$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423a80a-be1f-4708-a5ef-17ccc2a1a025.roa File: 5423a80a-be1f-4708-a5ef-17ccc2a1a025.roa (raw, json) Hash identifier: Ed2rU3qfl9ceKK/8P6RQcdwBZgqgV36daJiemEp3ZYc= Subject key identifier: 73:61:81:46:06:4B:9C:53:8D:9C:9D:2D:01:CF:6C:EA:E4:A6:02:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 230DB11488EA9B1A6E1C5B2E0F358CDA890EAA9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423a80a-be1f-4708-a5ef-17ccc2a1a025.roa Signing time: Tue 02 Sep 2025 00:10:20 +0000 ROA not before: Tue 02 Sep 2025 00:10:20 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.228.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0d:b1:14:88:ea:9b:1a:6e:1c:5b:2e:0f:35:8c:da:89:0e:aa:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:10:20 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=dfb44984fa006364d70bd093896af3135866f5da8abd28506d0ced5a9c25d4db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:3d:6b:58:34:b5:66:de:32:05:35:d6:fc: 8a:69:48:27:10:19:be:97:2b:da:ab:27:3f:a0:7e: c0:0c:98:52:68:31:51:44:2b:bd:61:ef:7a:6e:b0: ba:6c:74:9c:8c:53:0e:df:39:bc:fa:5b:ad:b8:5a: f0:1c:83:c7:bc:78:c2:b7:5a:5d:d2:91:1d:ea:c7: 6b:b1:80:40:cf:bc:ba:a0:62:96:17:16:90:a9:f4: 58:46:84:3b:52:cb:3f:ed:18:a9:64:b0:45:64:25: d5:54:75:13:23:f1:35:78:a8:e9:f2:ac:aa:72:eb: 83:2a:68:27:82:e7:38:a9:75:51:50:72:aa:be:14: e6:36:c1:e5:70:5c:20:61:e9:3c:2e:35:53:c7:ed: f5:b7:ab:4a:eb:f2:1a:8a:62:09:b0:a7:1b:09:d3: 62:03:a2:dc:ac:33:d8:e7:b9:f9:0e:ee:4c:e3:50: b3:34:7a:0c:ea:7c:44:3a:c3:c3:77:f4:db:2f:37: 7d:e3:fa:0b:11:21:12:4c:9d:14:8a:65:d5:cc:e5: a0:71:4f:92:05:58:9e:9a:3d:0b:b2:40:68:f3:a1: 2f:4c:37:75:f6:8f:f0:9f:44:85:be:79:d2:92:7c: 92:29:84:56:ce:92:76:45:79:20:8d:f9:a7:e3:39: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:81:46:06:4B:9C:53:8D:9C:9D:2D:01:CF:6C:EA:E4:A6:02:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5423a80a-be1f-4708-a5ef-17ccc2a1a025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.228.192.0/18 Signature Algorithm: sha256WithRSAEncryption 21:44:8d:53:2e:7a:e9:10:e3:4b:3b:cc:16:08:ee:74:ed:5b: c6:8a:85:80:cf:cd:43:36:5b:58:dc:ca:e3:0f:63:ce:76:e3: 28:0e:96:65:79:a9:60:c3:07:d2:08:eb:62:3e:0d:ed:6d:9f: da:0b:e9:72:d9:54:f9:e9:e7:3b:0f:c5:ca:da:7d:61:ee:00: 21:2d:be:3c:80:f1:e6:fe:c9:ba:2e:42:8a:6b:ce:ee:9d:dc: f2:57:f2:9c:89:d1:fa:78:f6:20:f0:b8:d8:94:08:ac:32:c6: 86:62:3d:b7:4e:ca:bd:7b:e3:2a:00:fc:9a:26:65:62:d0:2f: f8:3f:c6:83:f6:d4:e4:1b:55:0b:58:94:9e:50:7b:46:82:33: 6e:2b:73:46:fb:7e:95:40:ba:28:1b:4d:5d:ad:4a:1a:35:42: 73:79:7e:2f:30:70:c7:66:e9:40:97:b6:cb:55:dd:c5:2d:dd: 72:a3:e5:75:9e:8a:ab:3c:94:cc:b9:3c:2d:83:9e:7d:67:e5: 48:0e:cd:d7:0f:48:11:64:ae:5e:2e:2b:69:ce:8d:43:f9:23: 0a:82:c7:6e:89:6e:35:ef:4c:75:34:65:70:19:54:70:84:3e: b0:0f:4f:13:70:dd:1d:2b:3a:52:f2:0d:41:17:bc:34:37:1c: cf:b1:d9:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIw2xFIjqmxpuHFsuDzWM2okOqpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAxMDIwWhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmI0NDk4NGZhMDA2MzY0ZDcwYmQwOTM4OTZhZjMxMzU4 NjZmNWRhOGFiZDI4NTA2ZDBjZWQ1YTljMjVkNGRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDInz1rWDS1Zt4yBTXW/IppSCcQGb6XK9qrJz+gfsAMmFJo MVFEK71h73pusLpsdJyMUw7fObz6W624WvAcg8e8eMK3Wl3SkR3qx2uxgEDPvLqg YpYXFpCp9FhGhDtSyz/tGKlksEVkJdVUdRMj8TV4qOnyrKpy64MqaCeC5zipdVFQ cqq+FOY2weVwXCBh6TwuNVPH7fW3q0rr8hqKYgmwpxsJ02IDotysM9jnufkO7kzj ULM0egzqfEQ6w8N39NsvN33j+gsRIRJMnRSKZdXM5aBxT5IFWJ6aPQuyQGjzoS9M N3X2j/CfRIW+edKSfJIphFbOknZFeSCN+afjOQNVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc2GBRgZLnFONnJ0tAc9s6uSmAm4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0MjNhODBhLWJlMWYtNDcwOC1hNWVmLTE3Y2NjMmExYTAyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYX5MAwDQYJKoZIhvcNAQELBQADggEBACFEjVMueukQ40s7zBYI7nTtW8aK hYDPzUM2W1jcyuMPY8524ygOlmV5qWDDB9II62I+De1tn9oL6XLZVPnp5zsPxcra fWHuACEtvjyA8eb+ybouQoprzu6d3PJX8pyJ0fp49iDwuNiUCKwyxoZiPbdOyr17 4yoA/JomZWLQL/g/xoP21OQbVQtYlJ5Qe0aCM24rc0b7fpVAuigbTV2tSho1QnN5 fi8wcMdm6UCXtstV3cUt3XKj5XWeiqs8lMy5PC2Dnn1n5UgOzdcPSBFkrl4uK2nO jUP5IwqCx26JbjXvTHU0ZXAZVHCEPrAPTxNw3R0rOlLyDUEXvDQ3HM+x2SY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:01 2025 by rpki-client