$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd65feef-9ea0-4edc-a9fe-ddb21857f346.roa File: bd65feef-9ea0-4edc-a9fe-ddb21857f346.roa (raw, json) Hash identifier: a8FUgUUClSGQbAUElclEGlp3DB3cWJmB1EBt5cPUEcQ= Subject key identifier: AF:A5:88:90:91:31:F6:68:E9:A6:7A:C8:5C:41:56:50:FD:A2:F7:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D0A5CF95756420C5660DFFE981523358EC21A46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd65feef-9ea0-4edc-a9fe-ddb21857f346.roa Signing time: Fri 29 Aug 2025 00:21:13 +0000 ROA not before: Fri 29 Aug 2025 00:21:13 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.86.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0a:5c:f9:57:56:42:0c:56:60:df:fe:98:15:23:35:8e:c2:1a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:21:13 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=e30e55db575385dbf05cdf7dbb307ece423ef6fd9600a51fd1b84a8e259712ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:d7:02:28:a1:fc:a9:2f:e8:b6:e6:7f:32: eb:83:6b:af:ea:29:63:5b:ec:75:ac:90:e9:20:1e: 32:f3:5a:ab:f6:27:d7:5d:13:c9:98:bf:4b:9c:e9: 5e:ea:a6:7a:f9:10:4c:47:5d:e9:04:f9:bd:80:e4: 58:3c:15:e9:8e:28:2c:39:85:47:a1:e2:bf:fa:b0: 51:7e:3f:d2:7a:28:3b:75:24:c9:ce:13:ed:ab:f4: 73:e4:3c:28:74:7e:24:af:d0:e7:d6:e7:78:f4:2d: 57:b2:55:55:bd:72:a9:f1:20:aa:10:da:30:03:d6: a7:03:35:e1:c8:59:44:12:61:a7:61:74:61:10:d4: 74:d2:f7:85:ad:c9:20:95:8a:b1:96:91:3b:73:1a: 8f:5c:b6:11:1a:5b:54:4b:e7:1a:cf:e7:da:71:ff: 14:77:2d:36:a3:39:07:af:58:5a:62:d9:e4:da:0a: ae:6f:c0:b7:e3:f8:0c:10:35:9a:84:31:d5:85:14: af:89:07:cb:a1:d5:24:dd:26:17:f4:a6:3d:f4:cf: d9:0e:3d:81:03:67:99:9e:d8:1c:c7:34:d6:d5:ed: 14:3b:db:ee:cf:70:cb:c9:b2:31:b8:35:64:a0:17: 0c:9a:f0:a8:b6:7a:10:2b:17:b2:93:68:78:2b:e5: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:88:90:91:31:F6:68:E9:A6:7A:C8:5C:41:56:50:FD:A2:F7:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd65feef-9ea0-4edc-a9fe-ddb21857f346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.86.88.0/23 Signature Algorithm: sha256WithRSAEncryption 26:3b:18:7f:89:d3:ed:4c:96:51:b9:5c:97:45:d0:32:f8:93: 53:88:c5:01:47:f2:a1:3f:ec:8e:71:80:63:68:cd:ed:36:cf: ae:26:4a:06:a1:0c:c1:f2:ea:61:c1:a8:98:31:4e:58:20:af: 62:8a:04:e9:f9:86:76:06:e3:99:0c:ee:ca:7e:37:7a:6b:8a: 42:a7:82:56:19:82:55:43:e6:81:11:cb:80:a0:3b:cc:7e:cb: 37:ef:a7:73:a5:74:9a:13:11:68:75:7f:48:dc:5e:bc:9d:63: 3f:f5:19:63:cf:15:1e:fb:ca:0d:79:de:b5:60:eb:19:58:17: 20:2b:50:1f:b1:71:2f:ba:f5:d9:45:4d:e7:50:7a:85:06:8c: f1:d9:c9:2f:99:13:e8:83:d4:66:15:e6:4d:fb:c0:07:98:61: ba:d9:05:fa:c5:c3:7d:1f:71:87:1b:af:e1:54:d1:d9:85:5c: 6a:90:6e:9c:71:1c:63:a6:44:41:64:7b:5d:38:0c:83:28:0e: 5d:a0:86:5f:3c:0b:57:56:70:4d:d3:78:1b:47:5a:5d:90:8e: aa:ce:a0:a9:3d:87:35:d2:31:f4:48:6b:56:4f:54:e8:63:bf: 7f:d3:61:3f:b8:63:9a:42:e7:e2:63:b4:27:bd:4d:6c:f5:09: e9:34:1d:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbQpc+VdWQgxWYN/+mBUjNY7CGkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDAyMTEzWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzBlNTVkYjU3NTM4NWRiZjA1Y2RmN2RiYjMwN2VjZTQy M2VmNmZkOTYwMGE1MWZkMWI4NGE4ZTI1OTcxMmVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/vdcCKKH8qS/otuZ/MuuDa6/qKWNb7HWskOkgHjLzWqv2 J9ddE8mYv0uc6V7qpnr5EExHXekE+b2A5Fg8FemOKCw5hUeh4r/6sFF+P9J6KDt1 JMnOE+2r9HPkPCh0fiSv0OfW53j0LVeyVVW9cqnxIKoQ2jAD1qcDNeHIWUQSYadh dGEQ1HTS94WtySCVirGWkTtzGo9cthEaW1RL5xrP59px/xR3LTajOQevWFpi2eTa Cq5vwLfj+AwQNZqEMdWFFK+JB8uh1STdJhf0pj30z9kOPYEDZ5me2BzHNNbV7RQ7 2+7PcMvJsjG4NWSgFwya8Ki2ehArF7KTaHgr5cPDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr6WIkJEx9mjppnrIXEFWUP2i9yIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkNjVmZWVmLTllYTAtNGVkYy1hOWZlLWRkYjIxODU3ZjM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHQVlgwDQYJKoZIhvcNAQELBQADggEBACY7GH+J0+1MllG5XJdF0DL4k1OI xQFH8qE/7I5xgGNoze02z64mSgahDMHy6mHBqJgxTlggr2KKBOn5hnYG45kM7sp+ N3prikKnglYZglVD5oERy4CgO8x+yzfvp3OldJoTEWh1f0jcXrydYz/1GWPPFR77 yg153rVg6xlYFyArUB+xcS+69dlFTedQeoUGjPHZyS+ZE+iD1GYV5k37wAeYYbrZ BfrFw30fcYcbr+FU0dmFXGqQbpxxHGOmREFke104DIMoDl2ghl88C1dWcE3TeBtH Wl2QjqrOoKk9hzXSMfRIa1ZPVOhjv3/TYT+4Y5pC5+JjtCe9TWz1Cek0Hbo= -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:08 2025 by rpki-client