ad: 0b:47:7d:5f:1a:47:7a:9f:1b:3e:b7:aa:7a:92:3a:62:31:80: e6:8e:eb:31:e1:9e:88:b8:61:69:d3:d3:2c:8c:54:0c:9e:7d: 09:4e:b0:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaoWdRuwkhrSP73jVcczToE/RX5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDAzMTEyWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTAyM2ZkMTU4YWQ4NzdjM2E3ODQ0M2U2YjJjY2ZhYzNi MzY3Mjc0ZThmZGZmMjRkZDQwMWY1ZGZiOTU2NGI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrjtfwXC4NJ2Eq/Jt9UmWeAU3MYVZ++uIsSNckpEQXxuJ5 VLCymbXhJs2CWloXk9m+6sTt0vYIpRlHq+FHVYXU2/q1b0p/H9fPw6xrQ7mUzjFK b1Qghg9x8IAFrQrr7tRvQngPqiqJu2SxjthgzglIc11PyDYlDTIbsEHtg5JCqBeo 3h6IHJf+PbURo5B7o0CseJoDpzjyLXgqQOHj/v531bIrVJ0g2+5wcNF1r3LTKWWe 1D4kRDi0HoNeVFSaa4+/ALn8h678bbMSL0sbb7RQwf+vAYnu/eLmsf2tk8Lam7v5 PRrGoXOoNnkvTX0DNMBaEEQEk4AX147Qheczqxw3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxA62zU532fs8icKEA+l08YCKDakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NTBkZjdmLWE5NTItNGQwNC05Nzc5LTcwOGY0YmZlZGM0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlBQwDQYJKoZIhvcNAQELBQADggEBACcE9Y0Tn/mPJfmKHR7O8xG2PH67 5LiQdqHHvbNPtT8IZ2xvNJh8Tlds+kvR/Yd+z7MDg/ArGEwLyB9MK6KbURx7Buf5 xtUI9PkjBAg+95mgIXZhALuhwUQm6b2NpguD1WWI9w/QgA9EkNKMHEpBBwn5N5w8 NnRPFVYM8ljoSZzMzcnrRj4DRgnS0SAn5LGHZxH1itknXzwTTWFR+r5HaRltTBD4 a2NolG+qDAxWwPq8UTgH+F45X0Hk+SiPJOJuHnlMQHqB0UbytsMQSywhCMmPnKlW O6x4rQtHfV8aR3qfGz63qnqSOmIxgOaO6zHhnoi4YWnT0yyMVAyefQlOsFM= -----END CERTIFICATE-----Generated at Sat Aug 23 06:49:12 2025 by rpki-client