$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json) Hash identifier: 1F/YPBSdsD6AedzBUPLYse74I0VeRFEeq4ngdmCBT6s= Subject key identifier: 21:90:DD:B3:00:9C:F1:DB:16:FC:CF:F1:03:44:6B:38:E0:5D:BD:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38BAAAB5C286F97A4060F9BDCABD65B8C6586DD5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa Signing time: Fri 29 Aug 2025 00:22:05 +0000 ROA not before: Fri 29 Aug 2025 00:22:05 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:aa:b5:c2:86:f9:7a:40:60:f9:bd:ca:bd:65:b8:c6:58:6d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:22:05 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=47d6ca253791277cb607979a3fa85de215da583b61a436acc72a53235c2fe872, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:32:7c:93:f6:76:e0:1e:29:00:e4:f4:0f: 80:04:8b:20:11:12:cc:17:d2:4e:cf:ce:d8:e8:5d: af:ed:0e:46:64:f0:c2:55:6a:0c:8b:bf:3b:7c:10: 1d:d6:8f:61:08:b6:a0:20:92:73:5e:ed:81:ad:27: ea:c4:7e:83:f9:9c:73:29:82:91:6a:98:48:09:c5: ba:72:2a:e2:71:25:f9:1d:99:d1:8d:d2:e4:6b:fe: cf:f2:30:bf:77:ad:39:ee:a2:58:a7:d7:f6:ae:24: 7e:9b:5f:ef:84:1c:b9:04:34:d7:ae:87:22:95:91: c6:30:ba:45:f6:fb:77:7d:b3:e7:a8:8b:7a:72:c2: 94:21:ae:5c:1b:d6:0a:5e:c2:4e:74:6c:5d:bb:f7: 04:d8:aa:79:48:4d:19:d9:94:e4:73:02:bf:64:bb: 4d:b4:b3:b7:89:24:62:c7:05:c8:6a:87:46:0f:de: 1f:44:1c:52:ee:b6:4f:2b:e8:07:fa:5d:d7:52:c6: d6:8f:ec:76:d2:28:88:6b:86:79:1b:ff:ef:13:a6: 24:f1:e7:d0:b2:c4:8a:50:b8:57:b6:aa:b6:33:06: ce:f6:a8:6b:12:a5:5f:8c:74:eb:3f:1c:db:68:74: 15:cb:57:0e:ae:87:1e:a3:bb:71:5e:22:62:5c:34: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:90:DD:B3:00:9C:F1:DB:16:FC:CF:F1:03:44:6B:38:E0:5D:BD:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.40.0/21 Signature Algorithm: sha256WithRSAEncryption b1:d5:7f:c5:a6:2e:d9:8e:f4:d9:ea:7d:10:2f:2f:f7:04:a9: bd:66:10:0a:5a:e8:78:f0:ca:9b:f0:72:33:b4:d3:5d:97:80: 1d:d7:66:91:95:d6:2a:51:2a:81:3d:38:75:5e:0f:f9:3a:fa: b9:ef:7e:8b:e9:89:4f:38:e3:2a:29:80:db:c0:23:5c:5a:be: ab:5b:f0:d4:65:1b:2e:7b:82:d2:cd:13:fb:df:0d:50:cb:fa: c9:0a:1c:d8:77:84:cd:1c:e0:ba:f9:c7:09:4f:e2:77:13:cf: d0:73:84:97:85:da:5d:42:cc:04:2d:31:b7:c1:9d:3b:fb:1c: a6:20:31:dd:c4:f8:38:c3:1a:a3:11:36:1a:b2:07:16:fc:f9: 87:7f:38:be:c8:96:89:97:0b:4f:1a:82:62:f3:25:ea:d6:1d: ab:c0:5c:93:95:bb:9c:9d:c3:5d:5b:3b:d8:2d:ef:60:d4:3b: 66:72:7e:89:43:cf:61:c6:7e:94:eb:f8:f8:3f:25:90:c2:de: 20:cf:35:c1:cc:37:46:57:c5:b0:72:9e:77:f2:90:ad:76:ed: 61:1d:a6:b3:7c:f6:67:18:30:95:49:c2:61:25:d6:a4:1e:91: be:e8:47:7e:f5:0f:98:1a:ff:d7:ef:db:45:b1:87:8a:ee:55: 79:a6:56:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOLqqtcKG+XpAYPm9yr1luMZYbdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDAyMjA1WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2Q2Y2EyNTM3OTEyNzdjYjYwNzk3OWEzZmE4NWRlMjE1 ZGE1ODNiNjFhNDM2YWNjNzJhNTMyMzVjMmZlODcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz3zJ8k/Z24B4pAOT0D4AEiyAREswX0k7PztjoXa/tDkZk 8MJVagyLvzt8EB3Wj2EItqAgknNe7YGtJ+rEfoP5nHMpgpFqmEgJxbpyKuJxJfkd mdGN0uRr/s/yML93rTnuolin1/auJH6bX++EHLkENNeuhyKVkcYwukX2+3d9s+eo i3pywpQhrlwb1gpewk50bF279wTYqnlITRnZlORzAr9ku020s7eJJGLHBchqh0YP 3h9EHFLutk8r6Af6XddSxtaP7HbSKIhrhnkb/+8TpiTx59CyxIpQuFe2qrYzBs72 qGsSpV+MdOs/HNtodBXLVw6uhx6ju3FeImJcNHR7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIZDdswCc8dsW/M/xA0RrOOBdvWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YjlhZGM5LWNkNDUtNDA2My1iZDNiLTExMGMwMTgzMjJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSgwDQYJKoZIhvcNAQELBQADggEBALHVf8WmLtmO9NnqfRAvL/cEqb1m EApa6HjwypvwcjO0012XgB3XZpGV1ipRKoE9OHVeD/k6+rnvfovpiU844yopgNvA I1xavqtb8NRlGy57gtLNE/vfDVDL+skKHNh3hM0c4Lr5xwlP4ncTz9BzhJeF2l1C zAQtMbfBnTv7HKYgMd3E+DjDGqMRNhqyBxb8+Yd/OL7IlomXC08agmLzJerWHavA XJOVu5ydw11bO9gt72DUO2ZyfolDz2HGfpTr+Pg/JZDC3iDPNcHMN0ZXxbBynnfy kK127WEdprN89mcYMJVJwmEl1qQekb7oR371D5ga/9fv20Wxh4ruVXmmVnw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:47 2025 by rpki-client