$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa File: a802275d-709f-4188-a78c-52e40d99a48f.roa (raw, json) Hash identifier: QD1dXcB+/JHFaJjRjczbnXRanrmn5o0ANfvmc/iSBoE= Subject key identifier: 94:A8:CE:AD:A5:FC:9D:EE:6B:7F:0F:35:45:37:73:99:FB:11:76:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2033DE51A2ACC5363AE054E2DDD075FBA4FE5E13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa Signing time: Mon 28 Jul 2025 15:41:07 +0000 ROA not before: Mon 28 Jul 2025 15:41:07 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:33:de:51:a2:ac:c5:36:3a:e0:54:e2:dd:d0:75:fb:a4:fe:5e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 15:41:07 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=6bac5bd2ac953687c619c8b3513f1f9e9b65320bbefcfd22083a9006cf310154, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1d:d4:8b:43:d8:ce:2f:4e:ea:f4:2e:ad:53: a1:82:5e:52:f6:80:64:6f:b0:18:16:79:30:34:9b: 93:9d:c0:7d:67:2a:ca:99:68:cd:10:82:34:c6:e5: e2:0d:7f:b3:24:8d:ab:5e:9d:33:75:42:f8:a8:a2: be:cc:b8:2a:55:80:3e:b2:a6:f2:10:83:40:49:a2: ca:7d:fc:75:d2:83:b5:b6:9e:3f:0b:00:1b:ce:b6: 9a:25:b0:e7:58:8f:bc:a4:ca:4c:9d:7b:a4:47:a8: b5:06:bd:84:71:73:df:44:e6:50:7a:a8:e7:59:9d: 77:98:90:77:a7:93:3f:00:97:7a:39:da:3c:70:c5: 24:9d:62:83:af:9c:52:7b:35:ed:6e:e4:02:7f:f2: 67:58:22:1f:e9:cd:77:6e:40:8b:60:0f:45:f0:90: 52:b8:55:0e:59:46:4d:ba:a4:ad:6b:a4:fc:4b:b8: 2c:70:a6:e3:4d:eb:f3:c8:28:0e:ce:e8:a4:9c:9c: e2:2f:f6:c6:33:ca:04:5c:14:ca:df:8b:1c:f8:c1: e6:b5:41:82:8a:9a:bb:b0:00:64:a5:d0:10:87:cc: 8d:41:22:00:4d:2e:ae:0d:d1:09:79:fa:dc:71:5f: c6:c5:7d:47:81:d9:97:8e:66:49:51:db:9b:bc:03: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A8:CE:AD:A5:FC:9D:EE:6B:7F:0F:35:45:37:73:99:FB:11:76:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.128.0/21 Signature Algorithm: sha256WithRSAEncryption 29:63:bc:96:38:e0:9e:6b:f6:df:73:fa:64:f0:1a:fb:78:b9: 18:1d:1b:ad:b5:62:9b:05:34:75:a9:a6:20:20:67:aa:f2:12: e0:26:fb:66:b6:7d:a8:50:b7:1f:50:b1:1c:cd:aa:8d:c6:c5: d2:e2:81:cf:32:61:20:f4:c7:1f:03:4c:3a:62:48:54:5a:58: b7:2c:1d:e1:85:5e:63:3f:84:90:11:f9:f3:2a:fe:8f:6e:9d: c8:e1:74:98:f8:80:23:95:20:36:b7:72:28:2b:56:3a:84:81: 2d:19:ca:e5:9e:e6:26:ac:a5:fb:80:df:2b:c8:d6:5c:ad:39: 33:d6:b2:9a:08:da:3f:e0:7a:22:15:33:4f:89:55:3c:fe:4e: 63:99:db:4e:01:e4:e5:2e:6f:fb:c5:54:01:69:8c:3e:ef:cb: 5e:43:a6:11:d4:ed:22:ab:b3:a0:ae:5b:d4:53:5b:d6:a3:f5: 48:26:d3:35:0e:70:d1:ac:2c:9a:4b:5c:23:2e:73:a6:a6:7c: ad:74:c1:d1:8e:26:ca:f6:e0:8f:ef:ea:20:1f:cf:5b:54:64: 50:6a:e1:73:39:c5:ec:10:b6:14:ab:1c:56:d7:ff:3a:f8:90: 54:e9:3c:31:10:08:ec:2b:1d:5e:70:10:a6:6a:98:13:a4:3e: d8:b4:00:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIDPeUaKsxTY64FTi3dB1+6T+XhMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI4MTU0MTA3WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmFjNWJkMmFjOTUzNjg3YzYxOWM4YjM1MTNmMWY5ZTli NjUzMjBiYmVmY2ZkMjIwODNhOTAwNmNmMzEwMTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyHdSLQ9jOL07q9C6tU6GCXlL2gGRvsBgWeTA0m5OdwH1n KsqZaM0QgjTG5eINf7MkjatenTN1Qvioor7MuCpVgD6ypvIQg0BJosp9/HXSg7W2 nj8LABvOtpolsOdYj7ykykyde6RHqLUGvYRxc99E5lB6qOdZnXeYkHenkz8Al3o5 2jxwxSSdYoOvnFJ7Ne1u5AJ/8mdYIh/pzXduQItgD0XwkFK4VQ5ZRk26pK1rpPxL uCxwpuNN6/PIKA7O6KScnOIv9sYzygRcFMrfixz4wea1QYKKmruwAGSl0BCHzI1B IgBNLq4N0Ql5+txxX8bFfUeB2ZeOZklR25u8AyapAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlKjOraX8ne5rfw81RTdzmfsRdp0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4MDIyNzVkLTcwOWYtNDE4OC1hNzhjLTUyZTQwZDk5YTQ4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFAIAwDQYJKoZIhvcNAQELBQADggEBACljvJY44J5r9t9z+mTwGvt4uRgd G621YpsFNHWppiAgZ6ryEuAm+2a2fahQtx9QsRzNqo3GxdLigc8yYSD0xx8DTDpi SFRaWLcsHeGFXmM/hJAR+fMq/o9uncjhdJj4gCOVIDa3cigrVjqEgS0ZyuWe5ias pfuA3yvI1lytOTPWspoI2j/geiIVM0+JVTz+TmOZ204B5OUub/vFVAFpjD7vy15D phHU7SKrs6CuW9RTW9aj9Ugm0zUOcNGsLJpLXCMuc6amfK10wdGOJsr24I/v6iAf z1tUZFBq4XM5xewQthSrHFbX/zr4kFTpPDEQCOwrHV5wEKZqmBOkPti0AAg= -----END CERTIFICATE-----Generated at Mon Aug 4 22:12:42 2025 by rpki-client