$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa File: 843bf734-db6e-432f-a611-4c86a79225b5.roa (raw, json) Hash identifier: Q8T/ZLhwXki9O4L7cjvhDehqxv4vqZ1lqoUm0LKKpZs= Subject key identifier: 44:CB:F6:6A:30:AA:B3:4D:CD:5D:0C:80:A1:EF:1F:2D:8D:00:12:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4847F685EB7BB46E2518629F593A6B6C5F1E8CDA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa Signing time: Mon 04 Aug 2025 15:21:58 +0000 ROA not before: Mon 04 Aug 2025 15:21:58 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.24.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:47:f6:85:eb:7b:b4:6e:25:18:62:9f:59:3a:6b:6c:5f:1e:8c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:21:58 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=9705b00b72df2bd0eacc6e7fa0682dcd3adde1b2187e9e83a4c0af080a26dfc9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:6f:ea:94:8e:51:a8:59:47:72:e6:83:bd: 0d:c3:97:a1:7a:5c:1e:85:1c:4d:62:54:bb:25:14: c5:5f:74:38:90:69:83:6c:89:b4:d8:e6:03:17:2f: ef:d4:60:d8:c0:44:0b:42:ce:11:2a:5e:8d:4a:d6: e1:28:c9:9a:51:39:05:cf:05:42:b6:d8:bf:42:84: 94:44:f0:17:74:9f:c9:30:4e:75:fe:a6:04:3a:c4: f8:17:d9:4d:3e:e5:3c:05:06:3e:8a:25:c1:1b:fc: f5:7b:11:58:be:66:b1:a5:fc:c0:46:2f:dd:6a:15: bf:b9:a1:92:81:ae:39:c1:2f:94:9e:93:8c:0d:c6: 06:e0:79:58:c4:fd:69:8e:e4:a8:ae:da:06:e2:29: 8c:3e:80:83:ab:66:08:a5:ff:85:61:fb:4b:83:59: cb:00:c1:b3:c8:a8:d8:92:64:ba:bc:4d:6c:6b:c2: c7:e8:d2:fd:07:13:ac:1b:4e:e8:1e:21:23:58:d7: 9c:1e:84:e6:69:38:53:5a:db:4d:9c:23:c5:69:cf: c6:7d:a8:b2:63:2e:c4:5e:82:0d:89:05:e0:75:05: ea:35:33:3f:b1:51:89:d1:7a:f6:e3:b0:7a:b1:fe: 58:02:1e:bc:01:f9:15:d9:f6:ca:1b:c1:1f:a0:57: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:F6:6A:30:AA:B3:4D:CD:5D:0C:80:A1:EF:1F:2D:8D:00:12:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.24.30.0/23 Signature Algorithm: sha256WithRSAEncryption 84:3b:3c:d3:dc:76:12:cd:8d:22:b8:66:44:9d:ad:a7:9a:37: 0e:d2:9d:8b:3d:d8:11:1b:79:12:e1:33:d5:47:1d:23:d4:63: e0:9e:19:64:9f:75:13:7e:e1:f2:a2:8d:0d:0f:a5:99:96:7a: f4:40:54:8b:d6:f3:be:1a:47:8d:85:19:da:dc:bc:90:0d:26: 82:f5:0e:f4:9e:43:1d:e6:d7:06:ec:ec:0c:e8:c5:4e:22:b7: 31:96:05:ec:71:ab:0e:cc:c8:4d:36:aa:d8:35:e3:3c:dc:98: 36:7f:d3:64:ce:2e:43:d9:6a:84:e6:a5:79:d8:18:ee:bb:17: 82:80:ac:38:6d:1b:cb:05:df:e2:58:11:22:6d:11:c6:4c:32: b1:2d:13:63:0a:af:0c:17:db:0f:50:c5:ec:25:bd:b3:af:a5: 1a:1e:f0:c2:48:20:4c:d1:59:06:46:bf:8c:22:44:da:e8:01: 44:a7:18:d1:48:8f:0c:5b:c5:d6:09:51:10:62:bb:04:54:54: 1c:6f:62:71:68:81:fe:1c:f0:15:f7:57:bc:1a:3e:09:5c:93: ae:03:cf:a5:82:86:75:61:3a:4c:ee:2d:44:c6:41:b8:f5:cb: 69:8b:f1:19:2c:96:83:a1:7e:35:99:86:8a:10:d7:7a:54:7d: b3:17:6c:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSEf2het7tG4lGGKfWTprbF8ejNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTUyMTU4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzA1YjAwYjcyZGYyYmQwZWFjYzZlN2ZhMDY4MmRjZDNh ZGRlMWIyMTg3ZTllODNhNGMwYWYwODBhMjZkZmM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb/G/qlI5RqFlHcuaDvQ3Dl6F6XB6FHE1iVLslFMVfdDiQ aYNsibTY5gMXL+/UYNjARAtCzhEqXo1K1uEoyZpROQXPBUK22L9ChJRE8Bd0n8kw TnX+pgQ6xPgX2U0+5TwFBj6KJcEb/PV7EVi+ZrGl/MBGL91qFb+5oZKBrjnBL5Se k4wNxgbgeVjE/WmO5Kiu2gbiKYw+gIOrZgil/4Vh+0uDWcsAwbPIqNiSZLq8TWxr wsfo0v0HE6wbTugeISNY15wehOZpOFNa202cI8Vpz8Z9qLJjLsRegg2JBeB1Beo1 Mz+xUYnRevbjsHqx/lgCHrwB+RXZ9sobwR+gV6iRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURMv2ajCqs03NXQyAoe8fLY0AEpwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0M2JmNzM0LWRiNmUtNDMyZi1hNjExLTRjODZhNzkyMjViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQGB4wDQYJKoZIhvcNAQELBQADggEBAIQ7PNPcdhLNjSK4ZkSdraeaNw7S nYs92BEbeRLhM9VHHSPUY+CeGWSfdRN+4fKijQ0PpZmWevRAVIvW874aR42FGdrc vJANJoL1DvSeQx3m1wbs7AzoxU4itzGWBexxqw7MyE02qtg14zzcmDZ/02TOLkPZ aoTmpXnYGO67F4KArDhtG8sF3+JYESJtEcZMMrEtE2MKrwwX2w9QxewlvbOvpRoe 8MJIIEzRWQZGv4wiRNroAUSnGNFIjwxbxdYJURBiuwRUVBxvYnFogf4c8BX3V7wa Pglck64Dz6WChnVhOkzuLUTGQbj1y2mL8RksloOhfjWZhooQ13pUfbMXbD0= -----END CERTIFICATE-----Generated at Mon Aug 4 22:23:16 2025 by rpki-client