$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json) Hash identifier: G+FOszkNZl1yOgE3FzhXZqzhkzTbOcX2ub2G2LDbpao= Subject key identifier: 18:F8:70:7F:40:7C:A2:18:A8:F0:60:69:94:0D:AC:0F:6D:35:9C:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10CABCB2FC29B12CBC6F78FE852F3777973CAD91 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa Signing time: Mon 18 Aug 2025 15:30:24 +0000 ROA not before: Mon 18 Aug 2025 15:30:24 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ca:bc:b2:fc:29:b1:2c:bc:6f:78:fe:85:2f:37:77:97:3c:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:30:24 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=8341840b788a8de4c9b32e1d2767e97f0a9ef3471d14290fd09662bf1646e3c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:0e:76:2b:25:b5:38:28:f5:d9:e2:9d:f3: 76:6a:35:68:8e:c6:a3:29:62:72:e8:72:59:3e:3b: 83:26:92:bc:b2:c4:31:37:69:38:f1:bf:83:73:44: 1a:77:c7:d9:72:53:b0:b2:5b:f3:cb:19:86:09:7f: 83:29:6c:f9:0e:4d:18:26:c4:46:e7:90:c4:81:88: 68:f8:22:da:f1:af:08:fb:6d:91:f2:86:07:48:b7: c2:04:5d:29:43:99:12:63:5c:eb:9f:38:a2:8f:c7: 64:18:42:61:5f:12:33:46:6b:69:3a:df:1c:d9:dd: 37:0e:6f:3a:33:f4:d5:1e:ac:d8:8d:8f:d9:02:87: ee:1e:e5:ca:fb:f0:78:44:0d:ff:b5:76:98:cc:d1: 17:19:0b:b9:82:cf:f5:22:61:16:54:18:b0:52:70: 99:e0:72:91:58:3b:ce:e2:ae:ff:9b:d6:17:fb:37: 60:d9:4c:dd:53:13:72:3c:68:15:33:de:4c:04:a6: 9d:3d:60:89:6c:01:3d:ac:ec:b9:f1:33:6e:0a:a0: 38:d5:47:c8:fe:85:11:c9:44:b4:8b:75:73:df:57: 67:79:4f:10:46:37:bc:83:4b:cf:1b:0c:55:c4:7b: 4a:b1:c3:0d:13:33:6f:f5:a7:64:c2:5c:57:14:97: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F8:70:7F:40:7C:A2:18:A8:F0:60:69:94:0D:AC:0F:6D:35:9C:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.96.0/19 Signature Algorithm: sha256WithRSAEncryption 70:85:03:3f:13:bb:67:3f:87:08:15:b1:f6:e4:ec:7c:0f:1d: a2:6d:ba:52:f6:b8:22:9c:18:bc:b6:47:24:47:b0:2a:0e:5e: 80:d8:cb:99:0e:ad:59:eb:da:a3:93:c3:ab:e1:e6:25:52:3f: 49:38:63:c3:ea:48:e4:bd:5e:a9:3c:ea:2a:e2:0b:f5:8f:f4: b7:48:64:73:b6:e7:db:72:6d:e1:ff:d2:41:d9:75:66:60:4a: 83:45:c4:e0:bf:ee:ce:19:e9:29:26:b2:7d:af:de:f7:74:06: f7:98:26:a4:ca:08:81:fe:47:61:23:de:af:51:d3:2a:63:e1: 3f:aa:88:16:10:20:6e:27:a8:55:78:dd:c2:76:5c:0f:78:2e: b6:a7:32:de:df:e5:55:73:aa:87:e6:da:73:3c:a5:a9:e8:a3: 1e:d2:81:7d:36:58:2d:60:95:f3:d1:7a:fe:7a:ef:23:d7:db: 47:f9:88:89:26:74:1c:00:f8:92:8f:36:5b:24:dc:cb:65:36: 36:49:46:29:28:97:8b:3c:90:1a:e0:c8:a3:bd:84:cf:a3:13: 69:e8:c4:c9:a4:98:80:1d:54:b7:fc:f3:6d:c4:30:be:b9:2c: 4f:f6:ce:91:d6:ec:3a:c8:e9:f3:4a:cb:99:2b:46:cc:5d:d5: 6d:4e:52:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEMq8svwpsSy8b3j+hS83d5c8rZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMDI0WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQxODQwYjc4OGE4ZGU0YzliMzJlMWQyNzY3ZTk3ZjBh OWVmMzQ3MWQxNDI5MGZkMDk2NjJiZjE2NDZlM2M3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXMg52KyW1OCj12eKd83ZqNWiOxqMpYnLoclk+O4Mmkryy xDE3aTjxv4NzRBp3x9lyU7CyW/PLGYYJf4MpbPkOTRgmxEbnkMSBiGj4Itrxrwj7 bZHyhgdIt8IEXSlDmRJjXOufOKKPx2QYQmFfEjNGa2k63xzZ3TcObzoz9NUerNiN j9kCh+4e5cr78HhEDf+1dpjM0RcZC7mCz/UiYRZUGLBScJngcpFYO87irv+b1hf7 N2DZTN1TE3I8aBUz3kwEpp09YIlsAT2s7LnxM24KoDjVR8j+hRHJRLSLdXPfV2d5 TxBGN7yDS88bDFXEe0qxww0TM2/1p2TCXFcUl5HLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGPhwf0B8ohio8GBplA2sD201nAkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNTUxNTc1LWZkYTgtNDBjZC1hMDEyLTJkZDk4ZjU0YTM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGDWAwDQYJKoZIhvcNAQELBQADggEBAHCFAz8Tu2c/hwgVsfbk7HwPHaJt ulL2uCKcGLy2RyRHsCoOXoDYy5kOrVnr2qOTw6vh5iVSP0k4Y8PqSOS9Xqk86iri C/WP9LdIZHO259tybeH/0kHZdWZgSoNFxOC/7s4Z6Skmsn2v3vd0BveYJqTKCIH+ R2Ej3q9R0ypj4T+qiBYQIG4nqFV43cJ2XA94LranMt7f5VVzqofm2nM8panoox7S gX02WC1glfPRev567yPX20f5iIkmdBwA+JKPNlsk3MtlNjZJRikol4s8kBrgyKO9 hM+jE2noxMmkmIAdVLf8823EML65LE/2zpHW7DrI6fNKy5krRsxd1W1OUiI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:51 2025 by rpki-client