$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa File: a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa (raw, json) Hash identifier: cMLMH95uS9Qc8fcpf5jGHDTAYujSINNRsZPAFi3mn+0= Subject key identifier: 6B:58:92:06:09:94:A0:75:97:0F:CC:29:9F:94:C7:FB:54:52:F4:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 370C68B3A57C15895D9B017C0669C128F76A11C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa Signing time: Tue 26 Aug 2025 15:00:22 +0000 ROA not before: Tue 26 Aug 2025 15:00:22 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.170.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0c:68:b3:a5:7c:15:89:5d:9b:01:7c:06:69:c1:28:f7:6a:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:00:22 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=7375ca42695096a11b7abe7a80c43cf0b094b7be4417cd7d212839f278c64832, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:d4:93:a4:e5:74:1a:ee:58:d0:d8:bd:68: 8e:fc:0d:fa:ee:05:f9:25:ee:80:0d:44:55:34:a3: e0:0a:9d:52:51:0a:0b:af:23:b7:7c:2e:f3:fa:0d: 2a:5c:e9:a2:f9:6a:1d:b4:26:32:6c:86:ec:5d:fa: c1:b4:b6:90:06:3a:b6:92:45:17:cb:c7:12:c4:fa: b1:aa:db:bb:2b:ca:85:cc:8a:db:6c:a7:47:4a:f7: d1:c9:87:83:46:79:78:4b:c9:2a:e5:35:db:eb:b9: 62:10:94:e6:70:79:0f:94:3b:7e:eb:63:e2:3f:5d: b9:39:8c:a7:ef:24:c0:8d:d6:ef:9c:13:20:53:ba: c7:c2:90:33:fd:03:c7:47:1a:9c:7b:f0:ef:7d:47: e3:51:de:fd:3e:f7:09:80:74:36:64:fa:b9:c2:d6: 26:8b:87:ba:dd:85:11:a7:fc:48:0b:92:94:11:25: 4c:fb:b1:89:62:6d:8f:a7:14:61:20:1e:3d:4b:60: b9:96:da:c0:da:48:e0:a1:86:67:e8:33:64:a1:00: 44:0c:96:77:18:d6:d4:67:27:33:65:8b:da:cb:4b: 5b:27:54:9d:d8:2d:b5:3a:cd:27:6e:53:47:e2:6e: 85:bf:20:94:c0:ba:b3:c3:5b:31:a8:2f:19:fd:99: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:58:92:06:09:94:A0:75:97:0F:CC:29:9F:94:C7:FB:54:52:F4:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:54:72:09:0f:09:2a:c9:22:11:0a:31:9b:ed:62:49:cb:e7: f4:e2:bd:71:b5:21:5f:03:d7:87:3c:93:72:89:59:64:ab:d5: 5b:dd:a2:70:b4:d0:79:04:3d:64:30:78:46:8d:2a:7c:70:12: 99:e6:48:1f:ac:0e:ca:f1:59:48:db:3b:67:69:99:dd:94:af: ef:81:c3:ee:a0:f6:07:d6:2b:f1:c0:21:cc:1e:b3:eb:8f:4d: 1b:d6:5a:0e:26:99:d9:bc:c0:ea:5b:ce:b6:4b:f6:af:c0:71: c8:54:ca:59:a9:3b:a3:68:a5:5a:af:19:54:ee:9a:d5:df:46: cf:be:92:ad:b6:c4:c9:83:fb:70:6d:a0:14:5b:10:cc:73:dd: c4:bc:2e:7a:01:fe:52:57:7a:94:35:b7:31:0b:94:86:fc:35: fb:c3:53:b0:f0:12:12:04:8c:bb:69:35:7e:76:db:ec:67:28: af:46:49:ea:ac:24:77:7f:d0:fe:ff:b0:7f:7d:d3:09:f3:0e: 9b:ae:e6:c1:09:2c:8b:27:bb:2e:a7:f7:3f:43:7c:a4:31:ed: 72:52:5b:a4:2a:61:59:ee:05:23:75:a4:99:0a:54:33:61:e4: e5:9d:49:fb:74:d7:c5:d3:66:e0:97:2d:8a:32:ad:4b:9b:19: 1d:d3:71:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNwxos6V8FYldmwF8BmnBKPdqEcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMDIyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mzc1Y2E0MjY5NTA5NmExMWI3YWJlN2E4MGM0M2NmMGIw OTRiN2JlNDQxN2NkN2QyMTI4MzlmMjc4YzY0ODMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC66dSTpOV0Gu5Y0Ni9aI78DfruBfkl7oANRFU0o+AKnVJR CguvI7d8LvP6DSpc6aL5ah20JjJshuxd+sG0tpAGOraSRRfLxxLE+rGq27sryoXM ittsp0dK99HJh4NGeXhLySrlNdvruWIQlOZweQ+UO37rY+I/Xbk5jKfvJMCN1u+c EyBTusfCkDP9A8dHGpx78O99R+NR3v0+9wmAdDZk+rnC1iaLh7rdhRGn/EgLkpQR JUz7sYlibY+nFGEgHj1LYLmW2sDaSOChhmfoM2ShAEQMlncY1tRnJzNli9rLS1sn VJ3YLbU6zSduU0fiboW/IJTAurPDWzGoLxn9mVfzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUa1iSBgmUoHWXD8wpn5TH+1RS9NMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NjY2YTg2LTM3MmUtNGU5ZC05ZTE0LWI5ZjZiZTJjMGUzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIqjANBgkqhkiG9w0BAQsFAAOCAQEAs1RyCQ8JKskiEQoxm+1iScvn9OK9 cbUhXwPXhzyTcolZZKvVW92icLTQeQQ9ZDB4Ro0qfHASmeZIH6wOyvFZSNs7Z2mZ 3ZSv74HD7qD2B9Yr8cAhzB6z649NG9ZaDiaZ2bzA6lvOtkv2r8BxyFTKWak7o2il Wq8ZVO6a1d9Gz76SrbbEyYP7cG2gFFsQzHPdxLwuegH+Uld6lDW3MQuUhvw1+8NT sPASEgSMu2k1fnbb7Gcor0ZJ6qwkd3/Q/v+wf33TCfMOm67mwQksiye7Lqf3P0N8 pDHtclJbpCphWe4FI3WkmQpUM2Hk5Z1J+3TXxdNm4JctijKtS5sZHdNxhA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:04 2025 by rpki-client