$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa File: c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa (raw, json) Hash identifier: +IQ/FvZGhyyQFsz78LNwfJL5HEJeHBRmIEXIFeOzzz8= Subject key identifier: EF:50:7C:39:8A:1D:F3:BE:A5:5B:7E:47:B6:89:0E:29:37:36:C2:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CB0376983D13B28AD9AFA9A7AE71295C695B675 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa Signing time: Tue 19 Aug 2025 00:40:22 +0000 ROA not before: Tue 19 Aug 2025 00:40:22 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b0:37:69:83:d1:3b:28:ad:9a:fa:9a:7a:e7:12:95:c6:95:b6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:40:22 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=03e5cae7c982fdcdf0d01f858596bbf337a3d9633ab5d865631fc8e1ea78de57, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:12:12:f1:5e:c9:26:5d:8f:34:74:43:26: a0:63:d3:f2:98:6a:9b:bf:95:4b:1e:5e:42:81:24: a0:1d:67:f4:b0:e6:17:9e:12:2c:24:ca:29:0a:9c: d7:42:10:3b:a1:04:9d:b6:b9:6a:2d:8e:11:bf:ac: ed:b8:36:0e:2a:56:2a:30:52:ce:5a:c8:68:0e:df: a2:aa:39:6b:60:45:bb:34:aa:24:4f:49:dd:62:2a: fd:08:20:b7:b1:a4:6e:a3:6f:77:11:f5:75:15:75: b8:93:47:3d:c6:fc:b1:20:ee:e7:06:c2:ae:06:55: 11:78:e5:32:fe:43:a6:e0:93:b1:97:a6:e5:ae:4d: e3:c1:83:e9:d7:53:9e:5b:b9:3a:dd:9f:51:d5:0d: c9:f0:a4:a3:54:6d:fd:99:a8:1d:a6:48:85:7d:de: 5d:24:56:00:bb:79:4b:aa:60:f6:7d:63:0e:df:ba: 90:9c:31:ad:dd:f2:9e:7d:87:dd:0f:c7:18:a5:75: eb:27:c5:8c:78:42:b5:15:db:6c:58:cd:5e:4e:9f: 18:46:09:63:47:40:55:ef:a4:41:58:f5:9e:05:7c: 87:a3:f6:b4:4e:d9:3e:f8:87:5d:94:31:c4:84:fe: 1a:61:5f:ee:ba:47:cc:ed:d9:79:5f:cd:f3:01:99: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:50:7C:39:8A:1D:F3:BE:A5:5B:7E:47:B6:89:0E:29:37:36:C2:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:65:dd:11:3b:a0:e4:4a:98:6c:32:e8:9e:6a:f0:22:2e:04: f7:09:58:65:81:65:37:27:24:cd:c0:65:12:1e:6e:13:93:0a: 46:c3:b5:e7:b3:41:27:2a:80:6c:f7:14:2f:02:9a:fa:96:9b: 31:ac:03:43:0e:c2:39:c7:03:b5:52:2a:60:7f:d5:12:d4:9d: 95:21:40:26:ba:a0:b0:6f:40:e6:fd:ac:e7:3f:ce:74:82:0c: 36:75:4e:fb:f5:be:e9:4d:7c:33:66:68:0b:34:80:5c:4a:16: 81:bb:eb:43:4e:fd:60:79:89:b6:8b:c9:ec:71:42:60:61:f7: 26:6f:c1:6d:00:bb:f4:dc:44:97:cf:eb:2d:c8:5a:da:51:4f: 91:7f:ae:6c:26:10:4e:8f:09:42:83:f8:a0:e1:b4:59:49:bf: 83:6c:34:fd:53:b9:a0:4e:51:87:e8:13:20:6c:0a:ff:f3:c9: c2:92:86:8f:d4:0b:01:b8:c9:dd:76:45:99:e5:39:e4:57:67: 1b:05:6b:6b:70:3c:d6:d0:98:37:9e:4a:9e:64:6c:a8:ce:c0: d8:67:92:f8:2f:9c:de:f9:0d:10:02:0f:53:96:a4:aa:57:73: b4:15:2a:64:c9:e6:51:4e:45:c6:7e:c6:07:ce:a2:8a:22:32: 3a:e6:c9:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPLA3aYPROyitmvqaeucSlcaVtnUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDA0MDIyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2U1Y2FlN2M5ODJmZGNkZjBkMDFmODU4NTk2YmJmMzM3 YTNkOTYzM2FiNWQ4NjU2MzFmYzhlMWVhNzhkZTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbwhIS8V7JJl2PNHRDJqBj0/KYapu/lUseXkKBJKAdZ/Sw 5heeEiwkyikKnNdCEDuhBJ22uWotjhG/rO24Ng4qViowUs5ayGgO36KqOWtgRbs0 qiRPSd1iKv0IILexpG6jb3cR9XUVdbiTRz3G/LEg7ucGwq4GVRF45TL+Q6bgk7GX puWuTePBg+nXU55buTrdn1HVDcnwpKNUbf2ZqB2mSIV93l0kVgC7eUuqYPZ9Yw7f upCcMa3d8p59h90PxxildesnxYx4QrUV22xYzV5OnxhGCWNHQFXvpEFY9Z4FfIej 9rRO2T74h12UMcSE/hphX+66R8zt2XlfzfMBmZ/fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU71B8OYod876lW35HtokOKTc2wtAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MGFiNjRiLTBhNmItNDBmYS1iZTBiLTMxZjNkMmIzNTA2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl0QwDQYJKoZIhvcNAQELBQADggEBAB9l3RE7oORKmGwy6J5q8CIuBPcJ WGWBZTcnJM3AZRIebhOTCkbDteezQScqgGz3FC8CmvqWmzGsA0MOwjnHA7VSKmB/ 1RLUnZUhQCa6oLBvQOb9rOc/znSCDDZ1Tvv1vulNfDNmaAs0gFxKFoG760NO/WB5 ibaLyexxQmBh9yZvwW0Au/TcRJfP6y3IWtpRT5F/rmwmEE6PCUKD+KDhtFlJv4Ns NP1TuaBOUYfoEyBsCv/zycKSho/UCwG4yd12RZnlOeRXZxsFa2twPNbQmDeeSp5k bKjOwNhnkvgvnN75DRACD1OWpKpXc7QVKmTJ5lFORcZ+xgfOoooiMjrmySw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:13 2025 by rpki-client