$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0103940-c8dc-4a4c-aa6b-d83e680f8abf.roa File: f0103940-c8dc-4a4c-aa6b-d83e680f8abf.roa (raw, json) Hash identifier: DlOkebi8ELNh2CXnqWyNeLu5cKpwVIOqdyMCJ6Gd6Ks= Subject key identifier: 97:84:C3:79:6D:F4:86:34:24:21:8C:F8:15:12:F8:F8:80:8D:A8:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E404E315053C3C3521A70F4C68CC2C27AFA1868 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0103940-c8dc-4a4c-aa6b-d83e680f8abf.roa Signing time: Tue 05 Aug 2025 15:00:18 +0000 ROA not before: Tue 05 Aug 2025 15:00:18 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 88.106.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:40:4e:31:50:53:c3:c3:52:1a:70:f4:c6:8c:c2:c2:7a:fa:18:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 15:00:18 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=40db843c7c1ab46d545a547a85d3a3c89f1c6cabdd6c02b6aa6d00674b62025f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:c4:e4:15:4a:0c:b8:4f:59:db:56:02:25: 6d:e0:47:71:40:51:1f:05:2c:c3:0d:0a:d3:d3:33: 8c:63:2e:a2:c1:24:5b:46:83:36:7c:67:32:0d:b7: e6:86:96:9e:2c:93:9c:f8:75:9d:5b:e6:89:f5:19: 17:d4:b1:92:97:82:55:7b:c8:2e:d6:18:b9:82:26: ab:7f:40:f5:92:1d:ac:a4:47:b3:25:85:73:dc:13: 2c:92:19:9f:27:7e:55:8a:9a:12:85:a5:ea:dd:57: 2c:4c:2e:83:f7:9f:1e:cd:f3:51:f2:e5:91:d0:72: 50:c1:d3:06:e0:96:dc:8a:65:94:f9:eb:e1:fa:aa: cf:4f:51:f0:52:c0:c7:d0:b8:09:1b:d2:7b:f9:26: 36:47:f2:c0:80:84:4b:9c:72:fb:8e:36:19:45:a8: e3:09:43:63:1f:55:8a:c1:4b:d7:eb:01:63:01:0e: 6c:42:91:ae:23:69:8d:f5:5d:0c:91:02:6a:9d:9a: 7c:4b:65:d3:3c:b5:1d:55:06:41:9d:0b:8b:b2:37: 49:09:da:c8:4c:cf:a4:d8:6f:46:a6:91:74:7b:cb: 56:d0:c5:e4:41:1f:83:9b:f1:59:5c:4f:50:b0:33: a8:f0:63:90:a2:c8:7e:51:c0:d1:70:ad:f1:84:86: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:C3:79:6D:F4:86:34:24:21:8C:F8:15:12:F8:F8:80:8D:A8:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0103940-c8dc-4a4c-aa6b-d83e680f8abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.106.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6f:8a:5c:01:0f:55:7a:f1:f3:0e:20:53:d3:54:bb:ea:1a:64: 29:41:40:51:9e:2b:06:05:19:27:80:13:5e:2c:51:cb:05:a2: 12:a5:a7:01:20:7d:12:d2:22:fc:dc:5c:61:c8:91:0b:1a:97: 7f:3e:85:00:c4:5c:ee:f5:39:2e:38:de:60:d6:c2:4b:e6:da: 80:1e:d0:25:a5:77:29:45:47:30:ca:bd:d9:cd:2c:99:cd:a4: 28:03:c1:7c:b7:bb:25:67:56:82:ae:75:da:95:c5:31:72:13: 29:b5:e4:d7:d4:fc:99:64:94:63:fd:63:e6:7e:a2:00:fd:0c: 88:ec:2d:46:40:70:5a:32:96:c2:a2:90:57:3f:81:ed:27:21: 07:7e:af:01:08:25:1d:05:fb:ac:1c:81:bd:0c:16:6a:4e:ff: 95:90:50:a4:77:00:7a:8f:50:fc:ca:64:2c:9e:ae:a5:12:93: f7:e1:eb:9f:c2:0f:eb:f8:2e:c8:4e:b8:fa:58:25:02:03:92: 65:1b:1f:15:0a:24:bd:c3:1e:c0:1d:66:59:e9:10:0b:5c:36: e2:4e:07:4c:5e:04:da:a5:03:10:d9:48:2e:33:fe:23:7e:b7: 4e:5e:9b:ce:ac:48:cf:53:91:7d:f5:59:30:b1:91:26:0c:d8: 43:9d:66:15 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPkBOMVBTw8NSGnD0xozCwnr6GGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTUwMDE4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGRiODQzYzdjMWFiNDZkNTQ1YTU0N2E4NWQzYTNjODlm MWM2Y2FiZGQ2YzAyYjZhYTZkMDA2NzRiNjIwMjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8NcTkFUoMuE9Z21YCJW3gR3FAUR8FLMMNCtPTM4xjLqLB JFtGgzZ8ZzINt+aGlp4sk5z4dZ1b5on1GRfUsZKXglV7yC7WGLmCJqt/QPWSHayk R7MlhXPcEyySGZ8nflWKmhKFperdVyxMLoP3nx7N81Hy5ZHQclDB0wbgltyKZZT5 6+H6qs9PUfBSwMfQuAkb0nv5JjZH8sCAhEuccvuONhlFqOMJQ2MfVYrBS9frAWMB DmxCka4jaY31XQyRAmqdmnxLZdM8tR1VBkGdC4uyN0kJ2shMz6TYb0amkXR7y1bQ xeRBH4Ob8VlcT1CwM6jwY5CiyH5RwNFwrfGEhhkJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUl4TDeW30hjQkIYz4FRL4+ICNqK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMTAzOTQwLWM4ZGMtNGE0Yy1hYTZiLWQ4M2U2ODBmOGFiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFYajANBgkqhkiG9w0BAQsFAAOCAQEAb4pcAQ9VevHzDiBT01S76hpkKUFA UZ4rBgUZJ4ATXixRywWiEqWnASB9EtIi/NxcYciRCxqXfz6FAMRc7vU5LjjeYNbC S+bagB7QJaV3KUVHMMq92c0smc2kKAPBfLe7JWdWgq512pXFMXITKbXk19T8mWSU Y/1j5n6iAP0MiOwtRkBwWjKWwqKQVz+B7SchB36vAQglHQX7rByBvQwWak7/lZBQ pHcAeo9Q/MpkLJ6upRKT9+Hrn8IP6/guyE64+lglAgOSZRsfFQokvcMewB1mWekQ C1w24k4HTF4E2qUDENlILjP+I363Tl6bzqxIz1ORffVZMLGRJgzYQ51mFQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:32 2025 by rpki-client