$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa File: a51c6524-05cd-4515-90ee-87b113d6ce7d.roa (raw, json) Hash identifier: 4iCUqJIaomWL7pNHGcyPELAQ9B7k1xkCHRfG3VFtwvY= Subject key identifier: A1:FD:F6:33:DE:0B:92:47:1D:B5:FF:CB:71:FD:5E:C1:26:FE:E7:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 195523A24190E8BAC3AA508AD565B247589AA6DC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa Signing time: Fri 29 Aug 2025 15:20:25 +0000 ROA not before: Fri 29 Aug 2025 15:20:25 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 146.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:23:a2:41:90:e8:ba:c3:aa:50:8a:d5:65:b2:47:58:9a:a6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:20:25 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=a0d879e78fc2129c74a094dd2da68f6fa41447e2a02c98464abd405bd902664d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:92:3d:b1:58:de:49:bf:a6:b5:0b:dd:42: 32:9a:5d:67:a5:3b:99:8f:19:3d:73:85:c7:45:6a: 77:c7:1a:12:1d:07:0a:92:97:29:c8:8b:86:f2:cd: 40:6d:3b:b7:fb:eb:75:91:f9:5f:e0:83:10:35:2d: 5a:88:b8:6e:cb:94:97:0c:9e:70:83:ed:65:b0:48: 82:13:9c:f4:62:f1:43:a3:02:6f:5b:3b:e3:cc:8d: 0b:6b:26:d8:79:f5:fe:a6:9c:2f:db:7b:e0:0f:a3: b4:42:f1:5b:4e:dd:eb:af:02:57:e3:b0:59:0e:3a: ae:ce:12:b1:2a:8d:d3:9c:dd:06:98:ce:7e:53:8e: 12:bd:b2:ab:aa:5b:44:4f:2b:cb:ee:2e:b8:c1:1c: 4d:db:c7:4b:8a:a4:f4:a3:ad:12:69:49:26:aa:f7: 72:fc:ba:fe:a7:44:62:34:c9:5a:02:f9:18:71:13: 07:d5:0a:61:33:55:d6:a6:8c:40:a9:47:18:7f:3d: 19:93:18:f5:0f:5e:45:84:d7:8e:15:52:28:76:af: 0a:05:c4:b7:87:97:8f:7c:b4:34:44:7b:ce:14:89: 60:60:3b:65:aa:99:0a:35:5f:be:90:89:be:31:c4: 0f:dd:fa:ec:dc:2a:23:f0:6a:e9:e8:b6:22:22:e3: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:F6:33:DE:0B:92:47:1D:B5:FF:CB:71:FD:5E:C1:26:FE:E7:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:6a:ca:a4:1e:89:0f:51:0e:a2:2c:00:b0:7d:63:86:c1:fd: 5e:85:b0:73:bb:69:fd:b7:ae:75:45:8b:95:6f:de:f8:1d:34: 42:ae:f4:49:2f:6f:04:3b:e6:28:98:2a:d9:ea:75:18:de:02: ec:cb:d0:3c:c4:96:dd:f3:f3:c9:fd:b4:51:4b:88:00:c9:43: 85:65:1d:f4:97:2e:0e:b6:9f:1f:4f:dc:92:7f:aa:3d:07:85: aa:cd:55:74:6f:df:e0:95:51:39:37:2d:f0:91:3a:42:fc:7b: e2:84:85:1f:cc:26:74:37:cb:de:ae:f2:75:98:a8:6f:71:9f: a0:57:62:9e:56:47:db:bd:a1:7e:59:a1:74:08:d8:1a:b4:a5: 0e:a5:dc:ec:18:35:73:84:ef:90:3a:d9:37:ea:4c:54:15:e4: 1a:5a:3b:f1:81:0c:98:55:1f:2f:1a:7d:2c:32:13:00:ab:fc: 5d:ca:40:6b:08:3b:b7:52:aa:54:61:83:a8:a7:5d:5e:44:c6: 56:44:0d:97:bf:a1:62:d9:78:e5:dc:3e:e0:46:ff:c6:40:fb: cd:f4:65:e4:b6:f7:a2:d1:03:b4:05:41:65:b1:ed:44:8f:77: 6b:a2:b0:04:4f:b7:e6:c3:db:aa:86:4f:88:69:a0:9f:0f:b7: 51:c7:30:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGVUjokGQ6LrDqlCK1WWyR1iaptwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUyMDI1WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGQ4NzllNzhmYzIxMjljNzRhMDk0ZGQyZGE2OGY2ZmE0 MTQ0N2UyYTAyYzk4NDY0YWJkNDA1YmQ5MDI2NjRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVK5I9sVjeSb+mtQvdQjKaXWelO5mPGT1zhcdFanfHGhId BwqSlynIi4byzUBtO7f763WR+V/ggxA1LVqIuG7LlJcMnnCD7WWwSIITnPRi8UOj Am9bO+PMjQtrJth59f6mnC/be+APo7RC8VtO3euvAlfjsFkOOq7OErEqjdOc3QaY zn5TjhK9squqW0RPK8vuLrjBHE3bx0uKpPSjrRJpSSaq93L8uv6nRGI0yVoC+Rhx EwfVCmEzVdamjECpRxh/PRmTGPUPXkWE144VUih2rwoFxLeHl498tDREe84UiWBg O2WqmQo1X76Qib4xxA/d+uzcKiPwaunotiIi4y8TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUof32M94Lkkcdtf/Lcf1ewSb+5/swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1MWM2NTI0LTA1Y2QtNDUxNS05MGVlLTg3YjExM2Q2Y2U3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCSTTANBgkqhkiG9w0BAQsFAAOCAQEAU2rKpB6JD1EOoiwAsH1jhsH9XoWw c7tp/beudUWLlW/e+B00Qq70SS9vBDvmKJgq2ep1GN4C7MvQPMSW3fPzyf20UUuI AMlDhWUd9JcuDrafH0/ckn+qPQeFqs1VdG/f4JVROTct8JE6Qvx74oSFH8wmdDfL 3q7ydZiob3GfoFdinlZH272hflmhdAjYGrSlDqXc7Bg1c4TvkDrZN+pMVBXkGlo7 8YEMmFUfLxp9LDITAKv8XcpAawg7t1KqVGGDqKddXkTGVkQNl7+hYtl45dw+4Eb/ xkD7zfRl5Lb3otEDtAVBZbHtRI93a6KwBE+35sPbqoZPiGmgnw+3UccwSg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:52 2025 by rpki-client