$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cab470c-9119-417e-82a4-3e770993f743.roa File: 4cab470c-9119-417e-82a4-3e770993f743.roa (raw, json) Hash identifier: IQrqgTztLtfksY34vUgDQoycNVh/To2YobWdgSlm2u0= Subject key identifier: 78:E7:56:94:BD:9B:4A:2B:C0:9D:9D:76:72:AD:99:52:A4:B0:6D:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BF34892CFDEF544E43D2EAE88DB88C820A37B9D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cab470c-9119-417e-82a4-3e770993f743.roa Signing time: Mon 04 Aug 2025 16:12:08 +0000 ROA not before: Mon 04 Aug 2025 16:12:08 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.182.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f3:48:92:cf:de:f5:44:e4:3d:2e:ae:88:db:88:c8:20:a3:7b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:12:08 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=64bf07620fef5c091fffb65f0585b2dd9193d3af13796fb34c6323930f779cfc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:e4:de:a5:da:38:84:f9:c0:81:42:e1:1a: f0:75:aa:01:ea:47:0a:96:d8:fc:27:2e:d6:ac:a6: cf:2d:4e:7a:eb:8f:7f:51:ee:8a:51:53:fd:ad:f3: d3:4f:de:2a:4b:77:27:dd:3f:3e:2a:72:f9:cb:59: cf:33:5f:f0:97:85:a9:1a:86:82:a9:f6:50:fb:3b: 2c:53:c3:f6:c7:3b:e2:ca:74:aa:67:f3:e8:d2:31: 58:71:59:a2:4f:55:f1:56:4e:89:08:1d:8a:11:f6: a1:b6:66:2f:fd:d1:0e:7f:1b:e0:cb:5e:e1:47:e2: 00:f8:34:f1:3d:da:0d:cd:ae:99:67:e3:af:a6:26: 86:3b:af:ca:7e:35:76:6c:c8:ad:d9:94:44:39:8d: f2:76:00:39:3a:4c:a9:6f:8f:e5:6b:77:9c:5c:37: 48:b8:b1:9a:b2:b0:03:b5:2f:ed:c9:f7:58:d0:5e: 0d:95:f7:8a:39:21:87:63:dd:fa:3d:b0:e8:83:27: 03:46:07:50:0b:e2:61:9b:2f:7f:b9:a8:d4:dc:e2: 35:9a:b5:79:26:50:c9:f2:fa:61:97:d4:f2:bb:09: bd:64:18:ba:a8:86:03:f4:f6:e1:3b:a1:7d:b9:65: d5:ec:a9:e1:25:8c:36:fe:d2:77:98:ed:d2:8a:fd: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E7:56:94:BD:9B:4A:2B:C0:9D:9D:76:72:AD:99:52:A4:B0:6D:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cab470c-9119-417e-82a4-3e770993f743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.238.0/23 Signature Algorithm: sha256WithRSAEncryption 79:80:dd:46:14:e5:17:00:f5:6d:a4:1f:b4:41:c8:07:c5:46: 1d:77:87:e5:df:b7:95:9a:ea:d9:0c:33:62:e8:96:aa:11:d7: 43:d1:77:4e:b8:b3:f7:17:e6:be:15:06:f6:a2:05:11:e7:68: 85:b2:6f:66:47:5e:f3:72:2e:d0:a1:d1:c9:ac:70:08:51:29: 2b:33:68:ce:a7:e9:4e:d6:b7:16:0c:73:fc:06:c6:05:97:28: 8c:3f:de:1b:d4:06:80:68:78:32:16:8f:7f:78:5d:89:fd:7f: 77:f5:42:61:e7:32:5a:1a:ce:b8:a3:4a:78:32:7e:ab:c1:35: 26:da:4f:5b:2f:ad:4b:b5:08:21:17:09:47:a1:a8:04:7c:3d: 00:81:88:b9:49:bd:a5:69:50:46:63:70:28:51:a2:7d:7d:d8: 37:c0:13:c8:f6:f1:46:91:14:71:65:94:9f:66:9b:05:89:96: cf:f0:a7:1e:76:1f:e5:83:e5:1d:d2:51:fd:6f:e5:90:37:de: 5e:46:57:6c:b0:6c:89:d2:30:e9:08:94:27:d7:ac:ca:a7:e8: dc:7a:d4:52:d4:12:9e:c1:f2:ef:15:4f:40:29:85:79:90:6d: fd:cc:ba:dc:3d:88:da:05:c4:da:e5:5f:1b:42:e9:ea:ae:41: 01:39:83:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC/NIks/e9UTkPS6uiNuIyCCje50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYxMjA4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGJmMDc2MjBmZWY1YzA5MWZmZmI2NWYwNTg1YjJkZDkx OTNkM2FmMTM3OTZmYjM0YzYzMjM5MzBmNzc5Y2ZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC78OTepdo4hPnAgULhGvB1qgHqRwqW2PwnLtasps8tTnrr j39R7opRU/2t89NP3ipLdyfdPz4qcvnLWc8zX/CXhakahoKp9lD7OyxTw/bHO+LK dKpn8+jSMVhxWaJPVfFWTokIHYoR9qG2Zi/90Q5/G+DLXuFH4gD4NPE92g3Nrpln 46+mJoY7r8p+NXZsyK3ZlEQ5jfJ2ADk6TKlvj+Vrd5xcN0i4sZqysAO1L+3J91jQ Xg2V94o5IYdj3fo9sOiDJwNGB1AL4mGbL3+5qNTc4jWatXkmUMny+mGX1PK7Cb1k GLqohgP09uE7oX25ZdXsqeEljDb+0neY7dKK/T8jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeOdWlL2bSivAnZ12cq2ZUqSwba8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjYWI0NzBjLTkxMTktNDE3ZS04MmE0LTNlNzcwOTkzZjc0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYtu4wDQYJKoZIhvcNAQELBQADggEBAHmA3UYU5RcA9W2kH7RByAfFRh13 h+Xft5Wa6tkMM2LolqoR10PRd064s/cX5r4VBvaiBRHnaIWyb2ZHXvNyLtCh0cms cAhRKSszaM6n6U7WtxYMc/wGxgWXKIw/3hvUBoBoeDIWj394XYn9f3f1QmHnMloa zrijSngyfqvBNSbaT1svrUu1CCEXCUehqAR8PQCBiLlJvaVpUEZjcChRon192DfA E8j28UaRFHFllJ9mmwWJls/wpx52H+WD5R3SUf1v5ZA33l5GV2ywbInSMOkIlCfX rMqn6Nx61FLUEp7B8u8VT0AphXmQbf3Mutw9iNoFxNrlXxtC6equQQE5g7E= -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:38 2025 by rpki-client