$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa File: e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa (raw, json) Hash identifier: jovXaoOQkkuAbvObjPFwTtxQJvnT8BYE+JTSISYWr1M= Subject key identifier: CA:E6:FB:AB:E0:E4:5B:70:BB:84:3C:76:14:BA:5C:8C:36:64:3C:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E6AEDF7B75E5D6E20C0219473A30F8663C694C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa Signing time: Fri 22 Aug 2025 00:21:07 +0000 ROA not before: Fri 22 Aug 2025 00:21:07 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.211.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6a:ed:f7:b7:5e:5d:6e:20:c0:21:94:73:a3:0f:86:63:c6:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:21:07 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=ea7068bdbb3e3d9bff83585330497db71fb5b78bed84793200d91a15e15b06a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:51:1a:3d:ce:2b:aa:03:e7:b4:ac:e3:8f:c2: 54:a3:d5:2d:f4:c0:46:ca:e7:e3:0c:17:ec:e7:a0: 98:36:40:be:fa:45:a3:74:76:92:99:20:97:d1:7a: 6d:f6:8d:cd:64:e0:8a:90:fe:bb:0c:2b:4a:f8:7b: 35:74:6b:37:46:33:fe:3a:63:5e:bb:b1:b3:f3:18: 53:46:df:34:96:3f:ec:03:df:9f:fd:74:4f:31:31: 43:68:cd:51:e8:3f:b4:d3:fe:17:42:7c:06:59:30: 5d:49:a5:c9:a4:af:91:cf:0d:a2:1b:fb:95:c1:2b: 1e:6c:b8:a5:47:3f:f3:88:eb:23:3d:35:81:37:4e: 9e:4c:cf:25:f3:87:9c:a3:2e:41:d6:79:70:7d:d0: 36:bd:ad:50:5e:ff:31:5f:f1:c1:f0:8f:76:34:e3: 32:c1:4b:4d:5f:b3:5b:d2:7d:89:e3:55:6d:1d:2b: f4:58:aa:ee:21:71:ee:1b:b5:49:70:41:e8:0b:96: 78:b1:1b:02:4f:72:e6:9c:e8:b0:ea:a0:e7:e2:c4: 33:4d:d5:3b:17:e5:25:0c:52:2a:e4:b8:a7:70:8a: 84:eb:a7:1b:27:f0:1b:84:3a:8b:0d:8f:d9:09:70: d7:9f:15:e0:e8:71:e6:3e:80:97:d6:42:a0:00:82: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:FB:AB:E0:E4:5B:70:BB:84:3C:76:14:BA:5C:8C:36:64:3C:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.224.0/19 Signature Algorithm: sha256WithRSAEncryption 86:85:0a:3d:57:bb:00:e7:05:96:f6:a3:2f:f6:2d:34:97:4d: 32:eb:3d:9a:1f:05:a6:a2:4b:fb:2a:49:25:5c:7e:06:19:26: e4:8c:f1:21:b6:69:0b:af:77:61:46:db:cf:9b:13:f9:3a:66: 3c:f2:ed:8a:42:96:cd:d1:46:af:cb:a4:24:56:a0:71:8c:7e: fd:1d:cb:61:24:f4:56:88:26:c9:1b:08:8d:bc:a3:10:70:14: 69:ce:13:22:34:b6:2d:27:cb:de:c4:7c:a0:65:05:35:ec:4c: 01:ea:eb:6f:7c:1f:21:6e:38:ec:22:c0:2a:84:71:dc:c0:18: 93:62:98:fb:1c:32:03:e3:fa:4f:cf:fd:41:40:e3:ee:1b:dc: 51:1b:7b:4f:a3:e4:92:2d:8c:d6:93:ba:8a:37:5a:e0:b8:c7: f8:38:e4:34:af:21:31:f0:68:c2:d0:91:95:9a:2f:93:e0:de: 91:52:d8:bd:c7:db:24:8a:30:0f:5b:28:6c:cc:50:01:7d:61: be:d4:ac:a2:a2:19:cb:cb:bf:de:34:a8:44:d1:32:8d:16:c0: 8e:02:6d:ee:65:ef:d4:ef:b7:66:40:d4:c0:5e:78:b0:b5:0c: 33:8f:f6:98:ca:43:83:2e:6e:c5:ed:66:77:c4:55:6a:06:a9: e4:e0:31:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULmrt97deXW4gwCGUc6MPhmPGlMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAyMTA3WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTcwNjhiZGJiM2UzZDliZmY4MzU4NTMzMDQ5N2RiNzFm YjViNzhiZWQ4NDc5MzIwMGQ5MWExNWUxNWIwNmE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqURo9ziuqA+e0rOOPwlSj1S30wEbK5+MMF+znoJg2QL76 RaN0dpKZIJfRem32jc1k4IqQ/rsMK0r4ezV0azdGM/46Y167sbPzGFNG3zSWP+wD 35/9dE8xMUNozVHoP7TT/hdCfAZZMF1Jpcmkr5HPDaIb+5XBKx5suKVHP/OI6yM9 NYE3Tp5MzyXzh5yjLkHWeXB90Da9rVBe/zFf8cHwj3Y04zLBS01fs1vSfYnjVW0d K/RYqu4hce4btUlwQegLlnixGwJPcuac6LDqoOfixDNN1TsX5SUMUirkuKdwioTr pxsn8BuEOosNj9kJcNefFeDoceY+gJfWQqAAgi8zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyub7q+DkW3C7hDx2FLpcjDZkPIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyZDhlOGZiLWE1YzQtNDY5NC05Y2M0LWI1NjI2ZTA3MmFiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXG0+AwDQYJKoZIhvcNAQELBQADggEBAIaFCj1XuwDnBZb2oy/2LTSXTTLr PZofBaaiS/sqSSVcfgYZJuSM8SG2aQuvd2FG28+bE/k6Zjzy7YpCls3RRq/LpCRW oHGMfv0dy2Ek9FaIJskbCI28oxBwFGnOEyI0ti0ny97EfKBlBTXsTAHq6298HyFu OOwiwCqEcdzAGJNimPscMgPj+k/P/UFA4+4b3FEbe0+j5JItjNaTuoo3WuC4x/g4 5DSvITHwaMLQkZWaL5Pg3pFS2L3H2ySKMA9bKGzMUAF9Yb7UrKKiGcvLv940qETR Mo0WwI4Cbe5l79Tvt2ZA1MBeeLC1DDOP9pjKQ4MubsXtZnfEVWoGqeTgMco= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:14 2025 by rpki-client