$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa File: 95fb205d-987d-4fa2-b75a-8819afe4b558.roa (raw, json) Hash identifier: h+BU+p/70CLVK0vvTtpKtDuvmxKGKeasl+210rk9yeY= Subject key identifier: B7:97:5C:5D:98:C8:FD:F2:EA:87:40:EC:7B:E8:69:17:61:E5:F6:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C8F05AED4CE2D0570B9B89143A813A42C7BCB14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa Signing time: Wed 20 Aug 2025 00:10:18 +0000 ROA not before: Wed 20 Aug 2025 00:10:18 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.22.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8f:05:ae:d4:ce:2d:05:70:b9:b8:91:43:a8:13:a4:2c:7b:cb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:10:18 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=17339e63395f3afd32f8e8af2b69a850177acfb7716d3199be4f1576968ca9c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:b0:b9:6a:4e:7d:d4:b8:d0:5d:6c:18:6c: 33:cf:9d:d6:c1:b1:fb:f7:20:91:41:b7:86:31:ef: 8e:27:03:52:72:57:e9:6f:2a:76:1c:13:a8:84:4a: 64:43:b3:f0:54:94:95:1c:23:50:12:97:6e:82:b0: 7f:82:54:12:8d:9e:ff:49:c0:ea:f8:cd:82:fa:34: b3:0c:cf:13:72:a7:0a:66:8e:30:d3:fa:78:e0:c0: 08:9c:e2:2f:62:cd:e0:11:89:21:e6:65:f7:df:66: 79:64:0f:d6:39:cb:f3:d3:5b:7b:9a:25:34:c6:23: 59:1f:71:b3:73:bc:f6:9d:22:72:7a:3f:d4:18:ba: 52:01:77:0e:0c:a6:ce:63:0c:2c:49:b4:d5:d2:24: 4e:26:26:c8:b1:c1:a2:6a:d2:2b:31:83:ab:1d:66: 36:c6:e0:65:c9:39:0c:71:6f:e7:82:13:40:1e:ea: 25:c8:25:d0:ba:77:0e:b5:fd:af:37:3d:55:b7:3a: 1b:98:db:c8:b4:24:52:a4:f4:5b:48:39:f2:32:9f: d3:f0:7d:42:26:ff:be:c1:56:1f:b8:b3:39:fd:d0: 94:99:d4:0a:84:16:4b:5e:fd:74:d8:4d:42:4c:06: 2a:82:22:91:a3:73:59:97:bf:7e:64:a9:6c:12:19: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:5C:5D:98:C8:FD:F2:EA:87:40:EC:7B:E8:69:17:61:E5:F6:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.22.192.0/18 Signature Algorithm: sha256WithRSAEncryption d3:52:48:15:61:2d:ea:5e:7c:3b:6f:83:2a:73:bd:d4:c7:a0: 37:a4:63:cb:48:90:c3:c9:ff:23:cb:7b:f7:dd:b9:96:0d:7a: 30:3b:5d:ac:53:eb:93:58:4a:39:9b:c6:bc:53:30:15:1e:da: d5:a9:72:e3:4e:ac:fd:3d:27:5b:13:46:62:20:07:3a:97:5b: c9:9f:95:7d:61:c6:07:7e:7c:d3:b1:58:3d:49:fb:72:6b:1b: a5:31:e6:5b:dc:14:5c:c2:d6:34:1a:5e:b6:4f:c5:45:22:91: 80:8c:92:31:ef:3f:2c:a5:49:17:56:10:ad:56:27:61:3a:f5: cc:96:0c:c8:a1:02:e4:39:d4:05:d5:b1:f7:cd:59:ec:d9:43: ee:16:3a:14:c5:03:5f:6f:53:2a:a0:90:4f:83:85:59:d6:38: 86:f4:63:a7:94:dd:4b:3e:04:3e:31:ff:cf:50:55:27:db:6c: 44:c5:f0:f8:14:76:57:d1:c2:c2:5a:b5:4b:be:b1:0e:fa:ff: db:03:fd:df:0e:14:a7:50:5b:7b:d8:2a:3a:b6:bc:d7:73:96: 0f:4f:d7:4a:26:00:df:7b:c7:c6:73:7c:4f:cc:82:90:e4:ed: f2:90:67:f9:d6:c7:ec:ae:a7:b8:75:df:20:70:48:79:26:e5: a4:d4:be:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXI8FrtTOLQVwubiRQ6gTpCx7yxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAxMDE4WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzMzOWU2MzM5NWYzYWZkMzJmOGU4YWYyYjY5YTg1MDE3 N2FjZmI3NzE2ZDMxOTliZTRmMTU3Njk2OGNhOWM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiYLC5ak591LjQXWwYbDPPndbBsfv3IJFBt4Yx744nA1Jy V+lvKnYcE6iESmRDs/BUlJUcI1ASl26CsH+CVBKNnv9JwOr4zYL6NLMMzxNypwpm jjDT+njgwAic4i9izeARiSHmZfffZnlkD9Y5y/PTW3uaJTTGI1kfcbNzvPadInJ6 P9QYulIBdw4Mps5jDCxJtNXSJE4mJsixwaJq0isxg6sdZjbG4GXJOQxxb+eCE0Ae 6iXIJdC6dw61/a83PVW3OhuY28i0JFKk9FtIOfIyn9PwfUIm/77BVh+4szn90JSZ 1AqEFkte/XTYTUJMBiqCIpGjc1mXv35kqWwSGQuDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt5dcXZjI/fLqh0Dse+hpF2Hl9l0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1ZmIyMDVkLTk4N2QtNGZhMi1iNzVhLTg4MTlhZmU0YjU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZFFsAwDQYJKoZIhvcNAQELBQADggEBANNSSBVhLepefDtvgypzvdTHoDek Y8tIkMPJ/yPLe/fduZYNejA7XaxT65NYSjmbxrxTMBUe2tWpcuNOrP09J1sTRmIg BzqXW8mflX1hxgd+fNOxWD1J+3JrG6Ux5lvcFFzC1jQaXrZPxUUikYCMkjHvPyyl SRdWEK1WJ2E69cyWDMihAuQ51AXVsffNWezZQ+4WOhTFA19vUyqgkE+DhVnWOIb0 Y6eU3Us+BD4x/89QVSfbbETF8PgUdlfRwsJatUu+sQ76/9sD/d8OFKdQW3vYKjq2 vNdzlg9P10omAN97x8ZzfE/MgpDk7fKQZ/nWx+yup7h13yBwSHkm5aTUvj8= -----END CERTIFICATE-----Generated at Sat Aug 23 07:01:54 2025 by rpki-client