$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa File: cd97473f-265a-4062-bab9-aefacb0e51a0.roa (raw, json) Hash identifier: dH1J1Ku/qW70a2WJ6umkc8+e0MQukhfubkz3sOqpkgc= Subject key identifier: 04:88:06:3B:79:A5:63:01:93:B8:80:E2:9D:AF:E9:79:80:60:6A:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 301515AB3E3C0B257922AB55258E52EC19C3D9D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa Signing time: Sat 30 Aug 2025 00:11:27 +0000 ROA not before: Sat 30 Aug 2025 00:11:27 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:15:15:ab:3e:3c:0b:25:79:22:ab:55:25:8e:52:ec:19:c3:d9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:11:27 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=48488aa0519707674c5a0f9e28b63370da98277e14a29f703a67b773b0792123, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:68:a1:ec:b1:13:0d:81:90:75:56:d4:c3: 03:84:aa:76:2c:e6:46:19:fa:51:c9:13:a7:bc:de: 4e:51:f9:00:42:f1:93:3b:dd:80:81:7b:65:eb:ce: 56:ff:d5:c3:9f:df:44:b6:55:36:a3:6d:ca:07:05: c2:ea:f3:90:8c:45:ee:41:03:24:11:55:c0:0a:67: 7b:e0:3a:7c:36:02:bb:ea:aa:cb:1f:d4:c5:6c:32: 32:a9:b2:72:1f:bf:2f:36:b3:75:bc:4d:68:27:25: 68:d1:69:81:f8:e7:7a:f3:c2:a7:8f:cc:fd:60:de: 5e:12:d0:7c:b0:0a:7a:d5:6a:fb:03:c2:8e:1b:a4: 36:38:7a:04:be:cf:7f:ea:ed:64:a5:5f:c0:17:be: ae:9a:02:98:a9:59:1b:c3:e4:10:5e:1d:e4:43:0b: 28:e0:e2:4e:39:77:ca:01:fe:4d:03:4d:ae:5d:75: c2:33:7a:59:0a:92:b3:94:13:d2:8f:16:4f:f5:84: 40:d3:db:d8:a6:5a:3d:e8:22:b1:1f:91:7d:05:be: 23:6d:5a:b2:95:d8:cf:de:f6:be:bc:e6:42:74:e5: 9b:e8:91:a3:90:d8:db:3e:6f:86:79:70:56:9d:cb: 08:c2:35:62:47:39:29:c5:6d:bc:08:23:37:30:10: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:06:3B:79:A5:63:01:93:B8:80:E2:9D:AF:E9:79:80:60:6A:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.209.0/24 Signature Algorithm: sha256WithRSAEncryption 73:4c:78:55:bf:47:cb:03:13:23:15:c0:40:e4:27:be:1a:39: fb:54:c5:62:2f:fd:b1:91:6c:ea:34:09:6f:29:f9:4f:31:62: b8:17:2c:11:e1:43:8f:6b:7b:a1:2a:be:72:17:e8:76:65:c0: 4e:19:8f:10:89:fd:b2:d9:76:bd:9f:40:f7:b7:a6:bc:1f:ac: 3b:85:3f:6b:c6:a7:93:18:34:1a:fb:74:a9:e3:eb:24:1e:a3: 0b:dd:e7:22:56:b5:d3:ec:5f:ef:f6:3e:8b:c7:28:d8:92:fa: 8a:90:8c:3c:e6:24:e9:7d:63:9b:c9:e3:4c:47:30:17:c2:95: 8e:d4:67:56:3a:d5:cc:89:11:00:9f:c5:da:58:15:1d:bf:07: c2:09:1f:af:cb:a4:4a:ad:42:83:8f:85:53:aa:47:5c:fc:93: 5c:e1:7a:ee:9e:7f:cc:72:cd:67:d9:cf:16:9f:b7:ff:b3:da: 83:21:59:5d:80:11:dc:3e:98:b5:8e:e6:55:c4:d6:88:51:4e: 28:40:8a:9e:32:23:7a:a0:e8:90:81:f2:f2:48:34:d5:2b:5b: 2f:c2:bd:96:28:1c:61:75:22:96:8f:d9:53:33:e7:4e:46:92: e6:ad:d7:84:70:5d:23:2e:46:bb:6c:d1:3f:86:df:2e:05:70: 79:74:25:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMBUVqz48CyV5IqtVJY5S7BnD2dMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAxMTI3WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODQ4OGFhMDUxOTcwNzY3NGM1YTBmOWUyOGI2MzM3MGRh OTgyNzdlMTRhMjlmNzAzYTY3Yjc3M2IwNzkyMTIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Wmih7LETDYGQdVbUwwOEqnYs5kYZ+lHJE6e83k5R+QBC 8ZM73YCBe2Xrzlb/1cOf30S2VTajbcoHBcLq85CMRe5BAyQRVcAKZ3vgOnw2Arvq qssf1MVsMjKpsnIfvy82s3W8TWgnJWjRaYH453rzwqePzP1g3l4S0HywCnrVavsD wo4bpDY4egS+z3/q7WSlX8AXvq6aApipWRvD5BBeHeRDCyjg4k45d8oB/k0DTa5d dcIzelkKkrOUE9KPFk/1hEDT29imWj3oIrEfkX0FviNtWrKV2M/e9r685kJ05Zvo kaOQ2Ns+b4Z5cFadywjCNWJHOSnFbbwIIzcwEN1jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBIgGO3mlYwGTuIDina/peYBgajowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkOTc0NzNmLTI2NWEtNDA2Mi1iYWI5LWFlZmFjYjBlNTFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFdEwDQYJKoZIhvcNAQELBQADggEBAHNMeFW/R8sDEyMVwEDkJ74aOftU xWIv/bGRbOo0CW8p+U8xYrgXLBHhQ49re6EqvnIX6HZlwE4ZjxCJ/bLZdr2fQPe3 prwfrDuFP2vGp5MYNBr7dKnj6yQeowvd5yJWtdPsX+/2PovHKNiS+oqQjDzmJOl9 Y5vJ40xHMBfClY7UZ1Y61cyJEQCfxdpYFR2/B8IJH6/LpEqtQoOPhVOqR1z8k1zh eu6ef8xyzWfZzxaft/+z2oMhWV2AEdw+mLWO5lXE1ohRTihAip4yI3qg6JCB8vJI NNUrWy/CvZYoHGF1IpaP2VMz505Gkuat14RwXSMuRrts0T+G3y4FcHl0Jeg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:46 2025 by rpki-client