$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa File: 3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa (raw, json) Hash identifier: LGjc75IC+jRDXdlpWY64Di7gHaDa2TFnkws3uBZV+V4= Subject key identifier: 43:67:46:0B:E7:65:96:D0:81:D6:34:AD:BB:22:A0:F9:83:65:9F:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 070C13150D2C8311D749A75F569CD1C226A0B3E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa Signing time: Sat 30 Aug 2025 00:40:21 +0000 ROA not before: Sat 30 Aug 2025 00:40:21 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.34.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0c:13:15:0d:2c:83:11:d7:49:a7:5f:56:9c:d1:c2:26:a0:b3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:40:21 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=f504af9dec4dce6ad77a1339a7fa89d838690ee4fa72b3957e7e15821a4ed513, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:58:67:a7:42:d6:b6:66:70:1f:74:a2:2b: b5:88:6f:3a:d6:f8:4a:ad:71:8c:53:36:b1:29:06: e9:ee:3d:1b:1d:07:6a:31:d7:70:3f:34:f5:44:7c: 47:fe:5d:bc:e4:c4:9c:d4:32:c5:ca:c1:91:34:fd: 5f:7a:c0:f7:0e:8e:fe:7c:48:6e:b9:0f:77:38:ad: 96:61:16:8d:2f:44:7e:a2:19:7d:49:1e:88:ee:34: 7b:3e:cc:8e:45:85:e2:3a:aa:20:a8:64:20:fd:9f: 80:12:0b:a2:e1:ba:e0:58:00:6d:f3:ba:c9:61:24: ec:c3:0a:e4:6b:5f:a2:d7:8a:99:58:c2:de:73:bb: e2:34:a1:1c:1e:f6:e5:58:f2:8c:78:3c:6b:15:7c: 25:8a:5b:52:eb:cd:af:7a:ad:a5:6a:4e:0d:7f:b8: 88:ef:5f:35:08:30:52:09:eb:71:b8:39:67:cf:9b: 0e:43:1f:39:4c:d9:99:a0:80:ce:b4:ee:f1:c0:b8: 5f:71:f7:93:24:9f:6e:03:25:47:05:fa:bd:fd:f1: 20:59:d5:91:31:05:f9:f7:29:a1:d5:04:83:83:18: fd:af:b8:3d:55:d9:f7:a8:64:78:80:18:d5:34:8b: 0f:e3:3b:57:81:8c:05:4d:7b:b4:61:fe:a2:4a:ad: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:46:0B:E7:65:96:D0:81:D6:34:AD:BB:22:A0:F9:83:65:9F:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.34.60.0/22 Signature Algorithm: sha256WithRSAEncryption 61:18:e1:d0:80:bc:26:f6:1b:e8:ff:91:8d:67:65:30:ff:00: a3:dc:d9:cf:57:66:d9:92:85:c1:2a:1e:6f:99:7f:e9:8a:78: 35:26:18:58:b3:cb:5f:72:07:6f:d9:33:87:90:3b:e6:f5:3a: be:e0:69:67:d8:2a:42:51:7c:87:c7:fb:13:20:b5:d1:b8:60: 94:b6:6f:1a:2a:50:f3:fb:e2:d9:d4:8b:8e:0c:59:66:b5:0d: a6:32:8f:7b:14:69:0b:55:47:74:b4:ab:e2:93:56:e3:e5:6b: f0:df:93:1a:d1:6f:92:47:f7:c9:05:6a:f9:b4:f2:21:0e:a1: e1:1e:16:7d:63:84:46:65:cd:f5:86:db:07:9e:8c:df:06:cf: e4:b2:fd:ab:b9:a4:99:31:2f:b6:36:06:de:89:48:ac:8f:04: a9:e1:59:37:81:b5:4e:3b:cf:a6:e2:0a:86:26:56:c8:79:62: b4:3b:0b:f6:20:74:53:a3:b9:c2:70:b2:b1:3c:e4:6c:7f:8f: 25:43:4b:27:07:b2:13:97:50:7e:00:1a:ff:82:55:51:16:39: ab:5b:1b:36:c6:41:3c:f0:79:60:e6:d6:a6:ff:8e:fc:e9:60: 43:78:7f:54:17:05:ea:fd:4e:1f:b8:d7:30:dd:ec:03:5f:2a: 2e:5d:8d:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBwwTFQ0sgxHXSadfVpzRwiags+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA0MDIxWhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTA0YWY5ZGVjNGRjZTZhZDc3YTEzMzlhN2ZhODlkODM4 NjkwZWU0ZmE3MmIzOTU3ZTdlMTU4MjFhNGVkNTEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSzlhnp0LWtmZwH3SiK7WIbzrW+EqtcYxTNrEpBunuPRsd B2ox13A/NPVEfEf+XbzkxJzUMsXKwZE0/V96wPcOjv58SG65D3c4rZZhFo0vRH6i GX1JHojuNHs+zI5FheI6qiCoZCD9n4ASC6LhuuBYAG3zuslhJOzDCuRrX6LXiplY wt5zu+I0oRwe9uVY8ox4PGsVfCWKW1Lrza96raVqTg1/uIjvXzUIMFIJ63G4OWfP mw5DHzlM2ZmggM607vHAuF9x95Mkn24DJUcF+r398SBZ1ZExBfn3KaHVBIODGP2v uD1V2feoZHiAGNU0iw/jO1eBjAVNe7Rh/qJKrfa7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ2dGC+dlltCB1jStuyKg+YNlnzowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZGQ0NmFlLWJhMDUtNGU1Yi1hYTlhLWJkYTRhYzQ0OGEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI/IjwwDQYJKoZIhvcNAQELBQADggEBAGEY4dCAvCb2G+j/kY1nZTD/AKPc 2c9XZtmShcEqHm+Zf+mKeDUmGFizy19yB2/ZM4eQO+b1Or7gaWfYKkJRfIfH+xMg tdG4YJS2bxoqUPP74tnUi44MWWa1DaYyj3sUaQtVR3S0q+KTVuPla/DfkxrRb5JH 98kFavm08iEOoeEeFn1jhEZlzfWG2weejN8Gz+Sy/au5pJkxL7Y2Bt6JSKyPBKnh WTeBtU47z6biCoYmVsh5YrQ7C/YgdFOjucJwsrE85Gx/jyVDSycHshOXUH4AGv+C VVEWOatbGzbGQTzweWDm1qb/jvzpYEN4f1QXBer9Th+41zDd7ANfKi5djQg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:17 2025 by rpki-client