$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa File: 67121d2f-f3b8-4002-9880-4ceb53b060ef.roa (raw, json) Hash identifier: FJ5CM+YrG5j9rJDmKWiJuxmbDdQXZAX7q+dQNWkpBPY= Subject key identifier: B4:64:47:24:20:D4:28:FA:89:47:9A:3B:92:40:10:C8:4C:5E:D1:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D77B8FBE96990FA4931E631A5A8EF2D775179D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa Signing time: Fri 25 Jul 2025 00:31:11 +0000 ROA not before: Fri 25 Jul 2025 00:31:11 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:77:b8:fb:e9:69:90:fa:49:31:e6:31:a5:a8:ef:2d:77:51:79:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:31:11 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=d38d42b42192061ff14d3667d4b3845e401e47e159d389e7ec295ac942b23310, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:af:70:0a:e5:a8:6a:42:27:ac:34:95:ad: b9:53:e7:ab:94:50:15:49:a8:82:0d:f7:61:c4:79: d4:17:96:55:59:03:02:dc:70:82:e6:d9:fb:2a:0e: 95:a4:a8:11:6a:7d:a1:1c:ad:59:7c:f0:ca:ae:91: a4:1c:53:f4:01:c9:fe:22:4f:30:6e:f8:aa:08:21: 14:0a:dc:70:13:0a:bf:35:93:86:40:24:e6:93:17: e4:c1:68:3f:ed:15:27:08:72:66:b1:9f:62:52:d2: c1:95:06:89:14:cc:a5:e3:75:04:f3:9c:cf:f1:1a: 2c:23:57:e5:17:cb:47:00:19:49:52:2f:b1:1a:3a: 39:6c:af:4a:a9:c9:8f:a2:b8:be:96:4e:b2:7d:1d: 1c:9e:8f:48:c4:54:6a:b7:af:14:cc:34:92:cc:20: 6a:f4:ad:4e:e3:fc:06:f0:b9:a1:59:58:b5:40:57: 79:87:c0:39:dc:29:88:b8:8a:a5:63:b2:4c:68:58: 42:04:55:2e:f4:99:c3:97:eb:12:03:ed:c4:79:64: 4f:02:42:41:f4:84:9b:c4:fb:c0:28:4b:ef:6f:91: c0:38:7b:09:e9:00:53:b2:4b:0d:12:a5:3f:36:b6: de:81:b5:9d:ca:78:90:3f:1b:7e:08:01:e9:bf:86: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:64:47:24:20:D4:28:FA:89:47:9A:3B:92:40:10:C8:4C:5E:D1:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.96.0/23 Signature Algorithm: sha256WithRSAEncryption a8:24:62:c6:b6:56:bd:b4:24:19:30:e3:14:cb:41:c8:5b:e2: c8:49:28:1d:f0:5f:96:df:72:1e:af:b0:a0:35:92:17:05:55: f2:49:72:eb:3d:67:4c:12:20:97:71:ec:e4:09:24:b2:31:31: 10:58:bd:e9:9d:ef:0c:ed:8b:f4:40:ee:3c:48:4a:da:bd:d3: 03:d4:16:31:42:74:37:e9:ac:0f:e5:ef:a7:42:3c:f7:90:6e: 65:99:a1:aa:c7:1f:96:14:d9:b5:93:d1:7c:1c:9b:10:f0:0a: 0c:06:c4:8b:58:b6:af:2d:03:11:24:e9:86:b8:f3:1f:62:ef: 79:5b:74:f2:18:a1:d7:b2:33:65:97:4c:7a:7a:9a:27:69:de: c6:43:4a:5d:3c:70:8f:7e:a8:3d:4e:30:63:fc:02:d3:5b:2e: cb:b7:97:70:1a:ca:e2:13:ac:d3:a7:b0:6d:ec:d1:20:d0:86: f4:43:7d:8d:3b:6d:c4:43:c0:d1:4d:4f:b9:a8:22:ec:34:b6: d2:3c:7e:5e:d2:d0:66:e7:0c:34:62:3b:e9:f5:99:51:fe:c5: f1:d4:f3:69:b8:db:29:09:75:78:b2:e1:7a:e3:a5:90:ae:4a: 03:fc:2a:6e:10:ee:65:bf:34:38:95:9f:7f:3d:11:6d:89:91: 6e:63:6f:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfXe4++lpkPpJMeYxpajvLXdRedAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAzMTExWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzhkNDJiNDIxOTIwNjFmZjE0ZDM2NjdkNGIzODQ1ZTQw MWU0N2UxNTlkMzg5ZTdlYzI5NWFjOTQyYjIzMzEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL+69wCuWoakInrDSVrblT56uUUBVJqIIN92HEedQXllVZ AwLccILm2fsqDpWkqBFqfaEcrVl88MqukaQcU/QByf4iTzBu+KoIIRQK3HATCr81 k4ZAJOaTF+TBaD/tFScIcmaxn2JS0sGVBokUzKXjdQTznM/xGiwjV+UXy0cAGUlS L7EaOjlsr0qpyY+iuL6WTrJ9HRyej0jEVGq3rxTMNJLMIGr0rU7j/AbwuaFZWLVA V3mHwDncKYi4iqVjskxoWEIEVS70mcOX6xID7cR5ZE8CQkH0hJvE+8AoS+9vkcA4 ewnpAFOySw0SpT82tt6BtZ3KeJA/G34IAem/hgArAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtGRHJCDUKPqJR5o7kkAQyExe0aAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTIxZDJmLWYzYjgtNDAwMi05ODgwLTRjZWI1M2IwNjBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlmAwDQYJKoZIhvcNAQELBQADggEBAKgkYsa2Vr20JBkw4xTLQchb4shJ KB3wX5bfch6vsKA1khcFVfJJcus9Z0wSIJdx7OQJJLIxMRBYvemd7wzti/RA7jxI Stq90wPUFjFCdDfprA/l76dCPPeQbmWZoarHH5YU2bWT0XwcmxDwCgwGxItYtq8t AxEk6Ya48x9i73lbdPIYodeyM2WXTHp6midp3sZDSl08cI9+qD1OMGP8AtNbLsu3 l3AayuITrNOnsG3s0SDQhvRDfY07bcRDwNFNT7moIuw0ttI8fl7S0GbnDDRiO+n1 mVH+xfHU82m42ykJdXiy4XrjpZCuSgP8Km4Q7mW/NDiVn389EW2JkW5jb3o= -----END CERTIFICATE-----Generated at Sat Aug 9 10:54:03 2025 by rpki-client