$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa File: 9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa (raw, json) Hash identifier: CsxaEjFxWPXJi3Gi1WJn07ZnVzxa6kdoiJ06WQ+Lbno= Subject key identifier: 43:4C:C4:8B:43:7F:A9:12:52:79:4F:F2:55:A6:21:EB:34:A0:E2:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01D06848A065D8FF296088714258CA7FF4C6616D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa Signing time: Fri 25 Jul 2025 00:21:46 +0000 ROA not before: Fri 25 Jul 2025 00:21:46 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:68:48:a0:65:d8:ff:29:60:88:71:42:58:ca:7f:f4:c6:61:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:21:46 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=6862a05b196fa35a8d170e28b38fcd26f942f7643c4c3c23617cee6de32f04ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:3c:30:1a:9f:4b:c9:90:88:e5:38:fc:1c: 95:4a:f9:da:02:59:8e:59:75:dc:e1:0e:11:70:6e: 3b:8c:fe:8d:63:ed:82:22:e4:a3:e4:40:b6:33:6c: a3:98:92:f0:19:8a:b7:e5:75:70:af:53:d1:4e:de: a8:89:3b:05:c0:7e:99:43:e8:e6:d1:79:c4:a8:0f: c2:07:bf:8c:9f:2d:ca:d1:80:3b:e1:5e:f8:98:47: 02:f3:fa:01:26:06:80:c3:0d:a0:f2:59:11:cb:c2: 88:f2:01:4f:a6:eb:5f:9f:6e:df:96:ba:b5:1e:a5: 0d:76:c7:07:c0:66:dc:92:2b:7f:c2:10:7a:e3:36: 00:b5:dc:7f:cf:1d:f8:55:47:5f:8b:45:09:d2:3e: 71:8f:c6:9e:d0:55:5f:a3:42:fa:a9:34:94:5e:92: d9:cc:53:f5:85:c2:65:8c:17:25:eb:ac:2f:5e:48: 62:c8:3e:e4:aa:77:1d:a2:90:ed:f4:ba:98:7f:bd: 56:62:ec:98:4f:3a:2f:ac:9e:05:ab:bb:e6:bb:9a: 0b:2c:84:1f:ec:7c:5f:5b:f7:c1:eb:ac:fe:07:d2: 60:9a:30:3c:53:3c:26:a8:f2:84:d3:bc:0d:cd:08: e2:80:9a:1a:db:5f:8c:d8:35:cc:e0:30:c5:8d:49: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:C4:8B:43:7F:A9:12:52:79:4F:F2:55:A6:21:EB:34:A0:E2:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.2.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:02:4a:8f:e0:a3:c2:9d:7b:ce:3c:f2:4d:58:7a:12:fd:c6: 69:4a:13:6f:f3:67:85:b3:35:0c:f1:cd:54:44:a4:a6:e3:40: 0f:6d:39:3e:c6:5c:9f:82:89:4e:1f:4a:ca:f7:8c:b7:94:3c: 73:9c:19:4d:88:d5:02:55:e0:ed:7b:ed:ee:53:16:70:04:37: af:b1:de:77:2d:55:7b:e1:eb:3f:a3:a6:86:ad:e6:7c:fb:66: 31:85:00:1a:44:b8:a7:2d:71:7a:6a:e8:f5:c4:16:94:55:e9: aa:a2:2b:6a:4a:db:26:c9:c6:f8:ed:92:22:2f:d1:34:47:83: ae:1e:ad:50:5d:1d:e1:ad:81:d7:98:a7:52:3b:40:e0:b7:44: 44:a2:3f:73:3b:da:ff:78:f2:15:23:97:b1:ec:77:57:d7:5e: 04:37:9c:c0:29:f9:80:a1:f5:b1:13:9a:59:f0:73:91:c9:69: be:87:1c:3a:a7:16:93:5c:07:df:05:0b:f8:ce:cd:1f:89:5c: 8e:39:5a:20:60:e3:dc:ff:29:22:35:4f:50:8e:34:b1:32:30: 55:bd:96:3e:54:72:c3:6c:d1:81:a8:73:df:b4:c4:de:5d:64: bb:b1:26:86:b9:85:82:96:37:2c:b4:dc:e5:41:3a:5c:e2:f5: 82:9d:68:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAdBoSKBl2P8pYIhxQljKf/TGYW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAyMTQ2WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODYyYTA1YjE5NmZhMzVhOGQxNzBlMjhiMzhmY2QyNmY5 NDJmNzY0M2M0YzNjMjM2MTdjZWU2ZGUzMmYwNGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIOjwwGp9LyZCI5Tj8HJVK+doCWY5ZddzhDhFwbjuM/o1j 7YIi5KPkQLYzbKOYkvAZirfldXCvU9FO3qiJOwXAfplD6ObRecSoD8IHv4yfLcrR gDvhXviYRwLz+gEmBoDDDaDyWRHLwojyAU+m61+fbt+WurUepQ12xwfAZtySK3/C EHrjNgC13H/PHfhVR1+LRQnSPnGPxp7QVV+jQvqpNJRektnMU/WFwmWMFyXrrC9e SGLIPuSqdx2ikO30uph/vVZi7JhPOi+sngWru+a7mgsshB/sfF9b98HrrP4H0mCa MDxTPCao8oTTvA3NCOKAmhrbX4zYNczgMMWNSb9HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ0zEi0N/qRJSeU/yVaYh6zSg4nAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmMTJkOTk2LWRlMDYtNGZkNS04OGM1LTVhNTlkMzlkOWQwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlgIwDQYJKoZIhvcNAQELBQADggEBAD0CSo/go8Kde8488k1YehL9xmlK E2/zZ4WzNQzxzVREpKbjQA9tOT7GXJ+CiU4fSsr3jLeUPHOcGU2I1QJV4O177e5T FnAEN6+x3nctVXvh6z+jpoat5nz7ZjGFABpEuKctcXpq6PXEFpRV6aqiK2pK2ybJ xvjtkiIv0TRHg64erVBdHeGtgdeYp1I7QOC3RESiP3M72v948hUjl7Hsd1fXXgQ3 nMAp+YCh9bETmlnwc5HJab6HHDqnFpNcB98FC/jOzR+JXI45WiBg49z/KSI1T1CO NLEyMFW9lj5UcsNs0YGoc9+0xN5dZLuxJoa5hYKWNyy03OVBOlzi9YKdaNA= -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:56 2025 by rpki-client