$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa File: bc607eda-1d8d-4479-b98f-bf82f4cda692.roa (raw, json) Hash identifier: Jvll5djG/LmGqA9GNPsbIAbu9KPaoityJGEaWmzf2Ag= Subject key identifier: 10:05:F6:E4:ED:5C:54:A1:A7:54:37:2A:ED:3C:29:CA:E3:B2:18:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79B25885DB9DB54334D8999F92EA7C0A307C0E0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa Signing time: Tue 26 Aug 2025 15:11:09 +0000 ROA not before: Tue 26 Aug 2025 15:11:09 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 156.15.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b2:58:85:db:9d:b5:43:34:d8:99:9f:92:ea:7c:0a:30:7c:0e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:11:09 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=c4db5fc296e091feb9b79fcb4bcba6a99179c6ab09a9569396ee9d4bb5df7921, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:c8:7a:ba:4f:d3:ee:10:54:eb:f7:b0:7c: 34:bb:75:aa:d7:fa:b8:f4:e0:12:7e:2d:48:a1:0e: cd:2d:1f:90:4c:81:79:b4:22:15:0c:27:d5:60:b6: 7c:cf:5d:15:95:6a:d1:71:39:df:95:ac:7c:ad:e0: d3:f7:21:5e:6c:93:3a:ce:4e:62:0e:d8:51:76:0b: d2:89:af:14:3a:62:d6:80:4c:48:cd:e7:c0:a3:85: b5:0a:45:ab:70:38:1e:65:f7:56:b0:a5:28:52:6b: b8:68:e9:3f:8d:01:21:70:67:0e:cf:a1:bd:f7:63: aa:52:a4:f0:50:b7:b5:9a:b2:1a:53:51:4f:8f:15: 00:21:ba:7c:d7:42:d2:af:fa:ab:f2:dd:bf:2c:5d: e4:27:e3:1d:75:df:a9:ec:a6:5c:59:ac:53:cc:70: e5:4d:d9:7d:15:af:b6:56:a2:a7:23:d8:d5:6c:2d: a2:a3:44:f9:e1:cb:32:30:08:e4:f7:b6:4e:d2:12: 93:fe:e9:35:59:d1:16:cb:47:ab:23:50:a3:40:c1: b2:33:c0:eb:94:b6:f8:7b:ce:fc:6d:4a:0b:e6:6f: 56:11:ea:36:fc:85:cf:ae:55:a4:99:14:f9:f7:70: ac:c9:e0:04:f6:fc:24:20:a0:e4:ff:cc:44:10:28: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:05:F6:E4:ED:5C:54:A1:A7:54:37:2A:ED:3C:29:CA:E3:B2:18:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:70:78:ee:b5:45:03:77:99:0a:9e:62:99:dd:b2:23:34:6e: 3d:b2:a7:fe:d4:06:2c:a6:ec:88:7b:1e:c1:36:03:bf:2b:ed: a5:f5:25:5a:cf:c7:b3:2e:f2:49:85:99:f6:b2:5f:9f:1e:a5: f0:c9:54:d6:fe:ef:66:7b:ee:0e:aa:7e:ea:06:6e:10:8c:a0: 0c:11:7f:f4:0f:90:b7:cf:ab:2c:ce:3b:6f:42:6e:4e:1f:89: b5:73:6e:2c:81:45:cc:80:2e:7e:6b:e4:a3:cd:72:76:9f:4e: 16:00:1a:83:10:9b:b9:0c:60:89:24:cc:ed:6f:82:4f:34:72: 6d:f4:5b:27:bb:24:ee:7f:5b:44:46:fb:22:e9:1e:21:c6:ca: ce:6f:a9:9a:fe:52:14:3d:1a:96:75:de:63:45:b8:67:63:3f: a7:83:51:94:01:86:72:6e:ec:ed:e7:f6:05:f6:39:cc:f2:25: 3d:88:91:53:31:40:1b:05:50:f4:77:66:57:bf:04:a7:08:63: d1:71:96:82:9d:6d:d8:0d:13:f2:c4:51:51:36:ba:58:1a:0e: aa:86:bf:7e:9b:65:a9:25:da:33:38:9b:13:0c:3a:f6:2b:23: e0:94:7e:bc:05:b4:a3:3e:1d:9c:8c:07:ee:ed:0c:dd:18:46: 01:63:ac:10 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUebJYhdudtUM02Jmfkup8CjB8Dg8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUxMTA5WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGRiNWZjMjk2ZTA5MWZlYjliNzlmY2I0YmNiYTZhOTkx NzljNmFiMDlhOTU2OTM5NmVlOWQ0YmI1ZGY3OTIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFI8h6uk/T7hBU6/ewfDS7darX+rj04BJ+LUihDs0tH5BM gXm0IhUMJ9VgtnzPXRWVatFxOd+VrHyt4NP3IV5skzrOTmIO2FF2C9KJrxQ6YtaA TEjN58CjhbUKRatwOB5l91awpShSa7ho6T+NASFwZw7Pob33Y6pSpPBQt7WashpT UU+PFQAhunzXQtKv+qvy3b8sXeQn4x1136nsplxZrFPMcOVN2X0Vr7ZWoqcj2NVs LaKjRPnhyzIwCOT3tk7SEpP+6TVZ0RbLR6sjUKNAwbIzwOuUtvh7zvxtSgvmb1YR 6jb8hc+uVaSZFPn3cKzJ4AT2/CQgoOT/zEQQKOOfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEAX25O1cVKGnVDcq7TwpyuOyGKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNjA3ZWRhLTFkOGQtNDQ3OS1iOThmLWJmODJmNGNkYTY5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcDzANBgkqhkiG9w0BAQsFAAOCAQEAHHB47rVFA3eZCp5imd2yIzRuPbKn /tQGLKbsiHsewTYDvyvtpfUlWs/Hsy7ySYWZ9rJfnx6l8MlU1v7vZnvuDqp+6gZu EIygDBF/9A+Qt8+rLM47b0JuTh+JtXNuLIFFzIAufmvko81ydp9OFgAagxCbuQxg iSTM7W+CTzRybfRbJ7sk7n9bREb7IukeIcbKzm+pmv5SFD0alnXeY0W4Z2M/p4NR lAGGcm7s7ef2BfY5zPIlPYiRUzFAGwVQ9HdmV78Epwhj0XGWgp1t2A0T8sRRUTa6 WBoOqoa/fptlqSXaMzibEww69isj4JR+vAW0oz4dnIwH7u0M3RhGAWOsEA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:44 2025 by rpki-client