$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5585de34-7332-42ea-8647-7b2fd4d87d7c.roa File: 5585de34-7332-42ea-8647-7b2fd4d87d7c.roa (raw, json) Hash identifier: Uert6Uvkd70Pcx4KegfvK5HGjK4VEL6SdcYJ3JKI2E8= Subject key identifier: 7A:34:FF:4C:CC:A5:A5:02:C1:1E:ED:A4:A8:95:FA:E7:2D:4D:B1:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D9274FDE4208552F85821D8AD9E266852FB90C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5585de34-7332-42ea-8647-7b2fd4d87d7c.roa Signing time: Sat 30 Aug 2025 00:42:06 +0000 ROA not before: Sat 30 Aug 2025 00:42:06 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:92:74:fd:e4:20:85:52:f8:58:21:d8:ad:9e:26:68:52:fb:90:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:42:06 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=c8d06cde42df0f24078dbf8d05d1a5dde4ca88929522d8bab068eceb5cd58cdd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:0c:d5:cf:78:34:4f:93:1a:59:c0:c5:4f: 2d:1b:77:f8:b4:58:c1:54:9d:7c:d8:9f:4f:51:5d: 3d:49:cc:b9:44:41:a3:55:e7:dd:b7:5e:38:00:8b: a0:a8:ad:5a:68:ec:26:ab:a9:54:e2:63:9f:a8:48: 0e:5e:2e:9a:b1:86:12:f9:54:ef:9d:72:ae:f4:62: a5:f6:fa:c8:2b:3f:f8:43:68:84:4e:a2:5c:24:98: bd:31:25:c4:ba:6f:85:44:12:db:83:20:ef:23:bf: ab:73:a0:1c:e5:d9:a5:5f:98:62:f4:2f:54:7f:b8: 72:57:65:81:49:5f:08:43:04:e2:3e:3a:47:7c:15: ca:af:76:87:22:b0:d9:37:c5:32:d1:12:0e:93:ef: c9:66:63:e6:28:55:92:23:a0:35:ee:99:12:41:f8: 76:df:d7:b8:48:aa:af:77:9b:ea:62:85:83:3f:f6: 2c:8f:47:7d:a5:49:e7:66:fb:79:c0:fe:b7:55:7d: 74:b9:c4:68:a8:c2:69:cc:6c:91:ce:f4:59:4e:4c: ae:3d:88:61:53:81:40:8e:b8:43:5a:0f:27:a8:15: f5:7d:e8:ce:2a:f9:7f:32:9f:3f:aa:28:68:9c:08: 83:6f:87:6c:d1:c8:21:3d:38:e3:57:87:4e:03:42: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:34:FF:4C:CC:A5:A5:02:C1:1E:ED:A4:A8:95:FA:E7:2D:4D:B1:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5585de34-7332-42ea-8647-7b2fd4d87d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.202.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:fa:5a:ef:be:a8:bd:d9:5e:3f:17:ca:66:61:60:e4:e2:87: 2d:24:89:aa:ac:23:f1:cf:cf:f7:4b:6c:cb:28:26:42:b8:b8: fe:5a:ee:ce:05:93:ff:a4:ec:ac:c1:8a:52:d2:67:34:6e:a6: cc:38:4c:b6:a5:f9:34:05:46:58:24:f6:96:05:45:44:82:d7: 84:ac:77:0e:47:64:12:5f:27:57:f1:11:5b:86:b3:1f:1a:62: c7:c0:68:1f:d1:17:fe:23:69:a3:29:cb:f1:fc:7d:73:a6:e8: 94:25:68:95:d1:c4:f6:76:94:09:d1:b0:6b:a6:b3:f2:c8:b4: 10:1a:ee:36:53:83:0f:e3:94:10:19:c1:12:2a:94:05:b8:10: 01:29:ac:66:b2:29:2c:24:4a:8b:58:c7:6b:6c:d1:c7:c1:a5: d1:6d:c2:45:f3:2f:13:0c:e6:cb:13:4b:39:da:d9:e5:aa:a3: 85:68:ef:dc:7f:43:f5:1f:82:fe:5e:e1:2c:66:8e:8d:b5:6a: 0a:f4:98:8b:04:07:56:20:b0:d2:e3:3c:25:e7:d8:ae:b0:65: f7:88:72:55:08:cc:fb:88:06:e9:8e:d1:7f:2e:89:fa:3f:47: 83:24:a4:8b:29:22:a5:9f:b9:65:44:d7:79:73:7b:cf:6f:80: d4:15:fe:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHZJ0/eQghVL4WCHYrZ4maFL7kMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA0MjA2WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGQwNmNkZTQyZGYwZjI0MDc4ZGJmOGQwNWQxYTVkZGU0 Y2E4ODkyOTUyMmQ4YmFiMDY4ZWNlYjVjZDU4Y2RkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGqwzVz3g0T5MaWcDFTy0bd/i0WMFUnXzYn09RXT1JzLlE QaNV5923XjgAi6CorVpo7CarqVTiY5+oSA5eLpqxhhL5VO+dcq70YqX2+sgrP/hD aIROolwkmL0xJcS6b4VEEtuDIO8jv6tzoBzl2aVfmGL0L1R/uHJXZYFJXwhDBOI+ Okd8FcqvdocisNk3xTLREg6T78lmY+YoVZIjoDXumRJB+Hbf17hIqq93m+pihYM/ 9iyPR32lSedm+3nA/rdVfXS5xGiowmnMbJHO9FlOTK49iGFTgUCOuENaDyeoFfV9 6M4q+X8ynz+qKGicCINvh2zRyCE9OONXh04DQoezAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUejT/TMylpQLBHu2kqJX65y1NsVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1ODVkZTM0LTczMzItNDJlYS04NjQ3LTdiMmZkNGQ4N2Q3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFAMowDQYJKoZIhvcNAQELBQADggEBAAz6Wu++qL3ZXj8XymZhYOTihy0k iaqsI/HPz/dLbMsoJkK4uP5a7s4Fk/+k7KzBilLSZzRupsw4TLal+TQFRlgk9pYF RUSC14Ssdw5HZBJfJ1fxEVuGsx8aYsfAaB/RF/4jaaMpy/H8fXOm6JQlaJXRxPZ2 lAnRsGums/LItBAa7jZTgw/jlBAZwRIqlAW4EAEprGayKSwkSotYx2ts0cfBpdFt wkXzLxMM5ssTSzna2eWqo4Vo79x/Q/Ufgv5e4Sxmjo21agr0mIsEB1YgsNLjPCXn 2K6wZfeIclUIzPuIBumO0X8uifo/R4MkpIspIqWfuWVE13lze89vgNQV/g0= -----END CERTIFICATE-----Generated at Sat Sep 6 16:49:59 2025 by rpki-client