$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa File: aeffd414-e038-4f94-8262-5f843fa8634d.roa (raw, json) Hash identifier: 5gIt8AMWa+0h0egpu7JpdQ/Ct4oUcQc5C8v9mPAWPNQ= Subject key identifier: AC:15:49:8F:3A:D0:72:D6:DB:74:DA:BC:77:3C:8A:20:39:AC:29:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FCCE3BC699624FC562560CC40B34567CE203978 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa Signing time: Fri 29 Aug 2025 15:11:25 +0000 ROA not before: Fri 29 Aug 2025 15:11:25 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cc:e3:bc:69:96:24:fc:56:25:60:cc:40:b3:45:67:ce:20:39:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:11:25 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=cb79c820f99840b4468b52af6597adee16335d402a3f5f6a0beb5680fce56851, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:b3:aa:50:11:45:fd:39:d0:2a:fa:99:ce: 56:95:db:f8:fa:bd:ee:ce:5f:ff:ac:cb:15:33:b0: 2b:1b:cb:c4:e9:1e:cf:b6:e1:15:bb:c0:b8:0b:c8: af:e9:de:1b:62:e6:d8:ad:88:6c:f3:b0:b1:bb:9e: 82:d2:6e:b3:7e:14:b7:1a:c0:f9:8a:29:e0:cf:04: fe:85:27:a3:fd:f1:e1:a5:5f:26:08:c6:78:34:8d: 0e:05:47:7b:a4:75:82:cc:b7:24:48:32:02:f2:cc: 4a:30:fd:69:7d:47:06:cc:10:3e:45:d4:e4:64:5e: 47:2a:b1:26:47:9f:1c:1b:9b:bd:c6:9f:10:6b:26: 06:82:ac:b1:e3:fd:23:c7:c7:17:97:a1:c0:45:0b: 5e:eb:fa:46:0b:45:e1:8d:4d:28:f5:70:c0:62:58: bd:14:79:5d:cc:ea:73:1a:60:c4:a5:e2:9f:66:3b: 4a:09:fd:48:c2:61:04:02:0b:fe:55:f4:90:0f:75: c3:77:36:43:36:f5:f2:11:8a:e6:78:9c:21:b2:98: 77:75:79:f1:ca:d3:d5:79:12:db:e5:9f:ed:e0:2a: 70:5e:c7:4e:05:4a:4c:dc:b5:d7:1d:86:03:58:53: 4c:d7:56:fb:76:5e:ca:db:51:6a:13:39:33:6d:bc: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:49:8F:3A:D0:72:D6:DB:74:DA:BC:77:3C:8A:20:39:AC:29:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 3c:20:85:e4:9b:74:c4:e4:ae:4f:11:aa:ba:2c:25:9f:e4:da: bc:63:ce:12:b7:58:ea:bf:b8:24:bd:01:6b:a3:04:d3:4b:be: d9:70:0b:d7:5f:3e:11:5c:30:fa:67:95:7b:2b:2b:ab:92:c8: 0d:4c:b5:23:b3:eb:f8:f5:01:fb:cf:24:34:69:4c:ad:14:4b: f4:87:34:44:0f:14:64:c2:a5:1f:69:22:68:88:ea:94:aa:6a: 34:c4:68:ba:6c:eb:cf:0f:46:5d:c6:78:86:e7:05:14:da:11: 23:b5:2b:95:2c:19:ab:91:b4:55:37:41:c0:6f:e3:cb:b9:5e: ef:98:c5:6a:1b:70:be:be:0a:9f:06:2a:61:11:45:53:d1:46: 71:bd:df:2e:6c:7f:d9:c6:db:1a:ce:f4:44:f9:92:22:6e:83: de:d6:74:62:70:6d:12:5d:35:f2:fd:40:d5:74:80:bf:b9:bf: 2a:af:3a:b8:ce:a6:bc:f1:c0:b1:0b:1b:0a:2c:8d:bc:3f:57: 5e:84:9d:6b:0b:33:bd:23:90:b6:09:41:45:12:30:c7:5c:48: be:49:68:74:90:d5:b7:79:f9:be:c0:97:aa:41:c4:50:ce:95: 03:e2:70:ad:21:05:30:73:91:ea:34:31:4f:96:66:7a:b0:03: 3e:bd:c5:2a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUL8zjvGmWJPxWJWDMQLNFZ84gOXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUxMTI1WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjc5YzgyMGY5OTg0MGI0NDY4YjUyYWY2NTk3YWRlZTE2 MzM1ZDQwMmEzZjVmNmEwYmViNTY4MGZjZTU2ODUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCllbOqUBFF/TnQKvqZzlaV2/j6ve7OX/+syxUzsCsby8Tp Hs+24RW7wLgLyK/p3hti5titiGzzsLG7noLSbrN+FLcawPmKKeDPBP6FJ6P98eGl XyYIxng0jQ4FR3ukdYLMtyRIMgLyzEow/Wl9RwbMED5F1ORkXkcqsSZHnxwbm73G nxBrJgaCrLHj/SPHxxeXocBFC17r+kYLReGNTSj1cMBiWL0UeV3M6nMaYMSl4p9m O0oJ/UjCYQQCC/5V9JAPdcN3NkM29fIRiuZ4nCGymHd1efHK09V5Etvln+3gKnBe x04FSkzctdcdhgNYU0zXVvt2XsrbUWoTOTNtvCTpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrBVJjzrQctbbdNq8dzyKIDmsKYcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmZkNDE0LWUwMzgtNGY5NC04MjYyLTVmODQzZmE4NjM0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIXFDANBgkqhkiG9w0BAQsFAAOCAQEAPCCF5Jt0xOSuTxGquiwln+TavGPO ErdY6r+4JL0Ba6ME00u+2XAL118+EVww+meVeysrq5LIDUy1I7Pr+PUB+88kNGlM rRRL9Ic0RA8UZMKlH2kiaIjqlKpqNMRoumzrzw9GXcZ4hucFFNoRI7UrlSwZq5G0 VTdBwG/jy7le75jFahtwvr4KnwYqYRFFU9FGcb3fLmx/2cbbGs70RPmSIm6D3tZ0 YnBtEl018v1A1XSAv7m/Kq86uM6mvPHAsQsbCiyNvD9XXoSdawszvSOQtglBRRIw x1xIvklodJDVt3n5vsCXqkHEUM6VA+JwrSEFMHOR6jQxT5ZmerADPr3FKg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:28 2025 by rpki-client