$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa File: bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa (raw, json) Hash identifier: XbeDimv3bQLXE/k5HtqgW1eZErAKhoboDilmQCFFs0Q= Subject key identifier: 39:6F:F3:5E:24:43:A3:CA:2D:A0:53:F7:8A:0B:69:A5:C5:63:DD:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E3D4D7371FC1DC4E6F34E8306AE6573F74711D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa Signing time: Mon 11 Aug 2025 15:21:14 +0000 ROA not before: Mon 11 Aug 2025 15:21:14 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 7224 IP address blocks: 173.83.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3d:4d:73:71:fc:1d:c4:e6:f3:4e:83:06:ae:65:73:f7:47:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:21:14 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=78e7f0975b7c1620b70c48e7685dacc1a67ba6c399f1bc7f89d39241ff0d2ad2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:9a:95:6a:60:3b:d2:0b:f7:b5:9e:62:91: b9:67:f5:52:13:27:8c:fa:a9:fa:53:80:e5:04:e5: 5d:5c:a5:56:c3:f6:a3:52:23:89:bd:b5:aa:3a:24: b4:75:fd:d2:37:a5:88:d6:f6:f3:48:87:da:bb:02: da:9b:b1:42:c1:b9:2a:14:f9:43:79:07:f1:da:a5: 1d:c4:5d:94:fb:1b:65:aa:57:47:4a:8c:ba:7f:ad: 40:a5:6d:cd:3c:9e:c2:b1:74:64:7e:c2:08:ef:e8: be:0b:ac:5e:7c:67:5c:bf:f4:ea:aa:19:4c:1b:7a: 0b:e4:6e:29:5c:e5:ed:91:85:48:44:c9:5d:af:ee: 52:6a:e3:c7:1f:c3:fc:44:ef:e9:b1:a1:da:f0:9c: 14:62:e9:42:aa:6a:66:88:17:54:53:cc:e9:75:c2: a3:b6:cb:b7:7d:92:60:21:b7:ea:83:da:9f:85:cc: 36:31:0b:0e:b3:ed:0b:cf:2b:b0:55:cd:29:11:47: cd:75:cc:21:6e:3e:4a:92:45:12:2d:ab:da:69:8f: 9b:66:91:ac:29:ca:42:68:1e:26:46:76:8d:ed:cc: 64:f3:19:56:44:94:3b:78:d9:44:b9:94:12:2d:fd: 02:96:b4:cb:d7:c0:fe:62:95:21:eb:1b:e0:91:4e: 9d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:F3:5E:24:43:A3:CA:2D:A0:53:F7:8A:0B:69:A5:C5:63:DD:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.83.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6a:2a:60:1c:d5:fe:47:fc:c6:38:72:b7:95:20:08:c0:7a:3b: c8:69:29:ec:69:dd:b0:22:54:de:32:c8:34:81:46:4a:5f:2c: d5:5d:24:22:f9:cf:19:40:68:d5:1d:87:1e:0d:35:f1:dc:58: 12:68:2c:a7:0d:13:d5:fe:4e:c3:33:fd:d5:de:72:50:90:21: dd:de:20:6d:c6:3d:a0:5a:b3:dd:cc:ec:28:ea:32:d5:87:0d: b7:d9:e5:e2:ba:77:b5:02:06:8c:f3:86:a4:b4:6b:ca:19:42: 50:80:00:13:35:a9:df:36:0c:72:31:5e:40:c1:0d:7f:dc:e1: 9b:4f:39:58:6f:28:cb:d6:7d:ce:cb:38:2e:c7:92:32:80:1b: 78:a3:37:ac:be:10:c9:b0:ea:40:95:59:5d:93:ae:8d:1e:c4: 80:22:74:68:2e:5a:28:a1:31:93:cf:71:0e:3c:f6:b9:b0:b7: 9f:f0:61:60:5b:db:1a:b2:a6:73:97:a7:44:29:75:da:3b:c9: b2:aa:19:f8:e3:3b:ae:6b:f1:a8:f1:10:a3:e9:0f:34:53:6c: 34:e8:a8:75:fc:ee:30:f0:2a:8e:96:ea:ec:57:b7:df:2a:1c: fd:8d:84:87:f9:f3:c0:bf:d5:03:6d:8a:99:55:75:a2:9f:4e: cf:23:19:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbj1Nc3H8HcTm806DBq5lc/dHEdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUyMTE0WhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGU3ZjA5NzViN2MxNjIwYjcwYzQ4ZTc2ODVkYWNjMWE2 N2JhNmMzOTlmMWJjN2Y4OWQzOTI0MWZmMGQyYWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7l5qVamA70gv3tZ5ikbln9VITJ4z6qfpTgOUE5V1cpVbD 9qNSI4m9tao6JLR1/dI3pYjW9vNIh9q7AtqbsULBuSoU+UN5B/HapR3EXZT7G2Wq V0dKjLp/rUClbc08nsKxdGR+wgjv6L4LrF58Z1y/9OqqGUwbegvkbilc5e2RhUhE yV2v7lJq48cfw/xE7+mxodrwnBRi6UKqamaIF1RTzOl1wqO2y7d9kmAht+qD2p+F zDYxCw6z7QvPK7BVzSkRR811zCFuPkqSRRItq9ppj5tmkawpykJoHiZGdo3tzGTz GVZElDt42US5lBIt/QKWtMvXwP5ilSHrG+CRTp0vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOW/zXiRDo8otoFP3igtppcVj3eYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiNGE5Mjc2LWI1YjAtNGFjNC04OGVmLWFkNzUwYjYxMWRiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAetUwAwDQYJKoZIhvcNAQELBQADggEBAGoqYBzV/kf8xjhyt5UgCMB6O8hp Kexp3bAiVN4yyDSBRkpfLNVdJCL5zxlAaNUdhx4NNfHcWBJoLKcNE9X+TsMz/dXe clCQId3eIG3GPaBas93M7CjqMtWHDbfZ5eK6d7UCBozzhqS0a8oZQlCAABM1qd82 DHIxXkDBDX/c4ZtPOVhvKMvWfc7LOC7HkjKAG3ijN6y+EMmw6kCVWV2Tro0exIAi dGguWiihMZPPcQ489rmwt5/wYWBb2xqypnOXp0Qpddo7ybKqGfjjO65r8ajxEKPp DzRTbDToqHX87jDwKo6W6uxXt98qHP2NhIf588C/1QNtiplVdaKfTs8jGXw= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:08 2025 by rpki-client