$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa File: b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa (raw, json) Hash identifier: Grl8PuQhI+k5bnkFrKTrhKbYWKkUxtl3uALPIIauY0Q= Subject key identifier: C8:9E:64:C3:37:FF:8D:F3:C4:64:6E:8E:87:59:8A:3E:10:53:39:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49F0E2503A09F32B8F286E2BC0470F33E6DD17AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa Signing time: Wed 27 Aug 2025 00:21:16 +0000 ROA not before: Wed 27 Aug 2025 00:21:16 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f0:e2:50:3a:09:f3:2b:8f:28:6e:2b:c0:47:0f:33:e6:dd:17:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:21:16 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=0634aa95b31b986ed29f00d8723a23a06b7bda893374aa7cff75d32eb65e0618, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:08:76:c3:45:76:81:84:da:a9:c7:0d:18: c8:86:86:83:de:82:1e:0a:51:9a:7b:b6:30:b3:ac: 7d:40:3b:ae:8b:df:15:fe:79:04:b4:4a:97:0c:97: 85:14:0c:7f:09:8b:f9:07:1e:4c:f5:9f:a7:c4:75: 43:66:59:bc:69:ea:55:5c:8d:d8:a2:d3:73:11:43: 3f:f0:6d:56:00:f8:06:a5:c1:a9:d0:0a:f7:5a:77: 51:10:78:0a:bd:c4:89:1d:64:52:98:05:76:5b:e0: 3f:79:0f:bd:ba:95:2e:d1:35:f4:7f:b0:d3:2b:61: dd:8d:d0:90:94:37:76:31:2b:70:eb:11:18:a5:65: e1:f6:08:44:50:bc:07:02:0b:82:d3:c6:13:80:44: 4d:6c:02:0a:78:e2:8d:de:46:54:c2:52:cd:02:72: ce:eb:ed:e7:c1:c5:6c:6f:89:16:af:31:24:af:9a: 83:03:93:57:e9:70:ac:a4:8c:08:c9:26:b8:93:6c: 1c:b1:59:60:05:18:ee:72:c5:40:ba:21:5c:84:71: d8:30:5e:be:01:95:d5:b3:59:7a:ee:3e:b6:fe:d2: 16:18:b5:9f:45:54:96:0c:d0:f3:57:45:40:81:0d: 18:7b:68:a0:cf:80:29:35:45:a2:b5:90:ac:88:0b: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:64:C3:37:FF:8D:F3:C4:64:6E:8E:87:59:8A:3E:10:53:39:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39b5e72-2d4e-4966-9cf9-a101e78ca898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.192.0/18 Signature Algorithm: sha256WithRSAEncryption d8:67:bc:12:6f:17:c0:a3:34:b9:05:4c:6d:dd:32:d5:d3:c2: 51:3d:ef:c7:d3:8b:dc:43:4a:89:6c:d9:44:29:98:99:da:34: a4:fb:ca:cc:04:8a:94:01:62:1c:41:b8:d3:5f:5c:e7:52:54: 17:23:49:69:53:1e:23:e0:d7:2f:0d:bb:9d:6d:09:a9:b1:ae: 94:4b:61:5d:bb:ad:75:66:90:5c:95:36:6e:6c:ed:79:95:1d: 47:7b:0c:92:f9:8c:da:d6:0a:4c:65:09:44:b0:f5:b8:b0:68: d3:cb:0f:1c:ea:2a:81:7e:77:a5:d9:ba:f0:8c:24:86:e8:ef: 0f:6a:9f:e1:ef:67:d0:44:57:76:28:ca:22:0d:b7:6f:53:06: 0e:c5:f1:5d:e4:69:50:c0:04:3a:23:0a:83:1f:9f:11:ab:da: f0:f6:af:60:1d:15:f5:87:d0:9a:b6:1b:99:43:c7:12:53:76: a4:c3:42:d9:5b:42:15:3b:d8:71:21:f0:0d:d0:d6:a5:18:ac: ae:88:59:36:2f:d3:16:79:4c:b8:91:88:02:c3:b2:ef:db:9e: 1b:95:56:62:fd:fb:34:e4:d7:0b:4a:39:8c:5a:41:17:5a:e3: 67:02:14:78:43:7c:86:52:da:b7:13:ce:fe:fb:a6:b7:80:f2: 24:6b:3e:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSfDiUDoJ8yuPKG4rwEcPM+bdF68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDAyMTE2WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjM0YWE5NWIzMWI5ODZlZDI5ZjAwZDg3MjNhMjNhMDZi N2JkYTg5MzM3NGFhN2NmZjc1ZDMyZWI2NWUwNjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIygh2w0V2gYTaqccNGMiGhoPegh4KUZp7tjCzrH1AO66L 3xX+eQS0SpcMl4UUDH8Ji/kHHkz1n6fEdUNmWbxp6lVcjdii03MRQz/wbVYA+Aal wanQCvdad1EQeAq9xIkdZFKYBXZb4D95D726lS7RNfR/sNMrYd2N0JCUN3YxK3Dr ERilZeH2CERQvAcCC4LTxhOARE1sAgp44o3eRlTCUs0Ccs7r7efBxWxviRavMSSv moMDk1fpcKykjAjJJriTbByxWWAFGO5yxUC6IVyEcdgwXr4BldWzWXruPrb+0hYY tZ9FVJYM0PNXRUCBDRh7aKDPgCk1RaK1kKyIC7ZBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyJ5kwzf/jfPEZG6Oh1mKPhBTOV8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzOWI1ZTcyLTJkNGUtNDk2Ni05Y2Y5LWExMDFlNzhjYTg5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFMAwDQYJKoZIhvcNAQELBQADggEBANhnvBJvF8CjNLkFTG3dMtXTwlE9 78fTi9xDSols2UQpmJnaNKT7yswEipQBYhxBuNNfXOdSVBcjSWlTHiPg1y8Nu51t CamxrpRLYV27rXVmkFyVNm5s7XmVHUd7DJL5jNrWCkxlCUSw9biwaNPLDxzqKoF+ d6XZuvCMJIbo7w9qn+HvZ9BEV3YoyiINt29TBg7F8V3kaVDABDojCoMfnxGr2vD2 r2AdFfWH0Jq2G5lDxxJTdqTDQtlbQhU72HEh8A3Q1qUYrK6IWTYv0xZ5TLiRiALD su/bnhuVVmL9+zTk1wtKOYxaQRda42cCFHhDfIZS2rcTzv77preA8iRrPkM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:30 2025 by rpki-client