$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa File: c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa (raw, json) Hash identifier: by2icdHgD0B+hwaPvdfQi2ydXzz7o/mPfgAf+mMbjkw= Subject key identifier: 97:55:DB:79:11:ED:81:90:3B:72:30:30:8A:5A:9E:6D:23:C0:64:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2407BA14A701EA5C807A52D43BA2998513A14D19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa Signing time: Mon 18 Aug 2025 15:30:35 +0000 ROA not before: Mon 18 Aug 2025 15:30:35 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.8.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:07:ba:14:a7:01:ea:5c:80:7a:52:d4:3b:a2:99:85:13:a1:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:30:35 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=7a87e6896bf87b4c9d6677c5ec142d9bfc4f8192f5653461fce128cf6cae3b65, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:46:86:2f:d5:a4:12:18:c5:2d:98:6f:98: e7:d2:ba:a7:6e:3e:2b:c1:5f:67:0e:6b:20:22:bd: 70:53:05:a3:46:6d:92:8f:e9:59:1a:9d:57:79:a0: e5:e3:e2:af:b9:a5:a6:bd:1a:18:b1:fd:65:64:4d: 16:45:df:ce:d1:f6:83:25:9a:da:6b:c7:9d:41:e8: 49:e4:0a:a2:2a:d6:6f:d3:22:02:76:6b:ee:cb:b6: 08:2e:9f:7d:05:3c:79:e8:1f:c5:95:51:b1:5a:42: 50:7b:15:20:d4:3e:1a:76:40:a2:bd:59:83:28:6e: ad:4c:aa:96:57:42:26:24:49:b0:30:0b:9d:6e:70: 16:eb:d1:99:72:f7:d1:4f:43:76:05:e5:9a:b3:70: 39:09:5d:08:80:23:11:70:39:c1:b6:5f:eb:a5:da: fe:63:11:36:47:8e:79:c2:e1:75:a1:fe:cb:89:37: 40:a2:9e:40:42:21:a9:bb:48:29:eb:84:7e:5e:60: 5b:53:9a:6b:10:c7:a2:96:fa:25:67:8a:27:44:08: e0:b5:f1:ef:2f:70:48:a4:d8:fe:58:19:e9:86:eb: 2c:46:79:e8:da:19:95:ad:11:46:3a:44:c1:77:17: e3:fc:a1:c4:b9:e5:1f:03:75:66:0e:45:4d:87:91: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:55:DB:79:11:ED:81:90:3B:72:30:30:8A:5A:9E:6D:23:C0:64:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.8.248.0/21 Signature Algorithm: sha256WithRSAEncryption 77:54:80:54:7d:4a:1e:94:fc:81:43:51:e6:ec:28:b7:a6:fd: 97:18:63:71:09:cc:67:26:aa:90:51:18:3d:ad:41:4b:57:ac: c4:9b:04:e5:68:68:79:12:f1:76:9c:9a:69:20:9d:84:2d:cd: 89:c7:f6:98:43:0f:9c:59:30:b3:b5:f2:bf:8a:4c:70:40:92: 82:0d:7f:fb:cf:8b:f2:aa:ff:1c:f8:e1:ae:71:63:d3:1b:70: 19:8b:7a:7f:8d:2f:c7:26:f8:31:0d:36:a2:4b:e6:66:4d:d3: fa:d1:c5:40:0d:2a:56:c0:1a:dc:ab:7c:e1:8b:e5:f8:ae:57: 44:46:0c:6b:01:dd:04:8d:2a:2f:b3:aa:c0:de:b7:26:07:98: e9:02:b4:83:f7:40:dc:84:35:aa:38:2d:6f:00:0f:f9:a2:19: df:da:f1:06:b1:00:36:1f:48:d2:7e:42:e1:90:e8:f8:8f:21: 4e:9b:b2:d7:83:fb:1f:07:aa:53:ce:2b:a7:07:36:20:22:2d: ab:97:9d:cf:3d:21:66:ae:db:cb:4d:45:7b:cd:1a:2d:93:d7: d8:b4:33:46:06:e3:5f:d5:e9:f2:4b:cd:07:48:a2:9b:cb:79: c8:f9:fe:96:e7:4a:25:4f:b8:f8:e0:d8:84:62:f9:e8:e6:d0: 5c:9d:cc:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJAe6FKcB6lyAelLUO6KZhROhTRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMDM1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTg3ZTY4OTZiZjg3YjRjOWQ2Njc3YzVlYzE0MmQ5YmZj NGY4MTkyZjU2NTM0NjFmY2UxMjhjZjZjYWUzYjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUX0aGL9WkEhjFLZhvmOfSuqduPivBX2cOayAivXBTBaNG bZKP6VkanVd5oOXj4q+5paa9Ghix/WVkTRZF387R9oMlmtprx51B6EnkCqIq1m/T IgJ2a+7Ltggun30FPHnoH8WVUbFaQlB7FSDUPhp2QKK9WYMobq1MqpZXQiYkSbAw C51ucBbr0Zly99FPQ3YF5ZqzcDkJXQiAIxFwOcG2X+ul2v5jETZHjnnC4XWh/suJ N0CinkBCIam7SCnrhH5eYFtTmmsQx6KW+iVniidECOC18e8vcEik2P5YGemG6yxG eejaGZWtEUY6RMF3F+P8ocS55R8DdWYORU2HkcYHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl1XbeRHtgZA7cjAwilqebSPAZGYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMjAwNWNlLWQ2ZDMtNGYyNi05YjQ2LTQzNTViMTJhNDdiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPPCPgwDQYJKoZIhvcNAQELBQADggEBAHdUgFR9Sh6U/IFDUebsKLem/ZcY Y3EJzGcmqpBRGD2tQUtXrMSbBOVoaHkS8XacmmkgnYQtzYnH9phDD5xZMLO18r+K THBAkoINf/vPi/Kq/xz44a5xY9MbcBmLen+NL8cm+DENNqJL5mZN0/rRxUANKlbA GtyrfOGL5fiuV0RGDGsB3QSNKi+zqsDetyYHmOkCtIP3QNyENao4LW8AD/miGd/a 8QaxADYfSNJ+QuGQ6PiPIU6bsteD+x8HqlPOK6cHNiAiLauXnc89IWau28tNRXvN Gi2T19i0M0YG41/V6fJLzQdIopvLecj5/pbnSiVPuPjg2IRi+ejm0FydzBQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:11 2025 by rpki-client