$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa File: 0c30ae5a-50c2-4463-b773-79404fc3c67d.roa (raw, json) Hash identifier: upcaCiXGREP932mLIuHx9yguVZHZDJc47ajxc5XjDO8= Subject key identifier: 4C:76:43:F5:41:6A:66:2B:0D:65:1C:F2:94:E1:BF:4E:11:D2:D5:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F74E42B0EB0F9C78422C94BEAC2A670888122E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa Signing time: Tue 02 Sep 2025 00:31:06 +0000 ROA not before: Tue 02 Sep 2025 00:31:06 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:74:e4:2b:0e:b0:f9:c7:84:22:c9:4b:ea:c2:a6:70:88:81:22:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:31:06 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=d436ef7e7f92a647fe9a9740fcff114d80bec8a7fa4b0a5872ce2b680d88635f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:2b:7d:7f:4d:e8:8a:9b:63:f2:7d:d5:ff: ba:85:7e:38:fc:f5:1a:8a:ec:ac:5c:d2:60:76:75: 3c:a0:3b:a3:7e:bb:31:a9:c5:ec:cc:a0:ab:98:e8: fd:96:1e:97:54:6e:3b:14:7b:39:71:33:bb:4f:2e: f5:e4:f3:10:68:d3:a2:65:ce:9a:28:46:d4:1f:05: f4:8c:d5:32:ad:89:8e:1e:db:68:6f:71:cf:4b:b1: 78:ae:76:60:a1:88:d6:23:f4:a3:28:ab:99:17:d0: f5:17:fe:8b:b9:d9:98:66:71:92:d3:a4:63:0c:20: cc:f1:d5:be:e8:ad:e3:1e:77:ed:98:c5:f9:59:52: 5b:86:8a:0e:c3:ec:4a:8f:0e:66:8c:6f:18:a3:5a: 4c:7c:3b:52:cb:84:fc:e7:7f:54:5e:85:18:41:ee: 13:55:e6:29:6d:e5:5a:cb:cf:de:97:56:50:7c:3b: cf:40:12:b6:3c:2c:20:9f:45:ce:fa:54:bc:00:c5: 12:ae:e9:87:a1:3c:d9:7a:fa:64:fc:a7:25:03:9e: 23:b1:e5:df:8d:2e:dc:8b:23:e2:37:a1:67:2a:b8: cd:66:99:10:02:66:eb:e8:ad:78:26:77:f7:d4:55: 24:95:f2:47:4b:74:15:0c:f7:3d:63:db:0f:91:da: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:76:43:F5:41:6A:66:2B:0D:65:1C:F2:94:E1:BF:4E:11:D2:D5:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.150.0/24 Signature Algorithm: sha256WithRSAEncryption 28:1c:61:79:3f:61:e3:96:32:07:7f:c0:a5:91:3b:82:c4:1f: b4:90:c8:59:df:6c:ec:18:11:59:7a:e8:f3:99:e7:c6:30:ae: 12:0f:8e:dc:54:58:4d:6c:37:0a:0e:04:83:b0:ed:3b:6f:f2: 14:38:ff:80:44:e0:fb:ea:13:5a:ee:24:8b:57:89:ec:6c:50: 8a:29:56:ef:f5:54:c4:94:b5:82:00:04:f6:c9:4a:8d:3a:4e: ee:2a:b9:b1:24:46:51:eb:9a:15:8f:89:a7:f6:39:6c:08:2c: 59:bd:0d:ac:e5:94:71:d0:46:fd:f6:0d:68:96:98:28:78:3f: 52:5d:f6:ac:e5:e4:18:9a:d2:31:f2:64:d8:f4:a3:14:83:44: b4:f0:ff:07:93:55:98:85:36:f3:81:f3:21:46:36:1b:91:2b: 63:19:da:9c:89:ab:0e:03:8a:6c:99:41:30:f9:12:bb:5f:4b: 04:1e:ee:35:cc:8d:8c:74:7d:70:9d:f6:5a:a2:3d:cc:3e:f9: 84:b0:39:4b:bf:2f:cf:78:29:c7:96:6d:44:68:79:fc:a2:7c: 42:9a:cc:4f:24:62:a9:8e:27:cb:73:c7:93:80:a5:b2:6c:fd: f0:06:2e:c9:78:3f:c3:15:2e:f5:de:39:f0:88:f6:d9:23:59: 5d:d9:ca:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb3TkKw6w+ceEIslL6sKmcIiBIuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAzMTA2WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDM2ZWY3ZTdmOTJhNjQ3ZmU5YTk3NDBmY2ZmMTE0ZDgw YmVjOGE3ZmE0YjBhNTg3MmNlMmI2ODBkODg2MzVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzVSt9f03oiptj8n3V/7qFfjj89RqK7Kxc0mB2dTygO6N+ uzGpxezMoKuY6P2WHpdUbjsUezlxM7tPLvXk8xBo06JlzpooRtQfBfSM1TKtiY4e 22hvcc9LsXiudmChiNYj9KMoq5kX0PUX/ou52ZhmcZLTpGMMIMzx1b7oreMed+2Y xflZUluGig7D7EqPDmaMbxijWkx8O1LLhPznf1RehRhB7hNV5ilt5VrLz96XVlB8 O89AErY8LCCfRc76VLwAxRKu6YehPNl6+mT8pyUDniOx5d+NLtyLI+I3oWcquM1m mRACZuvorXgmd/fUVSSV8kdLdBUM9z1j2w+R2kO7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTHZD9UFqZisNZRzylOG/ThHS1RYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjMzBhZTVhLTUwYzItNDQ2My1iNzczLTc5NDA0ZmMzYzY3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTZYwDQYJKoZIhvcNAQELBQADggEBACgcYXk/YeOWMgd/wKWRO4LEH7SQ yFnfbOwYEVl66POZ58YwrhIPjtxUWE1sNwoOBIOw7Ttv8hQ4/4BE4PvqE1ruJItX iexsUIopVu/1VMSUtYIABPbJSo06Tu4qubEkRlHrmhWPiaf2OWwILFm9DazllHHQ Rv32DWiWmCh4P1Jd9qzl5Bia0jHyZNj0oxSDRLTw/weTVZiFNvOB8yFGNhuRK2MZ 2pyJqw4DimyZQTD5ErtfSwQe7jXMjYx0fXCd9lqiPcw++YSwOUu/L894KceWbURo efyifEKazE8kYqmOJ8tzx5OApbJs/fAGLsl4P8MVLvXeOfCI9tkjWV3Zymw= -----END CERTIFICATE-----Generated at Tue Sep 16 22:39:15 2025 by rpki-client