$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa File: c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa (raw, json) Hash identifier: GYcUZKzJjZI1kTyRFwOUNMjj3shvB8EJ4WkvBGp4tV8= Subject key identifier: 71:4E:59:48:0B:2B:ED:81:B4:8D:83:FC:08:4C:3D:AD:74:A7:EC:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 636C91207BDAE1C94229EFCC15AEC4ECFB641CCD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa Signing time: Wed 13 Aug 2025 00:40:18 +0000 ROA not before: Wed 13 Aug 2025 00:40:18 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.2.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6c:91:20:7b:da:e1:c9:42:29:ef:cc:15:ae:c4:ec:fb:64:1c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:40:18 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=faa8543c14b645121ef3a84712c22d32a4a3a819a165dd6b08d3d22f349285fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:01:cf:df:31:1e:db:35:f8:38:ca:70:e4: ad:3e:58:71:21:76:5c:40:c8:80:df:0b:e7:24:66: e9:2c:a5:74:af:d8:ef:8b:47:6d:46:36:e7:61:6b: 1b:ff:b0:a2:ee:6a:3b:59:a7:ac:30:71:14:76:4b: 48:b9:e1:d9:87:a7:12:80:6d:09:08:d0:c3:80:67: 6d:3b:9c:c3:47:03:36:8e:3f:5f:2a:18:82:e8:68: 23:ac:3e:60:d6:dd:d9:76:b4:76:c1:d1:72:fc:d4: 82:f8:54:d7:03:52:5f:2c:9d:75:84:21:7b:a4:43: 74:63:d3:b7:8e:ce:86:d7:74:4b:bd:4a:e0:58:b6: 6a:47:ca:c9:0f:99:92:07:7f:ed:47:33:ea:0f:73: 94:b2:58:46:ff:2a:ff:0a:c7:f9:b5:7c:82:a8:9d: 62:df:ea:ed:a0:66:d4:ad:d0:b9:9e:7b:79:48:2a: 43:38:cc:e6:6e:af:96:bd:00:10:0a:a5:35:e2:f9: 3b:0d:95:7a:e0:a0:10:bb:ab:3c:ef:83:d1:7c:b5: 6c:79:00:c1:35:7a:ee:55:0a:75:2d:a5:7f:0c:2a: bc:ab:8d:12:11:5b:64:16:e2:1a:95:96:48:da:65: 47:5b:e3:65:f6:4f:7a:6e:b7:98:d2:0d:10:0c:48: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:59:48:0B:2B:ED:81:B4:8D:83:FC:08:4C:3D:AD:74:A7:EC:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.2.64.0/19 Signature Algorithm: sha256WithRSAEncryption b9:3e:99:52:f6:75:f4:31:52:4e:be:aa:60:fb:79:bb:47:fc: 12:be:15:b6:34:96:5d:9a:fa:75:ee:15:f0:98:d7:35:42:72: 18:47:bc:8c:4a:64:bd:57:1d:07:ea:6d:e7:9f:00:86:b2:8c: f5:1a:48:69:7b:a2:85:8c:e8:42:34:fa:32:0b:cf:e9:c7:c2: 47:ee:24:53:bf:59:20:5c:4b:6a:a7:01:e5:02:5e:d7:03:53: 40:6f:cc:5e:3b:7e:f8:e3:66:ee:08:7e:a6:b2:31:57:08:ca: 84:56:9e:db:58:d1:91:1a:bb:d8:dd:5f:d6:5c:53:bf:8f:64: e3:6b:2e:8c:63:c8:9e:4b:1c:ee:4f:6c:cb:49:5f:01:23:a7: c9:86:8a:e7:9e:61:4f:40:13:fc:84:94:8e:90:33:6b:47:6a: aa:e3:a4:0a:2c:ea:34:4b:25:ee:0b:a3:51:c8:36:f2:30:a9: 1f:ad:bc:8e:f6:fa:56:82:b9:76:97:ef:13:45:8f:4d:24:79: 8c:7a:2d:87:24:56:87:83:05:35:4a:f7:62:3d:b1:a8:ce:e7: e7:bc:1f:3a:04:e8:cf:2a:e4:66:f3:0f:dc:e9:c2:59:f7:e4: 91:5e:b5:98:8e:74:d7:ce:53:d1:cd:17:f3:02:8b:f8:92:5d: 0b:8a:9f:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY2yRIHva4clCKe/MFa7E7PtkHM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDA0MDE4WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWE4NTQzYzE0YjY0NTEyMWVmM2E4NDcxMmMyMmQzMmE0 YTNhODE5YTE2NWRkNmIwOGQzZDIyZjM0OTI4NWZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpngHP3zEe2zX4OMpw5K0+WHEhdlxAyIDfC+ckZukspXSv 2O+LR21GNudhaxv/sKLuajtZp6wwcRR2S0i54dmHpxKAbQkI0MOAZ207nMNHAzaO P18qGILoaCOsPmDW3dl2tHbB0XL81IL4VNcDUl8snXWEIXukQ3Rj07eOzobXdEu9 SuBYtmpHyskPmZIHf+1HM+oPc5SyWEb/Kv8Kx/m1fIKonWLf6u2gZtSt0Lmee3lI KkM4zOZur5a9ABAKpTXi+TsNlXrgoBC7qzzvg9F8tWx5AME1eu5VCnUtpX8MKryr jRIRW2QW4hqVlkjaZUdb42X2T3put5jSDRAMSIuBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcU5ZSAsr7YG0jYP8CEw9rXSn7HcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyMWU3ZjdjLWM3YzQtNGNiNC04MDUzLTUyYTcxYTg0YTJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVFAkAwDQYJKoZIhvcNAQELBQADggEBALk+mVL2dfQxUk6+qmD7ebtH/BK+ FbY0ll2a+nXuFfCY1zVCchhHvIxKZL1XHQfqbeefAIayjPUaSGl7ooWM6EI0+jIL z+nHwkfuJFO/WSBcS2qnAeUCXtcDU0BvzF47fvjjZu4IfqayMVcIyoRWnttY0ZEa u9jdX9ZcU7+PZONrLoxjyJ5LHO5PbMtJXwEjp8mGiueeYU9AE/yElI6QM2tHaqrj pAos6jRLJe4Lo1HINvIwqR+tvI72+laCuXaX7xNFj00keYx6LYckVoeDBTVK92I9 sajO5+e8HzoE6M8q5GbzD9zpwln35JFetZiOdNfOU9HNF/MCi/iSXQuKn74= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:17 2025 by rpki-client