$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa File: a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa (raw, json) Hash identifier: seOnwpSuI8+7c1Tjbfq0Lh6OruzjywvI1z61Rbu5yBU= Subject key identifier: 27:83:CE:15:DE:6B:F3:DF:FF:A5:0E:C9:2D:A5:AF:50:6F:19:5F:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 455FA72B6876CEC2991F5D1BE9750B7272C0F025 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa Signing time: Wed 23 Jul 2025 00:10:30 +0000 ROA not before: Wed 23 Jul 2025 00:10:30 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5f:a7:2b:68:76:ce:c2:99:1f:5d:1b:e9:75:0b:72:72:c0:f0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:10:30 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=6ad5007c3886f7e9ed32257d5fd9ff790f6a665cbd5ec82f20ac6942a06c5c84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:41:90:5d:ce:32:ba:08:a0:49:6c:fe:40: 69:7b:72:74:e6:b3:2a:c2:0d:fa:33:95:b6:51:cb: 2e:04:ea:2d:b6:7f:13:f2:91:4a:a4:2f:01:6d:8f: da:0c:77:ed:98:9a:4c:9c:82:72:0e:97:e7:33:02: 65:7c:67:b2:6c:82:30:76:ba:53:79:38:16:6b:fc: 0f:81:1b:4f:ef:2d:46:5d:0c:e1:fd:3a:45:fe:6f: fb:84:5a:55:6a:3e:8a:ee:c4:9a:c5:97:72:c1:e6: 58:5e:30:05:d2:f0:24:5c:55:b3:22:57:28:a1:aa: 0a:e7:c5:aa:05:39:2e:cb:c2:54:e4:25:a0:51:44: e8:ae:a8:40:5b:e5:e9:d3:5a:19:26:d4:16:31:f7: d8:e6:44:78:35:ef:55:30:12:2b:67:e8:82:30:0a: 83:40:58:47:6e:3a:0c:e8:4f:06:ad:cb:a8:70:5f: 16:aa:4b:dc:89:79:7e:ff:4c:8f:7e:9a:16:c2:6c: 40:be:63:93:32:4d:e7:db:1e:e9:84:67:ed:7d:cc: 21:42:53:b8:bd:27:50:be:af:43:f8:b6:88:f8:25: 8b:fa:b7:1d:8b:af:4b:ee:98:27:04:b9:5a:12:8b: a7:0d:65:61:bd:43:ca:0b:ca:74:2d:96:1d:13:e4: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:83:CE:15:DE:6B:F3:DF:FF:A5:0E:C9:2D:A5:AF:50:6F:19:5F:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.98.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:9f:de:01:dc:61:c3:4b:92:5b:3e:b7:ba:a8:1f:b5:e2:19: 61:03:ec:66:f0:22:14:be:f8:5f:e7:dd:16:8f:43:7f:fe:0a: ed:79:74:cc:4a:df:11:4b:69:9a:a1:83:9d:4c:b6:38:67:f4: 58:15:f0:5a:c3:5e:8a:c5:fd:76:b2:72:bf:7d:dc:ec:f8:ae: 49:56:2e:35:25:6a:02:44:4d:69:c3:41:46:02:d3:15:85:e2: 17:89:90:eb:aa:c8:84:f3:b5:a2:be:37:09:b7:8d:49:a2:c4: a0:da:ef:84:44:23:e4:f0:94:6e:10:49:19:3f:7a:d6:ea:7a: ef:b6:7e:7d:b8:d6:cb:44:55:7c:b2:c5:c3:13:13:a2:ea:c8: 88:89:46:56:9b:f0:04:4d:b8:f0:3d:ff:e5:55:c3:f1:e6:b7: ad:c7:fa:97:64:16:1c:db:fe:f3:07:de:53:5f:4b:36:1f:d4: 2b:48:cf:12:cc:c2:b6:fb:d1:72:5b:4a:69:3f:99:e3:0c:7e: 55:c4:b9:89:a6:5b:03:da:7a:05:64:52:cf:17:86:09:e1:b2: ef:13:fd:46:74:ea:ca:63:36:3b:77:68:bf:41:87:c6:47:7a: d1:1a:dd:a2:87:5e:64:c4:e6:71:71:70:82:c4:92:59:41:af: fd:3b:9c:1d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURV+nK2h2zsKZH10b6XULcnLA8CUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAxMDMwWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWQ1MDA3YzM4ODZmN2U5ZWQzMjI1N2Q1ZmQ5ZmY3OTBm NmE2NjVjYmQ1ZWM4MmYyMGFjNjk0MmEwNmM1Yzg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyhUGQXc4yugigSWz+QGl7cnTmsyrCDfozlbZRyy4E6i22 fxPykUqkLwFtj9oMd+2YmkycgnIOl+czAmV8Z7JsgjB2ulN5OBZr/A+BG0/vLUZd DOH9OkX+b/uEWlVqPoruxJrFl3LB5lheMAXS8CRcVbMiVyihqgrnxaoFOS7LwlTk JaBRROiuqEBb5enTWhkm1BYx99jmRHg171UwEitn6IIwCoNAWEduOgzoTwaty6hw XxaqS9yJeX7/TI9+mhbCbEC+Y5MyTefbHumEZ+19zCFCU7i9J1C+r0P4toj4JYv6 tx2Lr0vumCcEuVoSi6cNZWG9Q8oLynQtlh0T5NvDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJ4POFd5r89//pQ7JLaWvUG8ZX5QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NDlhMjNjLTFlOGUtNDVhZC1iZDA0LWM4ZmEyMGE2MmMzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVYjANBgkqhkiG9w0BAQsFAAOCAQEAyp/eAdxhw0uSWz63uqgfteIZYQPs ZvAiFL74X+fdFo9Df/4K7Xl0zErfEUtpmqGDnUy2OGf0WBXwWsNeisX9drJyv33c 7PiuSVYuNSVqAkRNacNBRgLTFYXiF4mQ66rIhPO1or43CbeNSaLEoNrvhEQj5PCU bhBJGT961up677Z+fbjWy0RVfLLFwxMTourIiIlGVpvwBE248D3/5VXD8ea3rcf6 l2QWHNv+8wfeU19LNh/UK0jPEszCtvvRcltKaT+Z4wx+VcS5iaZbA9p6BWRSzxeG CeGy7xP9RnTqymM2O3dov0GHxkd60RrdoodeZMTmcXFwgsSSWUGv/TucHQ== -----END CERTIFICATE-----Generated at Mon Aug 4 21:46:31 2025 by rpki-client