$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa File: e261c24b-13a0-4019-b3b3-0562e86aea2f.roa (raw, json) Hash identifier: jrh5/lvQPQ675FdaPpwjPsXNajfSxdHC/GGiAHVFsBI= Subject key identifier: 80:10:96:B7:4A:E9:11:27:B2:86:DD:4B:75:73:63:EA:E6:69:D9:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6124AF5C4DE50385B2B3B6C114DE59DC4BEC730F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa Signing time: Fri 08 Aug 2025 00:22:12 +0000 ROA not before: Fri 08 Aug 2025 00:22:12 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:24:af:5c:4d:e5:03:85:b2:b3:b6:c1:14:de:59:dc:4b:ec:73:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:22:12 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=0cbc419687913a1e1dfb2af5628f03d2d43ea1c6f533941bc26e0fb1c572adf2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:80:9e:d5:a5:a0:0d:2e:e2:01:dd:e6:d9: 4d:55:78:49:2b:dc:07:da:e8:c3:77:95:c9:96:74: 8b:60:fa:e3:78:db:a0:2c:d6:07:8e:e1:17:44:a6: d9:3c:0a:25:e3:76:01:f5:a7:dd:49:5f:fa:35:5f: f5:d3:de:bb:3c:24:b4:4c:f8:97:f2:bb:68:5e:d6: dd:db:fc:44:f2:80:c4:d9:aa:63:4d:41:a4:5f:3c: 24:bb:9d:78:85:12:16:ff:11:10:1e:21:85:25:20: fc:87:3f:cc:4b:e9:54:b2:43:0a:61:4a:05:09:d5: 37:a7:6c:56:84:80:2d:89:37:85:f7:1e:1d:41:41: 35:5b:c5:92:3e:f2:90:18:78:fd:ba:76:57:fb:9c: 2c:7a:f0:38:2c:95:61:41:64:b5:b4:7b:d0:be:66: 8c:03:e8:cb:af:2c:89:b4:64:59:65:f3:15:13:9c: 4d:40:b4:c5:ed:cc:c6:20:18:86:30:dc:8a:a4:c7: 1a:9d:b0:e9:db:43:6d:3b:e1:d1:f9:62:1c:7b:ac: 3e:4b:24:19:b5:a8:2b:51:c8:24:3a:6c:74:aa:0d: e8:96:66:ce:90:4e:10:d8:d1:54:e2:50:ed:6d:7b: d5:73:ae:bd:7d:5c:13:5a:e8:0a:c5:df:66:9c:4e: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:10:96:B7:4A:E9:11:27:B2:86:DD:4B:75:73:63:EA:E6:69:D9:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption be:de:1b:c4:68:c9:57:bf:40:4a:21:ea:cd:ed:51:97:b5:b7: d2:56:b2:11:f6:3c:97:4d:a7:a1:53:88:4f:7c:b5:97:a7:66: bc:fe:11:eb:61:e8:e9:81:ea:44:de:a2:20:1d:f7:c7:d9:6f: 0b:e0:4c:11:f2:c0:50:5d:be:bc:ac:27:96:8f:2f:97:87:02: 3e:58:cc:6a:24:47:2a:50:f9:44:0d:67:1b:0c:7e:1f:97:34: 2f:95:83:70:e9:95:9a:4a:6e:09:ca:c6:13:1b:67:41:55:eb: 9b:ee:4f:88:a1:b9:55:99:59:dc:fb:c1:d9:a5:5c:dd:f7:15: a5:83:73:65:82:ed:bb:7f:3a:b7:cc:e4:df:bf:e1:ed:a5:bc: 22:c9:c0:8e:8a:c4:48:f3:33:7e:90:ab:c5:34:1a:a4:bd:ba: 2d:4a:83:e7:1c:1d:73:57:c5:aa:44:ea:30:21:20:58:62:a1: 9c:09:39:09:5a:2c:a7:69:5e:19:6d:38:67:60:b7:ff:d2:9c: d0:3a:14:a9:f2:72:bc:86:b2:66:2e:a5:00:b0:03:c7:17:56: bc:02:c8:b5:10:88:6d:6f:eb:55:5d:10:2f:b9:65:31:93:b1: 07:25:c7:4a:5a:09:3c:21:f7:d6:ba:30:e2:e9:c1:ba:5c:6b: 2b:44:e2:fe -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYSSvXE3lA4Wys7bBFN5Z3Evscw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAyMjEyWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2JjNDE5Njg3OTEzYTFlMWRmYjJhZjU2MjhmMDNkMmQ0 M2VhMWM2ZjUzMzk0MWJjMjZlMGZiMWM1NzJhZGYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeC4Ce1aWgDS7iAd3m2U1VeEkr3Afa6MN3lcmWdItg+uN4 26As1geO4RdEptk8CiXjdgH1p91JX/o1X/XT3rs8JLRM+Jfyu2he1t3b/ETygMTZ qmNNQaRfPCS7nXiFEhb/ERAeIYUlIPyHP8xL6VSyQwphSgUJ1TenbFaEgC2JN4X3 Hh1BQTVbxZI+8pAYeP26dlf7nCx68DgslWFBZLW0e9C+ZowD6MuvLIm0ZFll8xUT nE1AtMXtzMYgGIYw3IqkxxqdsOnbQ2074dH5Yhx7rD5LJBm1qCtRyCQ6bHSqDeiW Zs6QThDY0VTiUO1te9Vzrr19XBNa6ArF32acTg+xAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgBCWt0rpESeyht1LdXNj6uZp2XowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyNjFjMjRiLTEzYTAtNDAxOS1iM2IzLTA1NjJlODZhZWEyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBE3zANBgkqhkiG9w0BAQsFAAOCAQEAvt4bxGjJV79ASiHqze1Rl7W30lay EfY8l02noVOIT3y1l6dmvP4R62Ho6YHqRN6iIB33x9lvC+BMEfLAUF2+vKwnlo8v l4cCPljMaiRHKlD5RA1nGwx+H5c0L5WDcOmVmkpuCcrGExtnQVXrm+5PiKG5VZlZ 3PvB2aVc3fcVpYNzZYLtu386t8zk37/h7aW8IsnAjorESPMzfpCrxTQapL26LUqD 5xwdc1fFqkTqMCEgWGKhnAk5CVosp2leGW04Z2C3/9Kc0DoUqfJyvIayZi6lALAD xxdWvALItRCIbW/rVV0QL7llMZOxByXHSloJPCH31row4unBulxrK0Ti/g== -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:02 2025 by rpki-client