$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa File: e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa (raw, json) Hash identifier: /E0zDVMAbHFZAyjO63hMpi2qnIKD7cKnMzgEmr6u7JM= Subject key identifier: 12:36:42:19:17:4B:9D:E7:D4:2F:6F:C3:04:82:F2:2D:DA:D0:CA:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07C237B658B3D02514E4757BACC5F98030F135A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa Signing time: Wed 03 Sep 2025 00:01:43 +0000 ROA not before: Wed 03 Sep 2025 00:01:43 +0000 ROA not after: Wed 08 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 134.251.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c2:37:b6:58:b3:d0:25:14:e4:75:7b:ac:c5:f9:80:30:f1:35:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 3 00:01:43 2025 GMT Not After : Oct 8 23:59:59 2025 GMT Subject: serialNumber=698220d431ccc7152a6463b56ea205794d25b30c6eeeb919e36305ee7c622db8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:e8:23:a7:fb:e4:22:70:d0:d4:a5:30:38: ce:a3:f2:2a:49:b2:56:24:3e:54:ac:a7:13:85:d9: dc:6a:4d:c9:85:8b:fa:21:a0:24:b5:a5:cc:36:09: 1b:cf:18:cd:75:bc:9d:63:ea:6d:f6:5b:d1:76:4d: 4f:ee:ca:06:9a:f8:31:f6:cc:8b:61:6f:71:8b:2e: 28:9a:7b:2c:1f:52:f1:8d:91:74:a2:71:7e:44:0f: 49:2b:52:e9:69:65:12:a6:6f:7e:6d:2a:a6:d2:6f: 35:aa:9a:d0:b3:1f:04:b7:ce:a8:40:dd:84:31:29: 91:a7:6d:16:26:e2:ad:c3:4d:ac:94:0c:18:dc:36: ee:80:07:87:82:10:f1:11:44:89:ff:ff:28:f1:13: 65:81:4a:c6:cc:70:0a:44:c1:aa:87:2e:2c:c7:6c: 72:cc:dc:44:a4:46:5b:f4:b4:23:7f:4c:56:14:c1: ac:5e:d4:75:47:c4:67:6f:ec:dc:2c:e7:30:9f:d1: 8b:ba:bb:0f:46:89:a3:46:13:e8:f6:ad:e1:15:43: a9:1b:20:3f:8b:41:1c:c7:60:7d:be:00:e3:e4:9a: 9b:51:b8:19:d3:3d:3b:11:d9:56:4e:12:6e:43:43: 25:25:97:78:fe:c2:c1:80:d5:82:32:c4:45:86:20: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:42:19:17:4B:9D:E7:D4:2F:6F:C3:04:82:F2:2D:DA:D0:CA:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.251.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:1a:a3:f1:5c:c6:62:1b:12:82:64:8c:15:0f:fc:a8:d6:4a: 93:01:69:c6:d0:ae:bb:d0:3d:fb:13:ae:06:c7:a7:d3:23:8b: 3d:ff:01:e2:fe:1f:d4:d8:0e:e2:a2:d1:25:6d:ba:ca:c1:bf: 79:98:08:a5:c3:f0:fa:dd:dc:e0:cc:99:a3:5b:f1:46:56:e4: 81:a9:94:5d:ae:5b:58:49:9c:f7:e6:02:5c:e5:3b:70:63:dd: 96:d9:e9:f1:8b:94:10:33:47:9a:02:6c:ac:79:dd:a9:84:93: 45:66:74:1d:59:48:b5:95:74:8d:a3:8f:24:67:3a:24:18:ad: 74:78:ae:04:8a:e8:35:34:31:fa:1d:f8:a0:4e:8f:b2:4c:c9: 1c:26:76:19:2e:44:21:13:8f:0f:e7:73:27:20:b4:3c:66:db: 2e:56:d0:09:58:c8:29:52:7e:6f:f4:78:36:0f:f8:54:2c:23: e0:51:12:d6:b7:5e:63:c0:eb:33:46:a9:ab:0d:f3:cf:f7:7c: 13:5a:59:f8:63:93:4d:8f:bd:21:70:a8:da:cb:30:b4:d0:c9: 49:0a:b6:b0:ef:fc:de:0d:3b:6b:11:1d:e7:6b:4b:c6:8c:d3: 46:07:a4:16:d7:7c:ea:61:9e:bc:78:2f:72:4b:2d:e7:5d:2d: 69:8b:ad:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB8I3tliz0CUU5HV7rMX5gDDxNaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAzMDAwMTQzWhcNMjUxMDA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTgyMjBkNDMxY2NjNzE1MmE2NDYzYjU2ZWEyMDU3OTRk MjViMzBjNmVlZWI5MTllMzYzMDVlZTdjNjIyZGI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1p+gjp/vkInDQ1KUwOM6j8ipJslYkPlSspxOF2dxqTcmF i/ohoCS1pcw2CRvPGM11vJ1j6m32W9F2TU/uygaa+DH2zIthb3GLLiiaeywfUvGN kXSicX5ED0krUulpZRKmb35tKqbSbzWqmtCzHwS3zqhA3YQxKZGnbRYm4q3DTayU DBjcNu6AB4eCEPERRIn//yjxE2WBSsbMcApEwaqHLizHbHLM3ESkRlv0tCN/TFYU waxe1HVHxGdv7Nws5zCf0Yu6uw9GiaNGE+j2reEVQ6kbID+LQRzHYH2+AOPkmptR uBnTPTsR2VZOEm5DQyUll3j+wsGA1YIyxEWGIJYXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEjZCGRdLnefUL2/DBILyLdrQym8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5Y2NkNmQ4LTZlNGEtNDEzYi04NDQyLTQyZTUzZjgzOTkxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCG+zANBgkqhkiG9w0BAQsFAAOCAQEArxqj8VzGYhsSgmSMFQ/8qNZKkwFp xtCuu9A9+xOuBsen0yOLPf8B4v4f1NgO4qLRJW26ysG/eZgIpcPw+t3c4MyZo1vx RlbkgamUXa5bWEmc9+YCXOU7cGPdltnp8YuUEDNHmgJsrHndqYSTRWZ0HVlItZV0 jaOPJGc6JBitdHiuBIroNTQx+h34oE6PskzJHCZ2GS5EIROPD+dzJyC0PGbbLlbQ CVjIKVJ+b/R4Ng/4VCwj4FES1rdeY8DrM0apqw3zz/d8E1pZ+GOTTY+9IXCo2ssw tNDJSQq2sO/83g07axEd52tLxozTRgekFtd86mGevHgvckst510taYutfA== -----END CERTIFICATE-----Generated at Thu Sep 18 10:23:00 2025 by rpki-client