$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676ea4bf-0aea-4bf8-9c91-ee831ca37b6e.roa File: 676ea4bf-0aea-4bf8-9c91-ee831ca37b6e.roa (raw, json) Hash identifier: J8GiTVpok8ir8bP5/eLFBRIVaWWgEjbwmR4Nm6lHakE= Subject key identifier: 53:BE:F9:EC:FF:A6:65:B4:92:CD:BF:AD:D6:70:33:7F:AA:FF:2F:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77EB4E5B1709994AB746A62392EDB24C54133DAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676ea4bf-0aea-4bf8-9c91-ee831ca37b6e.roa Signing time: Tue 19 Aug 2025 00:00:31 +0000 ROA not before: Tue 19 Aug 2025 00:00:31 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.19.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:eb:4e:5b:17:09:99:4a:b7:46:a6:23:92:ed:b2:4c:54:13:3d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:00:31 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=82996550936687e26e21509736165ee02ae71726860112069e19b8cb50ea71e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:53:99:b7:ed:3f:62:72:fd:79:bb:27:61: 85:3a:24:38:fe:d3:bf:02:8a:16:cb:65:ff:86:a5: 52:3e:5b:1c:38:bc:c2:82:81:44:10:63:f0:74:68: 63:72:ec:32:c6:b0:81:44:b5:c6:af:bf:51:e4:a3: 0c:5a:ad:2f:9d:5c:f8:23:11:0a:cb:9a:dd:f0:26: 66:b1:59:f3:88:a9:7f:14:8b:26:87:5e:96:25:26: 2f:3b:e8:2a:a2:91:02:4c:52:58:f6:aa:24:ba:38: 8a:9f:99:bd:e1:b1:78:df:f0:ca:c1:76:ca:7e:bf: d0:4c:1b:e9:d6:e4:e6:6e:39:3c:25:84:b6:ac:60: 29:1f:e3:bd:7b:5d:0b:b4:2e:6e:a7:c8:db:05:56: 77:4f:a0:65:cb:22:f3:8f:e5:f0:c8:07:9d:1b:f6: 70:b4:2b:9f:29:a8:ef:d3:a7:21:57:e8:3d:59:67: be:14:9f:f0:25:5a:2f:b9:c5:78:dc:26:b4:07:c2: d9:31:0d:1e:0f:b5:1e:70:5f:d8:61:9b:95:80:ca: ac:a7:99:ef:90:24:bb:73:a6:d4:5e:ef:5a:17:87: 91:57:80:e4:73:37:b1:aa:b8:c1:4e:c6:05:6a:02: 74:5c:fb:96:d0:51:da:4d:74:07:72:f6:20:e9:1a: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:F9:EC:FF:A6:65:B4:92:CD:BF:AD:D6:70:33:7F:AA:FF:2F:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676ea4bf-0aea-4bf8-9c91-ee831ca37b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:25:fc:01:b3:43:f3:e7:df:71:6f:73:5f:6d:51:07:33:38: e7:2c:f6:ba:fc:ce:ea:ad:61:18:0a:50:62:a4:8b:ca:a2:73: b3:ef:24:29:da:41:a3:9b:a2:a9:23:33:b6:2b:cf:d0:79:f9: e4:4b:6c:e2:82:2e:d4:9d:dd:7f:b4:51:57:ab:7f:4e:19:65: db:38:4f:26:02:07:1c:80:ab:98:69:bc:bd:4d:33:03:d6:c6: 56:d9:86:58:ef:a3:4d:ce:00:b4:c8:54:56:83:11:30:af:d3: 1b:5a:da:6a:21:83:27:d5:9f:5c:fc:b6:fc:27:a5:94:52:5a: 44:46:a5:97:c4:eb:6f:e6:33:dc:ba:9f:83:1b:98:d4:d1:2a: 2e:09:0c:94:ac:f2:1d:fa:c6:eb:7f:8e:1d:68:ef:1b:d3:7f: a6:33:67:be:27:d3:79:c7:38:47:48:4f:16:08:3d:a8:e4:77: 63:d4:dd:cc:fd:ad:b9:9a:7a:e0:27:d1:b4:6c:c5:5b:74:29: b8:07:c9:9e:5c:c2:35:fd:cb:48:73:d7:9a:66:cb:34:37:d0: f6:51:11:59:4c:35:33:e1:9e:4a:b2:f8:cb:a9:ad:81:ee:16: 01:f7:9a:af:dc:fd:55:51:34:fb:a0:13:05:8d:da:8a:b6:35: 8d:7b:30:c3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUd+tOWxcJmUq3RqYjku2yTFQTPaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAwMDMxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mjk5NjU1MDkzNjY4N2UyNmUyMTUwOTczNjE2NWVlMDJh ZTcxNzI2ODYwMTEyMDY5ZTE5YjhjYjUwZWE3MWUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNUVOZt+0/YnL9ebsnYYU6JDj+078CihbLZf+GpVI+Wxw4 vMKCgUQQY/B0aGNy7DLGsIFEtcavv1HkowxarS+dXPgjEQrLmt3wJmaxWfOIqX8U iyaHXpYlJi876CqikQJMUlj2qiS6OIqfmb3hsXjf8MrBdsp+v9BMG+nW5OZuOTwl hLasYCkf4717XQu0Lm6nyNsFVndPoGXLIvOP5fDIB50b9nC0K58pqO/TpyFX6D1Z Z74Un/AlWi+5xXjcJrQHwtkxDR4PtR5wX9hhm5WAyqynme+QJLtzptRe71oXh5FX gORzN7GquMFOxgVqAnRc+5bQUdpNdAdy9iDpGsKhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUU7757P+mZbSSzb+t1nAzf6r/L1owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3NmVhNGJmLTBhZWEtNGJmOC05YzkxLWVlODMxY2EzN2I2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQEzANBgkqhkiG9w0BAQsFAAOCAQEAZSX8AbND8+ffcW9zX21RBzM45yz2 uvzO6q1hGApQYqSLyqJzs+8kKdpBo5uiqSMztivP0Hn55Ets4oIu1J3df7RRV6t/ Thll2zhPJgIHHICrmGm8vU0zA9bGVtmGWO+jTc4AtMhUVoMRMK/TG1raaiGDJ9Wf XPy2/CellFJaREall8Trb+Yz3LqfgxuY1NEqLgkMlKzyHfrG63+OHWjvG9N/pjNn vifTecc4R0hPFgg9qOR3Y9TdzP2tuZp64CfRtGzFW3QpuAfJnlzCNf3LSHPXmmbL NDfQ9lERWUw1M+GeSrL4y6mtge4WAfear9z9VVE0+6ATBY3airY1jXswww== -----END CERTIFICATE-----Generated at Thu Aug 21 18:59:30 2025 by rpki-client