$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa File: bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa (raw, json) Hash identifier: FrUjfQkDRRa1pnh9jEBYI5t8YcYyFK6vcNXSXZ42000= Subject key identifier: 2F:AE:D3:DB:50:DC:D0:89:9D:6C:9D:DB:C5:93:F5:31:51:76:BB:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 477C86C3DA250D90A3A849F486F114DDAC8EF199 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa Signing time: Tue 26 Aug 2025 15:11:42 +0000 ROA not before: Tue 26 Aug 2025 15:11:42 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7c:86:c3:da:25:0d:90:a3:a8:49:f4:86:f1:14:dd:ac:8e:f1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:11:42 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=7a808b7193e822a0a905d1a6e4f427065e8f55d2dc1981d61af697f32172426d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:e4:d0:4d:26:08:f9:fb:7f:82:4f:bf:24: 06:57:23:5c:e0:d9:94:bc:3a:97:f7:79:e5:e4:18: a2:f2:48:70:a6:ac:34:56:80:03:8b:37:a0:c6:f1: 9d:e2:56:02:23:39:9f:e6:df:d9:5f:95:de:64:c1: 31:77:83:44:de:fe:e6:b7:52:1d:93:54:4d:0b:a0: 09:08:3c:d0:58:43:a9:40:34:9b:2a:51:47:97:2c: fe:0c:c5:4b:65:dc:7e:a1:f5:9f:e5:28:5d:4d:e5: 55:21:cb:56:60:49:96:da:26:6e:01:b7:48:97:53: a9:72:e9:39:d0:8d:c6:cc:41:6c:a5:42:40:b6:a0: 67:64:4d:3c:75:ed:e4:04:23:24:1c:87:d1:4d:f2: b2:a6:df:7f:71:0c:df:ce:bb:7e:cf:a4:b4:84:4b: d2:73:a8:9a:a5:8e:68:83:9a:0b:9f:d7:da:d7:ba: 21:7f:15:15:88:00:c2:fb:58:1d:d1:5a:ad:95:f4: bc:e0:28:cf:18:0c:8c:16:9d:37:ec:31:e2:44:05: 4c:dc:74:82:92:22:c9:74:34:55:ae:a0:c6:60:e6: 7d:5a:f4:51:d5:2b:57:01:79:39:39:38:9d:13:1b: ef:d6:97:1e:66:d6:ab:81:4e:4a:1b:c3:cf:0f:d4: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:D3:DB:50:DC:D0:89:9D:6C:9D:DB:C5:93:F5:31:51:76:BB:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption d5:28:24:e7:46:b9:d8:11:b3:05:71:20:a9:40:ff:20:a8:7b: eb:c2:69:9d:65:1a:6f:e8:9a:3c:ff:a7:e3:69:47:eb:d6:da: 57:55:fa:d9:ae:af:cc:c0:ed:34:2b:48:1e:b0:11:59:f8:48: ac:af:f1:16:39:72:6d:52:b5:6c:ca:1e:b3:43:72:cb:c5:08: 1a:53:7e:2c:57:66:0f:a4:ab:8e:bf:73:01:62:1b:68:aa:d9: c0:d6:da:86:7b:16:78:1c:f7:5a:ad:28:1b:e7:0a:fc:53:35: ed:20:b0:42:13:25:d6:fb:76:5d:1d:ad:55:c1:02:a4:9c:51: dc:f6:19:b8:0b:2b:5c:d8:6c:6a:7f:04:f5:ac:11:17:05:09: 07:d5:b6:ec:39:81:87:5d:62:61:ee:13:5a:32:3d:57:ff:55: 64:b8:77:47:a8:e8:1c:ba:21:07:5c:16:3a:44:6c:fe:0d:40: bb:80:a6:0b:b1:41:61:21:d5:c4:1b:69:39:4b:20:e0:57:8f: 81:6d:2d:5d:41:1b:65:47:d4:a5:8b:bb:20:a3:ad:86:58:de: 1d:9d:d1:ba:a0:6e:c7:11:34:04:0b:c7:7f:26:13:11:59:1f: 21:ba:10:92:fd:b0:6a:03:0b:df:18:7d:e7:38:7e:4d:fd:ca: a7:ec:7e:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR3yGw9olDZCjqEn0hvEU3ayO8ZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUxMTQyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTgwOGI3MTkzZTgyMmEwYTkwNWQxYTZlNGY0MjcwNjVl OGY1NWQyZGMxOTgxZDYxYWY2OTdmMzIxNzI0MjZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4FOTQTSYI+ft/gk+/JAZXI1zg2ZS8Opf3eeXkGKLySHCm rDRWgAOLN6DG8Z3iVgIjOZ/m39lfld5kwTF3g0Te/ua3Uh2TVE0LoAkIPNBYQ6lA NJsqUUeXLP4MxUtl3H6h9Z/lKF1N5VUhy1ZgSZbaJm4Bt0iXU6ly6TnQjcbMQWyl QkC2oGdkTTx17eQEIyQch9FN8rKm339xDN/Ou37PpLSES9JzqJqljmiDmguf19rX uiF/FRWIAML7WB3RWq2V9LzgKM8YDIwWnTfsMeJEBUzcdIKSIsl0NFWuoMZg5n1a 9FHVK1cBeTk5OJ0TG+/Wlx5m1quBTkobw88P1DTpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUL67T21Dc0ImdbJ3bxZP1MVF2u/0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiNmZiMmFiLTcyNDYtNDFiNS1iNGJiLTliMWVhY2I2Y2E1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiSTANBgkqhkiG9w0BAQsFAAOCAQEA1Sgk50a52BGzBXEgqUD/IKh768Jp nWUab+iaPP+n42lH69baV1X62a6vzMDtNCtIHrARWfhIrK/xFjlybVK1bMoes0Ny y8UIGlN+LFdmD6Srjr9zAWIbaKrZwNbahnsWeBz3Wq0oG+cK/FM17SCwQhMl1vt2 XR2tVcECpJxR3PYZuAsrXNhsan8E9awRFwUJB9W27DmBh11iYe4TWjI9V/9VZLh3 R6joHLohB1wWOkRs/g1Au4CmC7FBYSHVxBtpOUsg4FePgW0tXUEbZUfUpYu7IKOt hljeHZ3RuqBuxxE0BAvHfyYTEVkfIboQkv2wagML3xh95zh+Tf3Kp+x+YA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:54 2025 by rpki-client