$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa File: 3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json) Hash identifier: IuFp730wdsSfdYrE/4kN8T/BDI2y/ESh3faPgyiTLzQ= Subject key identifier: 80:DF:0E:D0:66:FF:66:7C:96:24:65:C9:CF:7D:1A:B8:1E:B8:41:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B02D28A7AACD78F173BE64F0CDE90D45FAC861E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa Signing time: Tue 05 Aug 2025 00:41:58 +0000 ROA not before: Tue 05 Aug 2025 00:41:58 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.107.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:02:d2:8a:7a:ac:d7:8f:17:3b:e6:4f:0c:de:90:d4:5f:ac:86:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:41:58 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=69ddc37f45d5e1d49465f8ae94dd31a55c5ce31eea8748b41158abd6e28d4d93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:75:a5:18:85:f3:c9:3d:09:9c:ee:80:4d: ab:60:8a:c9:51:c9:a2:0a:8c:09:b7:dd:5f:dd:bb: 4d:86:60:73:28:73:14:1f:4e:ee:fb:7b:06:6b:cf: 91:bf:74:56:f2:9f:51:02:9b:f2:9c:3a:64:26:58: 44:c7:82:1c:10:1a:c8:92:e2:26:28:15:d1:82:5b: 63:29:c5:66:77:64:17:82:4f:3f:69:f4:b2:d8:c3: 87:24:b0:cb:83:8a:72:5d:e6:bb:87:bb:0f:bc:42: 79:52:2d:48:c7:df:91:41:00:7b:ab:a8:fa:1c:47: 0f:0a:b0:e1:ae:87:7e:f8:cb:fa:b7:98:cb:c8:fe: b4:f9:0f:63:a5:ce:44:30:c9:b7:87:1d:9c:ea:b6: b7:fd:13:98:28:96:c5:5d:1f:29:b2:13:d9:15:42: 79:5c:1a:8d:6d:d6:54:bc:43:a4:63:82:26:b3:e7: e4:87:ab:33:52:66:b4:38:96:7e:ef:32:60:10:a8: b1:a3:47:15:42:db:75:b3:32:3d:3b:65:2c:69:ac: 4f:cb:81:34:4f:11:b1:69:ff:11:5e:44:9f:2d:d7: 55:f8:c6:cb:c0:2b:9b:be:cf:1d:95:e1:81:08:36: 3f:38:c6:bb:bd:04:66:5a:6e:53:7a:e2:0f:83:75: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:0E:D0:66:FF:66:7C:96:24:65:C9:CF:7D:1A:B8:1E:B8:41:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.107.0.0/18 Signature Algorithm: sha256WithRSAEncryption b3:01:c5:cc:23:1f:6a:b0:8d:dd:99:5e:56:cc:9a:62:53:8c: 09:81:27:b0:eb:2e:8b:f2:f0:3c:61:19:73:2c:70:7b:65:2c: 36:fe:27:4a:f2:23:28:69:fb:f6:0a:fb:37:52:5f:4e:31:4b: 73:2f:e1:7a:fa:96:a2:ee:4a:29:29:59:2a:6a:88:9f:fb:f8: 95:c0:1a:89:f9:8b:84:38:aa:25:28:41:ee:04:e7:e7:bc:b2: 90:49:17:ca:b3:49:ac:17:0d:93:f3:8b:4d:9b:71:aa:40:7a: 3b:53:53:02:26:f6:02:9d:d1:b0:fc:52:b4:7b:e9:7b:ca:45: c3:38:2e:50:6e:1e:1c:71:e9:ff:75:1a:a8:c4:6a:1e:fb:a3: f9:2d:1a:8d:58:41:fe:90:53:18:fc:f8:38:5e:2f:4c:17:0c: ef:20:06:c0:2b:21:f2:8f:a9:c2:8c:e3:a9:d1:29:a8:42:d9: 55:8a:01:b8:de:33:c7:8e:42:9c:de:8c:fe:3e:95:ae:2e:35: 1f:a6:38:4a:76:43:01:f0:cc:f6:a5:64:ce:d4:5b:83:c9:d3: 1b:0f:4e:1b:16:bc:8b:80:c1:c3:1c:82:f4:fb:bf:09:79:c6: ee:fb:63:3c:1e:a9:9c:ec:cf:cf:f6:1b:31:64:ab:97:ce:79: 88:73:9e:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWwLSinqs148XO+ZPDN6Q1F+shh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDA0MTU4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWRkYzM3ZjQ1ZDVlMWQ0OTQ2NWY4YWU5NGRkMzFhNTVj NWNlMzFlZWE4NzQ4YjQxMTU4YWJkNmUyOGQ0ZDkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPkHWlGIXzyT0JnO6ATatgislRyaIKjAm33V/du02GYHMo cxQfTu77ewZrz5G/dFbyn1ECm/KcOmQmWETHghwQGsiS4iYoFdGCW2MpxWZ3ZBeC Tz9p9LLYw4cksMuDinJd5ruHuw+8QnlSLUjH35FBAHurqPocRw8KsOGuh374y/q3 mMvI/rT5D2OlzkQwybeHHZzqtrf9E5golsVdHymyE9kVQnlcGo1t1lS8Q6Rjgiaz 5+SHqzNSZrQ4ln7vMmAQqLGjRxVC23WzMj07ZSxprE/LgTRPEbFp/xFeRJ8t11X4 xsvAK5u+zx2V4YEINj84xru9BGZablN64g+DdQllAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgN8O0Gb/ZnyWJGXJz30auB64QbUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyNTliMjEzLWY3YzEtNDFhZS1iYWM2LWU4YzVmYjM1OGYwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZFawAwDQYJKoZIhvcNAQELBQADggEBALMBxcwjH2qwjd2ZXlbMmmJTjAmB J7DrLovy8DxhGXMscHtlLDb+J0ryIyhp+/YK+zdSX04xS3Mv4Xr6lqLuSikpWSpq iJ/7+JXAGon5i4Q4qiUoQe4E5+e8spBJF8qzSawXDZPzi02bcapAejtTUwIm9gKd 0bD8UrR76XvKRcM4LlBuHhxx6f91GqjEah77o/ktGo1YQf6QUxj8+DheL0wXDO8g BsArIfKPqcKM46nRKahC2VWKAbjeM8eOQpzejP4+la4uNR+mOEp2QwHwzPalZM7U W4PJ0xsPThsWvIuAwcMcgvT7vwl5xu77YzweqZzsz8/2GzFkq5fOeYhznig= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:41 2025 by rpki-client