$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa File: be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa (raw, json) Hash identifier: BXXgUiCRKH5X1+FpxmY8VnkoDBAqw23J5R/GcDlmHd0= Subject key identifier: F9:A5:A0:C4:1B:D3:14:D9:02:6C:49:C9:A5:C4:09:CF:DD:31:57:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BEBAE083FFE17C93657C7D5CD4DB031556E4B7D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa Signing time: Mon 18 Aug 2025 15:10:18 +0000 ROA not before: Mon 18 Aug 2025 15:10:18 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:eb:ae:08:3f:fe:17:c9:36:57:c7:d5:cd:4d:b0:31:55:6e:4b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:10:18 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=22c9cd65cad8d805643722f5aaa17e347bc65e65186d6495885d56dd34cc14da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:f1:c9:b4:de:5b:4d:a5:48:5a:9f:68:a8: 7b:e2:16:70:ba:27:29:96:8e:75:82:93:65:bb:44: fc:75:30:32:fc:7b:59:d3:a5:8d:35:27:67:d5:39: 22:ac:c2:97:1b:1a:45:8f:c2:34:5d:1b:0f:57:98: f7:58:82:eb:03:0f:78:36:89:92:4e:1f:59:74:f4: 2d:d4:29:92:58:80:23:10:3c:9f:0b:43:e6:d8:1e: 76:68:06:d3:04:ca:5c:6d:8e:b5:43:d0:0b:d9:3c: b4:43:60:5f:3a:c3:bd:f0:c2:2f:2f:5b:41:93:ed: 56:35:57:94:2f:0d:70:7d:1c:e4:06:01:b8:fa:0e: 37:bc:ff:67:4c:d5:ed:9f:49:35:86:91:b0:26:60: 6e:20:47:12:49:3a:3e:8b:5a:5a:9c:c5:fa:1b:1f: b7:3d:26:60:51:de:f6:9c:7e:dd:e7:01:62:f0:cc: 67:7c:d2:13:75:7c:ce:42:82:15:8f:4c:e8:27:dc: d1:dd:d9:c7:6d:5b:ca:27:46:dc:f4:d7:77:1d:2a: 9f:16:ea:cc:14:25:33:1f:81:9e:0d:fe:c3:58:59: 03:bd:a4:55:5c:02:af:da:d2:f4:cc:85:5b:c2:23: 62:09:d8:96:37:9b:cf:f5:79:92:42:d3:e1:69:19: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A5:A0:C4:1B:D3:14:D9:02:6C:49:C9:A5:C4:09:CF:DD:31:57:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:77:a4:b6:4d:4d:41:b0:1c:e7:6e:45:02:ac:54:9b:7f:77: 0c:87:0a:77:58:76:ab:43:b8:f0:37:32:a2:21:65:ec:d6:0a: ef:0d:b6:b1:37:00:42:57:bb:b9:e7:70:17:b0:59:e4:fc:a8: dd:c1:b4:95:64:14:80:4a:bf:8c:9e:e7:76:7a:15:a1:38:55: dc:be:07:f9:db:93:bc:ce:43:ff:62:8f:e5:19:cd:0a:99:92: bf:3e:17:46:39:39:7c:39:2a:30:8b:e8:67:12:bf:4f:04:a9: 2c:1e:8d:c8:37:e5:40:ff:f0:5e:d9:02:e0:8f:80:40:00:5f: 19:e7:56:81:ab:2f:a6:57:6f:d7:36:3d:96:a7:91:27:ec:b7: d8:d5:7c:4a:6e:1b:ab:5a:42:37:ef:79:79:17:8e:c7:4f:62: 0f:ce:96:5b:74:de:c0:1a:bd:c8:9d:87:0b:34:0d:55:6a:4f: 19:f9:f4:c0:f7:d1:09:a3:df:0c:bd:9b:ce:37:75:22:28:3d: b7:60:fa:5e:e3:66:6b:65:e0:c2:52:a0:7f:c8:a9:cb:58:60: 7d:a4:9b:f3:b5:8c:79:95:6a:5f:c4:c1:b1:0f:b3:b7:f2:d9: f2:dd:38:ce:32:cb:4f:71:9c:29:15:74:0f:e3:7e:c0:f8:ae: 50:6c:e2:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW+uuCD/+F8k2V8fVzU2wMVVuS30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUxMDE4WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmM5Y2Q2NWNhZDhkODA1NjQzNzIyZjVhYWExN2UzNDdi YzY1ZTY1MTg2ZDY0OTU4ODVkNTZkZDM0Y2MxNGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+U/HJtN5bTaVIWp9oqHviFnC6JymWjnWCk2W7RPx1MDL8 e1nTpY01J2fVOSKswpcbGkWPwjRdGw9XmPdYgusDD3g2iZJOH1l09C3UKZJYgCMQ PJ8LQ+bYHnZoBtMEylxtjrVD0AvZPLRDYF86w73wwi8vW0GT7VY1V5QvDXB9HOQG Abj6Dje8/2dM1e2fSTWGkbAmYG4gRxJJOj6LWlqcxfobH7c9JmBR3vacft3nAWLw zGd80hN1fM5CghWPTOgn3NHd2cdtW8onRtz013cdKp8W6swUJTMfgZ4N/sNYWQO9 pFVcAq/a0vTMhVvCI2IJ2JY3m8/1eZJC0+FpGZhnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+aWgxBvTFNkCbEnJpcQJz90xVyEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlNTNlYTAxLWI0NGUtNGY1Mi1iNWVhLTAwMGQwNWM0ZTZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCWZjANBgkqhkiG9w0BAQsFAAOCAQEAMnektk1NQbAc525FAqxUm393DIcK d1h2q0O48DcyoiFl7NYK7w22sTcAQle7uedwF7BZ5Pyo3cG0lWQUgEq/jJ7ndnoV oThV3L4H+duTvM5D/2KP5RnNCpmSvz4XRjk5fDkqMIvoZxK/TwSpLB6NyDflQP/w XtkC4I+AQABfGedWgasvpldv1zY9lqeRJ+y32NV8Sm4bq1pCN+95eReOx09iD86W W3TewBq9yJ2HCzQNVWpPGfn0wPfRCaPfDL2bzjd1Iig9t2D6XuNma2XgwlKgf8ip y1hgfaSb87WMeZVqX8TBsQ+zt/LZ8t04zjLLT3GcKRV0D+N+wPiuUGziJQ== -----END CERTIFICATE-----Generated at Thu Aug 21 18:55:31 2025 by rpki-client