$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37dc97f-f822-4490-8284-28680dd0e6ce.roa File: c37dc97f-f822-4490-8284-28680dd0e6ce.roa (raw, json) Hash identifier: djaMpgjpJYCmn0TES0a9bCRh7xvBewxLA+R75U8HDCQ= Subject key identifier: 61:23:01:AC:1E:CA:D9:9A:09:ED:8F:C0:F0:4B:3D:E2:F1:FA:96:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D24C055C70BF80D0A4456BF78F13F2363A9F338 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37dc97f-f822-4490-8284-28680dd0e6ce.roa Signing time: Fri 25 Jul 2025 00:30:29 +0000 ROA not before: Fri 25 Jul 2025 00:30:29 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.151.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:24:c0:55:c7:0b:f8:0d:0a:44:56:bf:78:f1:3f:23:63:a9:f3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:29 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=6843254d21fa596195516fe2c8e7f1051ff44af3f89e9ecadb164d666deae181, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:05:45:23:5f:76:71:a5:47:c2:6f:f4:00: e6:cf:16:20:e8:c3:b3:84:75:6d:9e:71:29:1c:b0: e8:2b:cc:3c:d6:fc:ac:6f:0b:79:87:43:72:69:5c: cf:68:76:da:08:8e:93:b0:42:6f:db:4b:5b:0f:6a: 06:0c:f5:b0:73:2b:c1:36:a0:9e:bd:0e:75:83:33: 76:b9:0b:57:51:87:6f:b7:3f:db:80:f0:ab:e9:e0: 9f:05:bb:bc:ac:85:e9:b3:20:8d:ed:00:e4:db:8d: d9:b0:d3:50:1c:15:48:f7:2a:52:a9:6c:eb:62:b8: c5:c8:65:61:28:dd:e6:15:95:0b:e3:e3:0b:8f:b0: 60:87:11:3e:e0:c5:bf:d8:22:4c:b0:e4:76:df:a8: 6b:a0:8a:c7:3f:66:24:35:ce:ce:0f:11:1f:ba:e6: 0d:9b:98:3b:e7:7b:b0:b7:c6:94:d2:26:87:3a:43: a9:8d:69:ce:9c:af:10:49:2e:f9:16:79:43:00:a9: 41:ce:35:c7:af:9b:23:d2:5c:04:96:46:42:e4:24: 81:b0:a7:93:ea:21:e5:33:b9:68:47:44:95:2c:fa: 23:d7:f0:2a:22:4a:5e:a5:1e:41:9a:78:ef:1a:e1: c6:c4:8f:c1:80:6d:51:0a:f4:1f:b7:f3:ab:33:90: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:23:01:AC:1E:CA:D9:9A:09:ED:8F:C0:F0:4B:3D:E2:F1:FA:96:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37dc97f-f822-4490-8284-28680dd0e6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.185.0/24 Signature Algorithm: sha256WithRSAEncryption 04:6a:34:4a:00:55:76:bc:98:ce:af:86:2a:ba:92:ae:4c:f4: 70:d4:9e:93:c9:5c:61:9f:78:08:5e:0f:f2:44:b7:8e:aa:38: f0:4a:67:8a:ea:f2:35:ad:7a:68:d3:bf:33:af:28:90:90:6e: c4:e5:8e:ff:e7:86:13:e3:e1:ac:49:eb:4c:80:f4:d5:f2:1c: 70:97:e1:1d:38:c5:5e:df:7b:f5:30:ec:3b:ff:a0:4b:d3:8c: 5f:ff:6e:58:cc:90:af:b8:07:c4:d7:4b:c8:26:d3:f6:ea:77: cd:86:71:22:a7:40:51:aa:ed:3d:59:76:83:df:f5:c4:29:c1: 2f:98:4b:c3:64:3f:f8:67:e0:c2:24:8b:3d:b6:f2:62:83:35: 62:0b:7a:5c:e9:09:a4:8f:b3:75:53:a7:7c:19:67:62:73:e2: c1:2b:0a:cf:64:a4:04:01:f5:95:c9:92:62:ce:1a:51:52:42: b3:39:cb:e3:1f:19:7a:41:eb:60:47:9f:79:44:0a:73:a2:ae: 82:de:6b:0f:b5:12:05:e7:1e:cd:8b:8c:87:26:4d:31:d0:2d: bd:2d:fb:97:52:77:8f:5e:d1:38:b2:e2:b8:8a:ed:e6:40:2a: f9:62:43:a3:2a:a3:09:fc:0a:52:0a:ff:d7:15:89:1d:a7:5d: c3:e4:06:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHSTAVccL+A0KRFa/ePE/I2Op8zgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAzMDI5WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODQzMjU0ZDIxZmE1OTYxOTU1MTZmZTJjOGU3ZjEwNTFm ZjQ0YWYzZjg5ZTllY2FkYjE2NGQ2NjZkZWFlMTgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+YAVFI192caVHwm/0AObPFiDow7OEdW2ecSkcsOgrzDzW /KxvC3mHQ3JpXM9odtoIjpOwQm/bS1sPagYM9bBzK8E2oJ69DnWDM3a5C1dRh2+3 P9uA8Kvp4J8Fu7yshemzII3tAOTbjdmw01AcFUj3KlKpbOtiuMXIZWEo3eYVlQvj 4wuPsGCHET7gxb/YIkyw5HbfqGugisc/ZiQ1zs4PER+65g2bmDvne7C3xpTSJoc6 Q6mNac6crxBJLvkWeUMAqUHONcevmyPSXASWRkLkJIGwp5PqIeUzuWhHRJUs+iPX 8CoiSl6lHkGaeO8a4cbEj8GAbVEK9B+386szkI5bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYSMBrB7K2ZoJ7Y/A8Es94vH6lp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzN2RjOTdmLWY4MjItNDQ5MC04Mjg0LTI4NjgwZGQwZTZjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7kwDQYJKoZIhvcNAQELBQADggEBAARqNEoAVXa8mM6vhiq6kq5M9HDU npPJXGGfeAheD/JEt46qOPBKZ4rq8jWtemjTvzOvKJCQbsTljv/nhhPj4axJ60yA 9NXyHHCX4R04xV7fe/Uw7Dv/oEvTjF//bljMkK+4B8TXS8gm0/bqd82GcSKnQFGq 7T1ZdoPf9cQpwS+YS8NkP/hn4MIkiz228mKDNWILelzpCaSPs3VTp3wZZ2Jz4sEr Cs9kpAQB9ZXJkmLOGlFSQrM5y+MfGXpB62BHn3lECnOiroLeaw+1EgXnHs2LjIcm TTHQLb0t+5dSd49e0Tiy4riK7eZAKvliQ6Mqown8ClIK/9cViR2nXcPkBmU= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:38 2025 by rpki-client