$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa File: 92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa (raw, json) Hash identifier: lbZvmZ0RfTbG0UePzIXm/XgsuPbeThBywpeN6f4cT78= Subject key identifier: 42:6C:37:14:11:54:23:98:86:B8:96:84:AD:D4:51:6F:55:AF:0D:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05F96F7893A3342CB2A2812E19D81053F7414CA2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa Signing time: Fri 29 Aug 2025 16:30:27 +0000 ROA not before: Fri 29 Aug 2025 16:30:27 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 37.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f9:6f:78:93:a3:34:2c:b2:a2:81:2e:19:d8:10:53:f7:41:4c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:30:27 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=cf92abf1217afbbda1c75476b992c8ecd827b3ad713968aaf8b8779ce24ce798, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:b0:43:5f:7a:4b:1e:8f:99:a6:12:73:a9: 94:47:0a:a1:bd:2a:e0:1f:65:83:e3:8c:15:45:2d: f1:c1:e4:c0:cc:1c:ae:5e:21:2c:d8:10:2e:2c:ed: d7:0c:42:24:53:ca:11:46:3c:d3:b1:02:b1:cd:9f: bf:43:11:c4:3e:40:d9:a3:1f:7c:1b:ea:96:fa:86: ee:30:76:f1:a5:40:7f:b2:e9:32:45:57:9b:06:01: 12:bc:e5:60:b7:c3:ba:80:2f:db:65:cb:2e:6e:fa: 46:f6:c0:1f:9f:2d:26:d3:4d:93:91:29:ef:3a:7f: 59:e7:2c:9d:64:19:4f:45:2a:2c:69:68:d7:48:da: 4e:0d:23:94:84:08:4f:13:5d:92:68:cd:18:31:2a: 49:d7:4d:37:b9:c6:7a:dc:2e:9a:8c:20:20:7a:f6: e1:c6:8c:2b:c1:e8:42:45:65:f9:6b:b1:c8:ed:f1: 85:9c:38:e4:90:3c:9a:0a:45:58:2c:62:2f:5e:20: 57:f5:ed:55:b7:60:6a:27:bd:06:6d:79:40:ef:29: 40:eb:7d:43:7d:58:f0:fd:e1:24:90:ea:bf:97:63: e5:8a:64:16:5a:90:b9:cf:75:53:11:5b:4a:16:a9: d8:e2:8d:37:cd:fd:7a:fb:66:6b:d1:92:87:66:65: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:37:14:11:54:23:98:86:B8:96:84:AD:D4:51:6F:55:AF:0D:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:a0:eb:01:80:61:54:01:5b:63:79:cd:40:f7:62:a5:b6:04: e1:df:4b:87:a0:c1:ec:e2:92:7e:1f:77:11:48:82:47:ad:c2: a4:4a:fb:1e:30:7b:42:d5:54:d9:12:c7:8a:cd:f7:d9:03:04: 28:a6:b0:12:2f:be:96:38:56:21:9a:ea:df:7b:37:58:e9:39: 18:fd:11:33:94:fd:b4:34:59:ad:24:de:cb:3b:ee:8d:56:58: 6d:0d:e9:a1:5d:08:22:a4:fc:9c:60:e6:a8:8c:d7:b0:59:a3: df:bf:f6:69:4d:f2:d5:c2:0c:73:6f:46:34:e6:77:b1:f9:ea: ea:c4:d7:9d:6c:56:73:a4:ef:36:9e:51:8c:36:6d:3d:34:ac: 35:37:5b:7f:fe:d2:97:1c:ed:b8:36:d7:9f:73:d1:c0:cb:fa: 77:2b:be:8c:f3:5d:cc:24:27:d5:05:8d:43:71:5c:c7:12:27: 7c:54:e0:0e:6c:4d:f1:52:74:17:b7:e1:2b:22:1a:5b:55:dc: 93:9c:2f:15:0a:37:a5:61:bf:78:62:22:4d:b4:07:84:0d:6a: 89:a8:3f:9d:08:37:33:b0:b6:d8:19:84:52:74:32:33:de:a2: ed:48:87:1c:3c:ec:14:f5:68:ea:b8:72:a9:c5:ad:ac:6e:a3: b1:02:7a:81 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBflveJOjNCyyooEuGdgQU/dBTKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYzMDI3WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjkyYWJmMTIxN2FmYmJkYTFjNzU0NzZiOTkyYzhlY2Q4 MjdiM2FkNzEzOTY4YWFmOGI4Nzc5Y2UyNGNlNzk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdxLBDX3pLHo+ZphJzqZRHCqG9KuAfZYPjjBVFLfHB5MDM HK5eISzYEC4s7dcMQiRTyhFGPNOxArHNn79DEcQ+QNmjH3wb6pb6hu4wdvGlQH+y 6TJFV5sGARK85WC3w7qAL9tlyy5u+kb2wB+fLSbTTZORKe86f1nnLJ1kGU9FKixp aNdI2k4NI5SECE8TXZJozRgxKknXTTe5xnrcLpqMICB69uHGjCvB6EJFZflrscjt 8YWcOOSQPJoKRVgsYi9eIFf17VW3YGonvQZteUDvKUDrfUN9WPD94SSQ6r+XY+WK ZBZakLnPdVMRW0oWqdjijTfN/Xr7ZmvRkodmZdH3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQmw3FBFUI5iGuJaErdRRb1WvDbMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyYTJlNmM5LTliNTMtNGE1Ny04MjgyLWEzYjg2MGE3N2VhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAl+TANBgkqhkiG9w0BAQsFAAOCAQEAB6DrAYBhVAFbY3nNQPdipbYE4d9L h6DB7OKSfh93EUiCR63CpEr7HjB7QtVU2RLHis332QMEKKawEi++ljhWIZrq33s3 WOk5GP0RM5T9tDRZrSTeyzvujVZYbQ3poV0IIqT8nGDmqIzXsFmj37/2aU3y1cIM c29GNOZ3sfnq6sTXnWxWc6TvNp5RjDZtPTSsNTdbf/7SlxztuDbXn3PRwMv6dyu+ jPNdzCQn1QWNQ3FcxxInfFTgDmxN8VJ0F7fhKyIaW1Xck5wvFQo3pWG/eGIiTbQH hA1qiag/nQg3M7C22BmEUnQyM96i7UiHHDzsFPVo6rhyqcWtrG6jsQJ6gQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:00 2025 by rpki-client