$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa File: c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa (raw, json) Hash identifier: RSLcR3bErrAkPF6Ded1a9cKYnr8Qh4CstFkPmVUgXfo= Subject key identifier: 8A:C7:50:E0:14:6C:72:B5:BF:B6:60:6F:DA:5F:D0:6F:E7:E9:2C:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E9A236F34333E78DE16403E1D254F8BA321CF31 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa Signing time: Mon 04 Aug 2025 16:30:28 +0000 ROA not before: Mon 04 Aug 2025 16:30:28 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9a:23:6f:34:33:3e:78:de:16:40:3e:1d:25:4f:8b:a3:21:cf:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:30:28 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=2adb60c461cffeb328e58563abf8b94b5098597e58450f4a5a0dac8f7e68ea1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:91:82:63:6d:ea:17:a6:d0:ba:bd:89:30: 28:c2:9e:91:b4:b0:fa:9e:9b:a9:43:3b:8f:0a:93: b4:34:4b:61:49:aa:7f:64:19:7c:67:2c:7c:b5:3f: c9:cd:fc:7d:ad:9c:6f:81:e8:de:a6:16:28:6f:4c: 54:f4:53:56:4d:9f:70:f2:97:dd:47:4a:11:92:2e: 55:7b:c0:95:9a:b3:06:75:d7:f9:fb:1f:f2:7d:4b: fd:e0:b8:1d:91:45:56:00:ef:6a:df:68:81:4b:56: 06:85:6d:75:f8:c8:a6:80:f7:04:1d:86:e8:bb:de: bd:48:1b:25:6d:c8:6e:92:89:5d:8b:02:70:c6:bc: 1e:a5:bd:7d:bc:79:05:fb:46:ca:15:64:e6:5d:3d: cc:41:a9:cc:b1:c2:e0:84:c7:c9:da:ce:74:4b:56: 29:1b:97:05:a1:0d:10:fd:22:6f:d8:0a:c9:f3:20: 7a:40:9d:36:25:15:23:ca:0f:52:08:8b:e4:d4:e2: 80:02:ac:3c:3b:4b:40:ae:f2:70:9d:7e:71:c6:a2: 38:31:aa:4b:1b:2d:8d:12:bc:4b:1c:ce:a1:9e:d3: e3:b2:4c:28:a5:c3:67:65:b1:ec:84:e1:4d:9c:c3: d9:87:e1:36:20:04:3a:22:8a:fc:d7:d8:e5:b5:76: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C7:50:E0:14:6C:72:B5:BF:B6:60:6F:DA:5F:D0:6F:E7:E9:2C:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 19:7e:89:82:21:a6:8b:fd:84:42:8b:18:b2:fc:97:2d:1c:61: fb:67:b4:b3:6e:52:50:ae:fd:1b:d3:b0:ef:6a:c3:51:bc:9d: bb:c8:25:10:f4:22:61:8f:47:50:45:ab:eb:ad:4c:de:dd:60: 95:d0:d1:8b:34:34:e4:1d:39:c5:04:33:95:5e:bb:a2:3b:85: 6e:db:9d:ec:20:ae:a2:b8:79:0e:c4:40:e3:58:75:71:62:32: b4:f8:d3:22:4c:3b:c6:ef:07:cb:09:28:30:9f:9e:96:25:f2: 47:36:50:eb:ed:96:f0:65:4f:c6:8a:a3:9a:f2:34:78:f8:da: dd:e4:de:03:87:0e:40:86:3d:66:95:44:fa:b1:ec:d8:09:85: 87:e9:a8:aa:0f:2c:4c:8c:ea:58:9f:87:79:de:98:19:06:82: eb:1b:72:5e:8f:c3:09:16:3b:a3:ac:02:ba:ef:02:fe:67:d1: 27:9b:3f:2f:db:3a:27:8e:08:b8:f3:44:68:a6:21:b9:e4:8a: 44:1c:f7:51:7d:73:67:6b:17:b0:ef:5e:3d:cb:1c:64:4c:00: 13:ee:01:57:2b:fe:56:01:9e:cb:88:71:b4:10:d1:0e:dc:b4: 7b:b1:69:3d:6c:97:8e:43:92:a1:ec:4d:67:16:93:38:9f:79: 27:80:5d:a5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULpojbzQzPnjeFkA+HSVPi6MhzzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYzMDI4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWRiNjBjNDYxY2ZmZWIzMjhlNTg1NjNhYmY4Yjk0YjUw OTg1OTdlNTg0NTBmNGE1YTBkYWM4ZjdlNjhlYTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCty5GCY23qF6bQur2JMCjCnpG0sPqem6lDO48Kk7Q0S2FJ qn9kGXxnLHy1P8nN/H2tnG+B6N6mFihvTFT0U1ZNn3Dyl91HShGSLlV7wJWaswZ1 1/n7H/J9S/3guB2RRVYA72rfaIFLVgaFbXX4yKaA9wQdhui73r1IGyVtyG6SiV2L AnDGvB6lvX28eQX7RsoVZOZdPcxBqcyxwuCEx8naznRLVikblwWhDRD9Im/YCsnz IHpAnTYlFSPKD1IIi+TU4oACrDw7S0Cu8nCdfnHGojgxqksbLY0SvEsczqGe0+Oy TCilw2dlseyE4U2cw9mH4TYgBDoiivzX2OW1dls/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUisdQ4BRscrW/tmBv2l/Qb+fpLFwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4NmJjOWY5LWRjNmItNDdlYi05NDMxLWFhZTcwYWFmNTRlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIXFDANBgkqhkiG9w0BAQsFAAOCAQEAGX6JgiGmi/2EQosYsvyXLRxh+2e0 s25SUK79G9Ow72rDUbydu8glEPQiYY9HUEWr661M3t1gldDRizQ05B05xQQzlV67 ojuFbtud7CCuorh5DsRA41h1cWIytPjTIkw7xu8HywkoMJ+eliXyRzZQ6+2W8GVP xoqjmvI0ePja3eTeA4cOQIY9ZpVE+rHs2AmFh+moqg8sTIzqWJ+Hed6YGQaC6xty Xo/DCRY7o6wCuu8C/mfRJ5s/L9s6J44IuPNEaKYhueSKRBz3UX1zZ2sXsO9ePcsc ZEwAE+4BVyv+VgGey4hxtBDRDty0e7FpPWyXjkOSoexNZxaTOJ95J4BdpQ== -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:49 2025 by rpki-client