$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa File: 68dcad37-18c1-468c-aca3-9e34ef1240c2.roa (raw, json) Hash identifier: YIqMoIZ9hLLmlcoyJtEcmBC0Keng2X7Lf+mGdW+Ni0A= Subject key identifier: 86:16:4F:91:F9:16:D7:6A:C3:0E:34:3F:22:6C:28:86:1E:FE:24:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2784E9378249AE3E1CF58D1538E637E117150BED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa Signing time: Sat 02 Aug 2025 00:31:46 +0000 ROA not before: Sat 02 Aug 2025 00:31:46 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.128.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:84:e9:37:82:49:ae:3e:1c:f5:8d:15:38:e6:37:e1:17:15:0b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:31:46 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=c22039336569b372b83b4ad52730d2218eaa22a85d198256a9cb9419b6e9f1b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:8d:7f:47:3f:b1:e9:3d:95:51:93:7c:d2: 94:ad:ab:33:aa:a8:8e:f5:85:aa:46:2a:7c:ed:3c: 32:90:72:97:c4:ee:d5:a7:81:61:15:e3:25:41:16: 3f:93:61:85:5a:ef:58:cc:25:31:e9:5d:78:06:8e: 6a:84:0a:54:f6:55:66:f4:53:be:b9:a7:b4:f0:8f: 7b:fe:67:ee:1c:3c:a0:ec:ae:6c:a4:1d:92:db:03: 0d:68:b2:d1:f3:0e:c6:60:62:ba:43:ce:8f:c3:d8: 9b:b9:9e:e7:2e:38:46:a2:ae:a0:5c:b2:74:ff:13: 46:41:94:ea:12:b6:20:75:eb:b0:44:48:1d:71:a2: 76:8d:5f:af:61:68:bf:ca:54:10:7a:ca:3c:f7:b1: 40:28:2f:ec:ea:df:eb:d4:df:77:86:3a:63:35:cc: 26:b3:6f:e6:07:e7:f7:38:c1:9a:48:f4:52:5a:d5: 75:77:f6:78:31:d1:6a:01:8a:3b:72:c2:22:ea:0a: a5:d2:37:dd:0f:ea:18:9d:cb:cb:77:ef:08:c3:bb: f4:57:55:5e:4c:1f:51:92:6b:3e:a2:c2:8e:a2:85: 50:60:66:3a:80:93:f5:74:2f:ab:8b:b9:32:52:90: 45:71:4c:40:45:c7:14:fd:ea:d6:57:e5:cb:68:e8: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:16:4F:91:F9:16:D7:6A:C3:0E:34:3F:22:6C:28:86:1E:FE:24:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.128.32.0/19 Signature Algorithm: sha256WithRSAEncryption a8:3e:1a:fc:13:a1:ca:7b:fa:1c:99:f7:1f:82:7e:df:0e:d6: db:0b:e8:db:71:31:a9:06:6e:7a:92:53:de:c2:2c:f1:1e:ba: e5:58:de:e7:16:23:5c:78:cd:ca:17:97:9b:ed:62:5e:be:29: 62:3d:a7:b1:74:80:6e:52:0c:f5:9a:26:ff:81:35:3e:ea:61: e0:4d:a3:63:d7:91:0f:55:7b:bc:f3:8d:1a:09:2c:d6:6e:3f: 32:8a:95:d6:b3:c6:3f:e1:0c:54:65:7c:44:c3:37:45:4e:6f: e8:01:8d:fe:08:9b:97:a8:41:c0:7a:d8:3c:bc:25:4e:67:24: 58:e2:55:b6:3e:99:f0:81:1a:1f:c5:e1:3e:d7:59:e0:e3:cc: 11:3e:9c:c6:38:a9:9d:3d:9a:f5:eb:30:52:2d:dc:6e:31:2c: 1b:da:47:e0:39:1a:d9:79:9c:c0:ef:e6:6e:7c:21:fe:32:31: 55:bb:13:9a:7d:f5:1d:bb:c2:28:f8:ef:95:4a:3e:c8:5f:8c: 17:0e:67:58:da:ec:c3:3e:97:3f:94:ae:39:67:6f:48:5c:49: 02:a3:29:bc:ac:24:ab:83:b2:39:e1:2d:44:2e:29:f0:6c:82: 99:c0:3f:9a:8b:8e:15:bb:6d:91:f1:a9:38:9c:4f:fd:9e:76: 40:63:dd:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ4TpN4JJrj4c9Y0VOOY34RcVC+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAzMTQ2WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjIwMzkzMzY1NjliMzcyYjgzYjRhZDUyNzMwZDIyMThl YWEyMmE4NWQxOTgyNTZhOWNiOTQxOWI2ZTlmMWI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa/41/Rz+x6T2VUZN80pStqzOqqI71hapGKnztPDKQcpfE 7tWngWEV4yVBFj+TYYVa71jMJTHpXXgGjmqEClT2VWb0U765p7Twj3v+Z+4cPKDs rmykHZLbAw1ostHzDsZgYrpDzo/D2Ju5nucuOEairqBcsnT/E0ZBlOoStiB167BE SB1xonaNX69haL/KVBB6yjz3sUAoL+zq3+vU33eGOmM1zCazb+YH5/c4wZpI9FJa 1XV39ngx0WoBijtywiLqCqXSN90P6hidy8t37wjDu/RXVV5MH1GSaz6iwo6ihVBg ZjqAk/V0L6uLuTJSkEVxTEBFxxT96tZX5cto6AvdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhhZPkfkW12rDDjQ/Imwohh7+JJkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZGNhZDM3LTE4YzEtNDY4Yy1hY2EzLTllMzRlZjEyNDBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWVgCAwDQYJKoZIhvcNAQELBQADggEBAKg+GvwTocp7+hyZ9x+Cft8O1tsL 6NtxMakGbnqSU97CLPEeuuVY3ucWI1x4zcoXl5vtYl6+KWI9p7F0gG5SDPWaJv+B NT7qYeBNo2PXkQ9Ve7zzjRoJLNZuPzKKldazxj/hDFRlfETDN0VOb+gBjf4Im5eo QcB62Dy8JU5nJFjiVbY+mfCBGh/F4T7XWeDjzBE+nMY4qZ09mvXrMFIt3G4xLBva R+A5Gtl5nMDv5m58If4yMVW7E5p99R27wij475VKPshfjBcOZ1ja7MM+lz+Urjln b0hcSQKjKbysJKuDsjnhLUQuKfBsgpnAP5qLjhW7bZHxqTicT/2edkBj3Vo= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:58 2025 by rpki-client