$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa File: d843d886-eb77-42dc-a7e8-6d1a13513b60.roa (raw, json) Hash identifier: xwuiMAR5C+m4QEmOkVyt+XUXnAq0Q3wqit16ilEAKYA= Subject key identifier: 0C:33:B6:D4:47:76:D4:98:80:FE:63:7D:5C:DB:72:F2:FA:E4:CB:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34720ABA57C095F9281DEBE6B95A41658F0BBBC2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa Signing time: Sat 16 Aug 2025 00:30:28 +0000 ROA not before: Sat 16 Aug 2025 00:30:28 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.215.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:72:0a:ba:57:c0:95:f9:28:1d:eb:e6:b9:5a:41:65:8f:0b:bb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:30:28 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=31e590a96cadc4636f2e27116a7a0325b4bd6f010b39a55ee11207b8c8caa813, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:e5:c5:37:8d:ac:ac:6a:32:ae:31:57:cd: ae:fd:d0:92:23:81:43:d8:d5:0d:29:32:cb:08:58: bf:05:f8:c0:39:25:71:60:fd:3e:79:bb:23:ef:57: 8c:7b:44:73:c5:73:df:9c:00:b6:88:7a:ce:15:8a: 9f:d4:dc:0f:e1:f2:f1:3f:22:0b:fe:c4:63:e2:cb: 21:6c:36:ed:a9:59:c1:e6:f7:a6:b7:72:cc:72:25: c2:48:41:ce:b4:87:80:96:cb:1c:a7:ba:4f:c3:da: 08:5a:94:e7:d9:36:e9:66:ff:aa:b4:68:38:a9:2b: 42:23:6e:78:76:ed:b2:e8:b5:f6:73:cf:ce:5e:e2: c4:9e:66:22:6d:7b:f1:80:97:73:e0:4d:5e:43:83: f2:1e:77:cd:7f:0c:6d:2d:82:c1:d8:16:52:99:a9: 65:76:4a:1e:c8:7e:f8:8d:3e:71:35:7d:2e:1f:3c: a3:b1:e9:39:d5:3a:40:5e:73:65:da:14:a8:0c:e4: 24:9e:20:6a:f6:c4:89:29:16:dc:6b:7c:5c:53:10: c4:54:9c:24:81:7f:b2:be:99:4a:a8:c5:23:1b:b7: b0:fc:d6:f3:52:b3:a0:db:60:55:1f:83:5b:b4:7b: 53:c1:c0:c0:bd:27:b6:04:19:50:31:33:4b:65:8d: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:33:B6:D4:47:76:D4:98:80:FE:63:7D:5C:DB:72:F2:FA:E4:CB:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.136.0/22 Signature Algorithm: sha256WithRSAEncryption 79:03:8b:35:bc:d4:52:65:e1:3b:f1:52:5b:89:80:d8:59:ed: 88:8b:5f:8c:79:61:ae:14:c9:87:50:d4:38:9e:6c:43:ff:46: 78:05:33:84:7a:75:3b:4d:9f:bd:3c:ce:e1:64:8d:be:52:53: 5b:38:00:c8:12:ad:47:20:73:11:2c:b9:80:1f:66:a5:37:99: 40:31:a0:26:a7:bb:24:63:4c:2a:e3:20:90:60:c5:a1:38:27: 72:39:b7:99:c6:1a:a4:b4:1b:6b:60:7a:cb:12:f0:77:94:4c: bc:d8:40:7e:72:65:3e:bb:26:2a:f8:51:2d:4f:fc:3d:29:82: d3:76:c9:d0:3b:fc:c3:9a:b2:b4:cc:49:09:0a:6d:48:b4:86: c9:d2:1c:cb:b4:7a:8b:35:91:96:8d:6e:32:09:38:75:b0:bd: 05:c5:53:a5:f4:5e:cc:71:4c:27:bf:99:dd:6b:d1:d0:49:17: 07:c4:ae:97:cd:a3:e0:06:45:b9:4e:f3:f3:bf:dd:06:6a:16: 07:20:db:9e:1f:a6:4a:f4:e8:28:d2:76:47:f4:c0:6d:60:e5: c0:4b:15:8f:f6:b3:84:02:10:94:ea:3d:20:fa:fa:4a:61:0d: 2f:04:0e:58:02:26:f6:5d:2f:8f:65:9b:d7:86:e7:30:4c:b0: bf:97:eb:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNHIKulfAlfkoHevmuVpBZY8Lu8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMDI4WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWU1OTBhOTZjYWRjNDYzNmYyZTI3MTE2YTdhMDMyNWI0 YmQ2ZjAxMGIzOWE1NWVlMTEyMDdiOGM4Y2FhODEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcD+XFN42srGoyrjFXza790JIjgUPY1Q0pMssIWL8F+MA5 JXFg/T55uyPvV4x7RHPFc9+cALaIes4Vip/U3A/h8vE/Igv+xGPiyyFsNu2pWcHm 96a3csxyJcJIQc60h4CWyxynuk/D2ghalOfZNulm/6q0aDipK0Ijbnh27bLotfZz z85e4sSeZiJte/GAl3PgTV5Dg/Ied81/DG0tgsHYFlKZqWV2Sh7IfviNPnE1fS4f PKOx6TnVOkBec2XaFKgM5CSeIGr2xIkpFtxrfFxTEMRUnCSBf7K+mUqoxSMbt7D8 1vNSs6DbYFUfg1u0e1PBwMC9J7YEGVAxM0tljY+ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDDO21Ed21JiA/mN9XNty8vrky3wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NDNkODg2LWViNzctNDJkYy1hN2U4LTZkMWExMzUxM2I2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14gwDQYJKoZIhvcNAQELBQADggEBAHkDizW81FJl4TvxUluJgNhZ7YiL X4x5Ya4UyYdQ1DiebEP/RngFM4R6dTtNn708zuFkjb5SU1s4AMgSrUcgcxEsuYAf ZqU3mUAxoCanuyRjTCrjIJBgxaE4J3I5t5nGGqS0G2tgessS8HeUTLzYQH5yZT67 Jir4US1P/D0pgtN2ydA7/MOasrTMSQkKbUi0hsnSHMu0eos1kZaNbjIJOHWwvQXF U6X0XsxxTCe/md1r0dBJFwfErpfNo+AGRblO8/O/3QZqFgcg254fpkr06CjSdkf0 wG1g5cBLFY/2s4QCEJTqPSD6+kphDS8EDlgCJvZdL49lm9eG5zBMsL+X65M= -----END CERTIFICATE-----Generated at Sat Aug 23 08:30:01 2025 by rpki-client