$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa File: 67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa (raw, json) Hash identifier: gNTRV1D1FZcBe3xOPDuYQGTu/aI8gg0mQYK6MR8At0M= Subject key identifier: 95:73:F0:43:DC:5A:C9:A7:C1:EA:F1:DA:A7:15:ED:DD:6A:8E:56:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B04D001C057FF4937A84E52A4A60954C9C92AD1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa Signing time: Fri 25 Jul 2025 00:30:30 +0000 ROA not before: Fri 25 Jul 2025 00:30:30 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:04:d0:01:c0:57:ff:49:37:a8:4e:52:a4:a6:09:54:c9:c9:2a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:30 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=205c02dee2a8fcd4d91fe4c7d8c6e71c6fc5e3241530c414731a3d49ece16b19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:57:bf:c7:8f:ea:5b:e8:10:c6:41:c8:15: 41:6f:de:f3:51:6a:d6:b8:c9:05:7e:7e:dd:50:10: 05:12:dc:2e:39:28:06:32:fd:7e:bd:0f:18:9a:e6: 3b:32:5b:1b:a2:22:1d:70:19:53:ce:77:8b:01:8c: 77:a8:95:c7:2f:51:fc:28:d7:c7:c3:80:cb:2e:8a: 42:59:9c:15:2e:56:ae:5d:47:7a:32:70:ee:52:07: ae:ff:84:58:d1:ca:70:5b:dd:26:bd:7e:49:a4:81: 43:bf:cd:6b:7f:ce:d6:54:d4:42:73:24:2c:19:a7: ab:d4:57:dc:4c:97:05:73:37:b5:a5:3e:a9:ba:2a: 1a:cc:8b:b4:d3:b1:cc:7c:5b:a6:03:77:70:01:1e: 7a:7c:51:68:83:e8:81:19:2f:52:5d:a1:2e:cf:39: 0f:58:92:57:0e:a1:2b:1f:3f:75:35:bd:7b:c2:97: ea:92:9d:a2:e5:cc:6e:08:3b:02:7c:4f:3b:1e:8d: 48:30:43:22:2a:39:44:99:50:a2:bf:e8:6e:8e:1e: ec:90:17:7c:8b:12:f7:49:c6:99:77:62:29:33:80: d8:e9:0c:c6:53:86:19:e9:10:cc:fe:02:ea:f6:bb: ad:18:15:f9:8a:1a:4a:ff:99:1e:f7:55:f3:5d:8d: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:F0:43:DC:5A:C9:A7:C1:EA:F1:DA:A7:15:ED:DD:6A:8E:56:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.185.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:27:fc:df:c9:e0:3a:b8:16:f1:b4:b6:a1:f9:ea:1d:ea:11: 7f:af:30:7a:48:aa:f1:28:12:d0:6c:23:ef:be:ea:c3:ee:03: 1f:6e:d9:2e:b0:d6:44:f3:7e:9e:f5:45:3a:5e:6e:b8:ae:83: 6d:86:da:05:8b:9d:39:6c:d9:59:28:1c:a7:c0:55:9b:14:05: a6:43:bd:44:b2:96:b8:cf:7c:57:fd:f3:ad:75:1a:9a:74:20: 6f:cb:d4:00:ca:fa:fd:de:cd:9a:63:5a:37:89:f5:b2:01:d7: 36:d3:6c:ab:ce:59:27:4c:09:27:2f:d4:2e:d2:5b:7e:48:34: fc:b5:19:66:82:b0:88:b3:ba:3e:2e:99:2a:5a:7d:c9:9c:ab: de:60:94:3b:21:6f:e4:7d:6d:f1:33:ba:3b:d7:77:6e:e2:bc: 30:c6:2e:55:15:ee:2e:d9:12:2c:8f:c6:ad:8e:2d:2d:70:82: 3b:fe:ff:32:be:d3:53:bd:f7:52:78:b9:28:65:04:24:2e:80: 0f:93:e9:6c:b5:28:5c:63:2f:b4:c5:29:c8:26:92:37:bb:5a: 1c:2c:cd:d6:5e:bb:fd:32:e4:8b:a3:a4:7d:a0:de:f1:53:20: 83:ba:ae:73:4e:03:9e:39:d9:38:4c:ee:79:b3:5f:37:38:40: d9:0e:78:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWwTQAcBX/0k3qE5SpKYJVMnJKtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAzMDMwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDVjMDJkZWUyYThmY2Q0ZDkxZmU0YzdkOGM2ZTcxYzZm YzVlMzI0MTUzMGM0MTQ3MzFhM2Q0OWVjZTE2YjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEeFe/x4/qW+gQxkHIFUFv3vNRata4yQV+ft1QEAUS3C45 KAYy/X69Dxia5jsyWxuiIh1wGVPOd4sBjHeolccvUfwo18fDgMsuikJZnBUuVq5d R3oycO5SB67/hFjRynBb3Sa9fkmkgUO/zWt/ztZU1EJzJCwZp6vUV9xMlwVzN7Wl Pqm6KhrMi7TTscx8W6YDd3ABHnp8UWiD6IEZL1JdoS7POQ9YklcOoSsfP3U1vXvC l+qSnaLlzG4IOwJ8TzsejUgwQyIqOUSZUKK/6G6OHuyQF3yLEvdJxpl3YikzgNjp DMZThhnpEMz+Aur2u60YFfmKGkr/mR73VfNdjZxVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlXPwQ9xayafB6vHapxXt3WqOVq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3ZTYzZDRmLTUzODQtNGQ3ZC1hNTQzLTgyZjIzYjhmMWRjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7kwDQYJKoZIhvcNAQELBQADggEBAH0n/N/J4Dq4FvG0tqH56h3qEX+v MHpIqvEoEtBsI+++6sPuAx9u2S6w1kTzfp71RTpebriug22G2gWLnTls2VkoHKfA VZsUBaZDvUSylrjPfFf98611Gpp0IG/L1ADK+v3ezZpjWjeJ9bIB1zbTbKvOWSdM CScv1C7SW35INPy1GWaCsIizuj4umSpafcmcq95glDshb+R9bfEzujvXd27ivDDG LlUV7i7ZEiyPxq2OLS1wgjv+/zK+01O991J4uShlBCQugA+T6Wy1KFxjL7TFKcgm kje7WhwszdZeu/0y5IujpH2g3vFTIIO6rnNOA5452ThM7nmzXzc4QNkOeL8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:26 2025 by rpki-client