$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa File: 08b4bf23-5c80-45ba-9d89-889ca55c451e.roa (raw, json) Hash identifier: f/BM9GHnXLK5+shFyTs64DVRdMHPokVSgLROsvgBfxA= Subject key identifier: D4:28:6E:A2:E0:4A:E9:A6:26:A6:74:EF:7D:B7:C1:56:F6:97:57:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78E64E1C5625682F58A3890500AB6C8A092CC080 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa Signing time: Tue 05 Aug 2025 15:00:24 +0000 ROA not before: Tue 05 Aug 2025 15:00:24 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e6:4e:1c:56:25:68:2f:58:a3:89:05:00:ab:6c:8a:09:2c:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 15:00:24 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0765a9beb6e9bc9873917befda2701b3867e210100c65f078b1e7ee4dd40e7d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:5d:b1:7d:f9:c7:59:e2:16:7d:91:db:a8: d5:77:24:68:77:e7:86:2b:a3:9c:9d:17:73:b0:f1: 59:6d:5a:ac:ec:c8:f8:07:cc:37:3d:a1:39:c3:9c: 5c:65:e4:5f:88:0f:43:ea:25:fb:56:55:b2:4f:a4: f6:2b:bc:61:0e:1a:4a:da:98:b9:ba:6f:12:af:66: 34:50:8b:6c:68:ba:88:7c:7c:5f:18:07:d4:db:fa: 77:9f:51:ec:f8:11:4d:b1:c3:b1:c5:2d:30:c6:a1: 45:87:c1:4b:72:54:00:87:78:57:04:77:5e:51:0d: c5:a8:67:09:76:61:89:d6:03:15:19:c9:01:fe:1b: 50:42:ee:f6:d4:b6:54:fb:a3:bf:86:3e:73:99:fd: 44:d1:b7:0e:ef:ed:3e:b7:c0:ae:02:70:da:a8:4e: df:98:3e:d6:db:20:37:3c:7a:e5:93:f7:26:f8:30: 81:aa:0c:0f:b9:52:4f:bc:eb:e3:d3:39:21:19:0b: 96:c9:bc:e8:68:c5:3b:d2:b6:65:0f:2d:4d:20:19: 60:9e:e5:75:5a:21:67:b5:e0:e4:6c:8b:89:92:79: e3:51:c7:89:f5:dc:5a:92:26:8d:0d:27:9f:c3:f6: cd:4b:71:57:90:9a:d7:d3:9c:85:a2:e0:44:0f:ab: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:28:6E:A2:E0:4A:E9:A6:26:A6:74:EF:7D:B7:C1:56:F6:97:57:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.142.0/24 Signature Algorithm: sha256WithRSAEncryption 58:87:8e:8c:1a:c9:e4:fd:0a:de:4a:5d:f7:0c:b3:cd:9a:b6: d4:e3:e8:9b:84:e3:d0:23:88:c7:19:16:0a:dd:2d:c0:f1:02: 72:2d:ea:d4:f5:e4:fe:ae:7a:cf:0e:8e:1a:bf:d9:a8:b7:59: 75:29:07:cf:8d:3f:22:7d:49:a0:d6:32:a9:25:fa:7f:da:82: df:87:f0:44:c0:cf:ce:2f:a1:de:e5:75:17:29:f8:e2:43:59: 72:0e:6f:69:54:80:03:63:7a:0e:83:92:04:5d:83:8c:4d:22: 62:ce:96:bb:bf:b8:84:8b:88:a3:81:70:86:0c:1c:99:a3:9b: 19:b4:60:6b:af:05:d9:3b:23:57:97:93:f2:80:f4:bb:02:a4: 67:8a:6e:51:e5:c0:67:b1:e1:48:4d:69:3a:8e:20:76:51:a7: 39:b5:ce:06:6e:ac:70:ac:83:1e:a4:bb:c0:cb:52:a2:ad:e5: 9f:7c:21:b6:29:83:76:88:d6:bd:d1:97:e1:94:2d:4f:f5:a0: 5c:bc:99:a8:0f:21:d3:41:8f:55:ce:99:aa:53:08:03:9a:ab: cc:b4:41:7a:c2:c9:ee:18:77:19:ae:10:cd:bc:1b:27:b2:1a: 7e:10:56:f9:73:b6:65:2d:17:77:eb:64:67:0c:34:d2:ba:c0: 79:b0:dd:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeOZOHFYlaC9Yo4kFAKtsigkswIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTUwMDI0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzY1YTliZWI2ZTliYzk4NzM5MTdiZWZkYTI3MDFiMzg2 N2UyMTAxMDBjNjVmMDc4YjFlN2VlNGRkNDBlN2Q4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrIF2xffnHWeIWfZHbqNV3JGh354Yro5ydF3Ow8VltWqzs yPgHzDc9oTnDnFxl5F+ID0PqJftWVbJPpPYrvGEOGkramLm6bxKvZjRQi2xouoh8 fF8YB9Tb+nefUez4EU2xw7HFLTDGoUWHwUtyVACHeFcEd15RDcWoZwl2YYnWAxUZ yQH+G1BC7vbUtlT7o7+GPnOZ/UTRtw7v7T63wK4CcNqoTt+YPtbbIDc8euWT9yb4 MIGqDA+5Uk+86+PTOSEZC5bJvOhoxTvStmUPLU0gGWCe5XVaIWe14ORsi4mSeeNR x4n13FqSJo0NJ5/D9s1LcVeQmtfTnIWi4EQPq5khAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1ChuouBK6aYmpnTvfbfBVvaXV7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4YjRiZjIzLTVjODAtNDViYS05ZDg5LTg4OWNhNTVjNDUxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABiUo4wDQYJKoZIhvcNAQELBQADggEBAFiHjowayeT9Ct5KXfcMs82attTj 6JuE49AjiMcZFgrdLcDxAnIt6tT15P6ues8Ojhq/2ai3WXUpB8+NPyJ9SaDWMqkl +n/agt+H8ETAz84vod7ldRcp+OJDWXIOb2lUgANjeg6DkgRdg4xNImLOlru/uISL iKOBcIYMHJmjmxm0YGuvBdk7I1eXk/KA9LsCpGeKblHlwGex4UhNaTqOIHZRpzm1 zgZurHCsgx6ku8DLUqKt5Z98IbYpg3aI1r3Rl+GULU/1oFy8magPIdNBj1XOmapT CAOaq8y0QXrCye4YdxmuEM28GyeyGn4QVvlztmUtF3frZGcMNNK6wHmw3TA= -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:27 2025 by rpki-client