$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa File: 975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa (raw, json) Hash identifier: XsXbDSeqfa6RPI/fowfau0KqVgfbm9kF/znxRxHoKHM= Subject key identifier: E1:06:4F:4D:25:FA:5E:2E:EC:72:AB:CD:E0:5A:CF:30:02:D3:A0:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A9EF1CC81D04EC8D19EC47AEB6D08D8CD45D326 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa Signing time: Tue 12 Aug 2025 00:00:27 +0000 ROA not before: Tue 12 Aug 2025 00:00:27 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9e:f1:cc:81:d0:4e:c8:d1:9e:c4:7a:eb:6d:08:d8:cd:45:d3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:00:27 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=5dc5312ad96caf50e999f1e77c6d4d06f578bd9fe959eb317c3dd2156c8ff14f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:0e:fa:b5:66:87:90:77:c1:ff:06:61:03: 13:2f:61:d4:53:b0:e9:e6:9c:20:82:a5:bc:2b:45: 8a:5a:ae:64:6f:49:49:de:ac:fc:8e:f9:67:11:35: 8a:f4:c4:11:22:3a:b1:0b:cd:43:57:b5:11:dc:60: 91:6f:a5:23:f2:ea:98:8e:0c:9f:68:55:ff:27:eb: 70:66:28:99:77:ad:9f:b1:a1:d0:dc:83:00:12:c8: 2a:8e:7a:96:68:9f:8f:0d:44:76:30:27:8d:93:62: e6:3c:ed:67:64:54:9b:70:6c:31:a2:6f:f0:16:00: 7f:48:16:35:fc:7b:32:9e:93:89:bf:47:99:4f:29: a6:0e:f0:43:f0:7b:b9:51:e4:1d:f9:05:2f:cd:bb: 01:61:2a:17:e5:a9:99:38:9b:47:eb:96:be:5a:7b: 84:0f:bf:08:cd:a7:fc:23:1b:46:d5:a6:e4:7f:a8: 02:fd:3e:27:32:28:7a:f4:89:a1:6d:cb:c4:c7:c1: 4b:c7:bf:84:b7:27:63:ef:11:d2:69:23:9e:8b:ff: 20:43:6b:05:33:00:fc:e2:d6:bb:a7:80:05:e1:2f: b7:c2:fa:0f:41:b0:32:cb:85:a4:40:d4:fc:f8:e5: 93:34:7a:0e:05:a9:6d:f6:12:1e:d0:b1:f4:34:d8: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:06:4F:4D:25:FA:5E:2E:EC:72:AB:CD:E0:5A:CF:30:02:D3:A0:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption bc:54:19:85:88:b9:78:9b:51:fe:79:3a:b1:8b:00:b0:57:78: 63:0c:fd:9c:04:2b:fd:b1:7b:f2:6f:81:df:6c:11:a7:47:3d: 31:82:dc:52:f0:e9:35:63:51:c4:b2:72:c9:0c:dc:6d:5d:68: 9a:da:76:b5:c1:e5:1c:cb:0c:7b:e1:ee:57:7f:0b:87:34:7d: 20:21:d0:22:36:68:e3:3a:a9:0b:ba:41:e2:88:80:b8:9d:be: 23:1d:b6:80:e8:ca:dc:73:40:59:b0:42:e7:cf:63:6a:e7:d4: 77:fd:d4:38:8a:4e:7c:b7:70:32:64:aa:51:76:a6:30:80:d5: 9a:a1:bc:e9:19:9a:a1:86:29:08:42:c0:df:92:d0:22:d5:52: d1:fc:c9:77:b7:52:45:6a:cf:76:94:27:9f:be:98:7f:bc:b1: 58:5d:eb:fd:16:9b:e0:b8:46:2b:fe:30:a2:1d:34:5a:1d:f3: ae:ce:72:61:77:e8:12:65:47:72:7e:01:4b:65:90:0a:7d:15: 76:9c:26:99:52:13:85:45:63:8e:d2:09:55:d9:b4:88:c6:34: a3:35:a5:c7:49:41:81:78:b8:ed:56:39:11:2b:0f:2d:b5:15: 81:f4:e4:1e:60:ec:a0:f3:4a:54:54:f7:bf:34:32:90:e9:e3: 71:72:fb:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSp7xzIHQTsjRnsR6620I2M1F0yYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAwMDI3WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGM1MzEyYWQ5NmNhZjUwZTk5OWYxZTc3YzZkNGQwNmY1 NzhiZDlmZTk1OWViMzE3YzNkZDIxNTZjOGZmMTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOiQ76tWaHkHfB/wZhAxMvYdRTsOnmnCCCpbwrRYparmRv SUnerPyO+WcRNYr0xBEiOrELzUNXtRHcYJFvpSPy6piODJ9oVf8n63BmKJl3rZ+x odDcgwASyCqOepZon48NRHYwJ42TYuY87WdkVJtwbDGib/AWAH9IFjX8ezKek4m/ R5lPKaYO8EPwe7lR5B35BS/NuwFhKhflqZk4m0frlr5ae4QPvwjNp/wjG0bVpuR/ qAL9PicyKHr0iaFty8THwUvHv4S3J2PvEdJpI56L/yBDawUzAPzi1rungAXhL7fC +g9BsDLLhaRA1Pz45ZM0eg4FqW32Eh7QsfQ02ILPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4QZPTSX6Xi7scqvN4FrPMALToLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NWE5OGJhLWM0MzctNGQ2NS1iZjI2LWE0NmQ4ZDVkNDliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBALxUGYWIuXibUf55OrGLALBXeGMM /ZwEK/2xe/Jvgd9sEadHPTGC3FLw6TVjUcSycskM3G1daJradrXB5RzLDHvh7ld/ C4c0fSAh0CI2aOM6qQu6QeKIgLidviMdtoDoytxzQFmwQufPY2rn1Hf91DiKTny3 cDJkqlF2pjCA1ZqhvOkZmqGGKQhCwN+S0CLVUtH8yXe3UkVqz3aUJ5++mH+8sVhd 6/0Wm+C4Riv+MKIdNFod867OcmF36BJlR3J+AUtlkAp9FXacJplSE4VFY47SCVXZ tIjGNKM1pcdJQYF4uO1WORErDy21FYH05B5g7KDzSlRU9780MpDp43Fy+w0= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:19 2025 by rpki-client