$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa File: b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa (raw, json) Hash identifier: UABjs+f1svbwGV5y/4YqD7/5qbYQH1EDhR1GQHTAer4= Subject key identifier: 63:FD:02:18:CA:F4:60:91:DA:7C:CB:31:49:72:CF:DD:77:68:E9:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3127D8A7D1944AD6AC8DCB5B785CFE266D26F6AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa Signing time: Tue 19 Aug 2025 00:31:53 +0000 ROA not before: Tue 19 Aug 2025 00:31:53 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:27:d8:a7:d1:94:4a:d6:ac:8d:cb:5b:78:5c:fe:26:6d:26:f6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:53 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=ba60546f5d1fd7a8141be41c29f88608f24427e8f7a71f295f6b81363102e334, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:d5:09:f6:55:bb:98:6f:00:06:db:fc:8d: 08:96:73:3f:bb:f5:ca:06:19:40:2f:80:76:6f:52: 8e:89:a1:5f:83:f0:8c:e8:4e:c1:b8:24:00:c2:a7: fd:cb:53:22:bd:38:07:5c:82:1c:61:88:b5:55:5b: 2a:29:28:74:7a:42:82:c4:e6:ee:80:72:6a:6e:64: 7d:aa:e7:3d:f6:ec:ab:46:f5:0e:37:92:a2:3d:2f: 38:66:8b:9a:16:b3:34:e3:55:24:e6:f1:ff:7a:9e: b7:7f:af:b9:8d:12:f2:3f:e9:fe:80:89:d7:f7:22: bb:0c:fc:40:64:4f:b3:bb:5e:f4:c3:47:80:b9:5d: 63:b7:14:07:20:13:d8:f1:e4:15:3e:69:ff:69:ee: 56:ea:28:01:48:b7:1d:5f:87:ad:35:41:36:cb:d0: e3:2a:0d:f0:76:8a:f3:5e:23:09:bf:0b:84:f8:fd: aa:13:35:de:c6:85:c2:88:0b:80:72:ff:90:46:48: c1:50:66:dd:0a:25:63:97:cb:3e:00:a9:fe:76:a3: e2:6c:41:d2:f3:dd:66:c5:65:53:21:c0:73:e7:8c: 2d:15:39:c4:e9:d4:39:fa:4c:53:c3:0e:0a:a2:97: 17:08:a7:a1:92:ed:4b:6d:50:dd:61:3f:c7:3e:fc: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:02:18:CA:F4:60:91:DA:7C:CB:31:49:72:CF:DD:77:68:E9:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.48.0/21 Signature Algorithm: sha256WithRSAEncryption b5:c5:04:32:ea:46:29:1f:be:de:11:bf:03:08:f3:16:58:0c: 23:9f:44:f7:84:33:2d:a3:c5:2d:ff:e0:93:2b:5c:92:ba:d4: a7:07:21:b7:4a:fb:fe:05:fa:c7:f8:1f:4c:9b:18:2a:1a:5f: db:16:ad:a4:7a:13:08:43:79:9c:ae:89:2d:38:00:1d:d0:11: 3a:60:4c:1a:74:95:be:04:ab:cb:30:82:a9:93:b1:d2:20:6e: 7b:3b:49:ea:2c:15:a9:2e:ea:ca:f1:d5:46:fe:d1:e2:03:3e: 3d:c7:2a:2d:05:a6:5c:0d:03:a4:91:a5:21:31:ca:7c:0a:18: a4:72:e7:25:95:76:3c:67:bc:43:07:50:69:50:dc:a5:17:5e: 19:39:fa:79:5c:43:3d:98:13:08:7d:15:d0:c5:4f:4d:dd:bd: a3:d6:5c:5b:b5:7f:f5:fb:29:8f:b6:bd:a9:29:0e:b8:e1:a3: de:fa:ba:be:48:03:bd:3d:16:ff:07:c3:e2:be:ed:dd:fa:82: 07:4e:1a:20:45:d2:c6:17:52:5c:01:7e:86:f4:62:86:50:19: 0d:5a:eb:61:8f:1e:87:3b:01:14:5e:15:16:7f:36:25:b5:c0: aa:7f:4b:1f:34:f5:3c:96:81:87:2b:7d:f4:9e:6b:e8:c5:81: 0c:13:6a:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMSfYp9GUStasjctbeFz+Jm0m9q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAzMTUzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTYwNTQ2ZjVkMWZkN2E4MTQxYmU0MWMyOWY4ODYwOGYy NDQyN2U4ZjdhNzFmMjk1ZjZiODEzNjMxMDJlMzM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpkdUJ9lW7mG8ABtv8jQiWcz+79coGGUAvgHZvUo6JoV+D 8IzoTsG4JADCp/3LUyK9OAdcghxhiLVVWyopKHR6QoLE5u6AcmpuZH2q5z327KtG 9Q43kqI9Lzhmi5oWszTjVSTm8f96nrd/r7mNEvI/6f6Aidf3IrsM/EBkT7O7XvTD R4C5XWO3FAcgE9jx5BU+af9p7lbqKAFItx1fh601QTbL0OMqDfB2ivNeIwm/C4T4 /aoTNd7GhcKIC4By/5BGSMFQZt0KJWOXyz4Aqf52o+JsQdLz3WbFZVMhwHPnjC0V OcTp1Dn6TFPDDgqilxcIp6GS7UttUN1hP8c+/LCLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY/0CGMr0YJHafMsxSXLP3Xdo6dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0OGVmOTE4LTE5YWItNGNkMS05ZmJjLTUzY2Q4NDk3NzVjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjljAwDQYJKoZIhvcNAQELBQADggEBALXFBDLqRikfvt4RvwMI8xZYDCOf RPeEMy2jxS3/4JMrXJK61KcHIbdK+/4F+sf4H0ybGCoaX9sWraR6EwhDeZyuiS04 AB3QETpgTBp0lb4Eq8swgqmTsdIgbns7SeosFaku6srx1Ub+0eIDPj3HKi0FplwN A6SRpSExynwKGKRy5yWVdjxnvEMHUGlQ3KUXXhk5+nlcQz2YEwh9FdDFT03dvaPW XFu1f/X7KY+2vakpDrjho976ur5IA709Fv8Hw+K+7d36ggdOGiBF0sYXUlwBfob0 YoZQGQ1a62GPHoc7ARReFRZ/NiW1wKp/Sx809TyWgYcrffSea+jFgQwTaqU= -----END CERTIFICATE-----Generated at Sat Aug 23 09:09:26 2025 by rpki-client