$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa File: 4a7e5f14-963c-416e-9fab-cfb42881503e.roa (raw, json) Hash identifier: sAkJObn8378T/dNvDdL+9bWxf/DEl2W5icVxPaEhR+Q= Subject key identifier: B1:02:66:33:20:F4:F6:E3:4B:DE:94:C1:F9:84:02:B1:75:10:B4:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13947AF2C6690673754580B9E3786D11DB179F37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa Signing time: Mon 01 Sep 2025 15:42:12 +0000 ROA not before: Mon 01 Sep 2025 15:42:12 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.80.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:94:7a:f2:c6:69:06:73:75:45:80:b9:e3:78:6d:11:db:17:9f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:42:12 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=02078640af406a63e88cc770bc5320f24673089196c4974001beb18727cecda9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:04:cb:a0:ab:35:cd:d4:39:e5:3e:77:c9: b9:62:48:69:f4:1b:38:20:fd:f5:e1:f1:a7:be:af: fe:59:09:40:7c:d2:25:f8:f7:61:d1:89:5f:30:4d: db:d5:27:ca:b6:e5:e6:d4:6b:ba:9e:4f:1a:1b:55: 98:2a:8e:6f:39:b9:b2:db:d7:33:c1:27:9c:cd:47: 76:83:0e:25:5a:98:e7:31:39:81:d7:05:c7:8a:2b: e5:16:fe:0e:d6:11:8e:b2:d3:25:f0:c2:44:6c:55: d8:66:0c:53:a7:db:c8:72:eb:f0:39:ee:b8:7a:46: b4:cb:19:bb:c7:c2:d8:94:15:55:ce:2c:e7:3f:ca: 20:71:61:10:9b:bc:fb:37:89:e1:35:53:7e:df:a3: 34:8e:e0:1d:db:8d:84:7a:56:f9:ec:a4:20:67:e6: 61:ed:a4:f4:49:d8:09:62:ec:01:2a:f4:89:5d:cd: e5:ae:82:5a:b2:09:da:1f:24:6d:51:f3:cc:e6:5d: 07:e2:fb:e8:ca:0e:63:74:12:f3:45:95:3d:bc:53: 0e:7b:75:e1:93:2e:13:42:90:e4:48:95:87:d5:e4: b5:3d:3d:5f:4b:30:c6:c8:6f:13:26:5b:5b:d7:cc: b1:f8:0d:f7:84:a9:ce:79:61:90:f5:0f:31:51:d6: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:66:33:20:F4:F6:E3:4B:DE:94:C1:F9:84:02:B1:75:10:B4:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption a8:21:b3:51:d7:c1:17:d6:51:1d:5a:3d:13:74:d3:a6:4d:3d: 82:2b:9e:6a:38:56:37:e4:73:61:9c:2f:b5:6a:e5:38:02:2c: a3:bd:79:df:80:b9:1d:29:eb:03:b9:df:5f:1e:0b:31:0b:97: 50:37:4d:b6:91:db:bc:ab:de:8a:41:f5:14:fb:9f:ce:6b:2e: 2d:4f:be:31:02:b5:52:d6:7e:68:fe:be:af:eb:bf:8e:fa:f1: 00:ed:d7:52:64:a7:59:95:97:ea:ef:d8:80:52:fb:ee:0a:0a: 5c:d7:86:a5:5a:75:4e:c6:54:38:df:45:89:38:1b:28:0f:b7: 0d:eb:c0:1c:ff:51:e1:ae:10:53:7a:b8:1d:ab:68:d4:2f:03: 88:ba:00:b6:29:6e:07:1c:bf:28:40:55:fb:16:03:f5:ad:65: d5:3c:95:26:bb:08:18:ac:08:c9:f7:e4:d3:41:73:66:e9:e2: 83:97:f1:dc:72:3d:4c:20:43:d0:a9:69:57:2d:70:fd:3a:15: 35:21:80:55:5e:fd:11:5b:20:b4:40:bc:f0:b8:84:df:b6:91: 13:78:b7:45:e9:3b:3a:9f:07:a3:e6:06:f6:1f:52:08:8d:8f: e7:5f:76:09:e4:14:5e:ed:92:3f:c2:fd:c0:ad:94:3e:23:4c: b4:34:2b:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE5R68sZpBnN1RYC543htEdsXnzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MjEyWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjA3ODY0MGFmNDA2YTYzZTg4Y2M3NzBiYzUzMjBmMjQ2 NzMwODkxOTZjNDk3NDAwMWJlYjE4NzI3Y2VjZGE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh5QTLoKs1zdQ55T53ybliSGn0Gzgg/fXh8ae+r/5ZCUB8 0iX492HRiV8wTdvVJ8q25ebUa7qeTxobVZgqjm85ubLb1zPBJ5zNR3aDDiVamOcx OYHXBceKK+UW/g7WEY6y0yXwwkRsVdhmDFOn28hy6/A57rh6RrTLGbvHwtiUFVXO LOc/yiBxYRCbvPs3ieE1U37fozSO4B3bjYR6VvnspCBn5mHtpPRJ2Ali7AEq9Ild zeWuglqyCdofJG1R88zmXQfi++jKDmN0EvNFlT28Uw57deGTLhNCkORIlYfV5LU9 PV9LMMbIbxMmW1vXzLH4DfeEqc55YZD1DzFR1vGzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsQJmMyD09uNL3pTB+YQCsXUQtPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhN2U1ZjE0LTk2M2MtNDE2ZS05ZmFiLWNmYjQyODgxNTAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFjUDANBgkqhkiG9w0BAQsFAAOCAQEAqCGzUdfBF9ZRHVo9E3TTpk09giue ajhWN+RzYZwvtWrlOAIso71534C5HSnrA7nfXx4LMQuXUDdNtpHbvKveikH1FPuf zmsuLU++MQK1UtZ+aP6+r+u/jvrxAO3XUmSnWZWX6u/YgFL77goKXNeGpVp1TsZU ON9FiTgbKA+3DevAHP9R4a4QU3q4Hato1C8DiLoAtiluBxy/KEBV+xYD9a1l1TyV JrsIGKwIyffk00FzZunig5fx3HI9TCBD0KlpVy1w/ToVNSGAVV79EVsgtEC88LiE 37aRE3i3Rek7Op8Ho+YG9h9SCI2P5192CeQUXu2SP8L9wK2UPiNMtDQrpw== -----END CERTIFICATE-----Generated at Sat Sep 6 16:42:33 2025 by rpki-client