$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa File: 78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa (raw, json) Hash identifier: DLlHyYVYGncbW3ez2QKxy59QTGhn0sSGJiB0wh1rtZo= Subject key identifier: E6:59:B8:FC:78:84:9D:E5:B5:D7:F5:CF:72:5D:59:E7:21:B1:B4:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17E3846D804DB951D0DB222EDAEC65C281750DF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa Signing time: Fri 29 Aug 2025 16:32:05 +0000 ROA not before: Fri 29 Aug 2025 16:32:05 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e3:84:6d:80:4d:b9:51:d0:db:22:2e:da:ec:65:c2:81:75:0d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:32:05 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=e0ad61f4c2e6b289b2843f9c6fccb4c3364896f6a24c373c7a4eaee73c3daf3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:5a:29:57:86:5f:6c:e4:59:c9:7d:b0:77: 3a:e0:fa:54:84:91:64:cb:be:ea:8a:01:c5:46:53: 98:10:88:08:cd:5d:3c:50:12:04:10:85:42:13:87: de:c6:15:12:6b:b8:97:00:97:d1:28:41:ac:88:ce: 4c:b7:14:e7:48:4f:47:2f:06:57:6d:c6:d7:37:ce: 84:12:54:58:0b:2a:56:ba:1b:c7:69:03:37:38:b3: de:e0:85:04:fd:67:79:aa:cc:91:5c:78:02:08:79: dd:b7:12:ab:3b:e5:0f:6e:f3:48:77:9c:ab:1e:4e: 20:67:c1:e4:e7:8d:53:02:6f:9e:b5:3a:94:ef:d9: 7b:88:d9:ac:71:a3:aa:7c:c0:8a:6b:c2:84:5a:30: b3:48:e3:fa:96:85:78:9b:d3:2c:d4:71:b8:5c:89: 90:d4:4f:83:e9:c1:b0:61:49:cb:6e:24:16:6a:19: eb:fb:a5:6b:b4:d2:23:3c:ee:6b:4d:f9:49:3d:78: 36:99:c5:8d:08:56:04:22:62:53:23:69:38:a3:e9: 23:bc:25:8e:f5:79:9f:89:32:89:6b:94:1d:2a:f5: c5:8d:e7:18:38:23:c9:cb:7c:37:3f:19:2c:7a:80: 66:f5:b5:00:a9:ed:bc:43:57:95:ac:64:6c:a0:9f: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:59:B8:FC:78:84:9D:E5:B5:D7:F5:CF:72:5D:59:E7:21:B1:B4:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.192.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2c:99:69:c2:86:4c:98:23:dc:29:40:a7:b7:64:ff:b0:b1:8d: 40:04:4e:08:4f:79:2d:07:35:25:78:a8:9a:ae:d3:9e:71:d7: fd:91:17:d3:25:ac:49:f0:83:8d:37:48:d7:cc:f5:0f:53:50: 41:e4:e2:60:ef:1f:8c:81:4d:25:c0:87:62:a4:67:32:08:dc: c1:2b:d7:ba:40:b2:00:8c:61:ae:0e:bc:51:d5:e0:3a:29:c7: f8:ea:e9:a3:36:46:3f:0e:23:06:d7:6d:c8:74:7c:65:6f:6a: 0e:51:c9:0e:10:3a:a7:9a:db:fa:05:82:26:d6:93:24:ca:11: 37:e1:48:1e:a0:1b:66:a6:f9:6d:49:9d:80:5b:f2:38:54:42: 35:a5:a3:f8:0c:db:bc:02:89:61:f9:97:0e:30:23:36:fe:dc: df:1c:8c:cb:3f:44:ac:ea:9a:be:56:a6:ae:ca:ae:3d:1a:51: ea:41:52:35:36:80:91:5a:61:dc:39:16:59:c7:78:22:fd:c7: 05:4e:d4:cd:67:99:3b:18:22:a1:01:70:f2:ac:f8:5c:25:01: 5f:b4:db:f1:11:36:b6:fc:de:e6:41:c6:90:7b:7b:da:0b:66: 5d:4b:42:47:d1:d5:d3:f6:40:e5:6d:09:45:48:51:76:fc:4a: 16:70:cc:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF+OEbYBNuVHQ2yIu2uxlwoF1DfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYzMjA1WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGFkNjFmNGMyZTZiMjg5YjI4NDNmOWM2ZmNjYjRjMzM2 NDg5NmY2YTI0YzM3M2M3YTRlYWVlNzNjM2RhZjNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxA1opV4ZfbORZyX2wdzrg+lSEkWTLvuqKAcVGU5gQiAjN XTxQEgQQhUITh97GFRJruJcAl9EoQayIzky3FOdIT0cvBldtxtc3zoQSVFgLKla6 G8dpAzc4s97ghQT9Z3mqzJFceAIIed23Eqs75Q9u80h3nKseTiBnweTnjVMCb561 OpTv2XuI2axxo6p8wIprwoRaMLNI4/qWhXib0yzUcbhciZDUT4PpwbBhSctuJBZq Gev7pWu00iM87mtN+Uk9eDaZxY0IVgQiYlMjaTij6SO8JY71eZ+JMolrlB0q9cWN 5xg4I8nLfDc/GSx6gGb1tQCp7bxDV5WsZGygn5ELAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5lm4/HiEneW11/XPcl1Z5yGxtLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZWU4NzBiLThmYjgtNGMyMC04ZjczLTNhODViOGUzODNlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcowAAwDQYJKoZIhvcNAQELBQADggEBACyZacKGTJgj3ClAp7dk/7CxjUAE TghPeS0HNSV4qJqu055x1/2RF9MlrEnwg403SNfM9Q9TUEHk4mDvH4yBTSXAh2Kk ZzII3MEr17pAsgCMYa4OvFHV4Dopx/jq6aM2Rj8OIwbXbch0fGVvag5RyQ4QOqea 2/oFgibWkyTKETfhSB6gG2am+W1JnYBb8jhUQjWlo/gM27wCiWH5lw4wIzb+3N8c jMs/RKzqmr5Wpq7Krj0aUepBUjU2gJFaYdw5FlnHeCL9xwVO1M1nmTsYIqEBcPKs +FwlAV+02/ERNrb83uZBxpB7e9oLZl1LQkfR1dP2QOVtCUVIUXb8ShZwzP0= -----END CERTIFICATE-----Generated at Sat Sep 6 16:25:48 2025 by rpki-client