$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa File: aeff87b2-1581-477c-aadc-b42a3521569b.roa (raw, json) Hash identifier: +YAqRNalR3EHoX405F2noq2HKFu4hISqgetu8szwbYo= Subject key identifier: 43:32:24:47:38:48:3D:4D:49:2C:10:80:5D:A4:19:2A:F9:8A:0A:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35404C3E5FB583040B17DC18E095285E8EEF42DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa Signing time: Wed 27 Aug 2025 00:41:55 +0000 ROA not before: Wed 27 Aug 2025 00:41:55 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.178.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:40:4c:3e:5f:b5:83:04:0b:17:dc:18:e0:95:28:5e:8e:ef:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:41:55 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=159f0f0f9d2a19bc293ebe370c4bb1fff60c1b82fd29d8d0f6bce69b2d7be165, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:fa:4b:89:07:9c:34:60:30:da:f1:e1:c7: f6:ab:24:8f:21:b6:16:db:a0:41:fe:92:79:4b:c8: 54:1e:5a:f7:4a:5d:04:0d:ba:eb:b1:75:b4:6f:28: ad:fa:8a:85:6d:a4:32:92:09:05:9d:9c:4f:34:9f: d8:bc:85:90:c1:c8:bd:f8:2a:d8:cd:e1:05:10:d2: 8e:04:70:de:78:0a:c5:db:78:c4:de:8d:b8:62:4d: 37:ff:7e:1c:50:51:2e:b2:00:7f:10:a8:9f:28:e1: 3f:93:39:7a:58:9f:69:1d:d1:64:25:b5:bc:26:33: ee:36:74:07:fc:5f:dd:a4:31:33:46:9b:72:f6:ad: e0:54:a3:42:24:ec:d9:0f:68:58:a0:47:3c:69:ba: 0a:11:6b:ed:5e:d4:9a:8d:26:e9:b0:ef:a6:60:fe: b4:8c:65:8f:f1:fd:8a:bd:43:6c:07:7b:27:27:8b: 56:39:99:b4:dd:56:ad:53:96:5f:30:33:00:de:75: 4c:80:b4:25:db:89:31:69:f4:f9:14:67:b1:17:91: 50:64:0f:a8:8d:c6:a1:c5:ac:67:7d:f4:32:50:b8: b6:d6:85:bf:af:4d:6a:ea:11:24:bd:0e:20:5f:fe: f1:01:28:4e:fc:5d:0c:68:9f:3c:ae:9d:2d:d8:eb: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:24:47:38:48:3D:4D:49:2C:10:80:5D:A4:19:2A:F9:8A:0A:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.128.0/18 Signature Algorithm: sha256WithRSAEncryption 89:58:ef:c8:a7:05:14:4f:c7:c8:f9:38:12:57:fd:44:03:06: 34:94:b3:49:17:1d:61:41:2c:1f:34:d9:68:b4:9b:03:3e:a9: 89:b3:12:c4:90:74:43:01:4f:52:7f:a2:83:8e:c2:50:ed:ef: 12:1d:91:e8:f6:bc:53:a9:50:09:79:13:c7:ee:33:7f:35:07: 8a:86:08:b9:53:7f:a8:3c:d1:eb:00:f9:e4:e9:02:c2:05:df: 70:41:31:4b:f5:2a:9f:77:75:dc:a5:71:be:d9:28:cf:72:68: 74:2c:f2:f8:d2:d2:ed:46:d8:6d:26:bf:68:ef:f5:06:eb:07: aa:46:2f:04:91:56:8f:fb:e5:6e:71:25:71:b6:3f:e6:58:e5: 3c:10:c9:13:5d:be:c7:50:00:11:59:bc:30:78:73:e3:ed:46: 09:2d:d8:51:6d:ff:19:87:50:2f:26:84:22:1d:12:fc:2c:0e: 3f:8f:13:cb:3d:cb:9e:5a:23:59:d0:40:a4:13:35:c8:05:26: 1f:89:88:4e:7d:50:f3:f1:70:c4:d6:ef:72:75:a8:0a:2b:b4: 2e:16:15:fb:db:7f:28:60:92:b2:e2:d2:5e:95:c7:f9:89:f2: 0d:b6:e1:e1:e7:18:05:bf:95:58:a0:29:66:ba:85:45:c0:63: 0c:91:87:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNUBMPl+1gwQLF9wY4JUoXo7vQtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA0MTU1WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTlmMGYwZjlkMmExOWJjMjkzZWJlMzcwYzRiYjFmZmY2 MGMxYjgyZmQyOWQ4ZDBmNmJjZTY5YjJkN2JlMTY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcPPpLiQecNGAw2vHhx/arJI8hthbboEH+knlLyFQeWvdK XQQNuuuxdbRvKK36ioVtpDKSCQWdnE80n9i8hZDByL34KtjN4QUQ0o4EcN54CsXb eMTejbhiTTf/fhxQUS6yAH8QqJ8o4T+TOXpYn2kd0WQltbwmM+42dAf8X92kMTNG m3L2reBUo0Ik7NkPaFigRzxpugoRa+1e1JqNJumw76Zg/rSMZY/x/Yq9Q2wHeycn i1Y5mbTdVq1Tll8wMwDedUyAtCXbiTFp9PkUZ7EXkVBkD6iNxqHFrGd99DJQuLbW hb+vTWrqESS9DiBf/vEBKE78XQxonzyunS3Y6xBXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQzIkRzhIPU1JLBCAXaQZKvmKCqMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmY4N2IyLTE1ODEtNDc3Yy1hYWRjLWI0MmEzNTIxNTY5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahsoAwDQYJKoZIhvcNAQELBQADggEBAIlY78inBRRPx8j5OBJX/UQDBjSU s0kXHWFBLB802Wi0mwM+qYmzEsSQdEMBT1J/ooOOwlDt7xIdkej2vFOpUAl5E8fu M381B4qGCLlTf6g80esA+eTpAsIF33BBMUv1Kp93ddylcb7ZKM9yaHQs8vjS0u1G 2G0mv2jv9QbrB6pGLwSRVo/75W5xJXG2P+ZY5TwQyRNdvsdQABFZvDB4c+PtRgkt 2FFt/xmHUC8mhCIdEvwsDj+PE8s9y55aI1nQQKQTNcgFJh+JiE59UPPxcMTW73J1 qAortC4WFfvbfyhgkrLi0l6Vx/mJ8g224eHnGAW/lVigKWa6hUXAYwyRh0E= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:28 2025 by rpki-client