$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa File: 2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa (raw, json) Hash identifier: 5WQcEXNen0yjZvmvVjXfBTDl+Na23ZcT8u9+6m0v4Bo= Subject key identifier: 83:29:F0:EB:29:29:3B:07:4B:37:C6:1B:4A:D2:D3:26:B5:73:94:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68885F97DCF0E4CF68A4EE48BD8584D386F0F3C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa Signing time: Fri 05 Sep 2025 00:20:17 +0000 ROA not before: Fri 05 Sep 2025 00:20:17 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:88:5f:97:dc:f0:e4:cf:68:a4:ee:48:bd:85:84:d3:86:f0:f3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 00:20:17 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=84239f54b63428987a50581ac27280048d716ff02b581041b33e4738110282ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:a7:27:69:15:52:1f:05:7a:87:77:3e:eb: 32:e9:ba:70:c7:cd:fd:bf:2e:f6:a6:f6:ec:3f:fb: ae:3b:47:e9:5e:ef:49:c1:b0:bc:5f:a6:fe:2c:bf: 46:82:ad:8a:ec:43:ba:56:48:df:04:32:e1:75:e0: cf:5e:6c:55:c5:91:64:4b:52:ba:56:16:8c:df:27: c1:17:e3:de:53:11:0a:ac:1e:0e:78:77:e2:27:80: b1:a7:03:48:19:b1:d0:c8:60:6d:28:b6:b1:be:1b: 19:1d:75:be:1b:5f:27:bc:ea:00:1d:69:83:6d:8b: 7b:e0:01:52:95:68:b7:5e:56:fe:7d:89:88:a4:e9: f5:3e:cc:e5:62:f5:fc:5f:45:ec:72:38:94:0c:c3: ae:8d:04:cf:cf:dc:31:51:31:e2:6e:92:5b:a5:41: e4:f0:55:a2:71:18:b2:92:e5:92:32:67:5a:18:d1: f6:6d:5c:07:45:11:53:b7:c2:5f:dc:e5:a3:f6:16: ab:2a:5e:cc:69:9c:cc:6a:7f:76:d6:fe:24:5b:d9: b6:26:36:94:e9:72:b7:b8:ca:1e:b6:23:c2:12:b2: 28:db:65:8e:7e:69:5f:36:2a:85:ce:6f:6b:69:31: 03:be:6d:1d:75:67:77:1e:08:b4:50:d1:73:de:c5: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:29:F0:EB:29:29:3B:07:4B:37:C6:1B:4A:D2:D3:26:B5:73:94:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption ad:b8:4e:b5:10:a4:a7:c2:47:c2:8f:12:d6:2e:02:ea:3e:f4: 47:ca:35:14:8b:f7:63:84:89:40:30:dc:bd:5b:23:dd:a4:e7: eb:ea:27:de:d5:71:1f:dd:74:00:84:ad:6a:0e:5a:97:a6:ab: 84:57:a6:7e:96:9a:77:b3:0b:4c:8c:d0:cc:4d:21:ef:2e:45: 35:59:1d:a0:c8:2a:99:07:0a:76:22:4c:12:d5:dd:1b:65:6c: 45:0f:10:c3:52:08:43:6d:56:b5:ec:77:f2:6c:8c:43:db:5c: cf:82:ec:6b:26:34:27:21:9f:96:1b:4c:d4:b0:9e:b1:05:e6: 16:08:08:64:08:31:7e:ae:d2:71:60:08:9d:fe:69:4c:21:45: d7:bd:9b:f4:2b:82:fb:6a:f2:a7:98:6e:60:81:7b:a8:bf:ca: 87:ab:d0:f9:7b:27:1d:b8:0f:37:e3:9f:22:5f:f8:65:dc:d4: ac:d4:bd:0c:6e:08:a7:41:e1:93:33:c2:5a:3b:cb:9e:43:3a: d1:76:a9:9e:5e:60:ad:d9:24:53:b5:73:6e:0f:31:cc:98:17: e2:24:b8:da:4c:84:77:cf:71:32:7d:b8:f2:9c:18:39:53:79: de:05:76:78:8c:f9:85:d2:cc:f8:eb:4d:0c:fb:d2:02:f1:e7: ed:54:97:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaIhfl9zw5M9opO5IvYWE04bw88kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAyMDE3WhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDIzOWY1NGI2MzQyODk4N2E1MDU4MWFjMjcyODAwNDhk NzE2ZmYwMmI1ODEwNDFiMzNlNDczODExMDI4MmZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ5KcnaRVSHwV6h3c+6zLpunDHzf2/Lvam9uw/+647R+le 70nBsLxfpv4sv0aCrYrsQ7pWSN8EMuF14M9ebFXFkWRLUrpWFozfJ8EX495TEQqs Hg54d+IngLGnA0gZsdDIYG0otrG+Gxkddb4bXye86gAdaYNti3vgAVKVaLdeVv59 iYik6fU+zOVi9fxfRexyOJQMw66NBM/P3DFRMeJuklulQeTwVaJxGLKS5ZIyZ1oY 0fZtXAdFEVO3wl/c5aP2FqsqXsxpnMxqf3bW/iRb2bYmNpTpcre4yh62I8ISsijb ZY5+aV82KoXOb2tpMQO+bR11Z3ceCLRQ0XPexXMpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgynw6ykpOwdLN8YbStLTJrVzlEQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMTcxM2ZhLWU1ZGUtNGNlYS05YTc2LWEwZTBkY2Y2YzgzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXClEAwDQYJKoZIhvcNAQELBQADggEBAK24TrUQpKfCR8KPEtYuAuo+9EfK NRSL92OEiUAw3L1bI92k5+vqJ97VcR/ddACErWoOWpemq4RXpn6WmnezC0yM0MxN Ie8uRTVZHaDIKpkHCnYiTBLV3RtlbEUPEMNSCENtVrXsd/JsjEPbXM+C7GsmNCch n5YbTNSwnrEF5hYICGQIMX6u0nFgCJ3+aUwhRde9m/Qrgvtq8qeYbmCBe6i/yoer 0Pl7Jx24DzfjnyJf+GXc1KzUvQxuCKdB4ZMzwlo7y55DOtF2qZ5eYK3ZJFO1c24P McyYF+IkuNpMhHfPcTJ9uPKcGDlTed4FdniM+YXSzPjrTQz70gLx5+1Ul64= -----END CERTIFICATE-----Generated at Thu Sep 18 18:35:13 2025 by rpki-client