$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa File: c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa (raw, json) Hash identifier: 2wi1+8ceDvv1oDvfKlVWm9A91ULvoa0uVhszngbFakw= Subject key identifier: 4C:37:90:7D:4E:E0:8A:68:3E:FB:39:ED:C3:2F:80:BF:7C:D1:FE:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09FAE98360AAC68F809AAC8ABA552AD11385EB3D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa Signing time: Wed 13 Aug 2025 00:00:55 +0000 ROA not before: Wed 13 Aug 2025 00:00:55 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 199.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fa:e9:83:60:aa:c6:8f:80:9a:ac:8a:ba:55:2a:d1:13:85:eb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:00:55 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=486241165b20ab00ba998d557d88069291ea9549a878029a844c18d28bb13f7f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:14:cb:75:29:d1:5a:ee:66:00:8e:d0:b3: 60:ea:eb:16:f9:e6:bd:57:d5:12:10:5e:6e:f2:3a: d4:0c:fa:2a:ca:ec:40:1f:4a:f3:12:40:0b:76:cd: f8:2e:81:51:b3:47:ed:3e:71:e2:2d:32:c3:45:da: 62:80:61:28:35:a4:2f:d5:f1:b8:8c:c2:f0:2a:9e: 88:af:b5:d5:39:6b:d3:3d:97:dd:e3:0e:93:48:91: 99:34:b9:44:2e:5b:7e:33:77:94:f7:31:9d:f6:87: 58:0c:dc:3f:ca:cd:a7:17:22:31:26:88:dd:75:d1: 8d:33:76:92:ba:f9:50:1d:c7:02:9d:38:7f:61:a7: 7f:29:ae:b4:67:81:ad:2e:e6:a1:2a:21:f9:8c:c7: 36:be:92:cb:5f:51:98:4a:1f:9f:e4:1d:67:8c:be: fe:7c:27:d8:27:53:f5:87:bb:d2:b0:68:1c:68:ac: 6a:13:26:2b:02:8b:68:df:00:9c:07:66:da:d7:e7: f7:e4:10:74:7e:bb:97:bf:95:93:ad:60:09:b1:bb: 50:38:d7:f4:36:d5:d7:b3:49:4e:c5:96:c7:78:da: ea:5d:31:55:8c:75:b2:6a:44:e3:82:f3:69:9f:98: 46:1a:a1:20:9a:be:f0:bc:6c:6d:fa:4a:5b:ec:2a: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:90:7D:4E:E0:8A:68:3E:FB:39:ED:C3:2F:80:BF:7C:D1:FE:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:c3:10:27:ec:8f:fb:5c:7a:d3:29:29:d0:78:88:d3:3d:13: 76:0d:ff:81:42:a7:b1:25:95:bf:5c:a4:d9:23:b1:c6:8d:45: 70:67:af:2b:f5:c7:e9:2a:7d:ca:62:1a:f4:04:27:32:b0:13: e6:4f:87:95:fe:0b:36:31:cc:f2:53:24:13:cf:97:8c:69:ca: 4a:73:6e:db:5b:cc:5a:b6:ad:32:1b:de:f0:57:7e:80:32:a0: 95:a4:b9:54:be:04:63:c8:cf:db:0c:ce:55:39:97:ed:90:cc: fa:3b:6f:c4:ba:d9:2d:76:5a:cb:21:88:32:26:55:3b:70:9a: fe:b4:46:4a:87:a2:52:ed:5b:bc:11:e7:38:aa:d3:d9:65:55: 0f:9b:8e:85:34:c9:c9:8f:6d:63:76:15:5b:53:3a:13:a7:f0: b8:7b:be:bd:e4:23:53:ca:02:6d:ab:64:6e:97:11:bb:a3:67: 79:18:fa:81:8b:88:7b:25:8e:3a:0d:e4:33:86:58:0a:26:7b: c8:d7:0a:43:d2:a8:fb:57:90:81:ff:50:0c:c5:4d:27:cd:7c: 4f:f7:f1:83:3d:ab:eb:9d:98:6a:09:2c:0a:5d:23:e7:15:e3: 9f:10:f9:57:c9:cf:51:a3:17:f9:fd:79:00:a8:23:23:de:65: b0:23:52:3b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCfrpg2Cqxo+AmqyKulUq0ROF6z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMDU1WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODYyNDExNjViMjBhYjAwYmE5OThkNTU3ZDg4MDY5Mjkx ZWE5NTQ5YTg3ODAyOWE4NDRjMThkMjhiYjEzZjdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDyhTLdSnRWu5mAI7Qs2Dq6xb55r1X1RIQXm7yOtQM+irK 7EAfSvMSQAt2zfgugVGzR+0+ceItMsNF2mKAYSg1pC/V8biMwvAqnoivtdU5a9M9 l93jDpNIkZk0uUQuW34zd5T3MZ32h1gM3D/KzacXIjEmiN110Y0zdpK6+VAdxwKd OH9hp38prrRnga0u5qEqIfmMxza+kstfUZhKH5/kHWeMvv58J9gnU/WHu9KwaBxo rGoTJisCi2jfAJwHZtrX5/fkEHR+u5e/lZOtYAmxu1A41/Q21dezSU7Flsd42upd MVWMdbJqROOC82mfmEYaoSCavvC8bG36SlvsKvjzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTDeQfU7gimg++zntwy+Av3zR/gkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4Mjk2YjBkLWNiY2YtNDRhMi04ODZhLTAxMTJkMjJiZjNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDHSDANBgkqhkiG9w0BAQsFAAOCAQEADMMQJ+yP+1x60ykp0HiI0z0Tdg3/ gUKnsSWVv1yk2SOxxo1FcGevK/XH6Sp9ymIa9AQnMrAT5k+Hlf4LNjHM8lMkE8+X jGnKSnNu21vMWratMhve8Fd+gDKglaS5VL4EY8jP2wzOVTmX7ZDM+jtvxLrZLXZa yyGIMiZVO3Ca/rRGSoeiUu1bvBHnOKrT2WVVD5uOhTTJyY9tY3YVW1M6E6fwuHu+ veQjU8oCbatkbpcRu6NneRj6gYuIeyWOOg3kM4ZYCiZ7yNcKQ9Ko+1eQgf9QDMVN J818T/fxgz2r652YagksCl0j5xXjnxD5V8nPUaMX+f15AKgjI95lsCNSOw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:07 2025 by rpki-client