$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa File: cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa (raw, json) Hash identifier: LjNi7rEIcavIdlw4vtWq5M1uwLjvH1u33CcE2p3V78g= Subject key identifier: 48:66:4B:30:86:2D:3C:F1:CB:EA:5E:D4:37:97:89:BF:31:FA:04:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BD67574811BC594413725FB57D166B3F5B54F36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa Signing time: Tue 19 Aug 2025 00:00:17 +0000 ROA not before: Tue 19 Aug 2025 00:00:17 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.148.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d6:75:74:81:1b:c5:94:41:37:25:fb:57:d1:66:b3:f5:b5:4f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:00:17 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=856747cb93b9c8020473abb59351d477a47423a3a33e1fe9bc5997042d246ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:cd:54:58:bd:7c:c9:b8:24:7b:fd:7e:03: ee:d5:e9:b4:fb:2f:be:f9:3d:8b:2a:d4:68:60:4f: e6:67:47:13:c0:22:f4:e7:9c:04:20:8b:72:f7:93: ce:68:32:eb:8b:59:fd:69:96:f1:0a:5f:98:cb:32: 30:12:03:76:0b:21:4c:ac:cd:43:b1:9e:ad:48:e9: eb:d5:ff:30:e7:1d:6d:45:86:cb:b6:9e:76:f5:c6: 85:af:c6:90:f6:47:4c:55:d5:50:78:ea:f4:2d:b7: cb:3a:2d:c9:9b:de:8c:02:f1:73:9a:fb:06:c5:b4: 52:2b:7e:84:a3:d7:04:12:57:72:fa:f0:fa:d1:bd: cc:cc:8d:ef:3b:1a:b0:0a:b5:4a:91:0f:17:c0:90: b4:4e:d5:d4:d6:4f:2a:c1:5a:77:dc:50:36:e0:a4: 42:af:d3:ea:4b:11:40:08:31:a9:28:30:76:2e:04: 37:8f:60:54:c4:af:d0:35:b6:c8:e7:78:16:90:17: f7:a6:87:23:51:b8:ba:d8:96:06:88:2e:31:30:67: 60:aa:aa:6f:c5:77:32:d9:2f:b8:30:69:7a:c4:35: 35:02:f7:8c:f7:be:73:85:61:36:70:d0:00:66:82: 67:f8:fb:b4:be:15:b0:b4:b0:45:e1:0a:b7:40:26: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:66:4B:30:86:2D:3C:F1:CB:EA:5E:D4:37:97:89:BF:31:FA:04:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.148.0.0/17 Signature Algorithm: sha256WithRSAEncryption 92:89:6d:ca:6c:1d:ae:5b:45:72:d4:36:6b:fe:91:0d:ed:68: 6f:3f:e9:4a:11:59:42:f9:fc:c7:9e:e1:48:86:32:32:fe:96: 08:18:99:84:ea:8f:e9:70:cf:5f:36:f9:13:34:cc:66:ee:ba: 98:ee:99:f0:e5:99:2b:fc:8a:e7:90:76:c4:e0:1a:8b:34:42: 79:4a:29:39:4c:c8:8f:4d:c7:68:a9:70:e1:c1:b8:93:6c:55: f6:da:b5:8f:69:b2:70:70:59:23:b0:4c:18:07:f5:4a:d0:ab: f7:59:5e:fd:b1:a1:15:19:00:bd:48:08:59:16:02:ea:56:62: 64:b7:c2:c5:0f:bb:ae:a0:8d:0e:3f:2b:30:ea:86:11:f0:28: 35:24:dd:9b:00:b6:79:81:a2:7e:8e:27:f3:98:b7:5a:a1:91: 14:7e:da:9a:54:59:c7:35:dd:6f:1e:19:08:c1:e8:d8:57:ef: 2d:06:bd:93:b9:7a:ec:54:89:5a:ef:f0:b0:44:af:9b:bb:87: a0:21:3b:60:35:de:ee:66:28:8e:b6:05:ce:f8:d4:0e:95:52: ff:60:13:4f:1e:6d:97:ce:a2:77:38:9d:cf:fd:c3:be:a4:7f: 9d:5f:7c:1b:7d:ce:d0:77:35:8b:0f:08:9a:3e:4c:53:1c:2a: e8:69:6e:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC9Z1dIEbxZRBNyX7V9Fms/W1TzYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAwMDE3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTY3NDdjYjkzYjljODAyMDQ3M2FiYjU5MzUxZDQ3N2E0 NzQyM2EzYTMzZTFmZTliYzU5OTcwNDJkMjQ2Y2NiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+EM1UWL18ybgke/1+A+7V6bT7L775PYsq1GhgT+ZnRxPA IvTnnAQgi3L3k85oMuuLWf1plvEKX5jLMjASA3YLIUyszUOxnq1I6evV/zDnHW1F hsu2nnb1xoWvxpD2R0xV1VB46vQtt8s6Lcmb3owC8XOa+wbFtFIrfoSj1wQSV3L6 8PrRvczMje87GrAKtUqRDxfAkLRO1dTWTyrBWnfcUDbgpEKv0+pLEUAIMakoMHYu BDePYFTEr9A1tsjneBaQF/emhyNRuLrYlgaILjEwZ2Cqqm/FdzLZL7gwaXrENTUC 94z3vnOFYTZw0ABmgmf4+7S+FbC0sEXhCrdAJv1DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSGZLMIYtPPHL6l7UN5eJvzH6BGIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiMGRiMTZiLWQzZTctNGQxYi04NDIwLWQwYWE4NGY5OTNiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdolAAwDQYJKoZIhvcNAQELBQADggEBAJKJbcpsHa5bRXLUNmv+kQ3taG8/ 6UoRWUL5/Mee4UiGMjL+lggYmYTqj+lwz182+RM0zGbuupjumfDlmSv8iueQdsTg Gos0QnlKKTlMyI9Nx2ipcOHBuJNsVfbatY9psnBwWSOwTBgH9UrQq/dZXv2xoRUZ AL1ICFkWAupWYmS3wsUPu66gjQ4/KzDqhhHwKDUk3ZsAtnmBon6OJ/OYt1qhkRR+ 2ppUWcc13W8eGQjB6NhX7y0GvZO5euxUiVrv8LBEr5u7h6AhO2A13u5mKI62Bc74 1A6VUv9gE08ebZfOonc4nc/9w76kf51ffBt9ztB3NYsPCJo+TFMcKuhpbpI= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:30 2025 by rpki-client