$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9ead5e-1c9f-4b22-a1f6-d8299f48d30f.roa File: da9ead5e-1c9f-4b22-a1f6-d8299f48d30f.roa (raw, json) Hash identifier: p9tzjaQ+h0/nP+VX/cNMWb+9JXDgI7a2taHapeAkUcE= Subject key identifier: 89:2D:A6:27:1A:3C:77:1A:F1:0E:6C:F1:70:E0:85:48:A7:9E:A9:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39DEC396BC86420EE3C030BF3030891437F1180F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9ead5e-1c9f-4b22-a1f6-d8299f48d30f.roa Signing time: Wed 27 Aug 2025 00:50:22 +0000 ROA not before: Wed 27 Aug 2025 00:50:22 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:de:c3:96:bc:86:42:0e:e3:c0:30:bf:30:30:89:14:37:f1:18:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:50:22 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=a45bc4fe20e9e0a22b48bf2ac6a0e880fe832442a3396567d1de59ba0635d721, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:ec:4e:d4:cc:4c:b6:53:12:82:47:61:36: 33:6c:ad:88:10:c7:22:1a:2c:97:50:04:4a:6b:d0: 05:43:f1:c9:b4:8f:7b:3c:58:c3:7f:05:fd:ad:5b: fa:38:b2:3c:6f:98:5b:34:d7:e1:f8:4a:51:e2:72: 3b:00:86:5e:17:13:47:bc:97:48:70:eb:f9:46:13: 85:cf:02:39:ba:63:b5:75:76:45:29:54:db:19:5f: 1c:81:64:52:ee:7b:e4:db:10:53:27:3d:29:8a:2d: cb:19:ae:04:53:12:16:ff:f2:23:7c:d9:88:24:a4: 10:f4:f6:27:1f:0b:7c:49:76:1f:ce:49:f0:4c:2f: a6:13:8d:3f:4a:38:bf:cb:4f:67:07:43:8b:29:8f: b4:80:33:7d:39:03:c3:63:5f:a6:56:e1:60:d4:87: e6:50:e2:b4:72:de:29:68:bc:1b:2a:65:17:e7:af: e5:d8:23:04:83:66:42:78:05:4b:22:c6:33:81:f9: af:27:6d:17:b7:b3:7e:e1:f2:b0:dd:9f:70:3d:19: 3f:e6:46:24:fc:07:a4:b0:44:6b:3c:54:cf:4c:6a: 80:df:16:a3:37:dd:c4:b3:32:1d:40:c6:89:a0:0f: 18:df:cb:2d:a7:83:8c:79:47:60:eb:96:d1:bb:b7: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:A6:27:1A:3C:77:1A:F1:0E:6C:F1:70:E0:85:48:A7:9E:A9:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9ead5e-1c9f-4b22-a1f6-d8299f48d30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.0.0/19 Signature Algorithm: sha256WithRSAEncryption 24:5e:f8:c2:e3:b2:f8:70:76:bb:d1:ee:75:f8:58:38:ec:69: 95:d4:86:5b:15:4f:30:17:9f:12:5e:1c:5e:4f:f2:ab:c2:f4: f7:1d:f0:16:f6:a6:df:06:5f:89:dd:99:e2:c6:3e:09:ca:41: b7:1d:d6:a2:a3:80:e1:14:ea:88:91:16:38:09:60:b7:da:70: 30:c4:ba:54:01:25:15:f7:5c:b0:63:73:f3:7f:d5:17:05:98: bf:a8:89:02:9c:f2:7f:76:a8:71:29:73:25:90:91:e3:5e:a1: 68:42:f7:b9:e4:c7:da:b1:b3:35:e1:02:dc:f2:a0:3b:a3:07: cb:a6:a6:b1:09:8c:f0:e7:d2:da:60:4e:94:9a:7c:17:b7:83: 9b:b6:5c:5e:c3:e7:43:57:e9:7d:63:39:71:ce:67:92:fe:bc: 32:b6:ba:f2:0d:50:66:58:46:25:83:1e:3c:59:e2:9c:53:dc: 11:8b:a3:6a:bd:ea:4f:a1:4f:eb:14:33:1b:f8:fd:5c:50:1b: 2a:52:48:0a:19:1d:1b:24:44:7a:b0:8a:5c:10:df:3e:5a:51: b6:c6:da:37:74:02:c6:93:8c:9a:ad:9c:7f:97:62:70:c7:ea: be:18:eb:5a:72:e6:d9:6a:2c:c0:17:7a:1b:b2:27:98:1e:23: 59:40:79:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOd7DlryGQg7jwDC/MDCJFDfxGA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA1MDIyWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDViYzRmZTIwZTllMGEyMmI0OGJmMmFjNmEwZTg4MGZl ODMyNDQyYTMzOTY1NjdkMWRlNTliYTA2MzVkNzIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrsuxO1MxMtlMSgkdhNjNsrYgQxyIaLJdQBEpr0AVD8cm0 j3s8WMN/Bf2tW/o4sjxvmFs01+H4SlHicjsAhl4XE0e8l0hw6/lGE4XPAjm6Y7V1 dkUpVNsZXxyBZFLue+TbEFMnPSmKLcsZrgRTEhb/8iN82YgkpBD09icfC3xJdh/O SfBML6YTjT9KOL/LT2cHQ4spj7SAM305A8NjX6ZW4WDUh+ZQ4rRy3ilovBsqZRfn r+XYIwSDZkJ4BUsixjOB+a8nbRe3s37h8rDdn3A9GT/mRiT8B6SwRGs8VM9MaoDf FqM33cSzMh1AxomgDxjfyy2ng4x5R2DrltG7t1I/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiS2mJxo8dxrxDmzxcOCFSKeeqQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhOWVhZDVlLTFjOWYtNGIyMi1hMWY2LWQ4Mjk5ZjQ4ZDMwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWugQAwDQYJKoZIhvcNAQELBQADggEBACRe+MLjsvhwdrvR7nX4WDjsaZXU hlsVTzAXnxJeHF5P8qvC9Pcd8Bb2pt8GX4ndmeLGPgnKQbcd1qKjgOEU6oiRFjgJ YLfacDDEulQBJRX3XLBjc/N/1RcFmL+oiQKc8n92qHEpcyWQkeNeoWhC97nkx9qx szXhAtzyoDujB8umprEJjPDn0tpgTpSafBe3g5u2XF7D50NX6X1jOXHOZ5L+vDK2 uvINUGZYRiWDHjxZ4pxT3BGLo2q96k+hT+sUMxv4/VxQGypSSAoZHRskRHqwilwQ 3z5aUbbG2jd0AsaTjJqtnH+XYnDH6r4Y61py5tlqLMAXehuyJ5geI1lAeeg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:25 2025 by rpki-client