$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa File: 0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa (raw, json) Hash identifier: SoO8ljX9H1xuu5Qf2HrOkK2EeCCUmJHCM1MGoz0dZPg= Subject key identifier: C2:73:6C:71:70:1F:FA:06:8A:4E:30:DB:6D:1A:AC:8A:56:B0:C5:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27A69E73B9B6F880791AE3C0EDE6EE03505709B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa Signing time: Fri 29 Aug 2025 00:32:18 +0000 ROA not before: Fri 29 Aug 2025 00:32:18 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a6:9e:73:b9:b6:f8:80:79:1a:e3:c0:ed:e6:ee:03:50:57:09:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:32:18 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=a2322bf4f1c6aa8f0bbf098d2fe451c03a128acbdb8f3bf31fe4cf54d47e7f03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:50:e2:cf:10:9b:d7:01:c9:16:92:35:89: 7e:d5:b9:8f:29:e6:aa:66:30:c8:c9:40:71:4a:fb: 9b:a3:47:d2:b4:26:2c:f1:bf:60:4b:57:8a:0d:3c: b3:de:c5:10:95:0c:5e:04:c2:29:25:14:e3:cd:88: 86:57:80:6e:c8:54:c2:01:8d:65:57:01:0b:9c:c6: 83:b7:d0:d5:14:9b:a6:a8:26:83:63:30:46:5a:ad: 10:5b:25:b9:ec:3d:2f:1d:75:c4:46:08:67:72:41: 97:61:9b:af:0f:5c:7a:f2:aa:b0:2a:ec:9f:df:89: d0:d0:e9:f4:a2:d2:50:b0:e5:42:36:20:c6:ff:25: 71:a8:28:e4:b3:eb:eb:1e:19:f0:59:d5:9f:d5:93: 94:56:a1:27:c4:46:d0:03:53:29:c4:78:84:0e:2a: cf:b7:97:05:b8:c4:98:07:a7:2b:01:76:3f:77:60: 08:5b:98:3a:76:4c:d5:20:b0:39:56:ad:8d:51:00: cc:3a:f1:57:05:3c:9a:43:31:3a:b2:7d:76:d7:a5: 67:6f:23:41:72:de:56:b3:05:b3:84:c3:57:14:d2: 58:cc:73:c7:bf:0b:74:f3:6d:f5:8a:22:81:4b:9f: 1d:24:63:34:d9:12:20:a8:8e:6a:0d:56:30:02:79: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:6C:71:70:1F:FA:06:8A:4E:30:DB:6D:1A:AC:8A:56:B0:C5:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.0.0/18 Signature Algorithm: sha256WithRSAEncryption d7:75:e5:f9:7d:5e:eb:3c:2b:1f:e9:a1:2d:08:98:b8:2b:29: cf:e6:b8:74:b5:69:4b:48:9d:06:79:f1:ac:12:c6:b4:ed:4b: 39:d5:7a:5b:1b:10:7a:09:ab:98:f3:ef:6b:a3:cd:fc:4b:c2: 83:03:38:4e:c2:ee:6f:c8:20:53:c3:54:d5:fb:a5:a9:40:fe: c3:af:87:dd:cf:cf:43:6b:c1:9c:0e:7e:97:97:18:90:0f:27: 18:c8:c9:3d:06:10:6c:cb:f8:e8:98:0e:14:e0:82:10:56:54: d9:97:18:f0:54:fc:c6:13:2f:80:55:49:07:64:4b:8c:11:5e: d2:bb:6e:60:4c:d4:b7:fa:fc:ac:c6:f7:5a:00:2d:30:89:00: d7:de:ca:26:e8:7d:77:a7:84:97:1b:76:cb:02:f5:cb:3d:23: c6:19:c6:23:8f:f1:2c:53:c4:e1:95:f8:34:d6:65:56:20:f6: 50:6c:b6:e7:f6:22:a1:1a:ef:db:dd:2b:88:3e:06:24:c1:68: 63:30:4d:ce:20:89:01:00:48:30:0c:52:d1:7c:e0:82:28:79: bf:f0:21:c5:1f:e4:84:fb:ed:5d:31:3e:ed:08:eb:7b:25:08: 48:20:82:66:13:5c:72:9c:58:76:c3:7f:48:94:57:75:54:87: 09:98:dd:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ6aec7m2+IB5GuPA7ebuA1BXCbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDAzMjE4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjMyMmJmNGYxYzZhYThmMGJiZjA5OGQyZmU0NTFjMDNh MTI4YWNiZGI4ZjNiZjMxZmU0Y2Y1NGQ0N2U3ZjAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS1VDizxCb1wHJFpI1iX7VuY8p5qpmMMjJQHFK+5ujR9K0 Jizxv2BLV4oNPLPexRCVDF4EwiklFOPNiIZXgG7IVMIBjWVXAQucxoO30NUUm6ao JoNjMEZarRBbJbnsPS8ddcRGCGdyQZdhm68PXHryqrAq7J/fidDQ6fSi0lCw5UI2 IMb/JXGoKOSz6+seGfBZ1Z/Vk5RWoSfERtADUynEeIQOKs+3lwW4xJgHpysBdj93 YAhbmDp2TNUgsDlWrY1RAMw68VcFPJpDMTqyfXbXpWdvI0Fy3lazBbOEw1cU0ljM c8e/C3TzbfWKIoFLnx0kYzTZEiCojmoNVjACeU2pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwnNscXAf+gaKTjDbbRqsilawxT4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyODkxOTFmLWU0ZGMtNDU1ZC05NDg5LWExZWJjN2VhNThiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFgAwDQYJKoZIhvcNAQELBQADggEBANd15fl9Xus8Kx/poS0ImLgrKc/m uHS1aUtInQZ58awSxrTtSznVelsbEHoJq5jz72ujzfxLwoMDOE7C7m/IIFPDVNX7 palA/sOvh93Pz0NrwZwOfpeXGJAPJxjIyT0GEGzL+OiYDhTgghBWVNmXGPBU/MYT L4BVSQdkS4wRXtK7bmBM1Lf6/KzG91oALTCJANfeyibofXenhJcbdssC9cs9I8YZ xiOP8SxTxOGV+DTWZVYg9lBstuf2IqEa79vdK4g+BiTBaGMwTc4giQEASDAMUtF8 4IIoeb/wIcUf5IT77V0xPu0I63slCEgggmYTXHKcWHbDf0iUV3VUhwmY3YM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:29 2025 by rpki-client