$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa File: 76aa40ec-69b9-44f1-9209-484f2d282a6a.roa (raw, json) Hash identifier: MplZnjPGD/NF7V+AwJP70W9P70hlzmDSiOZOZgiT/io= Subject key identifier: C9:B7:57:2A:69:6C:A3:3B:69:9C:47:75:AB:F9:8E:D8:3D:EA:00:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C1CA5BBD070F71793DFA553C4D41CF225D1D6FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa Signing time: Wed 27 Aug 2025 00:31:25 +0000 ROA not before: Wed 27 Aug 2025 00:31:25 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1c:a5:bb:d0:70:f7:17:93:df:a5:53:c4:d4:1c:f2:25:d1:d6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:31:25 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=57e8ad12b57d942048f8a43f81d40b8d0fac0a9860c905f4a59105c4365fd284, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:4b:fc:59:6e:f9:f3:a6:a5:be:5d:7d:85: 5b:d3:f2:7a:70:13:1c:e3:f2:57:ba:b9:8e:b4:2d: 47:10:58:99:ec:45:aa:a3:dc:a6:37:2c:c0:cf:a0: 94:5e:69:62:74:11:60:f9:26:ab:a6:78:f5:56:d0: 02:ef:b2:f0:fe:ca:3e:42:61:4b:5a:e9:35:78:12: c1:e6:ea:b4:3e:28:69:fd:96:a4:9a:14:f9:6e:f9: 23:38:68:8a:c0:a3:24:46:37:c2:ef:78:76:9e:5d: e7:c7:57:3e:51:7a:37:89:0a:25:4a:35:97:3b:a1: e3:6f:12:5f:92:05:78:51:9d:e7:43:dc:12:1e:50: 2d:89:82:b4:2f:13:42:06:eb:2d:14:c5:6d:00:29: 03:6d:2d:60:eb:6f:dc:6a:fe:87:9a:6d:13:22:d9: db:e0:41:0f:cc:2b:45:e1:24:13:d1:18:61:ef:43: f7:06:97:e9:05:2d:77:5f:77:87:89:76:86:6b:e1: fa:42:da:ea:b6:1a:2e:62:df:de:a2:1c:cb:69:07: fe:77:8d:1a:7f:9c:83:59:9a:90:79:db:5c:8e:64: f6:6f:6c:86:69:1e:9c:0b:13:07:3b:63:2e:2b:a7: d2:b4:65:80:da:32:8d:25:47:36:70:09:d7:fe:60: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B7:57:2A:69:6C:A3:3B:69:9C:47:75:AB:F9:8E:D8:3D:EA:00:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0e:3f:a0:87:95:5c:3e:2c:4a:4f:b7:e6:19:1c:d0:e3:a0:2c: 4d:82:ce:8e:a5:c3:e5:1b:1c:60:6a:3f:3c:b2:3c:c8:fc:bf: f5:f7:dd:c4:6c:21:e0:d3:71:82:f3:d8:24:02:97:a6:bb:a0: ea:8a:34:48:5b:86:47:1d:87:48:97:9d:ba:97:79:63:82:a2: 5c:00:72:8d:93:92:7d:ca:48:13:cd:2c:72:12:7f:0e:d8:1f: 43:53:06:d5:7e:4e:bf:56:8a:e8:89:29:0c:ed:f2:27:b3:b2: be:64:b6:ec:66:c2:15:28:a9:10:21:bb:e4:3f:fd:99:f9:f9: 2c:66:65:8d:f6:45:19:70:db:c4:53:5c:4a:d3:34:ba:50:19: d3:0f:ee:e3:74:5a:f6:26:83:fd:d6:6a:63:2e:05:c7:e1:46: d8:58:7a:1e:1a:3a:ec:f0:48:86:e1:f6:8a:ce:fa:75:96:2d: 31:50:e7:fb:2a:28:c1:8e:f0:ff:92:97:7d:1e:e1:c1:84:c3: b1:55:87:c4:4b:06:e9:08:c3:7f:a6:15:4c:bc:c9:13:60:dd: 21:4e:d4:47:89:25:51:cb:aa:ff:42:a3:0b:84:4e:b1:d0:b6: 37:db:45:c5:c8:cc:74:a1:61:07:8e:8b:2b:3e:be:7e:6e:2f: c0:16:23:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfBylu9Bw9xeT36VTxNQc8iXR1v0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDAzMTI1WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2U4YWQxMmI1N2Q5NDIwNDhmOGE0M2Y4MWQ0MGI4ZDBm YWMwYTk4NjBjOTA1ZjRhNTkxMDVjNDM2NWZkMjg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9dUv8WW7586alvl19hVvT8npwExzj8le6uY60LUcQWJns Raqj3KY3LMDPoJReaWJ0EWD5JqumePVW0ALvsvD+yj5CYUta6TV4EsHm6rQ+KGn9 lqSaFPlu+SM4aIrAoyRGN8LveHaeXefHVz5RejeJCiVKNZc7oeNvEl+SBXhRnedD 3BIeUC2JgrQvE0IG6y0UxW0AKQNtLWDrb9xq/oeabRMi2dvgQQ/MK0XhJBPRGGHv Q/cGl+kFLXdfd4eJdoZr4fpC2uq2Gi5i396iHMtpB/53jRp/nINZmpB521yOZPZv bIZpHpwLEwc7Yy4rp9K0ZYDaMo0lRzZwCdf+YA+/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUybdXKmlsoztpnEd1q/mO2D3qAOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2YWE0MGVjLTY5YjktNDRmMS05MjA5LTQ4NGYyZDI4MmE2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAedr4AwDQYJKoZIhvcNAQELBQADggEBAA4/oIeVXD4sSk+35hkc0OOgLE2C zo6lw+UbHGBqPzyyPMj8v/X33cRsIeDTcYLz2CQCl6a7oOqKNEhbhkcdh0iXnbqX eWOColwAco2Tkn3KSBPNLHISfw7YH0NTBtV+Tr9WiuiJKQzt8iezsr5ktuxmwhUo qRAhu+Q//Zn5+SxmZY32RRlw28RTXErTNLpQGdMP7uN0WvYmg/3WamMuBcfhRthY eh4aOuzwSIbh9orO+nWWLTFQ5/sqKMGO8P+Sl30e4cGEw7FVh8RLBukIw3+mFUy8 yRNg3SFO1EeJJVHLqv9CowuETrHQtjfbRcXIzHShYQeOiys+vn5uL8AWIzw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:28 2025 by rpki-client