$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa File: 88f2ff63-7659-498d-b994-ed526db12b18.roa (raw, json) Hash identifier: rJBtJ1lC+BrIDNT5jyFx5RWri+O72uYtnxWX+ZLLtsA= Subject key identifier: 8F:F4:68:4B:5E:5C:8E:EA:1F:9F:79:C8:CF:48:3B:30:15:C3:32:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 439874D16824EF55A7CE7138CE912D5CDFEE4DCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa Signing time: Tue 02 Sep 2025 00:30:25 +0000 ROA not before: Tue 02 Sep 2025 00:30:25 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:98:74:d1:68:24:ef:55:a7:ce:71:38:ce:91:2d:5c:df:ee:4d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:30:25 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=056672b29babf324550a6a92bcbf26fd680010e702d3128a719359aa647818eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:45:68:d6:93:36:4c:42:5a:a2:bb:87:44: 3e:e7:5a:45:9b:4a:55:40:80:44:8e:32:6a:9f:5c: 8c:d0:ea:43:de:2c:61:ca:14:b5:f2:ff:32:e5:aa: eb:6d:98:8f:03:23:24:ed:94:80:7f:92:6b:59:09: be:92:44:65:80:0f:63:b5:cf:e1:59:2f:b3:9b:2d: d5:a4:c8:39:1e:80:c4:15:6e:8a:39:4a:db:3d:48: 8d:4d:71:dd:eb:44:8e:00:ed:94:7e:4a:7d:ab:42: ff:04:d3:f4:48:de:38:80:af:03:fa:42:65:87:aa: cb:de:a0:15:97:26:04:a2:84:1b:c7:54:d7:05:43: 01:8f:06:ee:26:b5:98:75:c3:d2:ee:3f:37:3f:39: 75:42:9e:e7:3a:25:33:e1:0f:0d:88:d9:fb:2a:99: 09:08:e6:96:ec:46:9b:17:42:1e:36:c7:7a:b3:de: c1:10:ab:d0:22:0f:c2:8b:fe:8a:4e:01:ff:3f:87: 00:ed:ee:77:e8:d1:64:23:ee:00:96:71:07:d5:5d: 27:35:aa:e9:82:b2:1f:10:f5:7d:91:ef:97:b4:03: 07:74:11:97:2a:81:1f:ae:18:f0:32:16:de:f4:43: 6d:93:09:44:ad:6d:11:d9:72:5e:32:91:52:9d:f5: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:68:4B:5E:5C:8E:EA:1F:9F:79:C8:CF:48:3B:30:15:C3:32:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.168.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:a4:4c:d3:f0:13:79:0a:e9:06:84:65:0a:59:c4:a2:4d:ed: 06:69:e9:93:34:e6:c7:fd:a8:a4:71:b8:25:8c:1d:b2:0f:ee: 67:0c:85:0a:a6:9e:82:69:0a:bc:7c:77:12:b8:66:0d:1e:24: 67:ad:b9:4d:e0:fd:3f:9f:b0:bb:b6:a3:6e:fc:76:61:d9:b5: c1:9e:9b:7e:3f:04:70:14:de:88:9e:2f:47:b1:71:55:dd:c0: 20:a6:94:23:f9:b8:90:20:c7:75:24:8f:b7:e9:e2:a1:65:69: 2c:a4:a3:64:8c:dd:71:96:b7:af:9e:2c:2d:b8:75:d9:03:77: a3:a1:ca:cb:81:7b:ad:32:f1:37:14:76:3e:6d:26:01:08:95: 9c:d8:34:ae:7c:49:13:b0:42:ce:ff:22:08:9b:50:1e:c3:d6: 8d:8a:cf:07:b6:dd:36:3c:0b:2d:d6:bb:8d:7a:a5:f0:29:5b: ef:6d:2f:f9:75:9b:b4:7d:46:07:36:38:04:a5:0c:0d:f4:c4: ee:72:2e:ea:48:1f:56:7b:ff:c6:36:36:0d:e7:8a:f4:b2:e5: cb:cf:4e:60:a8:06:2c:28:e4:12:34:e3:74:e9:0f:5f:97:44: ed:03:dd:b7:b2:82:98:e5:40:4b:c6:98:ed:0b:c1:27:76:7e: 44:2d:d9:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ5h00Wgk71WnznE4zpEtXN/uTcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAzMDI1WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTY2NzJiMjliYWJmMzI0NTUwYTZhOTJiY2JmMjZmZDY4 MDAxMGU3MDJkMzEyOGE3MTkzNTlhYTY0NzgxOGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC17kVo1pM2TEJaoruHRD7nWkWbSlVAgESOMmqfXIzQ6kPe LGHKFLXy/zLlquttmI8DIyTtlIB/kmtZCb6SRGWAD2O1z+FZL7ObLdWkyDkegMQV boo5Sts9SI1Ncd3rRI4A7ZR+Sn2rQv8E0/RI3jiArwP6QmWHqsveoBWXJgSihBvH VNcFQwGPBu4mtZh1w9LuPzc/OXVCnuc6JTPhDw2I2fsqmQkI5pbsRpsXQh42x3qz 3sEQq9AiD8KL/opOAf8/hwDt7nfo0WQj7gCWcQfVXSc1qumCsh8Q9X2R75e0Awd0 EZcqgR+uGPAyFt70Q22TCUStbRHZcl4ykVKd9b/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj/RoS15cjuofn3nIz0g7MBXDMjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4ZjJmZjYzLTc2NTktNDk4ZC1iOTk0LWVkNTI2ZGIxMmIxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36gwDQYJKoZIhvcNAQELBQADggEBAJykTNPwE3kK6QaEZQpZxKJN7QZp 6ZM05sf9qKRxuCWMHbIP7mcMhQqmnoJpCrx8dxK4Zg0eJGetuU3g/T+fsLu2o278 dmHZtcGem34/BHAU3oieL0excVXdwCCmlCP5uJAgx3Ukj7fp4qFlaSyko2SM3XGW t6+eLC24ddkDd6OhysuBe60y8TcUdj5tJgEIlZzYNK58SROwQs7/IgibUB7D1o2K zwe23TY8Cy3Wu416pfApW+9tL/l1m7R9Rgc2OASlDA30xO5yLupIH1Z7/8Y2Ng3n ivSy5cvPTmCoBiwo5BI043TpD1+XRO0D3beygpjlQEvGmO0LwSd2fkQt2co= -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:38 2025 by rpki-client