$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa File: 20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa (raw, json) Hash identifier: CvN4RwDFQ6ikBJw0IubXzJKhLAkcSmJqQ1tPicqJP94= Subject key identifier: 56:18:E4:02:9A:34:B2:E7:24:7C:C7:39:D4:2A:4A:D3:A1:DC:1A:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43EFCFF899E774883059EB1BCEA802651DBF898E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa Signing time: Mon 04 Aug 2025 18:23:07 +0000 ROA not before: Mon 04 Aug 2025 18:23:07 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 141.231.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ef:cf:f8:99:e7:74:88:30:59:eb:1b:ce:a8:02:65:1d:bf:89:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 18:23:07 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d63b633dfd961a8273ce68093b3ea5efd85a515dc41ec546a634fbe83366b1a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:09:95:5e:1e:33:bd:36:da:b1:eb:c0:e1: 6e:8b:8b:37:ff:6c:e3:d7:77:95:80:10:f7:75:77: 9c:80:40:9b:99:be:ef:c8:d2:30:c8:08:44:ea:51: 8a:d6:10:e6:3d:76:3c:88:0a:41:ec:00:83:08:bc: f3:0f:3d:d0:a9:85:3b:2b:da:ab:48:ec:e1:2e:84: ad:79:ae:be:53:dd:46:f2:9d:e2:cd:4a:73:15:ab: 4b:05:b6:3e:ed:2c:5e:d6:08:b5:02:5a:12:ab:36: 70:f4:b8:1f:6e:eb:2e:ef:4b:52:6f:df:fa:e9:fa: 0e:5a:91:f7:f1:50:6b:32:61:ae:e2:81:b5:a4:14: 4e:44:40:5a:45:10:b1:9a:05:7e:87:d1:2c:2f:21: 2b:cb:ed:db:6b:22:11:69:81:08:6a:b5:7e:63:bd: ef:bc:d6:d0:58:26:56:59:8c:2e:8e:f0:79:8e:56: 9e:9a:ef:3a:bf:eb:9b:65:7e:d0:a4:92:f3:3b:d4: 34:78:05:db:5a:aa:a4:ed:96:5a:4a:48:c3:fb:06: 6f:c5:4a:2c:4c:5f:8b:05:5c:ca:c4:0a:5c:52:38: d9:af:55:02:27:f6:53:78:d8:69:55:6d:7e:3f:d3: e2:7f:89:67:cd:fc:a5:d9:d1:19:73:4d:b0:c4:85: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:E4:02:9A:34:B2:E7:24:7C:C7:39:D4:2A:4A:D3:A1:DC:1A:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:4c:08:66:9b:f3:62:84:9b:16:b2:ab:2e:80:67:b5:46:3f: f3:a4:58:ad:85:1e:4f:ea:cd:39:d8:78:aa:f4:39:24:f7:6a: 9b:03:2b:e9:35:62:e8:1a:14:bd:fe:ea:69:dd:c5:9f:a2:8f: 40:9f:19:5f:c3:8b:7f:2a:66:29:a5:f7:c6:84:04:0d:39:78: b7:58:bb:cb:7d:d0:1e:3a:e1:54:37:8d:81:f7:1b:57:f2:d2: c3:a1:95:ca:81:af:49:b3:7e:11:17:9c:cc:9c:c9:88:9f:74: 45:25:e9:23:41:84:e3:2b:2d:b9:e5:07:25:38:45:0f:b5:e5: fb:7d:bf:f1:48:f2:53:62:69:6b:04:2b:93:9c:d4:f9:42:a2: e2:c3:a9:e2:12:32:e3:55:80:e8:1f:81:5c:79:34:4e:29:18: f6:62:08:ee:1f:13:dc:e3:22:59:f6:f3:44:ee:4a:f1:c3:1c: d8:30:80:82:11:20:e5:3c:44:0e:d7:36:fb:74:d5:c1:40:9f: 85:41:82:53:ec:84:f0:3b:0c:56:15:43:40:a1:03:22:dd:1d: 12:1a:fb:ed:de:5d:c4:ec:34:55:37:e7:c3:84:96:cc:81:ed: b3:67:e2:41:5d:d1:c4:dc:1e:22:03:4b:ec:95:0d:8f:a5:6b: 7d:c1:dc:28 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ+/P+JnndIgwWesbzqgCZR2/iY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTgyMzA3WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjNiNjMzZGZkOTYxYTgyNzNjZTY4MDkzYjNlYTVlZmQ4 NWE1MTVkYzQxZWM1NDZhNjM0ZmJlODMzNjZiMWE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnlgmVXh4zvTbasevA4W6Lizf/bOPXd5WAEPd1d5yAQJuZ vu/I0jDICETqUYrWEOY9djyICkHsAIMIvPMPPdCphTsr2qtI7OEuhK15rr5T3Uby neLNSnMVq0sFtj7tLF7WCLUCWhKrNnD0uB9u6y7vS1Jv3/rp+g5akffxUGsyYa7i gbWkFE5EQFpFELGaBX6H0SwvISvL7dtrIhFpgQhqtX5jve+81tBYJlZZjC6O8HmO Vp6a7zq/65tlftCkkvM71DR4BdtaqqTtllpKSMP7Bm/FSixMX4sFXMrEClxSONmv VQIn9lN42GlVbX4/0+J/iWfN/KXZ0RlzTbDEhWfnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVhjkApo0suckfMc51CpK06HcGnQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZjZlYmEyLTdmMzAtNDAzZi04ZWFiLTg5NmExYTIyY2U0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCN5zANBgkqhkiG9w0BAQsFAAOCAQEATUwIZpvzYoSbFrKrLoBntUY/86RY rYUeT+rNOdh4qvQ5JPdqmwMr6TVi6BoUvf7qad3Fn6KPQJ8ZX8OLfypmKaX3xoQE DTl4t1i7y33QHjrhVDeNgfcbV/LSw6GVyoGvSbN+EReczJzJiJ90RSXpI0GE4yst ueUHJThFD7Xl+32/8UjyU2JpawQrk5zU+UKi4sOp4hIy41WA6B+BXHk0TikY9mII 7h8T3OMiWfbzRO5K8cMc2DCAghEg5TxEDtc2+3TVwUCfhUGCU+yE8DsMVhVDQKED It0dEhr77d5dxOw0VTfnw4SWzIHts2fiQV3RxNweIgNL7JUNj6VrfcHcKA== -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:30 2025 by rpki-client