$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa File: 671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa (raw, json) Hash identifier: Azp3S037JUDuGYYzNvQfGjaSiS0lHENkoHzl3q7qSMM= Subject key identifier: 6D:00:76:29:1F:A6:FF:A9:29:94:3D:19:49:5F:63:BA:36:01:62:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27AF272191B7D0EA6421A6615D2F6812A0353133 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa Signing time: Mon 01 Sep 2025 15:42:04 +0000 ROA not before: Mon 01 Sep 2025 15:42:04 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:af:27:21:91:b7:d0:ea:64:21:a6:61:5d:2f:68:12:a0:35:31:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:42:04 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=cf711e46af619b5df42e768031be550acec2bff3784b0a0ba2e9315a6569de48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:48:1e:94:9f:d2:3b:66:75:ee:cb:6f:79: 9a:87:4b:6b:15:25:90:8c:ba:bb:bc:17:ec:87:be: a9:06:70:32:03:40:79:dc:87:ce:4f:8a:7e:2d:2c: cc:14:11:93:a4:eb:29:fb:4b:39:5c:64:5c:d3:39: 07:b0:37:78:f7:69:56:74:6b:25:b8:5b:be:d7:82: 72:e7:0e:af:dd:02:37:1e:b5:07:df:08:61:1e:37: 8d:85:1c:e8:0b:ba:b2:5c:4f:d3:b3:d4:a3:d5:29: e9:1e:7d:52:91:92:35:cf:ec:d7:e3:fa:89:cb:cd: dd:54:0d:d5:dd:31:0e:3c:8b:1e:af:51:14:73:e6: 5b:be:4b:0f:4e:e9:af:bd:3d:10:f1:40:9b:5b:9e: 95:53:0f:85:93:40:e4:c8:ff:a8:c4:63:cb:59:22: 7e:83:0e:3a:ec:74:b2:6b:1b:97:b7:58:c8:14:58: f8:9b:bd:fa:2b:bb:ab:5d:c8:14:c1:23:18:8c:bc: c8:41:bb:2e:8c:03:33:39:81:72:a8:99:2f:27:a4: 60:9d:88:1e:c7:26:9c:ff:92:70:fa:68:02:96:c3: b1:3a:e4:cb:c7:e9:94:d6:0d:7b:91:f5:ee:f0:c5: 2a:14:e6:dd:03:33:64:79:0b:78:b5:14:a1:db:59: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:00:76:29:1F:A6:FF:A9:29:94:3D:19:49:5F:63:BA:36:01:62:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.154.0/23 Signature Algorithm: sha256WithRSAEncryption 21:15:0f:74:bf:ce:30:fd:9b:ab:ce:20:3b:c9:a6:f9:00:34: c1:a8:0a:ca:be:5d:fc:2c:fc:2e:d9:9e:73:76:bb:a6:51:a3: 85:d7:b9:9c:68:ce:f5:c1:e7:1f:e1:96:b4:cc:e8:5f:89:46: a0:5b:e3:67:62:5a:e3:f0:6f:a2:62:0c:24:8b:c0:0e:ce:79: 76:f4:64:c9:ca:e6:73:6f:09:e0:d9:17:66:5e:d1:8f:fd:48: 40:06:7f:ea:3c:38:ce:8f:2b:d5:97:c4:cc:a0:26:d4:a0:6d: c1:8e:fb:7d:f2:e0:b9:b3:d4:6b:de:61:23:74:cf:58:7b:6a: e2:50:8e:11:47:3a:a7:23:e4:5f:f2:09:3a:93:4a:3b:79:0a: f0:03:1c:46:38:57:dc:2b:bb:a8:58:04:b4:ef:49:4c:dd:86: 11:20:bc:f4:13:91:3b:62:9a:0a:28:d8:70:0e:ed:fb:a9:b5: 94:04:68:a3:f7:9f:bc:8b:7b:94:9f:2a:23:6e:7b:9b:3e:35: f5:f4:74:8c:bc:91:9a:dd:d0:a0:42:33:5d:ab:1d:72:13:5e: da:8a:72:ea:9a:25:78:cc:15:c2:ec:1c:44:7d:33:f8:b8:67: 58:b2:aa:f7:00:6d:06:17:e2:40:dd:00:4e:a0:8f:01:80:5c: 69:a1:ce:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ68nIZG30OpkIaZhXS9oEqA1MTMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MjA0WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjcxMWU0NmFmNjE5YjVkZjQyZTc2ODAzMWJlNTUwYWNl YzJiZmYzNzg0YjBhMGJhMmU5MzE1YTY1NjlkZTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn7EgelJ/SO2Z17stveZqHS2sVJZCMuru8F+yHvqkGcDID QHnch85Pin4tLMwUEZOk6yn7SzlcZFzTOQewN3j3aVZ0ayW4W77XgnLnDq/dAjce tQffCGEeN42FHOgLurJcT9Oz1KPVKekefVKRkjXP7Nfj+onLzd1UDdXdMQ48ix6v URRz5lu+Sw9O6a+9PRDxQJtbnpVTD4WTQOTI/6jEY8tZIn6DDjrsdLJrG5e3WMgU WPibvforu6tdyBTBIxiMvMhBuy6MAzM5gXKomS8npGCdiB7HJpz/knD6aAKWw7E6 5MvH6ZTWDXuR9e7wxSoU5t0DM2R5C3i1FKHbWSpfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbQB2KR+m/6kplD0ZSV9jujYBYsEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTgxMmI3LTBhZWItNGE3YS04NjJmLTFmZDFhMzdhNjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpowDQYJKoZIhvcNAQELBQADggEBACEVD3S/zjD9m6vOIDvJpvkANMGo Csq+Xfws/C7ZnnN2u6ZRo4XXuZxozvXB5x/hlrTM6F+JRqBb42diWuPwb6JiDCSL wA7OeXb0ZMnK5nNvCeDZF2Ze0Y/9SEAGf+o8OM6PK9WXxMygJtSgbcGO+33y4Lmz 1GveYSN0z1h7auJQjhFHOqcj5F/yCTqTSjt5CvADHEY4V9wru6hYBLTvSUzdhhEg vPQTkTtimgoo2HAO7fuptZQEaKP3n7yLe5SfKiNue5s+NfX0dIy8kZrd0KBCM12r HXITXtqKcuqaJXjMFcLsHER9M/i4Z1iyqvcAbQYX4kDdAE6gjwGAXGmhzqA= -----END CERTIFICATE-----Generated at Sat Sep 6 16:41:06 2025 by rpki-client