$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa File: bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa (raw, json) Hash identifier: +mo4R7fTIOR3rz8fxTpfoB4nWGaeBZdGv9PZDwlCd1c= Subject key identifier: 6A:2C:82:CB:77:7C:35:F0:1F:0A:64:24:AD:EB:93:E2:52:6E:40:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 496C82A0CD0BC9B14589266DEE8978AE1D74C68C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa Signing time: Mon 18 Aug 2025 15:21:54 +0000 ROA not before: Mon 18 Aug 2025 15:21:54 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6c:82:a0:cd:0b:c9:b1:45:89:26:6d:ee:89:78:ae:1d:74:c6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:21:54 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=7127b637001baf17339d776ce37ef187e97d2349c02cc4dbb83417b231e3a800, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bb:24:eb:57:e6:5e:2c:4b:67:9d:5e:81:07: 0d:a3:0c:16:d1:21:94:c7:36:85:fe:4f:7a:cb:5a: 87:1a:77:a5:ca:b7:50:08:02:2a:3b:ec:f1:67:da: f3:76:d3:22:2e:17:b3:83:ee:e0:07:73:05:19:ad: a5:8c:9f:c0:b3:f2:5e:9f:68:da:9c:ee:a6:fb:73: 4e:55:9a:44:42:ba:42:39:80:43:76:7f:9b:c4:3a: e4:6c:d4:17:af:80:54:85:ca:97:4e:c0:df:9a:c2: 82:29:64:1c:1d:94:57:9f:f7:08:dd:ab:43:6e:b2: cf:24:0d:3f:7c:b9:50:aa:a3:4c:ed:73:1e:71:e2: 2b:67:82:24:47:57:b0:5e:99:ab:05:80:65:dc:4a: 98:03:5d:b4:2f:ba:2c:c4:90:1e:c1:7c:77:0a:cf: ba:0b:c4:7d:8d:6c:84:54:ff:79:8e:a4:f0:b5:ad: b7:6a:9a:bc:0e:ca:f7:6c:8a:dd:42:ae:df:97:d1: 0e:e2:a3:8c:78:5e:ca:6d:87:0b:c1:ea:43:5e:cf: f3:32:4c:4d:f9:6a:b0:98:74:57:38:ab:00:69:cb: e8:57:d1:e8:97:26:ac:8f:9b:13:76:ee:3b:b6:03: bf:08:ba:57:b0:0d:06:07:e4:c4:dc:79:ee:30:80: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:82:CB:77:7C:35:F0:1F:0A:64:24:AD:EB:93:E2:52:6E:40:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5d:03:91:99:82:40:09:66:92:b4:c7:6f:ea:8a:38:40:28:a4: f6:ee:c3:07:59:57:a6:ee:5b:ae:1d:88:9f:2e:a1:54:af:4f: ee:83:2e:48:da:99:3b:e2:5b:37:77:d4:9c:73:bd:54:93:0f: 62:6d:be:ce:30:0d:65:c6:d8:76:7a:32:c1:8d:94:d4:d8:4f: 82:36:39:b8:06:c3:36:d8:27:07:96:a4:9d:8a:0c:c2:9d:2b: bb:13:87:2a:2b:22:e5:10:00:4e:30:cb:27:74:c0:8e:31:e2: 0e:91:11:31:0f:50:7c:d0:3b:43:94:5f:ed:bc:f4:e8:b2:80: 28:24:53:b5:ed:75:1d:7c:79:9f:bd:3a:e7:0a:56:08:6f:36: 58:d8:57:b0:ce:c0:86:22:2a:e8:72:80:b6:2c:4e:57:b1:17: 02:14:9a:ff:e0:ca:19:8f:1f:11:4b:ea:2d:36:81:e6:da:9c: ef:01:84:76:30:aa:9a:69:ee:9d:e3:24:eb:9f:fb:0e:60:26: 40:a2:e7:9f:82:1d:65:2e:69:c2:ac:ad:32:51:21:d6:b5:9f: a1:06:d5:51:06:59:56:23:ac:13:3f:40:1c:ea:25:d9:c6:f3: 69:54:da:f4:af:61:ab:47:86:d0:98:29:88:2f:35:cc:1b:ca: 84:8c:45:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSWyCoM0LybFFiSZt7ol4rh10xowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUyMTU0WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTI3YjYzNzAwMWJhZjE3MzM5ZDc3NmNlMzdlZjE4N2U5 N2QyMzQ5YzAyY2M0ZGJiODM0MTdiMjMxZTNhODAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmuyTrV+ZeLEtnnV6BBw2jDBbRIZTHNoX+T3rLWocad6XK t1AIAio77PFn2vN20yIuF7OD7uAHcwUZraWMn8Cz8l6faNqc7qb7c05VmkRCukI5 gEN2f5vEOuRs1BevgFSFypdOwN+awoIpZBwdlFef9wjdq0Nuss8kDT98uVCqo0zt cx5x4itngiRHV7BemasFgGXcSpgDXbQvuizEkB7BfHcKz7oLxH2NbIRU/3mOpPC1 rbdqmrwOyvdsit1Crt+X0Q7io4x4XspthwvB6kNez/MyTE35arCYdFc4qwBpy+hX 0eiXJqyPmxN27ju2A78IulewDQYH5MTcee4wgD9XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaiyCy3d8NfAfCmQkreuT4lJuQEQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmOWQ4ZGQwLWU3YWEtNDY5OC1iZTM4LWFlY2Q4YmU1YWY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4SIAwDQYJKoZIhvcNAQELBQADggEBAF0DkZmCQAlmkrTHb+qKOEAopPbu wwdZV6buW64diJ8uoVSvT+6DLkjamTviWzd31JxzvVSTD2Jtvs4wDWXG2HZ6MsGN lNTYT4I2ObgGwzbYJweWpJ2KDMKdK7sThyorIuUQAE4wyyd0wI4x4g6RETEPUHzQ O0OUX+289OiygCgkU7XtdR18eZ+9OucKVghvNljYV7DOwIYiKuhygLYsTlexFwIU mv/gyhmPHxFL6i02gebanO8BhHYwqppp7p3jJOuf+w5gJkCi55+CHWUuacKsrTJR Ida1n6EG1VEGWVYjrBM/QBzqJdnG82lU2vSvYatHhtCYKYgvNcwbyoSMRZk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:02 2025 by rpki-client