$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d72906-944e-4bc2-af72-c6e35bbdf545.roa File: e0d72906-944e-4bc2-af72-c6e35bbdf545.roa (raw, json) Hash identifier: PjGEwFfaMUkGj4JblB8ds8HGE9SDTEw2UaXsKnB1ZtQ= Subject key identifier: C3:63:BE:2B:5D:A3:A6:4A:30:29:53:FC:DD:C1:B6:C0:09:FE:89:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65FC77489D965D04136BF29271D7357730B580FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d72906-944e-4bc2-af72-c6e35bbdf545.roa Signing time: Mon 01 Sep 2025 15:20:17 +0000 ROA not before: Mon 01 Sep 2025 15:20:17 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fc:77:48:9d:96:5d:04:13:6b:f2:92:71:d7:35:77:30:b5:80:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:20:17 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=d7ecb92409927a54bf7950de19e0fcd74d62d4d18f4b3cd3d179fa4a9f8842cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:75:80:0c:df:65:6e:c6:ad:f2:00:2e:48: d5:86:7c:98:bd:49:5d:39:83:48:98:98:a0:8e:bd: 5d:ea:71:0b:a1:92:a5:8a:0e:35:15:8f:4c:c7:5f: d5:de:af:e1:22:f7:cd:c7:2e:37:7d:5d:32:ac:a0: d5:a8:8e:95:b3:c7:4c:b2:08:38:06:44:18:48:4a: d1:89:98:c3:d8:32:36:59:24:dd:4b:bb:50:38:29: d0:8d:32:6d:38:0e:49:76:3a:c4:5e:a8:74:7d:de: e5:e4:09:3b:93:eb:99:3a:16:96:89:8a:1a:c1:b0: 3c:3d:e1:c3:36:ce:eb:bc:83:8a:28:c9:c0:0f:02: e7:14:03:1b:48:c7:7c:dd:93:50:f9:34:37:6d:4c: 20:4a:bc:06:c1:6f:66:06:3f:ba:75:49:90:32:d7: f0:63:7e:8c:1e:0a:17:b9:b3:ca:60:0a:30:25:46: cf:e9:a6:7d:e1:de:a7:51:f4:57:e8:9f:6f:f3:6f: c5:a2:01:32:ad:92:37:de:b5:e4:14:e9:5b:e4:18: e0:ac:03:cd:ab:c2:75:1a:9a:93:ea:b8:90:a6:1d: 72:3f:da:ea:4a:9b:f6:59:f8:94:d6:da:3f:69:fd: e1:ae:65:22:3b:6c:a4:be:f5:aa:5e:b2:62:9a:66: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:BE:2B:5D:A3:A6:4A:30:29:53:FC:DD:C1:B6:C0:09:FE:89:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d72906-944e-4bc2-af72-c6e35bbdf545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.160.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d9:cd:9d:21:7d:da:8e:c6:23:b6:3d:d7:10:56:35:fc:db: 41:13:10:d9:09:ab:3a:64:b2:1c:91:a4:da:b2:7d:a0:8e:85: 29:0c:6e:0c:9f:e8:7f:09:39:c1:b4:5e:1e:66:01:7c:91:e3: 7e:7a:2a:d5:ee:f2:04:93:6f:e2:88:2f:29:c1:1c:1e:94:a0: b2:d2:03:de:7f:ac:60:fb:5e:8b:b9:84:e9:26:45:6c:3e:fc: 62:93:98:99:a9:10:1d:dc:ef:88:63:ec:c5:1e:df:77:c5:a0: 3d:3e:17:30:e1:74:9a:15:8a:2a:30:54:16:a4:8c:05:ce:3c: f4:45:06:95:66:75:bd:95:c4:0b:87:1f:a3:52:80:d8:b2:1e: a4:86:82:65:2b:5f:6d:8d:58:08:c1:f9:03:92:65:ac:57:99: 56:f1:73:ca:70:a7:ff:85:75:2f:64:96:61:6a:34:a0:e1:2b: a7:9d:0d:67:6b:37:9d:65:84:f3:3b:a6:9c:96:88:c7:6b:25: 02:1f:e5:85:d3:ab:aa:de:df:6a:9f:be:da:ef:53:c3:5a:3a: a3:6a:84:77:a7:b6:82:41:3c:e5:d2:a3:6f:4f:1a:39:b2:0b: fc:44:4a:ed:0e:d8:05:45:77:9c:9d:e4:65:74:ba:06:aa:b5: 16:6d:18:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZfx3SJ2WXQQTa/KScdc1dzC1gP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUyMDE3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2VjYjkyNDA5OTI3YTU0YmY3OTUwZGUxOWUwZmNkNzRk NjJkNGQxOGY0YjNjZDNkMTc5ZmE0YTlmODg0MmNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjeXWADN9lbsat8gAuSNWGfJi9SV05g0iYmKCOvV3qcQuh kqWKDjUVj0zHX9Xer+Ei983HLjd9XTKsoNWojpWzx0yyCDgGRBhIStGJmMPYMjZZ JN1Lu1A4KdCNMm04Dkl2OsReqHR93uXkCTuT65k6FpaJihrBsDw94cM2zuu8g4oo ycAPAucUAxtIx3zdk1D5NDdtTCBKvAbBb2YGP7p1SZAy1/BjfoweChe5s8pgCjAl Rs/ppn3h3qdR9Ffon2/zb8WiATKtkjfeteQU6VvkGOCsA82rwnUampPquJCmHXI/ 2upKm/ZZ+JTW2j9p/eGuZSI7bKS+9apesmKaZjnFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw2O+K12jpkowKVP83cG2wAn+iRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwZDcyOTA2LTk0NGUtNGJjMi1hZjcyLWM2ZTM1YmJkZjU0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKBaAwDQYJKoZIhvcNAQELBQADggEBAILZzZ0hfdqOxiO2PdcQVjX820ET ENkJqzpkshyRpNqyfaCOhSkMbgyf6H8JOcG0Xh5mAXyR4356KtXu8gSTb+KILynB HB6UoLLSA95/rGD7Xou5hOkmRWw+/GKTmJmpEB3c74hj7MUe33fFoD0+FzDhdJoV iiowVBakjAXOPPRFBpVmdb2VxAuHH6NSgNiyHqSGgmUrX22NWAjB+QOSZaxXmVbx c8pwp/+FdS9klmFqNKDhK6edDWdrN51lhPM7ppyWiMdrJQIf5YXTq6re32qfvtrv U8NaOqNqhHentoJBPOXSo29PGjmyC/xESu0O2AVFd5yd5GV0ugaqtRZtGFw= -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:10 2025 by rpki-client