$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa File: a583480e-e1d9-4d35-8137-1605a5cfffc9.roa (raw, json) Hash identifier: Wo7KrKSrbNCL1hqz9CT31I91v1KLeE1un7cZRkMwX74= Subject key identifier: 77:42:7D:B5:CA:E2:AD:B2:89:DB:E6:D9:74:D0:F0:B7:8A:17:55:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A1F6F1E8DA49D10953637A0B2DF68ED360EB57B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa Signing time: Sat 16 Aug 2025 00:20:28 +0000 ROA not before: Sat 16 Aug 2025 00:20:28 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 37.203.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1f:6f:1e:8d:a4:9d:10:95:36:37:a0:b2:df:68:ed:36:0e:b5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:20:28 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=f7d76740028a9298812dc2ff73482dec89791c8066f44f0f59dd49d84edb8648, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:87:04:0e:ad:f1:e5:73:8f:b5:08:52:14: 5c:9b:08:ef:77:70:5c:6f:4b:bf:e9:53:1d:63:2a: b2:69:a2:78:ea:5b:2b:f9:5b:84:b3:1d:c7:12:ec: fa:68:65:7f:24:de:7e:7a:13:80:f6:e3:b5:68:1e: 31:90:40:84:8e:3f:b4:0f:e0:d3:30:ab:79:e9:4e: 11:8c:f0:7e:86:d5:cd:e7:c8:01:58:5f:a0:00:37: 57:73:ed:24:fa:4b:44:e0:26:47:0a:83:80:67:72: 5b:54:8b:56:66:4e:86:5a:7e:0f:2e:de:3b:e8:23: d4:74:6c:2f:e4:1c:ee:18:f2:49:b8:f3:bc:14:36: e2:5a:72:bc:ab:4b:c7:d3:a2:15:7a:1f:7c:27:ee: d3:e2:67:33:1a:0f:ac:55:f7:45:e9:e8:34:5d:45: 12:c8:4c:19:c2:0a:2b:c5:ae:8a:e8:03:58:41:07: cf:10:1a:70:9d:e5:ed:16:43:e7:dc:3b:b9:89:90: 2b:72:0d:49:04:0e:49:8c:f8:3a:fb:49:be:28:9b: ea:27:11:71:2e:80:93:d4:ba:8d:35:40:8d:d8:35: 1d:98:3d:cb:6a:51:24:e6:cd:a1:7e:dd:2b:19:8f: 18:87:05:a1:c3:ea:56:6f:53:06:fc:d6:3c:20:49: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:42:7D:B5:CA:E2:AD:B2:89:DB:E6:D9:74:D0:F0:B7:8A:17:55:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.184.0/24 Signature Algorithm: sha256WithRSAEncryption 38:1f:1e:12:1f:f2:ba:2e:7f:58:26:61:7f:6a:72:4f:41:ef: b5:4a:aa:1b:68:4e:50:95:46:a5:19:4c:9c:10:fe:64:2c:5f: b7:5a:83:70:95:44:b1:b4:e1:fd:1c:7a:d9:ed:a5:1a:be:38: ea:88:8c:10:38:cb:d1:be:31:df:80:a0:12:0b:5d:56:9e:a8: ec:29:f6:b8:b2:88:77:d9:05:a3:1d:81:eb:e0:1b:dd:f9:3c: db:6f:0c:dc:c4:a4:17:b4:e5:95:64:d3:ea:a6:cf:87:ab:35: 43:e5:7c:2f:14:d8:61:fd:66:a2:74:c7:98:93:c6:96:3a:d3: f3:b0:d1:3b:c6:a6:e3:8c:a9:da:2c:e5:c1:91:3a:88:89:7f: 4a:06:c2:e1:bd:08:98:64:00:dc:64:80:4f:db:7c:86:ee:3c: e3:4a:24:47:4b:f2:74:f1:af:a0:e5:0e:3b:25:50:7a:1a:f4: 3f:c7:67:87:5b:77:28:b6:3b:40:be:af:16:68:60:c8:2e:d9: 67:97:75:1a:03:70:ec:49:aa:07:3f:fc:d1:7f:b4:f1:2d:a8: d7:2c:3d:7d:c8:86:2d:7a:be:af:31:56:08:33:dc:08:1f:ea: de:3d:0c:3c:b9:5a:c7:85:6e:69:5d:c7:de:d5:c9:d1:dd:79: bd:a8:46:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWh9vHo2knRCVNjegst9o7TYOtXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAyMDI4WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2Q3Njc0MDAyOGE5Mjk4ODEyZGMyZmY3MzQ4MmRlYzg5 NzkxYzgwNjZmNDRmMGY1OWRkNDlkODRlZGI4NjQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC08IcEDq3x5XOPtQhSFFybCO93cFxvS7/pUx1jKrJponjq Wyv5W4SzHccS7PpoZX8k3n56E4D247VoHjGQQISOP7QP4NMwq3npThGM8H6G1c3n yAFYX6AAN1dz7ST6S0TgJkcKg4BncltUi1ZmToZafg8u3jvoI9R0bC/kHO4Y8km4 87wUNuJacryrS8fTohV6H3wn7tPiZzMaD6xV90Xp6DRdRRLITBnCCivFroroA1hB B88QGnCd5e0WQ+fcO7mJkCtyDUkEDkmM+Dr7Sb4om+onEXEugJPUuo01QI3YNR2Y PctqUSTmzaF+3SsZjxiHBaHD6lZvUwb81jwgSUcbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd0J9tcrirbKJ2+bZdNDwt4oXVcYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1ODM0ODBlLWUxZDktNGQzNS04MTM3LTE2MDVhNWNmZmZjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAly7gwDQYJKoZIhvcNAQELBQADggEBADgfHhIf8rouf1gmYX9qck9B77VK qhtoTlCVRqUZTJwQ/mQsX7dag3CVRLG04f0cetntpRq+OOqIjBA4y9G+Md+AoBIL XVaeqOwp9riyiHfZBaMdgevgG935PNtvDNzEpBe05ZVk0+qmz4erNUPlfC8U2GH9 ZqJ0x5iTxpY60/Ow0TvGpuOMqdos5cGROoiJf0oGwuG9CJhkANxkgE/bfIbuPONK JEdL8nTxr6DlDjslUHoa9D/HZ4dbdyi2O0C+rxZoYMgu2WeXdRoDcOxJqgc//NF/ tPEtqNcsPX3Ihi16vq8xVggz3Agf6t49DDy5WseFbmldx97VydHdeb2oRs8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:26:34 2025 by rpki-client