$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4b70d49-6e45-46ed-8b0a-b301b562ebe0.roa File: b4b70d49-6e45-46ed-8b0a-b301b562ebe0.roa (raw, json) Hash identifier: 14jDDxNyk6eDHLb5LNEiWFDh84Vimvx/CY+PyQXvSns= Subject key identifier: 20:53:BF:EF:8D:3A:DB:CB:8D:A7:64:99:81:C6:EC:D1:0A:C3:BF:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 250F4689B7F03F0BAD6DBFF62601973E4189F94A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4b70d49-6e45-46ed-8b0a-b301b562ebe0.roa Signing time: Sat 16 Aug 2025 00:22:17 +0000 ROA not before: Sat 16 Aug 2025 00:22:17 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0f:46:89:b7:f0:3f:0b:ad:6d:bf:f6:26:01:97:3e:41:89:f9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:22:17 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=8816e277e2d425ed4082fbb1105f290800984de75a6f7b731668498d9a2a11c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:6c:3e:c6:69:8c:e2:44:d3:71:cc:9d:21: 36:7d:6e:ba:55:2c:7e:73:5c:8b:c5:fe:a4:4f:b3: 74:46:24:a9:03:72:b2:d4:ee:ff:73:0f:ee:99:8d: e5:60:11:78:a4:6d:55:84:6b:df:1d:7e:26:bb:e2: a4:0b:1d:88:ff:4d:fa:38:00:21:0d:b4:98:8b:6d: 9e:20:48:7b:35:db:4c:e9:93:20:72:20:49:12:6d: d2:c7:f3:50:dc:36:a8:06:12:1a:0c:12:0b:c5:cf: 67:b2:39:29:15:57:ed:23:d3:a2:e8:e0:07:2a:63: 0a:33:08:03:32:85:b3:12:7a:0b:3c:5e:ab:3b:21: a9:34:3e:0b:2e:74:9f:d7:64:44:0f:7d:cc:56:9e: 19:0d:aa:c4:4b:68:14:8f:95:eb:a0:f5:d0:87:25: 07:ae:c2:1d:19:0d:9c:f2:0d:0e:95:e5:b3:87:77: 3e:dd:4e:af:af:45:46:23:10:93:ef:1d:8f:0b:3c: 1f:ca:d7:5e:de:2d:4d:dd:6a:e5:9c:67:da:03:25: b5:f3:f4:b9:ad:69:83:d0:f3:51:e3:69:db:33:bc: f8:9e:2e:37:64:e7:59:a1:88:58:28:5d:01:4c:1b: ba:70:d6:16:c5:50:f7:6c:41:89:59:91:b9:2b:da: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:53:BF:EF:8D:3A:DB:CB:8D:A7:64:99:81:C6:EC:D1:0A:C3:BF:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4b70d49-6e45-46ed-8b0a-b301b562ebe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.0.0/19 Signature Algorithm: sha256WithRSAEncryption b4:a5:3c:89:8b:c1:71:1a:5a:2e:40:3a:ed:1b:1b:ec:00:08: e8:ef:7d:9a:03:92:69:54:e6:31:fe:56:3d:25:39:3f:25:ed: 3c:57:df:2f:7d:39:90:ce:a1:61:b4:49:a5:2b:22:69:70:8a: b9:96:d8:6b:4d:bd:7a:f8:88:88:d4:d6:76:52:91:c1:ab:6c: 8e:55:2d:32:2b:f3:7d:44:5e:9d:82:c0:21:33:57:9d:6b:ce: 82:9e:11:ac:3f:86:5a:16:26:16:6d:2b:c7:af:61:15:44:3f: b8:75:e8:0f:c8:a3:fa:75:61:2d:99:0a:a1:0e:e2:3e:43:db: 1e:1b:22:d4:c5:47:fc:81:c3:ef:11:63:b2:37:df:88:81:d2: 68:54:0e:c6:1e:e3:d5:3b:35:43:1b:fd:56:19:68:6e:0b:59: 80:a3:1a:d2:47:38:60:29:8e:ec:68:ed:99:c9:46:e4:f7:09: 8a:a6:4b:91:ff:f6:d7:20:f2:3d:96:13:05:2c:b5:7c:b9:64: 74:c2:13:7c:db:95:eb:1e:89:bb:e2:2c:6a:70:0d:01:dd:97: 2f:4f:5f:11:08:f5:3a:76:c5:d9:24:e0:98:4b:45:05:dd:5c: af:5a:4b:07:6b:59:ee:a5:92:1f:7f:c3:6d:61:6c:42:a7:03: 9b:9a:19:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJQ9GibfwPwutbb/2JgGXPkGJ+UowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAyMjE3WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODE2ZTI3N2UyZDQyNWVkNDA4MmZiYjExMDVmMjkwODAw OTg0ZGU3NWE2ZjdiNzMxNjY4NDk4ZDlhMmExMWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCro2w+xmmM4kTTccydITZ9brpVLH5zXIvF/qRPs3RGJKkD crLU7v9zD+6ZjeVgEXikbVWEa98dfia74qQLHYj/Tfo4ACENtJiLbZ4gSHs120zp kyByIEkSbdLH81DcNqgGEhoMEgvFz2eyOSkVV+0j06Lo4AcqYwozCAMyhbMSegs8 Xqs7Iak0PgsudJ/XZEQPfcxWnhkNqsRLaBSPleug9dCHJQeuwh0ZDZzyDQ6V5bOH dz7dTq+vRUYjEJPvHY8LPB/K117eLU3dauWcZ9oDJbXz9LmtaYPQ81HjadszvPie Ljdk51mhiFgoXQFMG7pw1hbFUPdsQYlZkbkr2nDNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIFO/740628uNp2SZgcbs0QrDv5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0YjcwZDQ5LTZlNDUtNDZlZC04YjBhLWIzMDFiNTYyZWJlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXWwAwDQYJKoZIhvcNAQELBQADggEBALSlPImLwXEaWi5AOu0bG+wACOjv fZoDkmlU5jH+Vj0lOT8l7TxX3y99OZDOoWG0SaUrImlwirmW2GtNvXr4iIjU1nZS kcGrbI5VLTIr831EXp2CwCEzV51rzoKeEaw/hloWJhZtK8evYRVEP7h16A/Io/p1 YS2ZCqEO4j5D2x4bItTFR/yBw+8RY7I334iB0mhUDsYe49U7NUMb/VYZaG4LWYCj GtJHOGApjuxo7ZnJRuT3CYqmS5H/9tcg8j2WEwUstXy5ZHTCE3zbleseibviLGpw DQHdly9PXxEI9Tp2xdkk4JhLRQXdXK9aSwdrWe6lkh9/w21hbEKnA5uaGVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:46 2025 by rpki-client