$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa File: 8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa (raw, json) Hash identifier: G8ZlBWiGhXu+88U2h/JgRIMcrtESlfe1CnBUV3xhTL8= Subject key identifier: B9:FA:88:BA:48:9C:CC:22:1C:3E:EA:25:7C:4F:AC:8D:85:BD:B9:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 255BB3F1462660FD7E0885B878900B714931EA4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa Signing time: Fri 29 Aug 2025 16:41:01 +0000 ROA not before: Fri 29 Aug 2025 16:41:01 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5b:b3:f1:46:26:60:fd:7e:08:85:b8:78:90:0b:71:49:31:ea:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:41:01 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=de7db12cd9e3837ff6e79c54c35bac2738885c7e6930dd3e2c94300fda120973, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:57:4e:2b:a6:4b:61:9c:5d:f7:40:30:19: 6b:04:ef:09:d0:e8:d4:0e:cf:10:2a:ff:31:d8:a8: 8a:32:f4:dd:76:96:5d:db:86:61:36:6f:b7:e4:fe: fe:ef:91:06:64:cb:43:7b:b4:cc:fe:62:de:16:7b: 90:56:81:98:47:47:8f:e9:ba:b9:97:80:5c:f3:70: e2:ac:2f:5d:df:39:5d:c3:63:84:6a:f3:b5:7c:4f: 22:fa:41:97:f0:16:5c:f8:d1:1f:b0:6e:85:ad:94: a9:f3:87:4d:6e:af:e9:dd:34:78:17:ac:f2:83:32: 07:b9:a9:91:bc:ca:95:63:32:06:72:16:dd:6d:fe: 91:19:df:be:28:ee:89:02:4b:40:0a:cc:6c:73:77: eb:ff:b5:a0:15:e8:33:11:f2:d2:d7:f8:24:e3:d9: c0:d4:cb:49:3d:21:9c:9c:82:bf:0f:f4:a5:dd:11: 6e:10:59:f6:04:c5:1a:3e:be:89:f8:fc:93:59:4b: bd:8c:ab:f5:9f:58:f0:13:5f:b9:f2:1d:87:76:41: 65:81:d3:a4:e3:b4:71:ef:5c:ad:c6:87:45:3f:93: cb:91:2e:1d:2d:41:77:0a:85:4a:d0:50:b8:f7:af: dd:b3:ab:75:b7:83:80:5a:95:59:82:0b:9b:77:e8: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FA:88:BA:48:9C:CC:22:1C:3E:EA:25:7C:4F:AC:8D:85:BD:B9:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.97.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1e:e1:37:b5:5f:e4:e4:f2:93:88:39:75:81:98:6e:5a:80: 8d:d3:9e:4d:bd:c9:27:34:9a:a3:5f:d7:d9:01:d0:9a:b5:fe: 4d:33:79:0f:8d:9a:9b:8a:10:51:2a:39:06:97:61:63:0a:14: d3:bf:55:f1:04:1e:51:7d:b7:30:04:d3:2f:d6:bb:3e:e3:32: 0c:d0:d3:60:55:c2:49:a5:3a:8b:09:ee:a5:28:ad:fb:a1:c0: 89:42:20:1f:3a:11:6f:0e:fd:e1:8c:f2:46:67:06:87:0c:9e: 76:6a:5a:ea:54:93:07:00:3a:96:02:54:f1:54:d3:8c:57:6f: 26:94:80:71:f1:ca:46:20:f9:63:7e:e6:d6:8d:9c:81:54:d5: 23:0c:06:83:1b:a7:4f:92:4c:fb:71:f6:28:7f:80:f8:50:f3: 8c:a3:4e:ac:a4:b9:f7:f4:51:6f:90:82:dd:6f:11:01:a3:5b: 8f:59:fd:a7:7f:2a:2a:5d:45:c5:3b:32:c8:fe:49:90:53:d1: bb:36:3f:f6:c9:80:c1:c9:e6:7b:64:9a:4d:fb:6a:fb:95:4d: 5e:e8:bd:f9:fd:85:06:24:d2:d5:c8:af:f4:ff:24:c2:f1:5f: 54:e6:ea:de:ed:06:13:dd:1d:da:97:d5:26:46:a7:4c:37:e7: 9e:94:52:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVuz8UYmYP1+CIW4eJALcUkx6kowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTY0MTAxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTdkYjEyY2Q5ZTM4MzdmZjZlNzljNTRjMzViYWMyNzM4 ODg1YzdlNjkzMGRkM2UyYzk0MzAwZmRhMTIwOTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnF1dOK6ZLYZxd90AwGWsE7wnQ6NQOzxAq/zHYqIoy9N12 ll3bhmE2b7fk/v7vkQZky0N7tMz+Yt4We5BWgZhHR4/purmXgFzzcOKsL13fOV3D Y4Rq87V8TyL6QZfwFlz40R+wboWtlKnzh01ur+ndNHgXrPKDMge5qZG8ypVjMgZy Ft1t/pEZ374o7okCS0AKzGxzd+v/taAV6DMR8tLX+CTj2cDUy0k9IZycgr8P9KXd EW4QWfYExRo+von4/JNZS72Mq/WfWPATX7nyHYd2QWWB06TjtHHvXK3Gh0U/k8uR Lh0tQXcKhUrQULj3r92zq3W3g4BalVmCC5t36BWrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUufqIukiczCIcPuolfE+sjYW9ucwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZWE3ZjFmLTM3ZWItNDlkNS1iZTcwLWVkM2IyNDAwZDgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GEwDQYJKoZIhvcNAQELBQADggEBAIEe4Te1X+Tk8pOIOXWBmG5agI3T nk29ySc0mqNf19kB0Jq1/k0zeQ+NmpuKEFEqOQaXYWMKFNO/VfEEHlF9tzAE0y/W uz7jMgzQ02BVwkmlOosJ7qUorfuhwIlCIB86EW8O/eGM8kZnBocMnnZqWupUkwcA OpYCVPFU04xXbyaUgHHxykYg+WN+5taNnIFU1SMMBoMbp0+STPtx9ih/gPhQ84yj Tqykuff0UW+Qgt1vEQGjW49Z/ad/KipdRcU7Msj+SZBT0bs2P/bJgMHJ5ntkmk37 avuVTV7ovfn9hQYk0tXIr/T/JMLxX1Tm6t7tBhPdHdqX1SZGp0w3556UUks= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:40 2025 by rpki-client