$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80012cf-ef4e-47dd-a960-e7426da86a9b.roa File: d80012cf-ef4e-47dd-a960-e7426da86a9b.roa (raw, json) Hash identifier: 3gopFxOZlQ2EQnodKnkROHsxluM5dI91SnA7anEUSm0= Subject key identifier: FC:BA:4B:23:3F:62:EF:C0:FC:5B:0D:D5:D4:16:C8:0C:27:7E:34:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BBE05838AFE4704D7C4636EF022D58E4884FB36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80012cf-ef4e-47dd-a960-e7426da86a9b.roa Signing time: Sat 09 Aug 2025 00:10:48 +0000 ROA not before: Sat 09 Aug 2025 00:10:48 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 80.126.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:05:83:8a:fe:47:04:d7:c4:63:6e:f0:22:d5:8e:48:84:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 9 00:10:48 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=5c7e7d0078b29ae86966612bfb24089887c13a551054b26ac9f01000a2267b19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:05:66:96:2a:89:b3:5c:67:37:01:c9:90: 3c:87:c5:cc:c8:62:eb:a4:5f:32:15:e9:a1:1c:b3: d0:0f:93:f8:a0:e8:92:0b:e3:f2:b8:58:29:5c:7d: 99:69:6b:cd:93:6f:8c:16:49:40:5b:da:d1:d2:a8: 6d:5e:a8:fa:d6:1f:3e:a4:36:3c:42:53:b3:08:e4: d0:a7:ef:c2:de:6e:de:0b:47:f2:90:0e:b0:89:67: 76:c7:76:ab:1a:ae:5c:6d:64:a5:06:8c:a1:93:ee: 0a:e3:92:d2:77:e5:6f:7e:50:4b:9d:b7:c6:82:c9: 9a:bb:4a:03:dc:5c:ea:49:d7:30:58:90:89:b0:ea: 00:86:22:d1:6a:a7:ce:b5:bd:50:79:a0:42:fc:2a: 45:b9:52:67:f5:2e:14:a1:21:5b:c6:20:d4:9a:76: 45:35:32:98:6a:af:c0:c5:b1:d8:a7:6c:2d:8e:c3: e7:9e:33:11:1b:2b:40:84:0f:80:e7:34:e6:1c:2e: 97:7a:e4:87:b3:95:8a:8e:31:79:12:81:21:63:3d: 37:ea:a1:b9:b6:23:b1:dc:dd:ee:56:6d:30:7a:66: c8:ec:a8:ec:6e:db:3d:b0:f2:a7:00:e7:46:47:e6: b4:30:7e:ce:bd:68:a3:8b:f3:22:27:c4:5a:d2:61: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:4B:23:3F:62:EF:C0:FC:5B:0D:D5:D4:16:C8:0C:27:7E:34:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80012cf-ef4e-47dd-a960-e7426da86a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.126.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1b:b3:7a:32:04:5e:69:e9:72:f9:8c:a6:6e:90:dd:ef:e5:92: bb:4d:ba:02:92:08:4d:e6:cd:c5:6c:dd:14:83:aa:16:4e:6e: 02:bb:46:5d:37:77:f0:1d:33:0a:f3:34:c4:26:d7:7e:e7:b8: f5:07:93:9b:1b:34:3c:70:54:39:46:b1:91:2f:e6:ba:f5:1c: cf:cb:3b:00:8e:a5:ab:3d:ab:62:b0:84:d8:57:0c:9c:23:e5: 82:7b:8f:59:2c:08:1c:ad:be:d7:4e:b2:cb:aa:7f:c3:2f:45: 73:a4:8c:7f:29:68:92:af:75:90:10:db:dd:f9:92:dd:f0:ac: 9d:4e:56:32:78:a2:42:c6:5e:9e:66:bd:97:9c:1d:32:ba:63: 7a:bd:08:06:b5:09:a0:6e:51:cf:5e:7a:92:93:37:96:a2:3e: f6:d3:26:e1:2c:e8:2a:ce:0e:b1:4c:75:a6:b2:26:58:2e:f5: f8:99:43:11:16:df:46:30:a9:b1:83:bc:c6:ac:f8:bd:c4:98: 0f:dd:22:62:31:f3:1c:60:5d:82:01:6e:62:12:d7:7d:4e:34: 0a:53:6a:2c:5c:b0:dd:80:43:d2:c3:47:ff:af:36:d5:9a:e8: e6:0a:71:31:2e:d0:96:11:1e:e7:b8:a9:3f:e8:c4:78:41:89: f8:c5:25:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS74Fg4r+RwTXxGNu8CLVjkiE+zYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAxMDQ4WhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzdlN2QwMDc4YjI5YWU4Njk2NjYxMmJmYjI0MDg5ODg3 YzEzYTU1MTA1NGIyNmFjOWYwMTAwMGEyMjY3YjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcsQVmliqJs1xnNwHJkDyHxczIYuukXzIV6aEcs9APk/ig 6JIL4/K4WClcfZlpa82Tb4wWSUBb2tHSqG1eqPrWHz6kNjxCU7MI5NCn78Lebt4L R/KQDrCJZ3bHdqsarlxtZKUGjKGT7grjktJ35W9+UEudt8aCyZq7SgPcXOpJ1zBY kImw6gCGItFqp861vVB5oEL8KkW5Umf1LhShIVvGINSadkU1Mphqr8DFsdinbC2O w+eeMxEbK0CED4DnNOYcLpd65IezlYqOMXkSgSFjPTfqobm2I7Hc3e5WbTB6Zsjs qOxu2z2w8qcA50ZH5rQwfs69aKOL8yInxFrSYZXTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/LpLIz9i78D8Ww3V1BbIDCd+NJUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4MDAxMmNmLWVmNGUtNDdkZC1hOTYwLWU3NDI2ZGE4NmE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFQfjANBgkqhkiG9w0BAQsFAAOCAQEAG7N6MgReaely+YymbpDd7+WSu026 ApIITebNxWzdFIOqFk5uArtGXTd38B0zCvM0xCbXfue49QeTmxs0PHBUOUaxkS/m uvUcz8s7AI6lqz2rYrCE2FcMnCPlgnuPWSwIHK2+106yy6p/wy9Fc6SMfylokq91 kBDb3fmS3fCsnU5WMniiQsZenma9l5wdMrpjer0IBrUJoG5Rz156kpM3lqI+9tMm 4SzoKs4OsUx1prImWC71+JlDERbfRjCpsYO8xqz4vcSYD90iYjHzHGBdggFuYhLX fU40ClNqLFyw3YBD0sNH/6821Zro5gpxMS7QlhEe57ipP+jEeEGJ+MUlEw== -----END CERTIFICATE-----Generated at Sat Aug 23 06:51:19 2025 by rpki-client