$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa File: b3c97cba-7083-48f3-8280-ad90bc3bee59.roa (raw, json) Hash identifier: gSa7EaOeuIwq2riMzZYIKsPHVF179tS5rg/zOghKGfY= Subject key identifier: 4B:54:E5:FE:96:E3:C3:42:8C:48:6E:65:1F:74:71:5C:F3:2B:B8:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70B2E08FF62CADCFA95E8655F18424B3E162AC06 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa Signing time: Wed 13 Aug 2025 00:02:02 +0000 ROA not before: Wed 13 Aug 2025 00:02:02 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.10.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b2:e0:8f:f6:2c:ad:cf:a9:5e:86:55:f1:84:24:b3:e1:62:ac:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:02:02 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=74bb2a7d2690e3d0959f49bc17d9363b4f1599c8b82836c51d55e62a05656995, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:f2:af:2d:2e:1b:17:4a:fc:a2:12:7e:2a: a7:15:ed:f3:93:40:17:d7:67:c1:9e:ac:92:66:3d: d0:f2:48:e1:62:fb:27:55:4c:74:c8:c0:fb:d0:b8: ac:8b:2f:5c:41:6d:81:aa:bf:72:c3:0a:e1:c8:2a: 7b:4e:eb:07:47:7a:93:ab:14:5b:a0:6c:57:e2:4b: 5a:22:0d:93:1c:11:11:8c:85:6f:57:2c:99:e4:ff: a9:2c:60:37:66:0c:21:fa:ab:7b:60:57:10:02:f5: ae:ff:82:f0:29:38:74:54:f2:b4:ba:81:85:11:1c: 86:47:31:3b:91:b2:9e:c4:fb:b9:03:68:08:6b:37: 64:01:73:52:24:66:d1:7d:fd:0b:87:62:d0:a4:96: 8c:ff:c2:1c:ab:2f:a8:80:cb:e8:a9:2a:cd:44:8d: 67:46:34:62:52:bf:8b:6d:44:a4:6f:33:8d:7a:9c: b5:a8:ef:c9:db:01:89:79:a2:92:74:97:c6:7e:cb: 0a:cb:8d:5d:d5:41:8b:2a:25:4a:99:6e:f7:3d:7c: e7:17:b8:e1:44:ca:12:2b:5d:47:48:66:39:e1:3f: cc:41:21:11:24:62:12:49:3a:8c:69:78:82:0a:67: fa:85:b8:18:b5:6c:80:b7:0e:3a:ee:8c:b8:45:15: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:54:E5:FE:96:E3:C3:42:8C:48:6E:65:1F:74:71:5C:F3:2B:B8:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.10.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:b3:03:0a:eb:42:9d:ed:69:20:25:6c:b8:62:33:f6:76:c6: 63:c1:b7:9c:a7:72:20:ed:e8:d5:b7:e9:cb:a7:b8:a0:83:03: ff:07:b1:5e:d7:95:8a:df:8a:39:56:c0:62:20:0d:15:4e:e9: 88:ea:f8:da:b5:7d:16:ca:59:f4:e4:fa:c6:9f:9c:d5:54:d5: 1d:0e:4e:b1:5d:fa:22:9c:27:46:22:5a:3d:32:2d:b7:d5:58: 2d:d6:0c:38:79:1f:b1:c5:33:b9:6d:94:80:92:fd:e0:a3:b2: a1:cd:b6:e6:fe:7e:15:79:6f:20:da:9d:bc:86:0b:d9:e7:d5: 50:8f:0d:20:0d:e3:60:76:dc:cf:eb:8f:cb:05:57:e5:b3:b1: 05:ce:07:e0:f5:1b:a0:d3:d9:fc:77:a7:84:78:61:d1:ee:bf: a9:af:8b:b4:52:c9:bc:00:63:6b:95:c1:1a:f2:5d:30:26:25: 72:72:c9:12:5d:1f:e2:c2:b6:3e:8b:8e:62:10:3e:5b:f8:a0: ac:19:fe:39:e5:35:fb:18:81:1f:4d:e1:79:85:8f:c9:48:82: 2e:8c:02:e9:a0:0b:a1:1e:3f:37:a8:dc:e6:23:34:3b:ba:7c: 27:81:bb:35:1c:f3:d9:5c:ec:03:ff:8a:43:da:8a:91:a1:b2: 6b:8d:d2:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcLLgj/Ysrc+pXoZV8YQks+FirAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMjAyWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGJiMmE3ZDI2OTBlM2QwOTU5ZjQ5YmMxN2Q5MzYzYjRm MTU5OWM4YjgyODM2YzUxZDU1ZTYyYTA1NjU2OTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtKPKvLS4bF0r8ohJ+KqcV7fOTQBfXZ8GerJJmPdDySOFi +ydVTHTIwPvQuKyLL1xBbYGqv3LDCuHIKntO6wdHepOrFFugbFfiS1oiDZMcERGM hW9XLJnk/6ksYDdmDCH6q3tgVxAC9a7/gvApOHRU8rS6gYURHIZHMTuRsp7E+7kD aAhrN2QBc1IkZtF9/QuHYtCkloz/whyrL6iAy+ipKs1EjWdGNGJSv4ttRKRvM416 nLWo78nbAYl5opJ0l8Z+ywrLjV3VQYsqJUqZbvc9fOcXuOFEyhIrXUdIZjnhP8xB IREkYhJJOoxpeIIKZ/qFuBi1bIC3DjrujLhFFS3nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUS1Tl/pbjw0KMSG5lH3RxXPMruHQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzYzk3Y2JhLTcwODMtNDhmMy04MjgwLWFkOTBiYzNiZWU1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDACjANBgkqhkiG9w0BAQsFAAOCAQEAp7MDCutCne1pICVsuGIz9nbGY8G3 nKdyIO3o1bfpy6e4oIMD/wexXteVit+KOVbAYiANFU7piOr42rV9FspZ9OT6xp+c 1VTVHQ5OsV36IpwnRiJaPTItt9VYLdYMOHkfscUzuW2UgJL94KOyoc225v5+FXlv INqdvIYL2efVUI8NIA3jYHbcz+uPywVX5bOxBc4H4PUboNPZ/HenhHhh0e6/qa+L tFLJvABja5XBGvJdMCYlcnLJEl0f4sK2PouOYhA+W/igrBn+OeU1+xiBH03heYWP yUiCLowC6aALoR4/N6jc5iM0O7p8J4G7NRzz2VzsA/+KQ9qKkaGya43Szw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:58 2025 by rpki-client