$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc14be5-948d-44fd-a1bf-73c82b179cd0.roa File: cbc14be5-948d-44fd-a1bf-73c82b179cd0.roa (raw, json) Hash identifier: qVuKHBzH+XxH89J4my1rw76qSxyYPjI/w2Lbw9yHa2c= Subject key identifier: 24:2A:5E:79:67:98:09:4A:4E:1A:F9:6A:7D:CA:68:AD:77:ED:FD:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24A791F1DBBAEDAA1E5976B1C0BF0FC8A18A5725 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc14be5-948d-44fd-a1bf-73c82b179cd0.roa Signing time: Tue 26 Aug 2025 15:22:13 +0000 ROA not before: Tue 26 Aug 2025 15:22:13 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.210.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a7:91:f1:db:ba:ed:aa:1e:59:76:b1:c0:bf:0f:c8:a1:8a:57:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:22:13 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=b292ec9500fb3dd25ad61611ba1d008f5274eb698a1f6ff4237adcbbf4a84078, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:f1:c0:6b:08:65:57:8b:52:07:77:54:bc: 50:0a:31:cb:cb:41:97:ce:c1:fb:25:c9:5e:7a:6e: d2:eb:44:ba:fe:07:0b:71:5d:b0:de:40:a9:58:e0: d3:89:2a:7a:db:40:7f:42:a5:51:b0:ba:8f:c0:e5: 65:bb:d3:5d:a0:3e:89:25:87:64:58:cb:79:b5:51: e5:d7:7b:9e:f6:42:30:f2:db:83:71:e3:85:3a:fe: 93:9a:e2:68:99:12:bb:26:0d:67:62:76:d2:b4:1a: 3c:03:1f:18:bb:f1:bf:21:b9:f2:c5:fa:e5:97:e6: 54:71:c2:1c:aa:8d:cf:88:14:54:f1:50:72:5a:10: a9:e4:c1:d4:14:59:f0:46:19:70:ce:14:e7:7b:c8: 1e:7b:46:8c:71:1b:ad:a4:90:b3:95:14:fb:df:f5: 67:08:fe:8f:19:37:70:da:01:46:ce:43:70:b0:2e: d7:0a:92:10:b4:38:48:25:43:f6:f9:92:39:a4:51: a9:2a:29:db:8a:f5:81:85:4f:55:41:36:64:09:f5: 59:90:93:82:25:55:f3:2f:1c:d7:3e:61:71:74:5f: f8:c4:83:0a:89:68:ce:a4:e5:82:12:da:c8:0d:b1: 4a:df:2a:69:65:c0:d8:6a:d6:a1:6b:10:63:03:09: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:5E:79:67:98:09:4A:4E:1A:F9:6A:7D:CA:68:AD:77:ED:FD:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc14be5-948d-44fd-a1bf-73c82b179cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.210.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:7c:86:79:f8:2e:d3:e4:c9:b2:58:40:4e:00:f4:c7:0f:76: 11:c5:5b:70:3c:80:8f:50:77:f2:0b:7c:27:09:4b:d4:0a:ea: 27:c2:8a:93:87:ad:34:ad:7f:34:17:97:47:ae:e4:67:58:b3: 36:33:bb:2b:fc:8c:a0:32:60:8e:ba:64:0f:6c:66:0d:32:ab: b0:65:ef:ab:c8:14:9d:ce:c7:12:b0:4b:55:cb:94:f0:aa:f5: e7:46:1f:17:b7:ec:fd:c4:c0:e4:14:cb:e3:f5:16:4d:6f:68: 8c:02:15:fe:fd:5d:5c:56:96:3b:04:ea:1d:6c:92:62:bf:05: 48:b8:55:97:4f:dc:54:66:73:af:6b:45:42:11:ea:73:13:d4: c1:dd:e0:6f:47:56:75:54:1a:25:c8:3e:77:30:bb:6a:2e:87: 85:c8:42:d4:48:87:ba:2d:1c:d3:9f:33:04:59:3e:6f:bc:2b: a4:fa:a1:32:59:6e:f2:7a:8d:8b:86:8a:1a:38:40:53:4e:62: 85:7d:72:ea:d0:c9:c8:d6:aa:40:03:b5:41:85:44:0b:48:c1: c3:5d:f9:3a:3d:f1:f6:ac:5d:1c:bf:b2:8d:2e:3e:24:d5:1c: 35:7b:8b:a4:48:9a:5d:19:f3:c2:d5:9d:83:bc:dc:9d:de:e4: 27:e6:23:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJKeR8du67aoeWXaxwL8PyKGKVyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMjEzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjkyZWM5NTAwZmIzZGQyNWFkNjE2MTFiYTFkMDA4ZjUy NzRlYjY5OGExZjZmZjQyMzdhZGNiYmY0YTg0MDc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXLvHAawhlV4tSB3dUvFAKMcvLQZfOwfslyV56btLrRLr+ BwtxXbDeQKlY4NOJKnrbQH9CpVGwuo/A5WW7012gPoklh2RYy3m1UeXXe572QjDy 24Nx44U6/pOa4miZErsmDWdidtK0GjwDHxi78b8hufLF+uWX5lRxwhyqjc+IFFTx UHJaEKnkwdQUWfBGGXDOFOd7yB57RoxxG62kkLOVFPvf9WcI/o8ZN3DaAUbOQ3Cw LtcKkhC0OEglQ/b5kjmkUakqKduK9YGFT1VBNmQJ9VmQk4IlVfMvHNc+YXF0X/jE gwqJaM6k5YIS2sgNsUrfKmllwNhq1qFrEGMDCZDVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJCpeeWeYCUpOGvlqfcporXft/cQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYzE0YmU1LTk0OGQtNDRmZC1hMWJmLTczYzgyYjE3OWNkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPN0nAwDQYJKoZIhvcNAQELBQADggEBADt8hnn4LtPkybJYQE4A9McPdhHF W3A8gI9Qd/ILfCcJS9QK6ifCipOHrTStfzQXl0eu5GdYszYzuyv8jKAyYI66ZA9s Zg0yq7Bl76vIFJ3OxxKwS1XLlPCq9edGHxe37P3EwOQUy+P1Fk1vaIwCFf79XVxW ljsE6h1skmK/BUi4VZdP3FRmc69rRUIR6nMT1MHd4G9HVnVUGiXIPncwu2ouh4XI QtRIh7otHNOfMwRZPm+8K6T6oTJZbvJ6jYuGiho4QFNOYoV9curQycjWqkADtUGF RAtIwcNd+To98fasXRy/so0uPiTVHDV7i6RIml0Z88LVnYO83J3e5CfmIwk= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:25 2025 by rpki-client