$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa File: 394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa (raw, json) Hash identifier: jxBX9iD3z8+3mCIzrePf1985C4c2gZ+Gl1rjwj+DXtg= Subject key identifier: 90:0E:A6:00:61:70:31:9F:FF:75:12:DD:1B:98:70:54:49:E4:2A:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6709106A9DD2468C3B9942533CDF3242608E0CE7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa Signing time: Sat 02 Aug 2025 00:41:07 +0000 ROA not before: Sat 02 Aug 2025 00:41:07 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.193.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:09:10:6a:9d:d2:46:8c:3b:99:42:53:3c:df:32:42:60:8e:0c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:41:07 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=88e303d319113fc1beebc81aa382d44f3cbacd5888902f6d1b5d112850cc5c36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:09:1f:3b:c6:d3:c5:e5:1b:41:5d:b5:90: bb:25:cb:f3:4d:79:7c:81:0d:81:38:9a:27:47:8a: a2:34:b8:e1:f4:bf:3a:99:15:72:99:67:e1:17:95: 55:6a:ad:d9:4d:24:13:0b:98:99:8d:21:95:95:dc: eb:dd:ae:d9:c9:b0:fd:0c:3f:7e:ee:83:17:44:39: e4:33:9c:f0:5a:92:7c:76:dc:48:5b:86:ca:04:1c: 3e:11:97:91:b1:45:2a:42:3a:e7:96:c2:8f:7a:b3: 08:16:19:02:b5:88:42:91:cf:72:3b:60:06:4e:f9: fe:c2:a1:99:99:67:6b:49:82:79:92:1a:c2:0d:a2: d2:ef:73:75:ec:74:5e:a3:0a:86:2f:63:39:23:fc: 42:65:76:58:8c:94:4d:a8:29:ba:a4:7d:cb:f4:86: 13:86:64:f1:16:ef:78:ec:29:40:ed:5a:86:29:13: 24:e7:14:34:24:b5:6f:4c:e2:36:54:a7:67:24:4b: 79:91:8a:7b:76:a8:85:55:9c:b0:55:64:89:00:de: 0b:50:db:92:e7:6f:e5:e8:df:29:e0:3f:17:73:eb: 3f:d7:78:af:29:6b:16:d5:1c:49:44:fb:9a:36:ae: bc:fe:e9:61:c3:47:7d:fa:9c:d1:72:e9:a0:fa:bb: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:A6:00:61:70:31:9F:FF:75:12:DD:1B:98:70:54:49:E4:2A:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.32.0/19 Signature Algorithm: sha256WithRSAEncryption 67:ce:2f:89:c7:3f:f3:37:49:a8:99:87:bf:5d:a4:05:3d:89: 12:2e:9c:46:6f:8c:f9:c6:83:ee:9f:7a:3d:01:2a:29:23:b5: 37:6e:ba:d7:a5:92:a4:2e:29:e3:df:b8:5f:26:c3:82:b8:3d: 9d:de:fb:57:97:37:21:3d:11:32:0c:0d:0c:72:2d:b5:4a:56: 57:49:76:7f:15:f7:ef:c9:f1:50:70:e5:d4:4d:29:99:f8:d7: 20:10:73:90:df:0b:3b:ac:f4:b1:b4:f5:4c:2f:bc:72:56:1c: e6:2e:e0:0b:13:99:5f:f2:4c:6b:38:58:2f:28:47:63:99:7e: 6c:90:34:8e:ed:1f:02:a5:a6:da:80:95:00:1f:ef:83:54:6b: 2c:19:fb:84:f7:60:1a:2d:77:5b:c2:d4:75:85:4e:7d:c7:6a: 03:ea:cb:ca:a4:fd:c1:f8:1a:85:7f:be:db:be:89:b6:8c:01: a1:c9:53:25:52:6d:9f:f8:9e:b3:b9:a7:18:74:08:02:fb:12: 8d:24:c7:df:6f:7f:4d:a3:54:17:45:fd:59:56:eb:c5:d6:29: 57:d1:0f:97:b1:b2:9e:e8:76:b1:a5:5c:7b:40:8f:df:54:f9: ce:66:14:cc:61:74:0e:f2:fd:db:7d:91:fe:ec:18:28:0e:2f: f8:6c:0e:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZwkQap3SRow7mUJTPN8yQmCODOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA0MTA3WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGUzMDNkMzE5MTEzZmMxYmVlYmM4MWFhMzgyZDQ0ZjNj YmFjZDU4ODg5MDJmNmQxYjVkMTEyODUwY2M1YzM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDbwkfO8bTxeUbQV21kLsly/NNeXyBDYE4midHiqI0uOH0 vzqZFXKZZ+EXlVVqrdlNJBMLmJmNIZWV3OvdrtnJsP0MP37ugxdEOeQznPBaknx2 3EhbhsoEHD4Rl5GxRSpCOueWwo96swgWGQK1iEKRz3I7YAZO+f7CoZmZZ2tJgnmS GsINotLvc3XsdF6jCoYvYzkj/EJldliMlE2oKbqkfcv0hhOGZPEW73jsKUDtWoYp EyTnFDQktW9M4jZUp2ckS3mRint2qIVVnLBVZIkA3gtQ25Lnb+Xo3yngPxdz6z/X eK8paxbVHElE+5o2rrz+6WHDR336nNFy6aD6uwxxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkA6mAGFwMZ//dRLdG5hwVEnkKrUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5NGVhMzc3LTZlNzYtNGIyZi1hNWI0LTY3NzAxODJiNmE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhwSAwDQYJKoZIhvcNAQELBQADggEBAGfOL4nHP/M3SaiZh79dpAU9iRIu nEZvjPnGg+6fej0BKikjtTduutelkqQuKePfuF8mw4K4PZ3e+1eXNyE9ETIMDQxy LbVKVldJdn8V9+/J8VBw5dRNKZn41yAQc5DfCzus9LG09UwvvHJWHOYu4AsTmV/y TGs4WC8oR2OZfmyQNI7tHwKlptqAlQAf74NUaywZ+4T3YBotd1vC1HWFTn3HagPq y8qk/cH4GoV/vtu+ibaMAaHJUyVSbZ/4nrO5pxh0CAL7Eo0kx99vf02jVBdF/VlW 68XWKVfRD5exsp7odrGlXHtAj99U+c5mFMxhdA7y/dt9kf7sGCgOL/hsDn4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:08 2025 by rpki-client