$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa File: ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa (raw, json) Hash identifier: BwQutAmmfkcYovOBZb0LKhj8r279XRsAKQ+KFP6EGZ0= Subject key identifier: AA:79:4F:74:C4:95:FD:7F:44:A5:A1:05:28:1D:09:EC:24:08:D7:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67E9A4A47E583246FF30F6AD2CE380DCEE43F480 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa Signing time: Tue 19 Aug 2025 00:00:27 +0000 ROA not before: Tue 19 Aug 2025 00:00:27 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.20.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e9:a4:a4:7e:58:32:46:ff:30:f6:ad:2c:e3:80:dc:ee:43:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:00:27 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=edea77ad3c96bbf45fa1a355329ce822793efd29fe1c05c354f6aa0205b00ecf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:42:c6:ed:9c:09:ba:bc:48:20:a9:95:6c: 88:56:01:37:db:0e:f5:73:23:b6:df:92:01:ba:4e: d2:69:ae:b3:c9:a9:e3:fd:79:d6:ba:9a:b8:90:e3: 6b:82:90:07:cd:2d:1b:c4:45:ef:ab:08:95:fd:2f: f8:27:4b:84:a6:4f:8a:6a:1e:2b:c9:b0:26:50:85: c9:7b:c5:1e:34:94:f6:54:f3:f3:f9:1d:03:26:29: 7e:a6:8f:f6:59:87:00:7e:32:86:1a:f0:bb:5a:b7: 89:47:1c:72:52:3d:02:32:9d:aa:56:ab:12:df:9c: e0:ce:6e:06:77:79:f7:3e:06:f8:d5:1d:96:8b:42: 8e:9f:f1:3e:98:45:19:86:09:9f:e7:ce:82:ef:07: 4a:3e:35:75:f6:66:d3:5c:e7:0e:fd:ba:a1:0e:85: d1:58:39:96:5d:fb:38:d1:ae:5d:12:0c:64:33:be: 99:14:22:fb:93:84:df:7b:ab:44:7f:bf:c7:cb:65: 12:ef:ad:d4:f5:a7:8b:f7:e4:f6:1f:73:f0:1b:9c: 71:10:b6:66:bd:94:1f:b8:53:d0:fe:c4:b5:73:a0: 10:bc:25:4e:73:a4:9d:6b:b0:de:49:74:d1:13:9b: 8b:0a:88:f5:63:bc:3e:4c:37:4d:af:7d:4c:e2:27: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:4F:74:C4:95:FD:7F:44:A5:A1:05:28:1D:09:EC:24:08:D7:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.20.128.0/17 Signature Algorithm: sha256WithRSAEncryption c0:4f:17:f9:97:9c:54:e0:0d:93:d9:d3:36:fb:0b:e0:f6:82: 5f:60:25:28:cc:03:66:08:35:d6:ed:ae:fb:f1:41:e6:06:1f: 9b:f8:76:f7:6f:8d:55:b3:f8:e4:0b:7c:ab:45:fe:bb:e5:6c: 4a:72:c9:26:6c:ec:bf:f8:8b:d4:13:3c:9c:ac:1a:90:51:c0: 3f:88:ea:95:bd:4a:5d:f9:5d:ad:1f:50:d6:f0:08:25:ff:78: c0:ff:d7:3a:22:a4:51:e7:d0:b8:4e:6b:0b:d6:73:5c:e6:82: 96:f9:99:50:24:1d:74:0e:d6:30:c5:63:1c:a5:b1:a9:bf:a7: 91:b5:6d:60:30:00:aa:d7:4e:4f:f5:e7:ec:5f:bc:28:a8:d2: 75:51:f7:ef:ac:6a:60:a3:a1:f7:90:26:d4:d4:77:e8:81:9c: 3e:19:3d:ff:2a:ef:31:28:b8:f8:92:e4:10:7b:4b:36:df:83: d2:af:3a:07:e0:ca:88:eb:87:9c:4a:35:29:c2:c8:b3:07:eb: 75:9f:1f:66:ed:b1:7d:45:76:ba:a3:02:c8:03:8e:c2:a8:bb: 65:3a:04:09:82:73:99:44:87:d8:d6:aa:f2:32:92:52:68:70: d3:75:ab:95:3b:9d:17:85:d6:22:4d:28:03:7b:b2:4e:40:13: d1:18:d1:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ+mkpH5YMkb/MPatLOOA3O5D9IAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAwMDI3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGVhNzdhZDNjOTZiYmY0NWZhMWEzNTUzMjljZTgyMjc5 M2VmZDI5ZmUxYzA1YzM1NGY2YWEwMjA1YjAwZWNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDHkLG7ZwJurxIIKmVbIhWATfbDvVzI7bfkgG6TtJprrPJ qeP9eda6mriQ42uCkAfNLRvERe+rCJX9L/gnS4SmT4pqHivJsCZQhcl7xR40lPZU 8/P5HQMmKX6mj/ZZhwB+MoYa8Ltat4lHHHJSPQIynapWqxLfnODObgZ3efc+BvjV HZaLQo6f8T6YRRmGCZ/nzoLvB0o+NXX2ZtNc5w79uqEOhdFYOZZd+zjRrl0SDGQz vpkUIvuThN97q0R/v8fLZRLvrdT1p4v35PYfc/AbnHEQtma9lB+4U9D+xLVzoBC8 JU5zpJ1rsN5JdNETm4sKiPVjvD5MN02vfUziJx35AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqnlPdMSV/X9EpaEFKB0J7CQI10QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMjhmZjMyLTg1ODktNDBlMS04ZjA3LWNhY2RiZmZkMDViOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAefFIAwDQYJKoZIhvcNAQELBQADggEBAMBPF/mXnFTgDZPZ0zb7C+D2gl9g JSjMA2YINdbtrvvxQeYGH5v4dvdvjVWz+OQLfKtF/rvlbEpyySZs7L/4i9QTPJys GpBRwD+I6pW9Sl35Xa0fUNbwCCX/eMD/1zoipFHn0LhOawvWc1zmgpb5mVAkHXQO 1jDFYxylsam/p5G1bWAwAKrXTk/15+xfvCio0nVR9++samCjofeQJtTUd+iBnD4Z Pf8q7zEouPiS5BB7Szbfg9KvOgfgyojrh5xKNSnCyLMH63WfH2btsX1FdrqjAsgD jsKou2U6BAmCc5lEh9jWqvIyklJocNN1q5U7nReF1iJNKAN7sk5AE9EY0eU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:35 2025 by rpki-client