$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa File: ef251cf4-ade4-418e-b4fb-7951801e00bc.roa (raw, json) Hash identifier: LrrqnGvgtIBcdSjfn/MuaGGxd4hSrx/u0msCwUAjavw= Subject key identifier: 8C:91:B9:88:A5:6C:69:01:B4:19:57:27:D1:13:EC:6A:51:EA:CE:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55881C7622B93A9433BB7F2556CF04D8E1B91F45 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa Signing time: Wed 27 Aug 2025 00:51:42 +0000 ROA not before: Wed 27 Aug 2025 00:51:42 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:1c:76:22:b9:3a:94:33:bb:7f:25:56:cf:04:d8:e1:b9:1f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:51:42 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=1c1c44e44dcad07c0817b2e9f1298a271dc121414a19c4a17c92ce1d64eda54c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:4f:04:aa:8c:83:a0:ec:c0:41:97:a6:27: 16:92:cb:11:bb:d6:3b:06:e6:7b:99:ae:a8:21:c3: 98:e3:5d:ae:b6:b5:b8:eb:49:7d:37:60:ad:49:96: 84:4e:c5:35:e9:e4:06:5e:24:ec:36:3f:80:0c:19: d7:e9:73:1e:61:f5:b6:c7:9a:57:ca:46:7d:99:2d: cb:bf:3c:88:70:6a:0a:d9:a1:ff:aa:e7:7b:a7:fb: 7f:3b:4f:bc:52:46:b1:2e:94:c5:b7:37:e1:07:03: 84:08:db:36:cb:2e:ac:38:35:21:d1:f6:7f:09:af: e3:27:3b:36:d7:87:d1:7a:63:ae:a1:fb:bd:aa:cb: e5:95:0e:76:ad:b5:96:27:33:23:db:e6:c6:90:b6: a0:4d:a0:36:c8:8e:14:4d:5b:28:45:f6:17:d1:9a: 50:d2:77:60:59:8b:4d:40:e8:ab:0b:3f:89:3e:b5: ad:5d:69:79:ab:90:75:87:cf:ef:84:b5:bd:b8:b1: a9:22:13:41:64:68:60:f9:ab:4f:ea:34:5f:aa:89: 42:fd:38:98:89:d8:6f:66:0e:8f:12:bf:a1:0b:ea: 26:6a:97:e7:d3:9a:9f:f1:ab:6f:07:4e:38:e7:76: f3:93:a6:8e:05:81:87:f2:72:5b:11:c7:fd:de:51: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:B9:88:A5:6C:69:01:B4:19:57:27:D1:13:EC:6A:51:EA:CE:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef251cf4-ade4-418e-b4fb-7951801e00bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.218.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:8b:57:09:53:ef:ed:20:4d:10:c9:f3:09:7d:3c:c0:17:ba: a7:ae:14:8f:9a:b6:0f:30:4b:bb:33:7f:95:25:ed:d6:2d:5a: 6f:55:b3:31:5b:a8:f4:da:cf:d7:62:a6:78:d9:a9:95:a9:35: 67:24:9f:46:f7:8d:ce:99:42:db:75:28:53:41:7e:da:7e:61: 55:af:d5:1b:9e:fc:00:bb:c9:71:01:70:68:62:6e:49:30:ae: f3:67:89:c9:60:44:93:c4:e0:fc:57:15:99:14:a1:d8:f7:d5: 55:1a:22:2f:67:1f:13:a0:b7:a4:04:f9:29:31:6d:4c:fd:3b: 39:16:d8:fb:30:44:6c:ac:c4:03:1f:5d:b4:65:c6:a8:10:8b: 14:cc:70:d8:1e:15:fc:84:44:e6:1a:4b:0a:70:6f:19:ff:a3: 08:c7:70:b4:54:c6:a4:77:85:f2:cf:fd:94:a2:9f:57:a7:26: 77:c7:55:0d:ce:a8:59:03:f7:82:c4:3d:63:51:80:bc:71:93: 66:0a:8d:64:9d:7c:d4:c0:be:b8:05:f3:95:d2:ac:4b:f2:88: 4c:41:26:53:38:cf:6d:4c:61:e0:82:65:55:75:01:75:8c:01: 8d:0f:12:30:4f:ce:fe:09:91:96:90:2b:75:3c:70:6f:89:47: cb:56:d4:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVYgcdiK5OpQzu38lVs8E2OG5H0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA1MTQyWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzFjNDRlNDRkY2FkMDdjMDgxN2IyZTlmMTI5OGEyNzFk YzEyMTQxNGExOWM0YTE3YzkyY2UxZDY0ZWRhNTRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Ak8EqoyDoOzAQZemJxaSyxG71jsG5nuZrqghw5jjXa62 tbjrSX03YK1JloROxTXp5AZeJOw2P4AMGdfpcx5h9bbHmlfKRn2ZLcu/PIhwagrZ of+q53un+387T7xSRrEulMW3N+EHA4QI2zbLLqw4NSHR9n8Jr+MnOzbXh9F6Y66h +72qy+WVDnattZYnMyPb5saQtqBNoDbIjhRNWyhF9hfRmlDSd2BZi01A6KsLP4k+ ta1daXmrkHWHz++Etb24sakiE0FkaGD5q0/qNF+qiUL9OJiJ2G9mDo8Sv6EL6iZq l+fTmp/xq28HTjjndvOTpo4FgYfyclsRx/3eUaWBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjJG5iKVsaQG0GVcn0RPsalHqzsYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMjUxY2Y0LWFkZTQtNDE4ZS1iNGZiLTc5NTE4MDFlMDBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM7NowDQYJKoZIhvcNAQELBQADggEBAJ+LVwlT7+0gTRDJ8wl9PMAXuqeu FI+atg8wS7szf5Ul7dYtWm9VszFbqPTaz9dipnjZqZWpNWckn0b3jc6ZQtt1KFNB ftp+YVWv1Rue/AC7yXEBcGhibkkwrvNniclgRJPE4PxXFZkUodj31VUaIi9nHxOg t6QE+SkxbUz9OzkW2PswRGysxAMfXbRlxqgQixTMcNgeFfyEROYaSwpwbxn/owjH cLRUxqR3hfLP/ZSin1enJnfHVQ3OqFkD94LEPWNRgLxxk2YKjWSdfNTAvrgF85XS rEvyiExBJlM4z21MYeCCZVV1AXWMAY0PEjBPzv4JkZaQK3U8cG+JR8tW1I0= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:05 2025 by rpki-client