$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa File: 9544df28-c3ca-47ba-851e-1178b9c685ec.roa (raw, json) Hash identifier: CM1C+Q+eMB8vLuaAFu1+/RlEu13sCu48zgctmND1Rg8= Subject key identifier: 18:58:03:0D:BF:F6:0E:BF:8C:7C:D7:63:18:38:16:C6:16:AE:D9:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E5B77C21D5005DD6525D8C9FFB66F7DCD6626C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa Signing time: Sat 06 Sep 2025 00:50:31 +0000 ROA not before: Sat 06 Sep 2025 00:50:31 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5b:77:c2:1d:50:05:dd:65:25:d8:c9:ff:b6:6f:7d:cd:66:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:50:31 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=d498e95979b1769354edf39d66a90009051d6bd1d2d122ac5e4f446561fde023, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:a0:11:7c:36:4f:24:8c:04:06:a8:b8:89: 6c:54:a8:4c:c5:ca:4c:4a:87:81:f5:8c:7d:cc:9e: af:24:eb:71:26:8f:18:5e:39:69:1f:96:c0:ba:bf: 2c:f7:40:c1:55:9b:11:e4:71:c3:2c:98:16:f5:bd: 15:20:af:51:f4:3a:bc:65:df:fd:c5:56:ae:32:3d: 64:86:37:7e:71:60:56:40:d5:7b:6b:88:43:b7:bd: 02:e9:69:00:f8:30:c7:c7:90:4c:d4:15:32:a9:9f: f7:0a:0c:37:55:05:8c:51:6b:47:0c:d0:d6:c7:39: c5:84:bb:2e:7c:a9:06:f4:5a:89:6f:e1:eb:cf:dc: 03:79:df:1f:87:07:98:dd:0e:e9:00:76:50:bd:b7: b4:4d:55:29:7e:0d:a4:f5:ab:2e:f4:37:46:72:fd: c2:39:64:9a:e1:67:dc:b3:21:c0:79:6c:8f:6c:39: 09:59:0a:8d:d2:93:3b:44:76:91:61:46:4d:ee:d4: 77:66:82:68:ff:da:e0:66:2f:49:a4:71:2b:54:fc: 61:e4:e8:d8:38:d4:60:96:56:6d:58:15:8e:4b:07: 3a:84:ef:5b:6e:83:53:4c:57:1d:69:c5:bd:60:ec: c2:e5:6a:00:de:8e:e5:ce:73:c6:0b:3b:63:92:97: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:58:03:0D:BF:F6:0E:BF:8C:7C:D7:63:18:38:16:C6:16:AE:D9:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.48.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:a8:d3:ac:e0:8e:c6:d2:b6:56:10:c6:15:06:e5:a0:79:74: 14:e3:f3:3c:64:96:83:43:ef:7c:03:52:6d:01:f9:66:64:98: 58:c8:0f:04:83:c5:53:c1:3e:d0:e9:65:8e:f2:2e:b1:69:e7: c6:7c:79:c7:35:64:cc:45:b8:a6:0b:c9:48:8e:96:bf:f3:8f: 9a:5b:ed:e8:a5:b3:76:e4:ef:80:83:37:89:b6:67:3c:c4:79: 7c:f1:18:dd:4c:8f:35:23:cc:a5:81:19:c6:d2:ce:2f:b1:7d: dc:72:9c:11:d1:a6:89:ca:30:9a:44:8a:88:a5:8e:8e:33:38: 95:80:8e:c2:18:c1:d0:57:97:78:cb:37:68:f6:c6:54:61:f3: 9b:8e:24:99:b8:9f:b7:43:2b:6d:29:25:1d:05:46:0e:22:78: a8:c3:57:12:8f:77:ef:63:58:fe:e4:50:28:38:61:53:49:f1: 8f:71:96:ac:85:76:71:08:3a:96:4f:53:db:96:70:ed:18:3b: 6e:4a:2b:10:59:e8:27:5c:64:b3:66:c7:0d:b6:cb:b6:be:dc: b6:ec:b7:4d:66:4d:7f:3c:07:4f:9a:96:52:73:3d:2b:0a:c2: 59:19:af:43:85:34:79:ae:5d:d8:9a:2d:48:dc:f5:a5:a2:f1: fa:3a:98:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDlt3wh1QBd1lJdjJ/7Zvfc1mJsgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDA1MDMxWhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDk4ZTk1OTc5YjE3NjkzNTRlZGYzOWQ2NmE5MDAwOTA1 MWQ2YmQxZDJkMTIyYWM1ZTRmNDQ2NTYxZmRlMDIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY9aARfDZPJIwEBqi4iWxUqEzFykxKh4H1jH3Mnq8k63Em jxheOWkflsC6vyz3QMFVmxHkccMsmBb1vRUgr1H0Orxl3/3FVq4yPWSGN35xYFZA 1XtriEO3vQLpaQD4MMfHkEzUFTKpn/cKDDdVBYxRa0cM0NbHOcWEuy58qQb0Wolv 4evP3AN53x+HB5jdDukAdlC9t7RNVSl+DaT1qy70N0Zy/cI5ZJrhZ9yzIcB5bI9s OQlZCo3SkztEdpFhRk3u1Hdmgmj/2uBmL0mkcStU/GHk6Ng41GCWVm1YFY5LBzqE 71tug1NMVx1pxb1g7MLlagDejuXOc8YLO2OSl1CvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGFgDDb/2Dr+MfNdjGDgWxhau2W8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1NDRkZjI4LWMzY2EtNDdiYS04NTFlLTExNzhiOWM2ODVlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgADAwDQYJKoZIhvcNAQELBQADggEBAIqo06zgjsbStlYQxhUG5aB5dBTj 8zxkloND73wDUm0B+WZkmFjIDwSDxVPBPtDpZY7yLrFp58Z8ecc1ZMxFuKYLyUiO lr/zj5pb7eils3bk74CDN4m2ZzzEeXzxGN1MjzUjzKWBGcbSzi+xfdxynBHRponK MJpEioiljo4zOJWAjsIYwdBXl3jLN2j2xlRh85uOJJm4n7dDK20pJR0FRg4ieKjD VxKPd+9jWP7kUCg4YVNJ8Y9xlqyFdnEIOpZPU9uWcO0YO25KKxBZ6CdcZLNmxw22 y7a+3Lbst01mTX88B0+allJzPSsKwlkZr0OFNHmuXdiaLUjc9aWi8fo6mEo= -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:48 2025 by rpki-client