$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa File: b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa (raw, json) Hash identifier: i3vuJV6yUwkAwkXmH0l5yzovmNCzCeXOpzX2FEBEjoQ= Subject key identifier: 5A:9D:A1:AF:7E:DF:8B:01:6B:34:27:C1:C8:E3:77:F9:D1:98:08:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31AC17203F752EA13A4FB9888FDA81A4EA4153F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa Signing time: Sat 16 Aug 2025 00:00:28 +0000 ROA not before: Sat 16 Aug 2025 00:00:28 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ac:17:20:3f:75:2e:a1:3a:4f:b9:88:8f:da:81:a4:ea:41:53:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:00:28 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=9b77b862bfa9c94d2a234a50155d2ab816d6bb008a451b902b365eacfd4e47ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:ee:c6:4d:60:85:84:a5:91:2f:1a:ab:19: 4b:69:8d:b4:c0:f5:ca:ec:c4:2c:44:fb:a0:51:09: 65:e7:3b:aa:b9:94:16:1a:c9:b0:1d:ce:b9:37:37: 58:97:6f:84:9a:2e:b4:cb:2d:e9:f8:9b:80:2d:c7: cd:15:63:c7:2b:16:fc:4b:c6:fb:49:a7:2a:69:00: 40:17:b3:34:8c:33:be:bb:ca:5e:49:07:2b:d8:73: 3b:6a:15:f1:00:b4:c7:3a:d7:0c:4e:60:34:59:a7: 1f:dd:06:b7:64:45:04:ac:1e:f7:97:bd:5a:9a:67: 6a:4b:35:8f:f9:d1:b2:83:33:43:1c:21:bf:07:82: 48:af:f4:da:0c:9d:cc:61:78:77:de:ac:e1:e8:fa: b5:26:ac:9a:a2:42:ed:c7:5a:81:ab:64:c8:13:78: 5a:5f:e9:32:64:8d:7e:45:a6:f2:64:dd:df:5e:cd: 19:87:77:13:05:31:53:fc:a1:ca:0b:36:0a:6c:6b: a6:24:af:ad:d5:2d:1a:4c:79:77:1b:18:eb:5c:f7: 57:a1:d4:1f:16:65:35:8c:53:41:57:8e:26:21:f3: ed:ee:ff:db:64:91:51:b8:80:b4:27:8c:6b:2e:12: dd:4f:54:f1:00:65:70:e6:50:2f:e2:d2:26:c9:fe: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:A1:AF:7E:DF:8B:01:6B:34:27:C1:C8:E3:77:F9:D1:98:08:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.160.0/19 Signature Algorithm: sha256WithRSAEncryption a2:67:8b:4a:af:3f:d1:d0:da:bd:94:5c:c3:df:87:09:f5:7a: 0d:19:2a:6f:94:f8:2b:a4:ea:c9:35:93:82:97:b4:a1:74:82: 8d:f5:0d:e4:5c:a9:58:72:f9:e7:0a:e1:ec:c3:73:1d:3e:08: 05:94:9f:0b:aa:47:c5:89:11:65:45:da:32:c7:2a:0c:97:5b: 07:8b:f6:45:1e:4b:94:5c:7a:f7:f3:aa:cf:bf:2e:f9:43:19: 34:fd:a4:55:c0:79:10:db:40:70:fc:97:b7:49:17:b7:ac:96: 49:5d:b5:fc:3b:f7:8d:95:f9:ac:39:b6:4a:b2:78:c5:44:95: f8:c9:46:d0:20:8d:fd:66:74:38:82:7d:4c:01:93:34:d4:df: 5f:14:77:e3:44:d7:13:92:03:53:60:9c:dd:6b:65:82:68:71: 17:d9:d6:93:92:c7:59:3c:cf:4d:84:ce:55:3c:08:88:ae:09: 4b:86:0a:ef:e9:90:c8:1f:48:0e:93:a6:b6:6b:eb:0a:4c:2c: 9d:6c:4a:7b:05:ae:c2:71:d3:d3:96:0d:fb:06:bc:6a:6a:1f: 59:6e:c3:b7:67:d8:b9:72:a0:43:0a:f3:85:5b:1d:0a:34:dd: c4:cf:89:82:d1:5d:f4:a9:19:9e:6a:46:32:3a:ee:d7:28:f0: 07:28:9e:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMawXID91LqE6T7mIj9qBpOpBU/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAwMDI4WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Yjc3Yjg2MmJmYTljOTRkMmEyMzRhNTAxNTVkMmFiODE2 ZDZiYjAwOGE0NTFiOTAyYjM2NWVhY2ZkNGU0N2VkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6ie7GTWCFhKWRLxqrGUtpjbTA9crsxCxE+6BRCWXnO6q5 lBYaybAdzrk3N1iXb4SaLrTLLen4m4Atx80VY8crFvxLxvtJpyppAEAXszSMM767 yl5JByvYcztqFfEAtMc61wxOYDRZpx/dBrdkRQSsHveXvVqaZ2pLNY/50bKDM0Mc Ib8Hgkiv9NoMncxheHferOHo+rUmrJqiQu3HWoGrZMgTeFpf6TJkjX5FpvJk3d9e zRmHdxMFMVP8ocoLNgpsa6Ykr63VLRpMeXcbGOtc91eh1B8WZTWMU0FXjiYh8+3u /9tkkVG4gLQnjGsuEt1PVPEAZXDmUC/i0ibJ/h6DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWp2hr37fiwFrNCfByON3+dGYCFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5OWQ1YzE3LTE0NDEtNGNkYi05NTc2LTBkOWY3ZWI1ODQ3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUNgKAwDQYJKoZIhvcNAQELBQADggEBAKJni0qvP9HQ2r2UXMPfhwn1eg0Z Km+U+Cuk6sk1k4KXtKF0go31DeRcqVhy+ecK4ezDcx0+CAWUnwuqR8WJEWVF2jLH KgyXWweL9kUeS5Rcevfzqs+/LvlDGTT9pFXAeRDbQHD8l7dJF7eslkldtfw7942V +aw5tkqyeMVElfjJRtAgjf1mdDiCfUwBkzTU318Ud+NE1xOSA1NgnN1rZYJocRfZ 1pOSx1k8z02EzlU8CIiuCUuGCu/pkMgfSA6TprZr6wpMLJ1sSnsFrsJx09OWDfsG vGpqH1luw7dn2LlyoEMK84VbHQo03cTPiYLRXfSpGZ5qRjI67tco8Aconhw= -----END CERTIFICATE-----Generated at Sat Aug 23 06:43:46 2025 by rpki-client