$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa File: 96e165dc-4d07-4326-aacf-c4700465f695.roa (raw, json) Hash identifier: s6iy8RYbCxJ1tnGVBe3qm4p/HWGSLAWfLELaqAHW6pQ= Subject key identifier: 33:EF:82:43:6C:CA:54:71:B3:05:28:E7:4D:D8:39:43:5F:72:B0:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 476FC4A0F5AB5CBE15FBBEAC5C53F60AE4299CE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa Signing time: Fri 08 Aug 2025 00:20:38 +0000 ROA not before: Fri 08 Aug 2025 00:20:38 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.130.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6f:c4:a0:f5:ab:5c:be:15:fb:be:ac:5c:53:f6:0a:e4:29:9c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:20:38 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=c8a624da4d0935e8d62adc83ddbdaaf982b0cdca2ef5f4a593b3b9d69fdfae20, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:46:44:61:6d:af:3e:50:8e:70:7e:1a:61: 97:8c:28:e2:37:54:76:4d:54:69:53:e8:fd:f1:6c: fd:ca:6a:b6:78:8d:de:fd:61:21:4a:92:ac:04:2f: d6:2f:d5:af:dc:d6:dc:8b:b9:7e:98:47:4a:f9:63: be:81:1d:59:b2:78:20:ea:30:91:5f:67:a5:28:23: ce:66:08:b2:34:4b:23:93:c4:60:18:ef:e4:c8:bd: 9e:99:33:c5:9e:b4:be:32:58:5a:79:39:09:09:c0: 9e:48:6d:55:bf:d5:ce:a3:8f:59:10:a9:3d:09:93: c8:67:f5:ca:2e:17:3b:12:e4:14:35:0b:21:e1:02: e9:ba:6e:af:39:c1:2c:4a:ce:84:46:89:57:b4:a1: aa:ab:22:88:f9:fc:f2:9d:60:fd:97:9a:cf:f0:16: 17:22:22:5e:35:33:b7:4b:5b:4a:68:d3:0e:b4:5e: 8e:5c:47:06:6b:f4:0a:15:a9:b1:31:22:93:d9:fa: 5e:d8:22:dd:61:a2:70:a3:65:7d:f6:e7:4e:2c:6b: 5b:ce:89:28:2d:50:34:64:4e:27:6c:b0:8b:2d:72: 55:14:0a:b4:b0:f3:6e:21:99:1c:da:8c:7f:a5:70: da:d6:ac:df:d6:31:51:c7:a3:f1:52:23:28:ff:84: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:82:43:6C:CA:54:71:B3:05:28:E7:4D:D8:39:43:5F:72:B0:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.130.0.0/15 Signature Algorithm: sha256WithRSAEncryption a5:0e:be:03:bd:8b:0b:93:e9:59:01:6b:f3:eb:96:11:4c:c7: af:86:58:78:2c:d4:10:32:81:85:7e:84:d3:32:b4:d9:5a:d1: a3:0e:41:84:7e:bf:00:bc:98:2d:dd:a9:44:ed:1e:9b:28:c6: 72:10:16:99:6c:16:b3:9d:eb:70:d6:16:10:b6:73:04:a8:27: 0c:3a:27:34:b6:2e:ea:58:61:c2:e6:a0:08:18:bf:aa:86:75: 85:c3:f5:d4:e9:44:08:3f:76:77:66:a8:e9:22:5a:7f:a6:26: 44:f9:ee:d1:c1:93:83:5b:07:20:09:a2:9e:0e:e5:5f:3f:a8: 73:1e:a3:a9:12:b1:28:86:a3:63:86:66:2c:a7:5c:48:a1:69: 35:86:10:e9:8e:a5:e8:c1:79:1f:9c:be:6c:92:08:71:aa:0a: 61:7c:b3:97:e7:c3:8a:44:32:6e:f6:0b:90:f2:0c:36:10:7f: 45:0d:b0:14:d1:c3:1e:19:9c:04:70:45:cd:17:d8:4b:a6:56: ce:09:ad:eb:68:e1:56:ec:92:10:e1:a1:1c:f3:79:31:89:15: 26:f5:24:5c:a4:77:74:ad:29:40:6e:e0:3a:d3:11:60:be:ac: 87:65:6d:14:25:14:39:2f:1a:58:56:9b:55:14:24:7c:32:84: fa:0a:1e:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR2/EoPWrXL4V+76sXFP2CuQpnOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAyMDM4WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGE2MjRkYTRkMDkzNWU4ZDYyYWRjODNkZGJkYWFmOTgy YjBjZGNhMmVmNWY0YTU5M2IzYjlkNjlmZGZhZTIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjG0ZEYW2vPlCOcH4aYZeMKOI3VHZNVGlT6P3xbP3KarZ4 jd79YSFKkqwEL9Yv1a/c1tyLuX6YR0r5Y76BHVmyeCDqMJFfZ6UoI85mCLI0SyOT xGAY7+TIvZ6ZM8WetL4yWFp5OQkJwJ5IbVW/1c6jj1kQqT0Jk8hn9couFzsS5BQ1 CyHhAum6bq85wSxKzoRGiVe0oaqrIoj5/PKdYP2Xms/wFhciIl41M7dLW0po0w60 Xo5cRwZr9AoVqbExIpPZ+l7YIt1honCjZX32504sa1vOiSgtUDRkTidssIstclUU CrSw824hmRzajH+lcNrWrN/WMVHHo/FSIyj/hPRRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM++CQ2zKVHGzBSjnTdg5Q19ysOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2ZTE2NWRjLTRkMDctNDMyNi1hYWNmLWM0NzAwNDY1ZjY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFigjANBgkqhkiG9w0BAQsFAAOCAQEApQ6+A72LC5PpWQFr8+uWEUzHr4ZY eCzUEDKBhX6E0zK02VrRow5BhH6/ALyYLd2pRO0emyjGchAWmWwWs53rcNYWELZz BKgnDDonNLYu6lhhwuagCBi/qoZ1hcP11OlECD92d2ao6SJaf6YmRPnu0cGTg1sH IAming7lXz+ocx6jqRKxKIajY4ZmLKdcSKFpNYYQ6Y6l6MF5H5y+bJIIcaoKYXyz l+fDikQybvYLkPIMNhB/RQ2wFNHDHhmcBHBFzRfYS6ZWzgmt62jhVuySEOGhHPN5 MYkVJvUkXKR3dK0pQG7gOtMRYL6sh2VtFCUUOS8aWFabVRQkfDKE+goeMA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:36 2025 by rpki-client