$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa File: b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa (raw, json) Hash identifier: upVB9ymcdH9I1JoHew6MHHEoa+SerwaJVMoP71uA6js= Subject key identifier: BE:D8:A9:C2:B6:E3:CD:A8:7B:92:BB:BF:9D:C9:26:73:34:D5:3F:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79A2EEF5C335CC154C8F6C327859DCB3E57245F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa Signing time: Wed 13 Aug 2025 00:31:27 +0000 ROA not before: Wed 13 Aug 2025 00:31:27 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a2:ee:f5:c3:35:cc:15:4c:8f:6c:32:78:59:dc:b3:e5:72:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:31:27 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=a6cf61b603dd56036b97ce1bde223b0bc209cd4870f408575808c031c66df8cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d4:cd:30:c9:31:ba:24:4c:f5:15:85:3c:0e: d9:cb:71:de:d7:5c:46:b3:3c:6d:de:b7:b9:42:e1: 0b:ad:dd:62:2a:ad:6f:2d:d3:36:f7:bd:9a:bf:2f: 3b:15:6d:12:a1:7b:e6:db:fb:3c:49:24:ee:c1:62: 6a:4a:d0:ef:34:e6:93:ba:c7:dc:8f:7f:06:0e:ea: a9:f7:55:81:82:2b:50:2e:b1:95:b2:8d:96:d3:12: a8:b6:3c:97:b0:5b:a6:22:22:9b:f1:e3:af:be:33: 69:46:08:97:64:58:a6:f4:f2:bb:45:67:df:0b:bb: 9a:66:ff:60:cf:3c:a7:6e:22:d6:c1:e1:62:06:72: 97:62:13:16:d9:6b:c0:10:6c:bb:07:7e:34:e6:62: bc:d1:e1:29:f8:d7:65:65:c6:c3:41:7f:b5:a4:59: d1:84:ec:9c:5d:a6:53:d5:3a:fc:a3:8d:b4:69:20: 6c:81:f6:d1:00:ab:31:4f:53:7d:d5:8d:14:5b:f0: 83:c2:64:fc:5f:a9:e6:d1:3f:1e:2f:d5:09:ef:44: af:5a:10:66:6e:76:13:ba:91:d3:27:f3:bb:11:da: 5c:4f:89:68:bb:81:f4:ef:b2:ce:ce:af:a5:cc:61: 37:bd:57:bf:3f:f5:a9:b2:d9:ed:06:11:25:c6:a8: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:A9:C2:B6:E3:CD:A8:7B:92:BB:BF:9D:C9:26:73:34:D5:3F:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.65.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ed:59:51:4f:40:c3:41:be:12:fc:5e:f1:28:b6:50:ad:2a: e5:94:29:b4:e1:2b:12:da:9a:f8:2e:b8:d2:79:dc:9c:f9:1c: dc:bc:08:26:f0:b0:07:39:96:24:4d:25:40:ed:64:c9:a5:1b: 92:8f:fc:a5:27:17:33:41:d3:76:5e:4a:12:a6:99:c3:49:91: 67:d4:c7:06:70:ce:13:bc:17:ac:b1:72:07:4d:de:70:bd:64: 40:71:db:d2:e3:79:0b:6c:43:f5:df:2a:ad:02:30:54:af:7f: e6:53:ae:ee:f7:5d:49:1b:38:05:52:17:48:1b:94:a7:d2:da: d5:16:63:66:0c:ec:98:06:2e:d7:40:db:9f:8c:b2:13:17:88: e6:2b:47:b4:f6:42:5b:b5:59:43:cd:f2:84:14:9c:13:f1:7d: ef:2e:4e:75:64:dd:19:14:2f:95:09:d1:39:07:52:27:2b:fa: 49:19:ed:9b:3d:28:66:05:6c:25:e7:54:43:40:03:3d:e5:f7: 42:9b:db:59:a1:14:ad:40:d4:08:75:12:64:7e:f6:d6:49:dd: fc:4e:da:39:4b:84:1d:4f:7b:91:c0:2c:9f:8e:53:7d:ae:8c: 8a:71:19:0a:50:43:60:f5:fb:65:25:8f:d4:f6:8f:49:75:de: fb:04:a9:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeaLu9cM1zBVMj2wyeFncs+VyRfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAzMTI3WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmNmNjFiNjAzZGQ1NjAzNmI5N2NlMWJkZTIyM2IwYmMy MDljZDQ4NzBmNDA4NTc1ODA4YzAzMWM2NmRmOGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm1M0wyTG6JEz1FYU8DtnLcd7XXEazPG3et7lC4Qut3WIq rW8t0zb3vZq/LzsVbRKhe+bb+zxJJO7BYmpK0O805pO6x9yPfwYO6qn3VYGCK1Au sZWyjZbTEqi2PJewW6YiIpvx46++M2lGCJdkWKb08rtFZ98Lu5pm/2DPPKduItbB 4WIGcpdiExbZa8AQbLsHfjTmYrzR4Sn412VlxsNBf7WkWdGE7JxdplPVOvyjjbRp IGyB9tEAqzFPU33VjRRb8IPCZPxfqebRPx4v1QnvRK9aEGZudhO6kdMn87sR2lxP iWi7gfTvss7Or6XMYTe9V78/9amy2e0GESXGqMBXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvtipwrbjzah7kru/nckmczTVP2AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzODU5ZmE2LTE4NzktNGY2MS04MGZlLWI4MzE3ZWJjZmZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EEwDQYJKoZIhvcNAQELBQADggEBAIntWVFPQMNBvhL8XvEotlCtKuWU KbThKxLamvguuNJ53Jz5HNy8CCbwsAc5liRNJUDtZMmlG5KP/KUnFzNB03ZeShKm mcNJkWfUxwZwzhO8F6yxcgdN3nC9ZEBx29LjeQtsQ/XfKq0CMFSvf+ZTru73XUkb OAVSF0gblKfS2tUWY2YM7JgGLtdA25+MshMXiOYrR7T2Qlu1WUPN8oQUnBPxfe8u TnVk3RkUL5UJ0TkHUicr+kkZ7Zs9KGYFbCXnVENAAz3l90Kb21mhFK1A1Ah1EmR+ 9tZJ3fxO2jlLhB1Pe5HALJ+OU32ujIpxGQpQQ2D1+2Ulj9T2j0l13vsEqWI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:42 2025 by rpki-client