$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa File: ee6644d9-3367-43f8-ae7b-f2e48733177c.roa (raw, json) Hash identifier: it3NiWSzVQSsylzgIVAS0C2wupYRg3mBJheJFiKz+3M= Subject key identifier: FC:D3:F8:D5:B8:C0:AA:31:DF:F9:44:60:98:09:F8:3E:ED:2D:AD:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1624F10AED73C3E995BD55C4AD1BD25172DB98CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa Signing time: Sat 16 Aug 2025 00:31:08 +0000 ROA not before: Sat 16 Aug 2025 00:31:08 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.220.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:24:f1:0a:ed:73:c3:e9:95:bd:55:c4:ad:1b:d2:51:72:db:98:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:31:08 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=202f9d37f1a4c2f38957813f8c6715ae6ecdf357619dd088c45f2f2864bcd773, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:84:0b:d1:cd:fa:eb:c9:55:71:8a:1c:9d: 84:7f:9c:69:38:80:09:d7:0b:9c:26:07:12:b7:4b: 85:cd:f0:6b:80:bd:cb:c2:2f:73:99:95:80:00:89: 53:44:b5:68:de:ca:86:df:52:91:06:cd:18:6d:ce: f5:e1:43:29:bc:27:7e:0f:6a:a0:1b:c2:09:07:ee: 8f:64:33:c8:d7:e6:77:d0:b4:76:e5:5e:08:fd:0a: 26:77:18:01:37:43:00:bc:49:74:be:bd:68:95:84: e3:c7:38:0b:2d:b8:94:c4:66:21:3e:f6:9e:e4:10: 51:aa:a4:17:3e:ef:49:15:c7:3e:2b:87:04:10:ff: 04:ba:32:f9:dd:80:ca:43:2b:75:1f:6a:9a:56:dd: 0d:9a:fc:f3:c1:86:5d:64:8b:0b:c4:4c:7f:6d:15: 6d:8c:48:fc:ec:d6:ed:7b:4e:ae:1a:3e:e9:11:12: 5d:1c:d7:d9:34:12:ac:07:8f:7f:14:d5:a1:dd:36: 16:18:de:86:bd:dc:85:97:36:61:ff:3c:b0:85:be: 89:00:89:04:4b:70:68:66:fb:1e:98:1a:d6:f9:3f: ce:17:f1:ad:89:e4:ca:01:19:a6:c3:61:f0:1c:99: b6:c3:47:89:60:7d:6b:72:75:60:af:e9:40:a2:08: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:F8:D5:B8:C0:AA:31:DF:F9:44:60:98:09:F8:3E:ED:2D:AD:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.220.72.0/22 Signature Algorithm: sha256WithRSAEncryption 02:39:eb:64:44:cb:b6:b8:bb:09:2a:fa:ab:4d:ad:06:26:71: ec:37:ec:fa:9a:37:49:9c:ce:6f:c3:60:bb:1e:50:d6:4c:33: 1a:fa:ba:6e:9d:05:66:72:9b:ed:09:27:af:bf:6b:a9:e4:ed: 7f:4f:f0:e3:93:df:34:e7:3e:07:79:c6:75:0e:f6:a2:be:37: 1d:29:a0:a6:8d:fc:ef:ad:b8:53:ea:69:6a:d2:0e:49:ba:14: 40:b0:4a:c4:a9:b9:66:fb:02:c9:47:c6:b4:46:f7:c2:fa:73: 1f:c2:25:72:ac:a9:2d:89:99:de:20:12:98:dc:7d:56:6a:1b: 01:60:94:4c:31:fa:9e:b7:f8:b0:66:26:ca:2e:30:33:0c:62: 3e:3b:e2:65:35:cf:ac:12:fc:6e:2f:f3:68:d1:a9:36:be:12: 65:f3:31:83:d1:7c:14:53:a7:93:1f:ab:95:57:9b:a6:a4:53: 64:91:96:76:c5:59:dc:f1:23:fa:61:da:71:89:a6:e7:f6:bf: cb:26:f7:a4:f8:cb:5c:67:65:97:0e:ba:69:e7:23:20:6f:1d: 53:2b:1b:15:fd:8f:e2:da:c5:16:4b:89:31:5b:ea:66:06:23: d3:94:f1:c7:ec:0a:ce:17:eb:38:3b:29:74:6d:18:e4:19:3c: 32:0f:cb:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFiTxCu1zw+mVvVXErRvSUXLbmMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMTA4WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDJmOWQzN2YxYTRjMmYzODk1NzgxM2Y4YzY3MTVhZTZl Y2RmMzU3NjE5ZGQwODhjNDVmMmYyODY0YmNkNzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCry4QL0c3668lVcYocnYR/nGk4gAnXC5wmBxK3S4XN8GuA vcvCL3OZlYAAiVNEtWjeyobfUpEGzRhtzvXhQym8J34PaqAbwgkH7o9kM8jX5nfQ tHblXgj9CiZ3GAE3QwC8SXS+vWiVhOPHOAstuJTEZiE+9p7kEFGqpBc+70kVxz4r hwQQ/wS6MvndgMpDK3UfappW3Q2a/PPBhl1kiwvETH9tFW2MSPzs1u17Tq4aPukR El0c19k0EqwHj38U1aHdNhYY3oa93IWXNmH/PLCFvokAiQRLcGhm+x6YGtb5P84X 8a2J5MoBGabDYfAcmbbDR4lgfWtydWCv6UCiCOuFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/NP41bjAqjHf+URgmAn4Pu0trXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlNjY0NGQ5LTMzNjctNDNmOC1hZTdiLWYyZTQ4NzMzMTc3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs3EgwDQYJKoZIhvcNAQELBQADggEBAAI562REy7a4uwkq+qtNrQYmcew3 7PqaN0mczm/DYLseUNZMMxr6um6dBWZym+0JJ6+/a6nk7X9P8OOT3zTnPgd5xnUO 9qK+Nx0poKaN/O+tuFPqaWrSDkm6FECwSsSpuWb7AslHxrRG98L6cx/CJXKsqS2J md4gEpjcfVZqGwFglEwx+p63+LBmJsouMDMMYj474mU1z6wS/G4v82jRqTa+EmXz MYPRfBRTp5Mfq5VXm6akU2SRlnbFWdzxI/ph2nGJpuf2v8sm96T4y1xnZZcOumnn IyBvHVMrGxX9j+LaxRZLiTFb6mYGI9OU8cfsCs4X6zg7KXRtGOQZPDIPy+A= -----END CERTIFICATE-----Generated at Sat Aug 23 06:46:19 2025 by rpki-client