$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa File: a6994578-2d48-4426-8ebb-7657049c78ef.roa (raw, json) Hash identifier: aD+yHty3jLwe1hizQLTlSfsg2gni+bRK+t2YMcelqKM= Subject key identifier: 38:DE:0F:35:27:39:0E:58:88:0A:AC:9F:6A:73:8C:60:F1:78:B2:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DE894F198E0495CA8274566F7982DA332754D40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa Signing time: Fri 22 Aug 2025 00:40:54 +0000 ROA not before: Fri 22 Aug 2025 00:40:54 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e8:94:f1:98:e0:49:5c:a8:27:45:66:f7:98:2d:a3:32:75:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:40:54 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=33bedeefdefde8c311a6753b29a6796e7b8b04beaa011e1bd23ce96ca8fb05af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:ff:cc:a5:04:21:19:b5:a8:f9:8c:b6:fd: 8c:80:74:a9:0e:40:1b:f0:12:9f:ce:f0:49:a6:87: fb:b3:c9:28:ba:65:54:40:2a:26:f2:e8:4e:d4:13: de:b1:87:56:54:d2:9e:6c:9a:d8:77:46:60:c7:9d: f9:df:3e:70:1c:50:46:07:bc:01:31:72:40:dd:60: 7b:3d:66:e9:8d:61:d7:dd:79:d1:ac:93:55:25:ae: 9b:dc:20:cb:25:0d:0a:25:99:25:97:f7:94:30:6e: 0a:e8:84:54:55:7a:b6:c5:d9:ac:47:16:12:19:fc: ff:02:e7:50:97:a0:5b:65:d5:70:20:7f:a0:05:f1: 57:7f:9a:a1:bf:65:c3:95:06:35:84:ed:31:68:b3: b3:d3:06:8b:f8:3b:58:db:33:f0:66:d2:ef:76:c4: d9:81:4b:5a:93:07:b4:7f:6e:4f:1f:93:97:78:1c: 9e:b6:4f:22:0c:73:4d:a0:d4:0b:6e:53:da:cd:ff: 2c:ea:ae:eb:7d:4b:61:c5:4f:f1:fe:77:d6:ad:54: 5e:f9:27:98:51:c4:7d:f1:82:fe:61:17:e7:84:63: 89:00:af:7d:ab:4c:77:fc:6e:11:37:5c:40:29:32: e7:de:6e:58:30:a7:75:ae:51:06:56:6c:8d:d4:f0: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:0F:35:27:39:0E:58:88:0A:AC:9F:6A:73:8C:60:F1:78:B2:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.172.0/23 Signature Algorithm: sha256WithRSAEncryption d7:bb:9e:43:e7:dd:5d:f2:3e:18:c1:9a:16:3e:91:22:b5:23: 43:18:36:68:19:2a:72:a2:d5:aa:a2:aa:a3:bf:b7:a5:db:81: a8:86:ca:6e:2f:89:1c:a7:94:89:df:3c:05:e2:40:a7:b4:72: 60:b7:31:80:4e:0f:b9:5a:7a:9c:c3:a9:5c:df:a1:0a:fd:62: c5:e8:47:d0:10:cc:72:cf:7a:ec:32:0a:37:cd:9e:7a:b0:22: 04:2a:9a:4f:aa:ad:01:ef:e1:fe:3a:17:41:47:d7:ae:c3:f3: 1e:e8:fa:c6:42:8d:41:73:48:50:52:a8:a3:10:53:e8:3f:0d: f4:a1:55:65:63:68:2b:90:34:a8:a1:48:c2:08:03:53:14:15: e6:26:72:5d:54:6f:33:7c:63:8c:79:2b:1c:44:1d:9b:8d:bb: b5:6f:e1:23:45:69:1a:92:a8:ff:f5:1e:5f:4c:ea:6f:3e:66: 99:03:ef:be:9c:e4:d7:f8:b2:38:2d:90:84:5d:b8:79:04:a7: 3e:25:b4:a4:a7:3d:4d:34:b4:a7:9a:1d:7f:cd:d0:69:42:44: 71:c7:86:f7:5c:f2:3a:93:06:f3:01:7b:92:4b:f1:4d:58:74: 4f:7e:41:51:32:e0:14:e5:12:3f:f5:2a:e8:6f:30:5c:f0:08: 2f:76:26:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfeiU8ZjgSVyoJ0Vm95gtozJ1TUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDA0MDU0WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2JlZGVlZmRlZmRlOGMzMTFhNjc1M2IyOWE2Nzk2ZTdi OGIwNGJlYWEwMTFlMWJkMjNjZTk2Y2E4ZmIwNWFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsk//MpQQhGbWo+Yy2/YyAdKkOQBvwEp/O8Emmh/uzySi6 ZVRAKiby6E7UE96xh1ZU0p5smth3RmDHnfnfPnAcUEYHvAExckDdYHs9ZumNYdfd edGsk1UlrpvcIMslDQolmSWX95QwbgrohFRVerbF2axHFhIZ/P8C51CXoFtl1XAg f6AF8Vd/mqG/ZcOVBjWE7TFos7PTBov4O1jbM/Bm0u92xNmBS1qTB7R/bk8fk5d4 HJ62TyIMc02g1AtuU9rN/yzqrut9S2HFT/H+d9atVF75J5hRxH3xgv5hF+eEY4kA r32rTHf8bhE3XEApMufeblgwp3WuUQZWbI3U8K6bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUON4PNSc5DliICqyfanOMYPF4sgQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2OTk0NTc4LTJkNDgtNDQyNi04ZWJiLTc2NTcwNDljNzhlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFAKwwDQYJKoZIhvcNAQELBQADggEBANe7nkPn3V3yPhjBmhY+kSK1I0MY NmgZKnKi1aqiqqO/t6XbgaiGym4viRynlInfPAXiQKe0cmC3MYBOD7laepzDqVzf oQr9YsXoR9AQzHLPeuwyCjfNnnqwIgQqmk+qrQHv4f46F0FH167D8x7o+sZCjUFz SFBSqKMQU+g/DfShVWVjaCuQNKihSMIIA1MUFeYmcl1UbzN8Y4x5KxxEHZuNu7Vv 4SNFaRqSqP/1Hl9M6m8+ZpkD776c5Nf4sjgtkIRduHkEpz4ltKSnPU00tKeaHX/N 0GlCRHHHhvdc8jqTBvMBe5JL8U1YdE9+QVEy4BTlEj/1KuhvMFzwCC92Ji4= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:52 2025 by rpki-client