$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/310d9197-c4f2-44a3-8052-ec348c7f7ac0.roa File: 310d9197-c4f2-44a3-8052-ec348c7f7ac0.roa (raw, json) Hash identifier: 8BIpnKF2h73SxF2xonA+Xc46bP+LAZ7REybPshwex2Y= Subject key identifier: 81:92:67:88:CC:A6:7F:A3:FF:5D:B2:A8:15:A8:C9:47:7A:81:97:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7337CD1F81CC5839E6D7C36A7F9F71E6C58623BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/310d9197-c4f2-44a3-8052-ec348c7f7ac0.roa Signing time: Sat 06 Sep 2025 00:00:57 +0000 ROA not before: Sat 06 Sep 2025 00:00:57 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:37:cd:1f:81:cc:58:39:e6:d7:c3:6a:7f:9f:71:e6:c5:86:23:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:00:57 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=66b98bc81c57b4a31d5166d9660b9acf7abae42382f7bb4b656bd536e442a7de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:dc:3f:31:a8:f3:4e:69:b1:8d:f2:23:c6: 63:ae:37:6c:a6:76:47:58:7c:de:38:66:4c:96:3a: 25:95:b3:a5:a5:2b:cd:4f:05:23:38:52:c6:bd:99: 08:7a:da:85:f2:ea:fc:09:35:af:24:6d:09:28:22: f0:85:47:29:ce:7f:75:18:d6:8e:0b:39:a2:b9:84: c7:f5:07:64:da:90:83:08:6b:ca:fd:09:bf:5d:bb: 9f:51:e9:93:cb:55:36:ac:8a:c1:89:62:2a:92:4a: 3f:f2:38:ed:1d:2d:57:7e:d2:5b:96:e6:cc:33:1d: 7e:d0:cd:aa:e7:3d:fa:00:4b:65:2f:96:01:7e:d3: b4:23:ae:a2:9e:37:22:0d:1c:e9:7d:1e:70:70:a6: ed:e4:45:3d:8d:9b:2f:f1:e9:fb:cd:ad:60:67:f4: 09:d7:df:c5:a8:fd:97:60:bf:17:12:9c:53:88:21: a6:04:45:45:18:00:d6:1e:23:6f:42:23:e0:ff:42: 75:c8:87:98:f7:65:cc:c2:3b:45:c5:e7:90:e5:71: 71:b3:37:50:46:cc:5f:ce:4c:a0:2f:d1:33:70:81: c6:6d:78:30:29:0c:c5:82:a6:a2:af:8d:97:ca:b7: 2a:27:17:4d:f8:3a:63:e5:ab:41:7a:33:04:6d:56: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:67:88:CC:A6:7F:A3:FF:5D:B2:A8:15:A8:C9:47:7A:81:97:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/310d9197-c4f2-44a3-8052-ec348c7f7ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:c7:d6:6b:e6:05:b3:f0:ee:8b:67:a4:ab:33:35:6c:fc:9b: c5:90:0a:81:ba:89:b6:0a:a4:57:1c:14:af:c9:79:11:e3:4f: 8e:14:e7:33:af:cd:82:b7:36:62:5f:a1:39:32:f1:c3:9c:cb: 8d:da:52:31:0b:2c:75:34:05:e8:4d:30:29:31:e4:8a:ca:06: d0:61:e7:1c:56:e7:53:02:9c:7c:a3:31:bb:39:79:57:65:bd: 8e:b2:03:ac:41:06:52:c3:04:5a:93:be:14:f5:8a:0b:04:56: 57:ac:33:bb:f3:a4:da:49:bf:78:57:04:14:59:be:d1:6a:60: 9b:de:ee:6a:ec:b2:c3:da:87:9e:56:bf:45:25:f1:30:f4:6b: 09:e0:f7:bf:b2:7e:5d:00:ce:70:bd:eb:e0:53:19:9b:73:56: bc:b9:75:2f:00:37:5f:56:ed:e3:ab:21:fe:5b:b8:0a:d8:d7: 42:6b:6d:a2:90:a0:c3:01:71:02:ed:f5:2e:c5:6d:15:a9:af: 11:e1:b1:78:ae:f2:fa:31:38:de:c9:1b:f7:7b:58:70:fe:17: a8:50:f6:06:69:ce:43:8e:a4:d8:d7:d1:58:f0:d5:43:91:96: 2e:25:3d:20:6d:5d:2c:74:4f:a2:cd:9c:a7:d0:d4:44:24:03: 31:07:00:e6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUczfNH4HMWDnm18Nqf59x5sWGI78wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAwMDU3WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmI5OGJjODFjNTdiNGEzMWQ1MTY2ZDk2NjBiOWFjZjdh YmFlNDIzODJmN2JiNGI2NTZiZDUzNmU0NDJhN2RlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRI9w/MajzTmmxjfIjxmOuN2ymdkdYfN44ZkyWOiWVs6Wl K81PBSM4Usa9mQh62oXy6vwJNa8kbQkoIvCFRynOf3UY1o4LOaK5hMf1B2TakIMI a8r9Cb9du59R6ZPLVTasisGJYiqSSj/yOO0dLVd+0luW5swzHX7QzarnPfoAS2Uv lgF+07QjrqKeNyINHOl9HnBwpu3kRT2Nmy/x6fvNrWBn9AnX38Wo/ZdgvxcSnFOI IaYERUUYANYeI29CI+D/QnXIh5j3ZczCO0XF55DlcXGzN1BGzF/OTKAv0TNwgcZt eDApDMWCpqKvjZfKtyonF034OmPlq0F6MwRtViRPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgZJniMymf6P/XbKoFajJR3qBl3owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxMGQ5MTk3LWM0ZjItNDRhMy04MDUyLWVjMzQ4YzdmN2FjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP/DANBgkqhkiG9w0BAQsFAAOCAQEAR8fWa+YFs/Dui2ekqzM1bPybxZAK gbqJtgqkVxwUr8l5EeNPjhTnM6/Ngrc2Yl+hOTLxw5zLjdpSMQssdTQF6E0wKTHk isoG0GHnHFbnUwKcfKMxuzl5V2W9jrIDrEEGUsMEWpO+FPWKCwRWV6wzu/Ok2km/ eFcEFFm+0Wpgm97uauyyw9qHnla/RSXxMPRrCeD3v7J+XQDOcL3r4FMZm3NWvLl1 LwA3X1bt46sh/lu4CtjXQmttopCgwwFxAu31LsVtFamvEeGxeK7y+jE43skb93tY cP4XqFD2BmnOQ46k2NfRWPDVQ5GWLiU9IG1dLHRPos2cp9DURCQDMQcA5g== -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:53 2025 by rpki-client