$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa File: 3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa (raw, json) Hash identifier: uTLZow6TeyOPuRuy075HdSMN+3YXHQT+xjJwtWmDuTs= Subject key identifier: 15:C1:32:31:B8:07:13:90:98:B6:52:A8:25:00:4F:95:C9:F4:A6:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16A3B851B22B1DECF3D07108897279948F54B950 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa Signing time: Tue 02 Sep 2025 00:20:14 +0000 ROA not before: Tue 02 Sep 2025 00:20:14 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 46.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:b8:51:b2:2b:1d:ec:f3:d0:71:08:89:72:79:94:8f:54:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:20:14 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=08644182b1b7466bd68e03cefe0bef593cb3767ad3ad7725b4319d57850a2b26, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:a2:6d:fe:d3:af:e4:2d:f2:7b:c5:4d:97: 3e:a5:5d:25:64:0a:9a:05:e9:53:62:04:e1:7a:15: b8:a1:9c:a7:87:91:ab:23:d2:a3:89:b3:e0:d8:aa: 04:7f:29:7d:5d:d6:1d:06:01:e7:2a:83:85:3b:26: e3:73:2a:40:cc:39:61:a6:c7:9a:a8:46:28:d3:94: 28:79:ca:b3:05:57:39:41:c2:e8:b0:87:35:60:a5: 14:d4:92:88:8f:72:9f:d8:f7:1f:81:0b:87:1b:35: 43:95:f9:e0:c9:b7:58:c5:40:eb:2b:1d:80:51:18: 76:0d:dd:be:ce:c3:42:0e:b6:46:1f:d9:32:3f:92: 83:5d:bc:e5:fd:3a:23:e7:f8:67:f2:bc:02:9a:a2: c3:11:d6:da:b2:c4:08:ff:63:f7:4e:b0:c4:73:6b: a2:e4:bc:3f:4b:2e:15:20:d3:06:6f:23:36:28:2a: b9:69:ed:29:ac:e6:f3:56:e7:b4:04:02:c3:4e:8d: 7b:fb:0b:4e:4b:17:e7:0b:e4:6f:1d:2e:67:fc:46: 99:97:e9:03:c4:6f:4a:1a:e9:3b:b1:83:35:50:d8: 68:9d:cf:52:b2:82:33:68:78:27:8c:77:1c:81:b6: e9:b6:f5:e9:9f:35:8a:2f:f0:02:bd:86:91:bb:53: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C1:32:31:B8:07:13:90:98:B6:52:A8:25:00:4F:95:C9:F4:A6:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 63:e8:b5:60:80:a6:4d:5f:00:cd:32:78:b4:f1:df:0c:a5:53: e0:00:6d:95:82:f2:94:da:b8:3c:1c:2d:77:3c:74:e8:6d:9a: 3e:7a:7a:09:2f:e6:91:d3:35:b0:7f:7c:c2:7a:93:a7:c2:1c: bc:e2:b8:cc:d4:2b:37:f7:d1:db:c7:a5:88:3e:eb:f2:d5:67: 09:da:45:58:85:19:6a:0a:97:77:85:52:28:71:6b:c4:83:cd: 05:02:f4:3c:11:37:62:5d:12:86:44:e5:bd:7b:1d:2a:61:9f: 4d:c7:4e:d6:a3:a9:48:f5:ef:8c:d7:11:35:2a:9d:39:99:e5: a4:a0:15:cf:fc:15:fd:a6:e3:93:01:e5:24:fc:dc:12:64:9a: 3e:f4:5e:86:8b:e1:2e:c5:9d:7a:04:7c:a9:b4:6f:59:05:aa: e8:28:f4:dd:36:ea:b3:93:f1:4f:f0:2c:73:45:44:37:71:7a: 23:8a:55:91:6d:f0:02:ba:6f:97:a5:a4:3e:9b:66:62:43:8d: 81:1c:00:d2:73:27:cd:40:41:a8:a6:63:44:22:5b:51:8f:b3: 47:e9:3a:08:e6:73:b3:d2:18:9e:2d:52:d9:c8:71:92:ab:e7: 1b:dd:4f:85:be:ce:67:d8:b2:2d:0b:a3:b4:81:e1:f1:da:88: 54:01:8b:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFqO4UbIrHezz0HEIiXJ5lI9UuVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAyMDE0WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODY0NDE4MmIxYjc0NjZiZDY4ZTAzY2VmZTBiZWY1OTNj YjM3NjdhZDNhZDc3MjViNDMxOWQ1Nzg1MGEyYjI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyoKJt/tOv5C3ye8VNlz6lXSVkCpoF6VNiBOF6FbihnKeH kasj0qOJs+DYqgR/KX1d1h0GAecqg4U7JuNzKkDMOWGmx5qoRijTlCh5yrMFVzlB wuiwhzVgpRTUkoiPcp/Y9x+BC4cbNUOV+eDJt1jFQOsrHYBRGHYN3b7Ow0IOtkYf 2TI/koNdvOX9OiPn+GfyvAKaosMR1tqyxAj/Y/dOsMRza6LkvD9LLhUg0wZvIzYo Krlp7Sms5vNW57QEAsNOjXv7C05LF+cL5G8dLmf8RpmX6QPEb0oa6TuxgzVQ2Gid z1KygjNoeCeMdxyBtum29emfNYov8AK9hpG7UxoTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFcEyMbgHE5CYtlKoJQBPlcn0pucwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMGE4YjQ2LWY4YTYtNGYwMy04MWNjLWU0MjgxN2E2YTgyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAu1zANBgkqhkiG9w0BAQsFAAOCAQEAY+i1YICmTV8AzTJ4tPHfDKVT4ABt lYLylNq4PBwtdzx06G2aPnp6CS/mkdM1sH98wnqTp8IcvOK4zNQrN/fR28eliD7r 8tVnCdpFWIUZagqXd4VSKHFrxIPNBQL0PBE3Yl0ShkTlvXsdKmGfTcdO1qOpSPXv jNcRNSqdOZnlpKAVz/wV/abjkwHlJPzcEmSaPvRehovhLsWdegR8qbRvWQWq6Cj0 3Tbqs5PxT/Asc0VEN3F6I4pVkW3wArpvl6WkPptmYkONgRwA0nMnzUBBqKZjRCJb UY+zR+k6COZzs9IYni1S2chxkqvnG91Phb7OZ9iyLQujtIHh8dqIVAGL8w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:56 2025 by rpki-client