$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa File: 0442e16d-5452-42c4-a7df-67b82dea3ce7.roa (raw, json) Hash identifier: kArvkszMK8bLaXSUOYT6ikwybKi8GJPQ2xhTG+0OhsA= Subject key identifier: 46:A8:90:5A:0F:1C:1F:6A:9F:31:B6:4C:63:2F:F6:62:F9:72:D5:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58023313F30BEE98E8900EBF7989786D7166672C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa Signing time: Wed 27 Aug 2025 00:51:48 +0000 ROA not before: Wed 27 Aug 2025 00:51:48 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:02:33:13:f3:0b:ee:98:e8:90:0e:bf:79:89:78:6d:71:66:67:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:51:48 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=b7fd9045032c966eada4e7b2252c03bae96b959a967482b6009d8d2f856b337d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f6:f0:dc:c9:a5:67:df:10:30:0d:94:e5:9a: 05:7e:9b:97:1c:bb:6e:50:12:60:28:58:88:89:c2: fb:b5:e0:9c:ac:c4:04:ee:24:f3:f2:7b:e0:ab:d6: 8e:80:6a:f2:af:22:29:00:19:88:d3:fa:33:2e:d6: 31:a4:4b:c7:bb:49:7c:a2:a6:ca:35:f6:51:8b:1f: 16:6d:c1:a4:a1:25:cd:4c:3c:60:21:6d:9b:5c:6d: 25:2a:88:72:dd:0b:93:f6:2a:7d:31:a5:c0:fe:53: 9b:4d:93:55:a3:65:13:26:13:30:b2:58:35:ca:a2: 76:4d:e8:ed:fa:13:94:77:45:4d:05:4c:c9:60:19: 47:24:5f:f1:74:2a:25:c8:9f:fd:1b:4a:2d:f9:7a: 95:03:b4:af:f3:49:c4:da:6a:b5:39:3f:b3:49:1a: 5b:28:2f:f6:e9:e9:5b:75:04:86:1e:42:b8:83:d3: 10:a1:0a:dc:5e:53:40:8e:3e:7b:af:81:a6:8f:bd: 5f:fc:68:e1:6a:3b:ad:8a:48:6b:58:f9:67:19:2e: db:be:3f:26:ed:30:02:54:19:89:1b:f0:fd:93:ba: dd:e4:d3:90:b6:c6:b0:28:a1:d7:8e:e9:65:ea:84: a0:7d:e1:db:0c:f7:80:5c:6b:25:0b:fd:f1:62:19: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:90:5A:0F:1C:1F:6A:9F:31:B6:4C:63:2F:F6:62:F9:72:D5:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.220.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:7d:20:7e:27:b6:47:13:24:d9:b4:29:dc:93:75:01:58:8e: 40:3c:eb:94:47:e3:dd:87:c3:98:0b:1b:38:bd:51:35:cf:55: aa:06:5a:08:9d:b7:8c:13:2e:4f:8a:27:ad:a0:1b:b5:d0:bc: 7d:ca:c1:53:78:11:7d:b7:40:eb:16:d2:c2:18:f6:34:1f:95: 6d:53:76:52:43:07:47:c6:ed:7f:50:14:0a:39:ce:73:7c:7b: 18:0e:9d:d1:fb:d5:a0:a6:fa:2c:ce:31:5f:91:63:74:18:96: 25:13:79:43:e7:3e:63:ff:e1:2c:1d:24:52:f3:7e:33:41:49: 66:fc:21:ac:53:02:bf:3f:31:fa:0a:5d:76:0a:2e:c6:5b:79: 54:af:6b:23:3e:a9:81:68:f7:3a:c9:52:82:c7:c1:6c:56:48: fa:73:0c:c7:fb:49:ee:11:fe:fe:4d:20:2f:88:92:59:da:d3: 05:a2:bf:cd:24:7f:f8:f2:0f:d0:24:fc:d2:6c:68:b2:8f:43: 0f:db:b0:e7:92:ec:57:53:8c:8a:20:32:56:7c:0a:6b:d7:70: b7:c9:a0:ba:ec:2d:5b:4c:f9:17:fb:3b:07:3b:d4:49:12:ad: a0:72:b1:04:17:4e:ac:85:63:0b:d8:01:51:64:00:d9:0e:79: 50:e1:10:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWAIzE/ML7pjokA6/eYl4bXFmZywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA1MTQ4WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2ZkOTA0NTAzMmM5NjZlYWRhNGU3YjIyNTJjMDNiYWU5 NmI5NTlhOTY3NDgyYjYwMDlkOGQyZjg1NmIzMzdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa9vDcyaVn3xAwDZTlmgV+m5ccu25QEmAoWIiJwvu14Jys xATuJPPye+Cr1o6AavKvIikAGYjT+jMu1jGkS8e7SXyipso19lGLHxZtwaShJc1M PGAhbZtcbSUqiHLdC5P2Kn0xpcD+U5tNk1WjZRMmEzCyWDXKonZN6O36E5R3RU0F TMlgGUckX/F0KiXIn/0bSi35epUDtK/zScTaarU5P7NJGlsoL/bp6Vt1BIYeQriD 0xChCtxeU0COPnuvgaaPvV/8aOFqO62KSGtY+WcZLtu+PybtMAJUGYkb8P2Tut3k 05C2xrAoodeO6WXqhKB94dsM94BcayUL/fFiGdNhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURqiQWg8cH2qfMbZMYy/2Yvly1W8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDJlMTZkLTU0NTItNDJjNC1hN2RmLTY3YjgyZGVhM2NlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALM7NwwDQYJKoZIhvcNAQELBQADggEBAD59IH4ntkcTJNm0KdyTdQFYjkA8 65RH492Hw5gLGzi9UTXPVaoGWgidt4wTLk+KJ62gG7XQvH3KwVN4EX23QOsW0sIY 9jQflW1TdlJDB0fG7X9QFAo5znN8exgOndH71aCm+izOMV+RY3QYliUTeUPnPmP/ 4SwdJFLzfjNBSWb8IaxTAr8/MfoKXXYKLsZbeVSvayM+qYFo9zrJUoLHwWxWSPpz DMf7Se4R/v5NIC+Iklna0wWiv80kf/jyD9Ak/NJsaLKPQw/bsOeS7FdTjIogMlZ8 CmvXcLfJoLrsLVtM+Rf7Owc71EkSraBysQQXTqyFYwvYAVFkANkOeVDhEIw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:17 2025 by rpki-client