$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa File: d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa (raw, json) Hash identifier: e/XiMuGk7ft6CyeGdQURkbyyf7xcPQNkWz10wZKw6zk= Subject key identifier: 06:D1:F2:54:CA:41:8B:40:7F:96:B7:F5:14:34:23:12:1A:71:8C:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5789284FB7E528FC98CC4E407761F5A20ECDB81D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa Signing time: Mon 11 Aug 2025 15:01:01 +0000 ROA not before: Mon 11 Aug 2025 15:01:01 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 135.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:89:28:4f:b7:e5:28:fc:98:cc:4e:40:77:61:f5:a2:0e:cd:b8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:01:01 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=1da643b9c1d1c8e7f76de4ce769178dca74aa5ca1b4d226c93f67a1d8c84b0f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:9d:f3:d0:0f:e8:f0:ec:2b:87:2f:e4:ab: 07:c8:7b:97:70:3f:58:c7:00:14:29:f0:ab:d3:2d: 24:32:f8:83:68:6c:1e:2c:22:d0:46:57:44:cf:a9: 60:bb:23:96:a8:21:75:66:2c:38:7a:ef:20:a2:3e: 6e:cf:0a:f9:29:2c:0d:68:c1:b5:d9:40:18:8a:3f: d2:91:29:3d:b6:63:a9:c5:9f:d9:1e:1c:44:37:5a: 28:17:8f:91:4a:78:91:08:4a:08:e7:3c:59:33:a0: a3:48:79:d2:c1:b0:e1:6b:f7:85:1f:06:c9:d6:00: a9:be:dc:6e:34:c0:61:15:19:42:c7:15:58:a5:67: a3:a3:b0:c9:e3:c8:b3:c2:e6:a0:be:ac:b6:84:17: bc:79:67:44:92:c6:4b:67:72:f3:61:e8:30:45:76: 20:3f:91:9c:a7:68:c8:63:c1:03:1e:87:d3:72:f4: 13:55:55:e5:dd:6b:de:8a:8d:89:26:4e:58:89:00: b7:df:30:4a:55:5e:77:ac:49:55:15:b8:df:b8:65: c9:d9:12:18:f9:29:58:d4:ce:59:2f:83:72:c0:8f: 72:31:c2:25:c0:15:35:4e:b4:91:ff:88:a4:90:cf: eb:37:09:79:f5:fc:e2:7c:3c:f5:b7:29:67:8b:c6: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:F2:54:CA:41:8B:40:7F:96:B7:F5:14:34:23:12:1A:71:8C:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 14:65:f8:63:f6:b2:5d:75:25:99:df:60:03:2d:7b:4b:ae:01: 05:8b:b6:ee:f8:3e:f9:45:d1:9f:3d:96:98:18:5e:d1:03:ce: 35:1f:2f:ec:fa:1a:51:70:98:20:60:a8:bb:40:01:4b:19:59: bd:63:ab:6a:94:19:5f:9a:5f:ce:51:37:ae:42:0b:e1:c9:d4: b5:cd:e0:6b:60:51:bd:7e:73:d1:8a:a7:2d:5b:9e:b2:25:73: ca:00:8a:e6:b9:ff:61:fe:20:6c:40:7a:27:03:bc:41:23:a6: 43:79:81:cc:3e:da:27:50:29:16:42:aa:f0:54:73:36:d7:c3: f4:31:ac:f2:41:b5:f6:3e:cc:3e:cc:2d:dd:c4:f4:ca:6f:bb: 5c:6b:b2:21:c9:3e:c3:93:dd:37:cf:7e:9a:fa:e5:5d:7e:a2: 1d:07:7a:c7:9e:1b:2f:26:62:0f:44:83:10:1e:0e:0c:0b:90: b2:76:07:19:ee:88:56:bc:49:e9:ee:2d:9a:cd:89:82:c4:2a: ff:f2:2d:bb:36:6a:93:73:10:f8:e8:d3:c9:53:3b:3f:e5:19: 2b:9f:60:f4:09:a5:ff:42:ad:ff:05:1e:92:f8:e3:04:67:a1: 65:58:bf:68:9a:8b:cf:af:e1:47:68:6b:0c:47:2f:67:79:04: 60:79:6d:e5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUV4koT7flKPyYzE5Ad2H1og7NuB0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUwMTAxWhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGE2NDNiOWMxZDFjOGU3Zjc2ZGU0Y2U3NjkxNzhkY2E3 NGFhNWNhMWI0ZDIyNmM5M2Y2N2ExZDhjODRiMGY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3dJ3z0A/o8Owrhy/kqwfIe5dwP1jHABQp8KvTLSQy+INo bB4sItBGV0TPqWC7I5aoIXVmLDh67yCiPm7PCvkpLA1owbXZQBiKP9KRKT22Y6nF n9keHEQ3WigXj5FKeJEISgjnPFkzoKNIedLBsOFr94UfBsnWAKm+3G40wGEVGULH FVilZ6OjsMnjyLPC5qC+rLaEF7x5Z0SSxktncvNh6DBFdiA/kZynaMhjwQMeh9Ny 9BNVVeXda96KjYkmTliJALffMEpVXnesSVUVuN+4ZcnZEhj5KVjUzlkvg3LAj3Ix wiXAFTVOtJH/iKSQz+s3CXn1/OJ8PPW3KWeLxneJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBtHyVMpBi0B/lrf1FDQjEhpxjFIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwY2MyYjllLWRlYTctNDVkOS1iMGM2LTk4YjBkZGVjZTMwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCHFjANBgkqhkiG9w0BAQsFAAOCAQEAFGX4Y/ayXXUlmd9gAy17S64BBYu2 7vg++UXRnz2WmBhe0QPONR8v7PoaUXCYIGCou0ABSxlZvWOrapQZX5pfzlE3rkIL 4cnUtc3ga2BRvX5z0YqnLVuesiVzygCK5rn/Yf4gbEB6JwO8QSOmQ3mBzD7aJ1Ap FkKq8FRzNtfD9DGs8kG19j7MPswt3cT0ym+7XGuyIck+w5PdN89+mvrlXX6iHQd6 x54bLyZiD0SDEB4ODAuQsnYHGe6IVrxJ6e4tms2JgsQq//ItuzZqk3MQ+OjTyVM7 P+UZK59g9Aml/0Kt/wUekvjjBGehZVi/aJqLz6/hR2hrDEcvZ3kEYHlt5Q== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:47 2025 by rpki-client