$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa File: f3593bc6-497b-4beb-8e27-47d654b88fdb.roa (raw, json) Hash identifier: RDKtbbtXKcCOyd9KJvzCjPoAt8d67zkp+uBY99Hufas= Subject key identifier: 06:01:D1:E5:92:06:BD:51:AF:8D:7E:28:12:B8:02:96:1D:92:E5:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A2D487193382F567497910AFCC2D94130886CE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa Signing time: Tue 19 Aug 2025 00:20:18 +0000 ROA not before: Tue 19 Aug 2025 00:20:18 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 89.48.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2d:48:71:93:38:2f:56:74:97:91:0a:fc:c2:d9:41:30:88:6c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:20:18 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=63d415c17a143763ca5f5fbb6710187a700aa49adde42ebf6aaea53439f150fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:24:34:43:94:39:8b:2e:aa:0d:df:94:35: 71:48:66:b7:03:28:da:3b:a6:f7:ce:17:65:ab:43: f8:54:53:0d:3a:61:57:96:ff:e1:b9:cb:d2:7c:42: 91:eb:c4:c9:0d:58:57:01:75:a2:73:f7:36:7e:54: d9:a6:b8:31:37:f8:75:b0:5d:b3:77:04:65:96:0e: 47:f5:3f:65:b9:b6:b8:06:c8:68:8f:d1:76:bd:c5: 2c:76:e7:d4:94:7d:6a:31:88:1c:bd:31:cb:7c:b6: d6:d7:31:9a:db:dd:8c:53:2a:fa:f3:de:2e:7a:10: 86:c7:d6:8f:70:c0:0f:96:1a:be:1b:70:98:5a:b7: a7:43:2f:da:c0:d5:63:60:18:46:97:67:a8:94:27: 21:a7:f5:c8:b4:97:b3:95:bf:2f:44:c3:f4:a5:b8: f4:c6:60:82:52:7b:c2:29:01:5d:e8:1e:81:ef:e2: 12:a7:f2:e2:96:92:7e:a8:47:39:b7:e2:d8:4e:2c: 2d:9a:fb:92:87:8e:5e:b1:14:05:02:ee:42:52:b2: 67:3e:a9:8f:ec:8e:7d:ec:ea:25:71:be:2d:b5:49: ed:73:6e:95:69:70:bc:e5:6c:b3:c7:c4:a0:04:fe: 2c:b2:9c:fa:44:75:e4:97:eb:76:ab:89:59:a6:80: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:D1:E5:92:06:BD:51:AF:8D:7E:28:12:B8:02:96:1D:92:E5:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.48.0.0/13 Signature Algorithm: sha256WithRSAEncryption 2f:a2:ed:dd:fe:12:75:b4:de:c1:69:c8:ca:59:29:64:fa:22: 52:c9:45:4a:29:9e:58:ea:55:7c:0a:cf:c6:e6:10:2d:b1:3b: 24:4c:76:94:8a:50:8b:05:a1:f1:bf:bc:87:8b:25:1e:69:68: 6e:9c:56:06:53:88:db:2c:c8:b8:c4:e1:d8:d5:9a:aa:81:85: 62:98:3b:a5:b9:47:0c:43:7e:6a:fc:ba:ad:71:7d:b0:0c:15: 0a:45:bd:58:dd:21:0f:b0:74:ee:34:59:58:38:98:15:cb:a0: c6:99:fd:0c:1b:67:8a:c2:4a:2b:b0:96:cf:30:89:62:48:e7: 76:e3:f2:08:a1:c5:a2:88:74:a8:36:74:2d:b6:e5:98:49:6f: a0:50:04:c4:ca:69:3c:f4:e0:58:a1:9c:87:9f:b1:db:5a:26: ee:46:15:06:41:2c:14:1c:a6:21:47:f7:30:87:26:47:e8:6b: ea:20:25:32:8e:64:1e:cf:2c:0f:26:ed:86:21:53:21:e5:2f: e6:24:4a:a4:8f:ec:de:85:e3:89:0f:55:ca:17:4e:56:dd:7b: 1e:79:12:db:55:a9:53:71:a6:bc:f0:90:1e:c1:df:f2:37:a1: e6:2e:f0:bf:d1:a7:0d:fa:f2:0d:cb:23:a1:f2:7f:0f:02:7d: 1a:3f:2a:c8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGi1IcZM4L1Z0l5EK/MLZQTCIbOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAyMDE4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2Q0MTVjMTdhMTQzNzYzY2E1ZjVmYmI2NzEwMTg3YTcw MGFhNDlhZGRlNDJlYmY2YWFlYTUzNDM5ZjE1MGZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCypyQ0Q5Q5iy6qDd+UNXFIZrcDKNo7pvfOF2WrQ/hUUw06 YVeW/+G5y9J8QpHrxMkNWFcBdaJz9zZ+VNmmuDE3+HWwXbN3BGWWDkf1P2W5trgG yGiP0Xa9xSx259SUfWoxiBy9Mct8ttbXMZrb3YxTKvrz3i56EIbH1o9wwA+WGr4b cJhat6dDL9rA1WNgGEaXZ6iUJyGn9ci0l7OVvy9Ew/SluPTGYIJSe8IpAV3oHoHv 4hKn8uKWkn6oRzm34thOLC2a+5KHjl6xFAUC7kJSsmc+qY/sjn3s6iVxvi21Se1z bpVpcLzlbLPHxKAE/iyynPpEdeSX63ariVmmgJGtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBgHR5ZIGvVGvjX4oErgClh2S5X4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzNTkzYmM2LTQ5N2ItNGJlYi04ZTI3LTQ3ZDY1NGI4OGZkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNZMDANBgkqhkiG9w0BAQsFAAOCAQEAL6Lt3f4SdbTewWnIylkpZPoiUslF SimeWOpVfArPxuYQLbE7JEx2lIpQiwWh8b+8h4slHmlobpxWBlOI2yzIuMTh2NWa qoGFYpg7pblHDEN+avy6rXF9sAwVCkW9WN0hD7B07jRZWDiYFcugxpn9DBtnisJK K7CWzzCJYkjnduPyCKHFooh0qDZ0LbblmElvoFAExMppPPTgWKGch5+x21om7kYV BkEsFBymIUf3MIcmR+hr6iAlMo5kHs8sDybthiFTIeUv5iRKpI/s3oXjiQ9VyhdO Vt17HnkS21WpU3GmvPCQHsHf8jeh5i7wv9GnDfryDcsjofJ/DwJ9Gj8qyA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:50:17 2025 by rpki-client