$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa File: 15e49a07-57b5-49e0-8c9d-da8417a8456a.roa (raw, json) Hash identifier: pBiVTlB28rSFMw9n09aoN0rexpf2q+sYXcncsNci8Xk= Subject key identifier: A0:F4:66:71:60:AB:15:B7:E5:A5:0F:10:AD:2B:D6:16:4D:A2:4F:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71918105DF58728AB7600408B61F702725E80057 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa Signing time: Fri 25 Jul 2025 00:30:15 +0000 ROA not before: Fri 25 Jul 2025 00:30:15 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:91:81:05:df:58:72:8a:b7:60:04:08:b6:1f:70:27:25:e8:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:15 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=02cfcf9fe15db43b41824d313d201808a610052e1345742276070327bab36023, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:3f:c5:28:37:7d:6a:ab:0c:1c:8d:77:3c: 49:fe:f5:00:93:d9:da:1f:e5:ee:a1:e5:ca:b7:79: 58:01:9d:da:56:8c:24:01:8d:95:4f:a8:08:d5:90: e6:c8:cf:a5:46:ee:0a:a2:c3:85:94:44:fd:15:1d: b3:bd:b4:9b:57:e7:df:70:c6:d8:5f:a3:ac:b8:8d: f2:31:da:81:01:05:2d:01:ac:8c:e2:77:3d:df:34: 10:51:a2:5e:cf:29:8f:5f:90:af:59:15:bb:3f:9e: d1:48:4e:07:d1:4e:91:07:48:27:e6:d4:ea:82:2d: 8a:b7:4a:37:3d:f6:bb:b9:f8:90:0e:72:3d:7d:7f: 0f:47:2c:e8:6b:8d:05:3f:a2:03:17:22:85:66:e7: d6:3e:f6:b4:be:99:43:e5:b1:60:53:5b:eb:9d:d4: 19:ff:e1:fc:c8:e1:dd:d6:a9:c4:51:69:b1:6f:e6: b5:29:b6:47:37:42:35:7f:fc:18:cb:6a:d4:86:b1: a9:ec:6c:74:94:13:f0:fc:af:36:19:e0:0d:21:37: 0c:e8:2f:cc:0d:9e:1c:6f:3c:1a:d8:3c:a7:73:0f: 9c:72:a9:90:67:f7:5e:5a:41:b3:62:46:0b:ac:65: d0:b6:89:0e:29:cf:29:6a:9c:ef:b4:1d:c9:4e:11: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F4:66:71:60:AB:15:B7:E5:A5:0F:10:AD:2B:D6:16:4D:A2:4F:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.138.0/24 Signature Algorithm: sha256WithRSAEncryption 62:1b:a2:b7:59:da:64:04:d0:ce:73:0e:dc:e3:ec:9f:2c:33: 68:74:8d:3e:ea:a6:9f:14:23:c3:31:db:f9:fc:6a:6d:bd:41: 76:8c:d8:59:e0:ab:b7:1b:71:aa:bc:b9:77:78:b4:dd:13:d3: 76:45:ac:fb:a7:3d:6a:43:cb:4e:dd:63:bd:59:f0:ba:68:4a: 96:be:d7:82:a7:bb:2a:e4:86:f6:71:17:c1:9c:ce:66:82:9a: 61:40:50:2c:e7:b0:41:ad:71:86:58:7c:43:2d:b9:41:7b:3c: ab:c4:de:0c:87:ce:08:46:32:93:a2:26:9e:bf:19:27:cc:a5: 33:0d:c9:e3:b8:9f:25:e2:fe:fe:48:2d:df:14:d7:80:7b:40: c9:7f:6f:37:93:44:01:92:90:ee:10:a4:35:59:ce:0a:31:4f: 12:24:29:b0:99:6c:cb:5b:76:3f:c0:e7:0c:08:6e:c4:4a:28: c8:a3:16:45:6f:69:04:85:be:37:8b:14:d2:28:a4:b6:d1:93: 3a:3d:a1:a2:57:34:61:7f:cc:06:2e:5d:c5:07:18:d6:c9:7e: 3b:05:0a:28:03:2b:5f:8a:84:ad:9b:7f:c5:e7:0a:75:55:b5: 5a:fd:79:51:96:5e:b0:29:df:ea:30:2a:4b:12:fc:c4:19:2f: c2:68:69:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcZGBBd9Ycoq3YAQIth9wJyXoAFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAzMDE1WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmNmY2Y5ZmUxNWRiNDNiNDE4MjRkMzEzZDIwMTgwOGE2 MTAwNTJlMTM0NTc0MjI3NjA3MDMyN2JhYjM2MDIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvKz/FKDd9aqsMHI13PEn+9QCT2dof5e6h5cq3eVgBndpW jCQBjZVPqAjVkObIz6VG7gqiw4WURP0VHbO9tJtX599wxthfo6y4jfIx2oEBBS0B rIzidz3fNBBRol7PKY9fkK9ZFbs/ntFITgfRTpEHSCfm1OqCLYq3Sjc99ru5+JAO cj19fw9HLOhrjQU/ogMXIoVm59Y+9rS+mUPlsWBTW+ud1Bn/4fzI4d3WqcRRabFv 5rUptkc3QjV//BjLatSGsansbHSUE/D8rzYZ4A0hNwzoL8wNnhxvPBrYPKdzD5xy qZBn915aQbNiRgusZdC2iQ4pzylqnO+0HclOERajAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoPRmcWCrFbflpQ8QrSvWFk2iT5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1ZTQ5YTA3LTU3YjUtNDllMC04YzlkLWRhODQxN2E4NDU2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl4owDQYJKoZIhvcNAQELBQADggEBAGIbordZ2mQE0M5zDtzj7J8sM2h0 jT7qpp8UI8Mx2/n8am29QXaM2Fngq7cbcaq8uXd4tN0T03ZFrPunPWpDy07dY71Z 8LpoSpa+14KnuyrkhvZxF8GczmaCmmFAUCznsEGtcYZYfEMtuUF7PKvE3gyHzghG MpOiJp6/GSfMpTMNyeO4nyXi/v5ILd8U14B7QMl/bzeTRAGSkO4QpDVZzgoxTxIk KbCZbMtbdj/A5wwIbsRKKMijFkVvaQSFvjeLFNIopLbRkzo9oaJXNGF/zAYuXcUH GNbJfjsFCigDK1+KhK2bf8XnCnVVtVr9eVGWXrAp3+owKksS/MQZL8Joae4= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:33 2025 by rpki-client