$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa File: f9ad2b65-bee0-4429-a46c-6a261fba811b.roa (raw, json) Hash identifier: rgewsCiSzOSHbJ8vzx7oMOORN9dBQf9alsAk290a7+M= Subject key identifier: 3F:5A:38:E0:C5:A3:CB:23:2A:5C:38:E1:82:5B:1F:1A:14:BD:7F:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 153530B8C0F55F471FD910DEE0E5A9258E37AA1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa Signing time: Tue 19 Aug 2025 00:10:47 +0000 ROA not before: Tue 19 Aug 2025 00:10:47 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.173.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:35:30:b8:c0:f5:5f:47:1f:d9:10:de:e0:e5:a9:25:8e:37:aa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:10:47 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=314361ba9b6cb7639c6d59e4e0726e98fd98b9aeb9cb6699d5fb94b9001ea97e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:50:47:0f:95:30:4f:70:92:d3:e9:50:e3: 85:08:78:11:16:3b:b6:c6:65:71:0d:7c:6a:1d:ba: f2:c6:b1:5b:67:9c:b1:fd:14:e3:0c:83:59:44:32: 5c:34:f9:62:20:3a:8b:c7:4b:a2:5a:9e:a7:48:9a: d3:58:19:c1:8c:30:7c:95:14:29:67:2d:de:74:f3: cb:9d:46:3a:78:c5:fc:9b:92:ec:88:3d:68:5a:01: 2e:08:4b:6c:68:5c:a7:6b:21:9b:46:aa:ba:ea:c1: 4b:7c:9d:98:7e:41:e8:46:0e:76:51:16:0d:2b:db: 9b:3c:db:31:63:ae:f4:02:04:9d:5f:86:84:36:d2: 87:ae:59:d2:82:6f:24:f4:e6:c1:51:d7:09:61:af: e7:05:9f:e0:19:76:b2:48:5e:ef:b1:0b:7f:72:57: 09:fc:7a:2f:a2:35:88:20:45:d5:db:61:94:ed:46: d1:e3:c5:ca:a7:42:5e:78:83:48:1f:c2:60:be:1d: 36:c5:7a:f4:d3:f3:d8:3a:66:16:fe:84:45:10:f0: 75:fd:ba:2e:0b:12:e6:2f:e0:0d:57:ab:08:a2:16: 3b:f1:cb:04:52:ed:26:8d:80:e6:6d:64:55:72:b1: e1:4d:b8:95:d8:f5:95:40:e8:a4:48:bc:28:38:73: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:38:E0:C5:A3:CB:23:2A:5C:38:E1:82:5B:1F:1A:14:BD:7F:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 73:6c:e5:df:b9:61:72:0c:39:c1:7f:bc:7a:1f:11:c4:b2:93: 55:5a:01:7b:0e:e2:11:04:0f:ab:7d:1d:ba:19:00:07:be:3a: 73:59:74:d1:35:80:72:a4:ca:14:de:12:4f:08:f6:cc:fb:3b: 09:8d:66:bb:57:c0:11:15:bf:4f:94:f9:69:f0:01:99:23:db: 16:69:4c:94:19:fb:37:b8:8f:b4:30:f4:2f:61:23:9c:c8:83: 78:bf:c7:57:6b:f6:ff:9e:ff:83:b0:4c:60:0d:23:8b:69:76: 1a:14:9f:26:c2:fc:13:40:2c:8d:d8:e4:26:da:5b:97:41:6f: bf:03:2b:18:3d:03:05:7c:e8:6b:05:1d:51:00:df:e9:2a:44: 06:d7:d5:ef:93:f5:c9:3b:b9:5f:a5:54:7b:e2:41:6a:b4:df: ce:dc:4e:3e:06:d0:2a:98:a1:47:5d:51:d8:1c:7a:bf:16:77: 34:50:ab:f3:67:4b:7b:7f:5b:57:9b:6b:29:67:17:1d:c8:54: 60:b3:ea:88:6e:fc:4d:1c:f3:e0:00:95:e5:54:2a:b0:8c:d3: 3f:ed:ca:af:3d:e7:ea:4a:1e:a0:54:88:c8:43:93:42:07:e8: 7d:a1:0b:e2:b5:40:b9:bf:2b:c5:9c:62:18:68:1a:31:a2:b3: 19:40:12:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFTUwuMD1X0cf2RDe4OWpJY43qh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMDQ3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTQzNjFiYTliNmNiNzYzOWM2ZDU5ZTRlMDcyNmU5OGZk OThiOWFlYjljYjY2OTlkNWZiOTRiOTAwMWVhOTdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3UFBHD5UwT3CS0+lQ44UIeBEWO7bGZXENfGoduvLGsVtn nLH9FOMMg1lEMlw0+WIgOovHS6JanqdImtNYGcGMMHyVFClnLd5088udRjp4xfyb kuyIPWhaAS4IS2xoXKdrIZtGqrrqwUt8nZh+QehGDnZRFg0r25s82zFjrvQCBJ1f hoQ20oeuWdKCbyT05sFR1wlhr+cFn+AZdrJIXu+xC39yVwn8ei+iNYggRdXbYZTt RtHjxcqnQl54g0gfwmC+HTbFevTT89g6Zhb+hEUQ8HX9ui4LEuYv4A1XqwiiFjvx ywRS7SaNgOZtZFVyseFNuJXY9ZVA6KRIvCg4c/b9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP1o44MWjyyMqXDjhglsfGhS9f0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5YWQyYjY1LWJlZTAtNDQyOS1hNDZjLTZhMjYxZmJhODExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYrQAwDQYJKoZIhvcNAQELBQADggEBAHNs5d+5YXIMOcF/vHofEcSyk1Va AXsO4hEED6t9HboZAAe+OnNZdNE1gHKkyhTeEk8I9sz7OwmNZrtXwBEVv0+U+Wnw AZkj2xZpTJQZ+ze4j7Qw9C9hI5zIg3i/x1dr9v+e/4OwTGANI4tpdhoUnybC/BNA LI3Y5CbaW5dBb78DKxg9AwV86GsFHVEA3+kqRAbX1e+T9ck7uV+lVHviQWq0387c Tj4G0CqYoUddUdgcer8WdzRQq/NnS3t/W1ebaylnFx3IVGCz6ohu/E0c8+AAleVU KrCM0z/tyq895+pKHqBUiMhDk0IH6H2hC+K1QLm/K8WcYhhoGjGisxlAEnE= -----END CERTIFICATE-----Generated at Sat Aug 23 06:46:46 2025 by rpki-client