$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5159f153-639c-4e8b-af0f-42e70fe1b2e9.roa File: 5159f153-639c-4e8b-af0f-42e70fe1b2e9.roa (raw, json) Hash identifier: xqzC6iemct6FnUGyNkI3ksHNwTJUQqR8kvXaCs6Ay9c= Subject key identifier: 43:11:C1:41:3C:58:1D:F3:11:5D:91:D0:DD:3C:F7:AD:A8:13:C7:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D6B30EC10BA558B9CA81BB95E71BF172C98BCA5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5159f153-639c-4e8b-af0f-42e70fe1b2e9.roa Signing time: Tue 26 Aug 2025 15:22:13 +0000 ROA not before: Tue 26 Aug 2025 15:22:13 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.210.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6b:30:ec:10:ba:55:8b:9c:a8:1b:b9:5e:71:bf:17:2c:98:bc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:22:13 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=50c630db66cc76fdb675a8419ff9ca974bca815d8fa60155d0cfde9acfc1a0ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:f5:c1:fa:83:31:c4:f5:0f:28:97:a8:a8: 06:67:c1:74:f7:8e:37:37:05:94:82:94:b2:be:9d: d7:17:a7:4e:3c:c8:90:71:24:35:b8:cb:9b:3e:53: 90:87:e9:8b:9b:ab:07:8b:c5:72:48:5f:c2:3e:ec: ae:8a:7e:dd:3b:3d:55:58:63:d3:5e:69:54:f6:45: 15:20:e2:35:59:a7:c2:5d:6f:ce:38:22:33:60:89: 58:10:fa:20:98:a4:55:32:b7:b3:3e:eb:e2:e2:e9: 09:09:98:5d:e5:b3:5a:ed:d2:73:33:0a:a6:36:09: 22:ba:53:97:ac:96:19:c0:1e:01:ab:8f:31:b8:6e: 6f:bc:20:16:a4:2b:64:25:26:cb:29:67:c0:ac:8c: 93:42:73:01:98:cb:ef:be:78:cb:db:76:03:05:27: 27:fc:e7:86:fa:02:de:2a:8a:ea:13:6b:69:8e:6c: 05:40:1b:d0:d0:a4:80:04:b7:0c:30:bc:06:f8:09: c8:3a:5e:95:3c:8c:12:f7:a9:16:8c:27:90:9c:25: 2b:0b:12:cc:18:7d:42:1c:0c:fc:da:5c:85:a8:e4: 65:82:57:09:7e:4d:bc:b5:4e:76:65:1d:da:61:21: 96:61:a8:44:ba:a2:a9:7d:ce:b9:ae:33:dd:da:da: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:C1:41:3C:58:1D:F3:11:5D:91:D0:DD:3C:F7:AD:A8:13:C7:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5159f153-639c-4e8b-af0f-42e70fe1b2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.210.108.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:74:29:12:a9:f6:96:95:41:86:f1:33:65:0b:f7:13:53:6d: f4:2f:a8:6e:20:a4:a3:50:4f:b1:ee:2a:be:bd:59:6f:fa:4f: d7:c1:44:1c:33:08:a4:94:29:a3:28:a9:af:6e:fd:7e:d8:38: d1:2b:21:8b:c8:f2:cb:e3:a9:ef:98:34:7f:7c:f1:e0:4a:5f: 08:bc:67:6c:9b:85:95:26:eb:53:8a:c6:a0:1a:ab:72:ce:c7: 85:c7:7e:c9:19:91:be:34:a8:c4:94:dc:84:e8:df:fe:94:90: 38:51:fb:a1:90:dd:fc:26:a7:b9:8e:ee:dc:15:f3:08:32:32: db:5b:8c:ec:fb:e4:bf:ab:5e:ca:ab:36:01:65:9f:e6:15:ed: 33:60:59:2f:5b:24:06:db:7d:05:c2:91:63:9f:36:d9:fb:be: 94:3d:82:bf:c3:9b:6c:fb:1a:16:05:9f:6b:11:17:c8:fc:d0: cb:9f:2e:36:58:0b:77:9c:32:66:55:c8:94:82:f4:1c:3e:91: 26:bc:73:5a:47:ae:1b:08:50:4d:b7:5a:38:7b:4f:fc:0f:10: 9f:7a:06:cd:19:b3:cc:f1:75:ec:9a:b9:d3:93:75:d0:82:1a: 59:e8:4d:8e:59:9b:62:66:df:30:16:b7:df:9d:b4:c4:4f:f7: ee:20:fa:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXWsw7BC6VYucqBu5XnG/FyyYvKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMjEzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGM2MzBkYjY2Y2M3NmZkYjY3NWE4NDE5ZmY5Y2E5NzRi Y2E4MTVkOGZhNjAxNTVkMGNmZGU5YWNmYzFhMGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQOvXB+oMxxPUPKJeoqAZnwXT3jjc3BZSClLK+ndcXp048 yJBxJDW4y5s+U5CH6YubqweLxXJIX8I+7K6Kft07PVVYY9NeaVT2RRUg4jVZp8Jd b844IjNgiVgQ+iCYpFUyt7M+6+Li6QkJmF3ls1rt0nMzCqY2CSK6U5eslhnAHgGr jzG4bm+8IBakK2QlJsspZ8CsjJNCcwGYy+++eMvbdgMFJyf854b6At4qiuoTa2mO bAVAG9DQpIAEtwwwvAb4Ccg6XpU8jBL3qRaMJ5CcJSsLEswYfUIcDPzaXIWo5GWC Vwl+Tby1TnZlHdphIZZhqES6oql9zrmuM93a2jQnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQxHBQTxYHfMRXZHQ3Tz3ragTxxswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxNTlmMTUzLTYzOWMtNGU4Yi1hZjBmLTQyZTcwZmUxYjJlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALN0mwwDQYJKoZIhvcNAQELBQADggEBADx0KRKp9paVQYbxM2UL9xNTbfQv qG4gpKNQT7HuKr69WW/6T9fBRBwzCKSUKaMoqa9u/X7YONErIYvI8svjqe+YNH98 8eBKXwi8Z2ybhZUm61OKxqAaq3LOx4XHfskZkb40qMSU3ITo3/6UkDhR+6GQ3fwm p7mO7twV8wgyMttbjOz75L+rXsqrNgFln+YV7TNgWS9bJAbbfQXCkWOfNtn7vpQ9 gr/Dm2z7GhYFn2sRF8j80MufLjZYC3ecMmZVyJSC9Bw+kSa8c1pHrhsIUE23Wjh7 T/wPEJ96Bs0Zs8zxdeyaudOTddCCGlnoTY5Zm2Jm3zAWt9+dtMRP9+4g+mg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:09 2025 by rpki-client