$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa File: 9fe38204-9c56-474c-bd42-8f68c20a3781.roa (raw, json) Hash identifier: clv8OTdHAwQcMDWHb9tKV8bOmD97CGki8uGlT1slHgc= Subject key identifier: A4:91:09:A6:F1:C6:66:B8:A9:D5:37:84:6D:EB:53:D4:5E:94:14:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 372F5DDA7EF5C1B8F05C6232871172ECE47293B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa Signing time: Mon 11 Aug 2025 15:20:27 +0000 ROA not before: Mon 11 Aug 2025 15:20:27 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 20.131.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2f:5d:da:7e:f5:c1:b8:f0:5c:62:32:87:11:72:ec:e4:72:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:20:27 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=c8a821e03ffcc6abd1787634fce01d4568b9ae3af51e8e43fe41e1dfa53830fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:5e:86:e2:3c:b1:a5:67:e7:c0:c6:56:c4: 95:9d:8e:e3:9d:4f:5f:f0:91:4a:d0:38:d4:43:44: ff:9f:65:1b:99:47:ce:b7:20:fb:d2:64:41:58:47: 01:b1:d2:4e:a3:4e:25:68:62:c6:52:f9:69:3b:1a: a0:84:ac:58:e1:36:cd:38:ab:34:30:47:d8:f0:e3: 18:19:0c:a7:f2:58:75:cb:0f:84:e1:ea:6b:de:15: 61:75:c8:07:60:6d:6c:dd:79:5e:92:cb:f4:0d:d8: 22:94:cd:c0:93:c2:ee:dc:3b:a4:88:a8:3f:fb:ee: c1:db:f5:1a:33:bd:ef:31:84:51:64:6c:f8:35:b0: 3e:5d:c5:c6:f4:d8:10:2c:75:55:bc:da:4a:54:98: 5c:fa:04:ac:93:aa:9f:98:c8:dd:9b:46:58:30:64: b9:46:8f:84:65:3a:7f:8d:7d:a1:ce:34:00:e2:7d: 04:47:dd:52:56:ee:b6:04:90:55:e6:bb:ff:0c:05: 29:9a:22:d4:68:3e:7e:de:e0:69:d8:50:bc:f1:41: cc:88:a9:ad:3d:bd:08:ad:28:be:c9:99:5f:40:19: e9:0e:95:b7:bb:28:5e:9d:ce:21:25:05:37:48:80: 10:b9:a7:a0:59:ca:d9:e6:ce:a2:d8:15:94:0c:69: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:09:A6:F1:C6:66:B8:A9:D5:37:84:6D:EB:53:D4:5E:94:14:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 20.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:4a:39:43:fc:a5:96:f3:fa:fa:12:e5:ce:be:e5:03:16:43: 88:82:28:e8:4d:41:62:84:5e:84:f5:2a:0b:39:ea:0e:d9:71: 8c:7f:98:10:a9:bc:ee:7f:55:90:6d:b4:b7:8a:8e:91:53:6a: a8:b9:4a:e4:e4:a4:f2:25:e1:55:97:c6:c5:74:5d:65:73:7d: 53:d8:a8:7f:62:a6:7c:94:22:8e:ba:d4:1b:05:d2:62:95:96: b2:e1:61:5a:59:6c:43:03:14:dc:94:b9:0b:59:1e:ec:63:d8: bf:a8:3e:b2:6e:75:06:69:47:1b:8c:11:c3:04:6b:55:db:d5: ff:35:d5:4d:40:6b:14:ad:91:15:20:01:86:a7:e7:4b:fc:b9: 76:1d:f8:0b:98:fa:91:56:34:54:91:6b:83:ce:9a:2a:c7:8b: 66:61:72:dd:c1:55:01:f2:89:32:7f:66:9f:11:91:a0:2d:72: fc:34:28:c2:c9:d3:13:00:2d:76:d9:17:91:ce:a3:0a:3d:06: 23:72:fa:39:85:3f:dd:ab:7e:e1:71:40:39:0e:f2:dc:13:b0: 11:a0:54:a8:62:74:3d:f9:4b:05:c6:73:79:10:40:e7:3f:ef: 45:a3:b5:fb:2e:46:e3:67:2a:58:e3:0b:b6:11:b7:3a:67:a8: cd:68:9a:89 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNy9d2n71wbjwXGIyhxFy7ORyk7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUyMDI3WhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGE4MjFlMDNmZmNjNmFiZDE3ODc2MzRmY2UwMWQ0NTY4 YjlhZTNhZjUxZThlNDNmZTQxZTFkZmE1MzgzMGZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDarF6G4jyxpWfnwMZWxJWdjuOdT1/wkUrQONRDRP+fZRuZ R863IPvSZEFYRwGx0k6jTiVoYsZS+Wk7GqCErFjhNs04qzQwR9jw4xgZDKfyWHXL D4Th6mveFWF1yAdgbWzdeV6Sy/QN2CKUzcCTwu7cO6SIqD/77sHb9Rozve8xhFFk bPg1sD5dxcb02BAsdVW82kpUmFz6BKyTqp+YyN2bRlgwZLlGj4RlOn+NfaHONADi fQRH3VJW7rYEkFXmu/8MBSmaItRoPn7e4GnYULzxQcyIqa09vQitKL7JmV9AGekO lbe7KF6dziElBTdIgBC5p6BZytnmzqLYFZQMaZ/BAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpJEJpvHGZrip1TeEbetT1F6UFLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZTM4MjA0LTljNTYtNDc0Yy1iZDQyLThmNjhjMjBhMzc4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAUgzANBgkqhkiG9w0BAQsFAAOCAQEArEo5Q/yllvP6+hLlzr7lAxZDiIIo 6E1BYoRehPUqCznqDtlxjH+YEKm87n9VkG20t4qOkVNqqLlK5OSk8iXhVZfGxXRd ZXN9U9iof2KmfJQijrrUGwXSYpWWsuFhWllsQwMU3JS5C1ke7GPYv6g+sm51BmlH G4wRwwRrVdvV/zXVTUBrFK2RFSABhqfnS/y5dh34C5j6kVY0VJFrg86aKseLZmFy 3cFVAfKJMn9mnxGRoC1y/DQowsnTEwAtdtkXkc6jCj0GI3L6OYU/3at+4XFAOQ7y 3BOwEaBUqGJ0PflLBcZzeRBA5z/vRaO1+y5G42cqWOMLthG3OmeozWiaiQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:56 2025 by rpki-client