$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa File: 549062ae-c5b1-4db8-8029-29dac35e3892.roa (raw, json) Hash identifier: q20L4w71Ydzpsvt+N3oFTI9Tl9Swhr5m5x59iCBZMX4= Subject key identifier: 04:FD:F8:4A:99:11:57:54:FB:DF:FB:DA:24:0B:DE:71:58:17:BA:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37B0A49DFA59D572D5166454F9030A8FFD0EC9ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa Signing time: Wed 06 Aug 2025 00:40:12 +0000 ROA not before: Wed 06 Aug 2025 00:40:12 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 89.254.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b0:a4:9d:fa:59:d5:72:d5:16:64:54:f9:03:0a:8f:fd:0e:c9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:40:12 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=fe385642c24ec642fae4bf7a0a7129ad9b155a484a3f562a5ae57d4833ab37f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:c1:a2:ba:a5:03:fe:eb:92:de:27:ca:fb: 96:47:1a:ee:37:79:79:21:51:1e:b4:f6:ed:e0:88: 0e:f0:fa:06:c3:65:5e:8d:d8:f1:c2:f4:6d:38:04: db:f5:48:9b:4d:37:6a:9d:78:16:36:5b:72:cb:93: 7d:4e:29:08:0c:34:b9:68:f7:2b:75:da:e2:6d:3e: 24:9a:66:4d:ed:41:d6:49:79:0e:f9:33:4b:40:2e: 8a:eb:cc:79:37:d3:1f:30:c6:2b:e4:9c:91:72:86: 81:ee:4f:8e:ca:b1:76:a6:51:7e:4e:c9:2e:04:40: e1:39:32:8c:71:68:36:92:8e:ad:7d:52:12:0c:bf: 13:68:b6:d6:b9:96:87:7f:9b:81:88:5a:86:50:29: d6:9e:57:86:73:1e:fb:95:ac:df:34:cc:38:b5:ed: 7c:9b:93:7d:a3:de:cd:c0:95:b7:d2:0d:d2:4d:85: 1a:e2:d0:18:bb:df:a6:d3:aa:22:ea:ec:4b:1b:63: 09:81:5b:31:13:39:03:f1:f9:bc:8b:52:0d:d6:84: ae:92:54:06:3c:ef:75:47:76:96:c0:79:e3:f5:58: 16:26:5a:4e:50:a4:fe:5f:9e:c6:9e:04:e3:52:53: 01:6c:f9:57:23:bd:dc:03:7c:3f:01:f7:6a:1e:51: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FD:F8:4A:99:11:57:54:FB:DF:FB:DA:24:0B:DE:71:58:17:BA:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.32.0/19 Signature Algorithm: sha256WithRSAEncryption 77:d7:8c:0e:b5:40:ec:f3:8b:76:91:e5:74:47:e8:b4:d8:25: 88:e7:76:98:f6:7c:41:00:c4:68:1c:3f:c2:bd:58:b7:a4:73: 63:aa:e3:6a:ff:3d:2f:f3:b8:8b:1a:7f:38:9c:73:1d:ae:3a: c4:a7:d7:43:96:0a:df:c8:d6:d0:bd:57:fd:c9:18:d8:42:b6: 70:df:3d:24:00:e0:1f:00:1f:3b:6b:a0:1d:f9:15:a4:51:14: 28:09:0e:6f:06:14:d3:84:6a:9e:11:15:59:39:9b:a3:cd:36: 74:cf:ee:11:d1:11:b8:c7:bc:a3:a6:e1:f8:8f:97:9e:a8:c3: d8:6d:4d:8c:3b:be:7d:e6:7b:c9:d8:35:a4:1f:6d:04:4f:2a: e2:aa:cc:16:21:47:29:4d:df:46:84:64:d8:2d:2d:d1:bf:40: 4f:4f:d2:44:af:ba:c8:d5:48:bb:f0:f6:9a:9c:bd:1c:6b:a7: 9d:85:20:6b:af:7c:8b:71:3f:26:a7:99:cf:70:9e:6d:d5:83: ed:48:b7:ab:18:f6:9c:22:e3:58:49:ce:0a:0d:c1:62:af:f9: f5:92:42:39:9e:2f:c4:25:75:4e:d6:bb:d0:ec:25:a1:28:2b: 4b:9c:39:7c:38:b1:7b:87:6d:5c:20:ec:50:d4:10:75:0d:52: 40:e4:31:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN7CknfpZ1XLVFmRU+QMKj/0Oye0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDA0MDEyWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTM4NTY0MmMyNGVjNjQyZmFlNGJmN2EwYTcxMjlhZDli MTU1YTQ4NGEzZjU2MmE1YWU1N2Q0ODMzYWIzN2Y5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBF8GiuqUD/uuS3ifK+5ZHGu43eXkhUR609u3giA7w+gbD ZV6N2PHC9G04BNv1SJtNN2qdeBY2W3LLk31OKQgMNLlo9yt12uJtPiSaZk3tQdZJ eQ75M0tALorrzHk30x8wxivknJFyhoHuT47KsXamUX5OyS4EQOE5MoxxaDaSjq19 UhIMvxNotta5lod/m4GIWoZQKdaeV4ZzHvuVrN80zDi17Xybk32j3s3AlbfSDdJN hRri0Bi736bTqiLq7EsbYwmBWzETOQPx+byLUg3WhK6SVAY873VHdpbAeeP1WBYm Wk5QpP5fnsaeBONSUwFs+VcjvdwDfD8B92oeUZqfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBP34SpkRV1T73/vaJAvecVgXuucwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0OTA2MmFlLWM1YjEtNGRiOC04MDI5LTI5ZGFjMzVlMzg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVZ/iAwDQYJKoZIhvcNAQELBQADggEBAHfXjA61QOzzi3aR5XRH6LTYJYjn dpj2fEEAxGgcP8K9WLekc2Oq42r/PS/zuIsafziccx2uOsSn10OWCt/I1tC9V/3J GNhCtnDfPSQA4B8AHztroB35FaRRFCgJDm8GFNOEap4RFVk5m6PNNnTP7hHREbjH vKOm4fiPl56ow9htTYw7vn3me8nYNaQfbQRPKuKqzBYhRylN30aEZNgtLdG/QE9P 0kSvusjVSLvw9pqcvRxrp52FIGuvfItxPyanmc9wnm3Vg+1It6sY9pwi41hJzgoN wWKv+fWSQjmeL8QldU7Wu9DsJaEoK0ucOXw4sXuHbVwg7FDUEHUNUkDkMfU= -----END CERTIFICATE-----Generated at Fri Aug 8 21:01:09 2025 by rpki-client