$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa File: 3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa (raw, json) Hash identifier: kXCrHWtzUdjS5Dxr/kKSjKjsKHqRj0eWZmY4QKEShSE= Subject key identifier: 1A:30:01:DC:E3:C5:E1:D2:A4:70:7E:12:35:34:02:E6:DB:55:0B:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0117FB495382EDDF60705B3E1D0CC2383F1F55BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa Signing time: Tue 26 Aug 2025 15:02:03 +0000 ROA not before: Tue 26 Aug 2025 15:02:03 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:17:fb:49:53:82:ed:df:60:70:5b:3e:1d:0c:c2:38:3f:1f:55:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:02:03 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=1644996d8c7fd0f49f47896824bd29cde91dd3c89337bd4c23b76cfbcfe9f2ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:e7:c4:4d:48:28:28:3e:21:15:2e:84:b7: 4f:1a:b2:25:21:40:50:4e:4f:fe:79:da:c9:eb:af: d0:ae:0f:03:d3:60:e9:d5:c2:03:02:c9:bd:64:b6: 63:64:27:1a:e1:95:52:75:a1:c2:7b:a5:bc:17:6b: 1c:d0:d6:3a:74:6a:fa:d5:84:98:8b:29:62:29:3a: af:90:5b:35:61:bc:25:3f:65:36:b4:62:b3:79:2a: 46:3e:d6:e8:8d:6e:3b:32:76:83:1f:c7:31:09:e0: 1e:73:7a:9f:c8:37:72:2a:5b:c2:8f:48:1e:b8:b8: 04:31:cc:b6:ac:10:56:e1:81:5d:af:5e:fe:56:c0: 6a:a4:be:73:72:e2:cb:55:04:6e:a3:e5:bf:86:18: 39:51:37:a9:15:18:cc:4f:13:16:a7:9c:7a:7f:5a: 98:2c:4d:da:23:c6:58:19:b1:aa:94:34:22:29:40: 81:d8:5d:bb:79:75:d9:3c:de:83:59:09:ea:12:72: d2:62:f7:f8:6c:c8:82:0e:ee:3f:ec:85:2b:81:39: 02:f3:19:67:5c:a0:c3:8f:f6:bc:26:03:ce:3c:bf: 33:df:9e:7e:98:87:8f:1a:4f:f3:43:b6:64:0e:17: 9b:38:67:69:20:a5:39:d1:a1:e4:11:18:30:18:bd: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:01:DC:E3:C5:E1:D2:A4:70:7E:12:35:34:02:E6:DB:55:0B:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c71aef8-db0a-4cd2-b3f0-9a3768eb9691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.80.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:88:81:72:80:1d:6d:12:59:4f:53:c6:82:25:c9:b1:59:c0: a1:ec:73:3e:cc:91:a9:14:e2:a4:5a:0f:a1:dd:7c:ea:07:d1: 79:5c:99:ee:7f:8f:b4:c1:c8:30:b8:db:fe:54:61:eb:41:54: 34:53:ea:c2:83:d6:ed:5e:53:1a:fa:08:7f:c8:61:12:32:4a: e7:77:ac:64:93:52:c5:31:2a:ee:b0:4d:8d:b8:79:e5:31:35: e3:12:90:f3:fa:29:45:6e:af:9b:95:8c:52:7f:45:2f:02:3a: 91:c1:b6:47:a2:ab:9d:68:19:2a:63:c6:ce:43:86:fc:ce:6c: ce:d8:a0:6b:a9:87:06:11:8e:69:db:c0:99:66:86:12:d0:31: 88:8b:fb:4e:92:45:f7:92:93:96:0c:d1:05:02:f9:94:2c:0b: dc:d0:db:78:3e:05:f9:ff:c1:7e:04:3b:55:c1:57:2a:f3:8b: fa:a4:05:fe:d3:40:be:d9:3c:4b:cb:41:c3:b8:47:ca:7a:a0: fc:d0:dd:ab:c7:82:de:9b:4d:9c:81:8f:92:51:ae:d9:4e:a7: bc:57:90:59:fa:a6:df:db:03:3f:1c:3d:6b:4d:f9:c2:15:d3: 3b:53:1a:9e:79:bc:da:d9:37:09:f9:c0:b1:db:e4:84:62:c8: bf:a3:4f:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUARf7SVOC7d9gcFs+HQzCOD8fVb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMjAzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjQ0OTk2ZDhjN2ZkMGY0OWY0Nzg5NjgyNGJkMjljZGU5 MWRkM2M4OTMzN2JkNGMyM2I3NmNmYmNmZTlmMmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCerefETUgoKD4hFS6Et08asiUhQFBOT/552snrr9CuDwPT YOnVwgMCyb1ktmNkJxrhlVJ1ocJ7pbwXaxzQ1jp0avrVhJiLKWIpOq+QWzVhvCU/ ZTa0YrN5KkY+1uiNbjsydoMfxzEJ4B5zep/IN3IqW8KPSB64uAQxzLasEFbhgV2v Xv5WwGqkvnNy4stVBG6j5b+GGDlRN6kVGMxPExannHp/WpgsTdojxlgZsaqUNCIp QIHYXbt5ddk83oNZCeoSctJi9/hsyIIO7j/shSuBOQLzGWdcoMOP9rwmA848vzPf nn6Yh48aT/NDtmQOF5s4Z2kgpTnRoeQRGDAYvdStAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGjAB3OPF4dKkcH4SNTQC5ttVC70wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjNzFhZWY4LWRiMGEtNGNkMi1iM2YwLTlhMzc2OGViOTY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBs1AwDQYJKoZIhvcNAQELBQADggEBAB+IgXKAHW0SWU9TxoIlybFZwKHs cz7MkakU4qRaD6HdfOoH0Xlcme5/j7TByDC42/5UYetBVDRT6sKD1u1eUxr6CH/I YRIySud3rGSTUsUxKu6wTY24eeUxNeMSkPP6KUVur5uVjFJ/RS8COpHBtkeiq51o GSpjxs5DhvzObM7YoGuphwYRjmnbwJlmhhLQMYiL+06SRfeSk5YM0QUC+ZQsC9zQ 23g+Bfn/wX4EO1XBVyrzi/qkBf7TQL7ZPEvLQcO4R8p6oPzQ3avHgt6bTZyBj5JR rtlOp7xXkFn6pt/bAz8cPWtN+cIV0ztTGp55vNrZNwn5wLHb5IRiyL+jT+Y= -----END CERTIFICATE-----Generated at Sat Sep 6 14:09:00 2025 by rpki-client