$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6451ae-db09-42bb-a347-45e90117b134.roa File: ac6451ae-db09-42bb-a347-45e90117b134.roa (raw, json) Hash identifier: kGzYQQ4W/RtAURVDztCJlw1TLCfDrGUaVm8TMG2TGAg= Subject key identifier: 30:05:2B:A4:3F:47:A0:91:66:8C:1C:56:B8:66:6C:5E:62:FC:4F:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 634BA020474737FCDA423504BB53A14B1324B43E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6451ae-db09-42bb-a347-45e90117b134.roa Signing time: Mon 18 Aug 2025 15:30:27 +0000 ROA not before: Mon 18 Aug 2025 15:30:27 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.143.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4b:a0:20:47:47:37:fc:da:42:35:04:bb:53:a1:4b:13:24:b4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:30:27 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=6cbc21597e86d1362b8b46715702ddfd6bdc6e2ecf1a72d5f1950da2b921fafb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9f:d9:26:35:6e:22:f3:21:32:51:2b:a7:8e: af:d4:3c:e6:c4:37:13:e5:ab:91:da:2f:17:be:6a: 5e:dc:69:de:9a:3b:ff:b6:5b:9a:ca:8f:db:60:90: b7:b3:4a:f0:98:70:00:ac:fa:2c:44:e9:7a:2b:c0: a0:6d:80:e1:33:c0:cb:90:09:2a:6e:8e:af:67:cf: a2:44:29:59:f4:8e:4c:6b:04:21:4a:82:ab:3f:e2: 99:ac:7a:fb:be:ec:6a:59:73:f9:11:b8:32:8d:be: e6:e8:08:89:09:f5:80:aa:e2:71:12:5c:43:4c:69: b6:60:5a:6d:a1:0d:2d:56:9d:dc:c4:24:16:5c:12: 97:12:d2:1c:52:46:d7:ea:1c:13:3d:3c:a9:2e:fb: a1:ec:9f:bc:9b:8d:24:74:28:51:6f:1d:10:1d:38: 78:5c:bb:b2:60:d7:ec:e8:12:5e:97:f2:3c:84:94: fe:56:ff:71:56:fc:44:ec:71:e6:b6:92:ad:0b:95: 6e:34:90:9a:fd:14:92:c6:fb:48:5d:4b:e6:62:72: 4a:c9:3b:5b:5f:a8:1d:f4:7e:e3:2c:d3:c5:2f:02: b7:56:e3:e1:b6:af:06:78:b0:d2:10:cd:04:1a:44: 5d:4e:43:c2:32:7b:3d:2b:30:80:cd:e3:76:5c:ec: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:05:2B:A4:3F:47:A0:91:66:8C:1C:56:B8:66:6C:5E:62:FC:4F:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6451ae-db09-42bb-a347-45e90117b134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.143.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2d:85:fe:33:79:3f:fb:db:5d:55:de:80:18:03:6f:e2:be:15: 0c:1f:2c:fb:00:86:48:ed:2f:16:05:c2:1e:68:4b:be:d4:8b: f7:98:90:f0:45:76:59:71:f7:32:5a:10:6b:c5:2f:de:2a:2d: 0c:8e:19:d1:ba:c1:af:f5:52:b4:7f:7d:c2:bd:18:bf:66:97: 9c:c9:d4:aa:d2:8c:39:2b:f1:d6:d0:8d:74:c9:0b:b9:b0:dd: 7a:79:65:58:30:36:cd:2e:05:53:76:7b:8f:0b:1b:f3:e0:90: e2:07:3d:bb:e3:7e:82:95:57:76:94:6e:c6:e8:89:6a:97:8a: 30:96:5c:ca:43:af:22:36:66:8d:a4:d9:33:b0:c1:42:42:22: 43:9b:9a:71:16:20:f5:2b:85:aa:e7:fa:94:35:e3:33:24:e9: 3c:24:b5:b6:89:5c:69:d7:ac:70:a6:6d:71:17:2b:5b:1d:4e: af:9b:5c:e9:3e:db:f1:db:c5:61:ae:ee:e8:8f:ce:d6:c7:94: 2d:32:48:5b:78:0c:1e:14:8e:0d:7e:ac:10:9d:98:99:b8:c5: c6:e5:83:5b:64:6a:a8:ca:59:40:e3:96:5b:9a:7d:87:87:1c: 5f:4c:1e:c9:a2:af:45:39:53:90:42:8e:f2:7f:8d:d0:2e:97: e7:02:8b:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY0ugIEdHN/zaQjUEu1OhSxMktD4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMDI3WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2JjMjE1OTdlODZkMTM2MmI4YjQ2NzE1NzAyZGRmZDZi ZGM2ZTJlY2YxYTcyZDVmMTk1MGRhMmI5MjFmYWZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4n9kmNW4i8yEyUSunjq/UPObENxPlq5HaLxe+al7cad6a O/+2W5rKj9tgkLezSvCYcACs+ixE6XorwKBtgOEzwMuQCSpujq9nz6JEKVn0jkxr BCFKgqs/4pmsevu+7GpZc/kRuDKNvuboCIkJ9YCq4nESXENMabZgWm2hDS1WndzE JBZcEpcS0hxSRtfqHBM9PKku+6Hsn7ybjSR0KFFvHRAdOHhcu7Jg1+zoEl6X8jyE lP5W/3FW/ETscea2kq0LlW40kJr9FJLG+0hdS+ZickrJO1tfqB30fuMs08UvArdW 4+G2rwZ4sNIQzQQaRF1OQ8Iyez0rMIDN43Zc7CR7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMAUrpD9HoJFmjBxWuGZsXmL8TwMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjNjQ1MWFlLWRiMDktNDJiYi1hMzQ3LTQ1ZTkwMTE3YjEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbGj8AwDQYJKoZIhvcNAQELBQADggEBAC2F/jN5P/vbXVXegBgDb+K+FQwf LPsAhkjtLxYFwh5oS77Ui/eYkPBFdllx9zJaEGvFL94qLQyOGdG6wa/1UrR/fcK9 GL9ml5zJ1KrSjDkr8dbQjXTJC7mw3Xp5ZVgwNs0uBVN2e48LG/PgkOIHPbvjfoKV V3aUbsboiWqXijCWXMpDryI2Zo2k2TOwwUJCIkObmnEWIPUrharn+pQ14zMk6Twk tbaJXGnXrHCmbXEXK1sdTq+bXOk+2/HbxWGu7uiPztbHlC0ySFt4DB4Ujg1+rBCd mJm4xcblg1tkaqjKWUDjlluafYeHHF9MHsmir0U5U5BCjvJ/jdAul+cCix4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:19 2025 by rpki-client