$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa File: d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa (raw, json) Hash identifier: GkJ7jz8tyBlj1pzpM5++IpWtQwRZ/mQxNknKtzwr/hY= Subject key identifier: 08:AA:07:66:51:05:FD:D1:68:5E:3D:5A:42:CE:CA:77:29:E3:30:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68A4B7153077BBB3C0A34D50FCC79DF34C7FF29D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa Signing time: Fri 05 Sep 2025 00:30:16 +0000 ROA not before: Fri 05 Sep 2025 00:30:16 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a4:b7:15:30:77:bb:b3:c0:a3:4d:50:fc:c7:9d:f3:4c:7f:f2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 00:30:16 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=99f40fe2ad26b325a27f2e35618cd3cc8a47a1dc6e09f19d55be425fc29b00d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:7b:83:8d:0b:15:68:b3:db:38:7b:90:32: c0:57:21:dc:b5:46:28:63:19:a9:ca:d8:ab:12:c1: ca:04:c5:2d:b1:5c:b0:f2:03:f1:de:89:2c:b3:70: 17:e7:f8:14:e3:a7:d8:2f:56:01:0a:51:8a:86:45: 2b:87:4f:59:f3:ac:ba:8a:6b:07:a9:32:aa:fb:a0: 0c:20:2c:bc:4f:a3:08:eb:99:37:19:e9:00:75:45: d1:c1:95:ef:5b:28:57:5a:66:f9:36:f8:9e:56:67: 22:06:a9:ca:77:b8:7f:ca:16:a9:9c:ed:81:35:3d: 2b:c8:cb:6b:a6:9f:bd:e1:26:2a:26:95:92:6a:5c: b6:2a:06:66:02:91:15:a1:d2:7e:88:4d:b9:b8:17: bf:8c:2b:a3:c6:5c:d8:9a:de:c8:ed:92:e0:d6:22: 9b:ca:10:b3:0b:2d:47:8a:44:e5:77:3e:ed:bc:a9: 17:76:75:74:7c:33:94:d2:fa:5d:ab:4c:51:57:79: ef:73:3f:31:c9:fd:3f:46:ca:29:08:17:e9:6b:da: e4:23:67:8e:35:44:31:1b:9c:e9:36:d0:7f:38:25: cf:ba:59:f4:dc:05:77:b7:3b:b8:d6:ff:e0:51:ca: e2:00:58:35:19:de:c1:b2:7e:bf:45:95:f1:5f:69: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AA:07:66:51:05:FD:D1:68:5E:3D:5A:42:CE:CA:77:29:E3:30:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.16.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:13:29:b8:21:dc:36:49:35:96:55:2e:71:d1:bb:31:f3:92: b2:88:0a:68:b6:1c:c8:5c:7d:42:c0:f6:6e:9f:40:39:d4:77: f7:86:64:f5:62:61:68:39:fb:7d:07:ab:55:8d:1f:b5:1e:40: 23:f0:6b:aa:f8:9c:01:8a:da:c7:d9:5e:b9:4e:3f:e8:28:a4: 36:29:de:1c:33:59:2e:90:6f:96:16:5f:7a:5a:e4:ad:2e:e8: c9:ae:42:69:16:15:a3:fe:ec:e9:62:3b:b0:e7:5c:5f:ba:ea: 35:6a:8d:5d:b6:ce:4b:68:e5:d9:62:ca:ca:36:78:7c:c2:62: 49:3a:92:7e:dc:1a:d6:30:34:3b:9d:47:2e:76:cd:9b:dc:c2: 98:70:52:5e:ee:23:16:00:f3:67:7a:5e:b2:72:d7:e6:25:e2: 77:9e:fd:44:53:58:62:88:7a:ae:58:cd:4a:79:88:9f:1e:a3: 8e:68:20:cb:49:8e:0e:46:94:c7:b1:77:c6:04:65:61:8b:21: 74:2c:e4:88:f7:f2:e2:93:9e:c0:79:ba:5b:96:4d:a1:76:17: 15:3b:37:d6:7e:2a:2e:04:3f:e2:a2:16:53:bf:62:22:b4:85: 93:08:31:7a:ed:55:00:fc:b5:28:48:2b:2e:3d:a5:73:81:a2: bd:7e:47:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaKS3FTB3u7PAo01Q/Med80x/8p0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAzMDE2WhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWY0MGZlMmFkMjZiMzI1YTI3ZjJlMzU2MThjZDNjYzhh NDdhMWRjNmUwOWYxOWQ1NWJlNDI1ZmMyOWIwMGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMlnuDjQsVaLPbOHuQMsBXIdy1RihjGanK2KsSwcoExS2x XLDyA/HeiSyzcBfn+BTjp9gvVgEKUYqGRSuHT1nzrLqKawepMqr7oAwgLLxPowjr mTcZ6QB1RdHBle9bKFdaZvk2+J5WZyIGqcp3uH/KFqmc7YE1PSvIy2umn73hJiom lZJqXLYqBmYCkRWh0n6ITbm4F7+MK6PGXNia3sjtkuDWIpvKELMLLUeKROV3Pu28 qRd2dXR8M5TS+l2rTFFXee9zPzHJ/T9GyikIF+lr2uQjZ441RDEbnOk20H84Jc+6 WfTcBXe3O7jW/+BRyuIAWDUZ3sGyfr9FlfFfadR/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCKoHZlEF/dFoXj1aQs7KdynjMDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ZGQzYmIxLWJhNDMtNDRjYS05Y2Q1LTU2MGQ3ODVjOTRhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/hAwDQYJKoZIhvcNAQELBQADggEBAH4TKbgh3DZJNZZVLnHRuzHzkrKI Cmi2HMhcfULA9m6fQDnUd/eGZPViYWg5+30Hq1WNH7UeQCPwa6r4nAGK2sfZXrlO P+gopDYp3hwzWS6Qb5YWX3pa5K0u6MmuQmkWFaP+7OliO7DnXF+66jVqjV22zkto 5dliyso2eHzCYkk6kn7cGtYwNDudRy52zZvcwphwUl7uIxYA82d6XrJy1+Yl4nee /URTWGKIeq5YzUp5iJ8eo45oIMtJjg5GlMexd8YEZWGLIXQs5Ij38uKTnsB5uluW TaF2FxU7N9Z+Ki4EP+KiFlO/YiK0hZMIMXrtVQD8tShIKy49pXOBor1+RwI= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:37 2025 by rpki-client