$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa File: 259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json) Hash identifier: oaA4pGRU72+KSShNaJgJaAmZdPZniuXFWmUXH6IkO5I= Subject key identifier: 13:F3:DA:2D:43:6B:73:A1:F6:73:96:96:65:D0:ED:C0:57:77:9D:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13EFA93E3B4567F0CC4926A7C7E49C4E23758ECA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa Signing time: Mon 01 Sep 2025 15:42:06 +0000 ROA not before: Mon 01 Sep 2025 15:42:06 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.88.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ef:a9:3e:3b:45:67:f0:cc:49:26:a7:c7:e4:9c:4e:23:75:8e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:42:06 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=69f993ed659e3ece9539f1b8414d4d39c9fe71bc2a08159f6d931cf7b596ae3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:8c:41:e9:a6:22:23:47:93:47:0e:d7:8f: c0:4c:60:34:e3:40:c3:ad:44:0f:f3:f8:27:26:b7: a0:9f:72:96:43:44:70:be:2b:6c:f2:d9:79:bd:20: 91:4d:40:86:07:02:b2:cf:24:21:ff:1d:a7:3e:a3: 95:1b:22:3d:f2:76:2d:fb:bc:d8:e5:c4:22:80:cc: 6f:bc:ec:8c:ed:aa:38:b5:12:eb:83:41:ea:6c:ba: 52:3b:ca:13:be:e6:4c:d7:ff:36:48:a6:7d:a8:9c: c5:c6:47:d5:e0:5a:16:4f:f5:1b:27:18:72:1a:1e: c6:43:0e:d7:13:66:8f:24:2c:15:c5:d5:a4:a5:cc: 73:27:14:c0:ef:61:91:d7:0a:34:23:8b:73:09:3b: 03:cb:f1:3e:dc:5e:5b:27:78:1b:d7:a1:58:77:de: 07:8d:8a:94:30:3c:0a:c9:de:85:4e:1c:e5:0b:c0: 80:6e:b6:9a:f1:03:53:e6:0b:20:55:dd:ae:92:41: 0e:64:53:9b:fa:d5:b5:c7:38:c1:cb:29:1f:24:f3: 77:62:63:30:00:a1:a6:e0:5e:dc:86:79:9c:3f:e4: 37:6a:fb:ab:37:ac:2a:4a:b9:1f:10:04:be:49:db: 79:39:2e:34:2f:f8:05:38:62:64:0f:85:b6:d1:75: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F3:DA:2D:43:6B:73:A1:F6:73:96:96:65:D0:ED:C0:57:77:9D:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.88.0.0/13 Signature Algorithm: sha256WithRSAEncryption 35:ef:0e:77:58:28:1e:a1:29:69:0d:93:1d:cb:fc:ed:02:26: 9e:04:39:42:50:41:5f:7a:41:ff:66:a8:8b:6d:8c:e0:2e:55: d0:88:75:bf:67:5f:88:64:b7:f2:e4:d4:6c:6a:ce:3e:b7:d8: 5b:e2:51:9f:85:7c:d6:65:e9:8a:19:70:10:21:6c:2d:89:33: d4:6e:76:b2:bd:37:cc:c9:b5:9c:c1:05:44:29:1f:42:ef:9e: c7:22:cd:61:7c:36:af:75:d3:7d:bc:99:2f:e1:6f:0a:d4:76: 42:5b:d3:fb:b8:ca:90:70:eb:21:89:91:63:5c:b5:7e:74:98: 5b:ca:31:d7:04:71:bd:4b:c9:ee:cf:1d:a1:5e:23:12:95:96: df:88:01:6f:4e:33:e8:cd:e8:5b:a1:52:5d:89:d8:e7:79:13: 1e:a5:66:43:48:d8:7d:44:4c:d9:23:08:cf:b0:1f:c1:07:50: aa:22:57:69:77:2f:d8:6b:56:30:45:f8:19:19:d5:72:b5:38: a0:67:13:50:68:94:8f:47:86:6c:cf:da:70:14:80:c4:ce:38: 30:8f:6e:cd:2e:5a:ba:96:74:5a:ff:5e:25:5e:9e:d0:8d:a0: 6e:28:b5:65:4c:8b:c7:72:8a:fc:37:90:19:01:e4:dc:79:72: 52:61:a4:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE++pPjtFZ/DMSSanx+ScTiN1jsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MjA2WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWY5OTNlZDY1OWUzZWNlOTUzOWYxYjg0MTRkNGQzOWM5 ZmU3MWJjMmEwODE1OWY2ZDkzMWNmN2I1OTZhZTNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTtIxB6aYiI0eTRw7Xj8BMYDTjQMOtRA/z+Ccmt6CfcpZD RHC+K2zy2Xm9IJFNQIYHArLPJCH/Hac+o5UbIj3ydi37vNjlxCKAzG+87Iztqji1 EuuDQepsulI7yhO+5kzX/zZIpn2onMXGR9XgWhZP9RsnGHIaHsZDDtcTZo8kLBXF 1aSlzHMnFMDvYZHXCjQji3MJOwPL8T7cXlsneBvXoVh33geNipQwPArJ3oVOHOUL wIButprxA1PmCyBV3a6SQQ5kU5v61bXHOMHLKR8k83diYzAAoabgXtyGeZw/5Ddq +6s3rCpKuR8QBL5J23k5LjQv+AU4YmQPhbbRdVd3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE/PaLUNrc6H2c5aWZdDtwFd3na8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1OWQ3N2M4LWIwNzItNGQ3YS1iYzMzLWFjNWVmMWZhZGZlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNiWDANBgkqhkiG9w0BAQsFAAOCAQEANe8Od1goHqEpaQ2THcv87QImngQ5 QlBBX3pB/2aoi22M4C5V0Ih1v2dfiGS38uTUbGrOPrfYW+JRn4V81mXpihlwECFs LYkz1G52sr03zMm1nMEFRCkfQu+exyLNYXw2r3XTfbyZL+FvCtR2QlvT+7jKkHDr IYmRY1y1fnSYW8ox1wRxvUvJ7s8doV4jEpWW34gBb04z6M3oW6FSXYnY53kTHqVm Q0jYfURM2SMIz7AfwQdQqiJXaXcv2GtWMEX4GRnVcrU4oGcTUGiUj0eGbM/acBSA xM44MI9uzS5aupZ0Wv9eJV6e0I2gbii1ZUyLx3KK/DeQGQHk3HlyUmGkmQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:06 2025 by rpki-client