$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8afda36-33f2-4f62-9b5a-0c60c6d9ee05.roa File: f8afda36-33f2-4f62-9b5a-0c60c6d9ee05.roa (raw, json) Hash identifier: qeAGkbh9SULe3pmrcz6GBCuaB9Z80CpNjPvgUc0hvVc= Subject key identifier: 51:48:CF:8F:73:9B:43:96:2C:3F:0D:BE:0A:C6:D4:28:E4:77:48:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F82343BE83178601E0BC5A1ABB0D4DD5337E763 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8afda36-33f2-4f62-9b5a-0c60c6d9ee05.roa Signing time: Sat 30 Aug 2025 00:51:09 +0000 ROA not before: Sat 30 Aug 2025 00:51:09 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 72.44.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:82:34:3b:e8:31:78:60:1e:0b:c5:a1:ab:b0:d4:dd:53:37:e7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:51:09 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=525e523373f5c2f8a8232689e7b763d76d2ec75762606a212e2f7d4365e7e604, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:c9:1f:12:1b:6e:e3:e5:ef:9f:b2:2b:b0: 99:07:09:90:e6:a9:37:4c:ce:29:bf:09:a3:2b:4c: 03:d9:eb:24:90:86:ad:3e:ee:9d:25:88:96:05:d1: 3a:bc:67:a0:cf:8c:e3:62:90:f6:4d:38:ff:c3:52: 98:3e:e2:89:60:82:f6:70:2f:fe:21:6e:b2:0e:e3: 74:7a:5c:bb:ad:b6:c1:09:84:29:18:05:c8:c3:ba: f9:1e:99:ab:70:8b:1a:08:8b:d5:b4:4a:31:79:f6: da:8a:02:e4:d8:20:e5:e2:10:cc:c9:31:7b:58:0b: 8c:76:87:13:61:89:92:0f:72:2b:52:5a:97:0c:69: 84:18:43:77:4c:57:20:f4:c8:8d:fc:a8:55:ec:2b: a4:88:23:86:6b:93:c2:a3:f2:70:5e:bf:a9:aa:72: e4:95:3a:67:43:5b:67:83:1d:90:cc:5c:f8:f2:39: aa:7a:d7:e1:b4:02:6f:aa:9d:15:82:9c:0e:fd:6f: f6:2d:81:d5:78:02:f7:b0:1c:6b:f1:63:5e:bf:e6: 59:ff:6a:55:08:24:26:9c:e4:b0:89:af:25:c3:27: 4c:c3:63:4a:b6:88:fb:21:68:e5:69:7a:64:d8:e6: 70:7d:d7:b8:74:8b:cb:9a:39:be:2e:4e:33:2f:8e: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:CF:8F:73:9B:43:96:2C:3F:0D:BE:0A:C6:D4:28:E4:77:48:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8afda36-33f2-4f62-9b5a-0c60c6d9ee05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.36.0/22 Signature Algorithm: sha256WithRSAEncryption c0:bd:8a:8a:27:5b:9b:5f:52:ec:d4:3d:af:28:f7:e4:95:f2: 80:94:94:14:3f:ad:18:fb:7e:1d:cf:33:94:9e:d2:33:0a:5b: cf:0f:72:dd:d5:cb:e2:58:15:ed:88:fe:be:f6:b1:70:d2:76: 07:0d:83:e1:54:48:95:3e:7e:fd:2e:02:05:33:8d:96:af:0d: 0b:cf:8d:ad:2c:04:c9:0e:ec:1e:1b:6f:0b:fa:b9:aa:93:f2: d6:e4:26:be:f4:1b:b7:f9:3f:ff:00:ce:be:cb:27:b5:87:9b: ed:48:9c:a4:13:65:8f:b9:ad:e3:55:77:a2:19:69:27:0e:a2: 39:b1:7f:e1:75:1f:82:53:e0:4e:26:7a:e5:80:16:b9:db:6c: 7a:ca:ad:59:6b:05:cb:0e:7b:3f:f0:72:0a:5d:a0:88:4c:94: 82:b1:05:40:f1:9e:2b:1f:73:57:9a:89:0d:eb:95:89:e9:0d: 56:ac:8b:b5:0b:a9:44:f4:ca:68:64:c0:53:7c:ec:f7:88:3f: 5d:80:07:91:4c:ed:74:84:f9:5c:dc:8e:fd:88:8a:ad:76:7c: 75:09:c1:32:27:ae:d3:b5:9e:ed:12:f1:55:13:13:ff:e2:4d: 12:b4:9f:98:da:7f:fa:57:d3:fa:21:f9:79:5f:12:8c:e8:24: d1:c9:19:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX4I0O+gxeGAeC8Whq7DU3VM352MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA1MTA5WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjVlNTIzMzczZjVjMmY4YTgyMzI2ODllN2I3NjNkNzZk MmVjNzU3NjI2MDZhMjEyZTJmN2Q0MzY1ZTdlNjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7EskfEhtu4+Xvn7IrsJkHCZDmqTdMzim/CaMrTAPZ6ySQ hq0+7p0liJYF0Tq8Z6DPjONikPZNOP/DUpg+4olggvZwL/4hbrIO43R6XLuttsEJ hCkYBcjDuvkematwixoIi9W0SjF59tqKAuTYIOXiEMzJMXtYC4x2hxNhiZIPcitS WpcMaYQYQ3dMVyD0yI38qFXsK6SII4Zrk8Kj8nBev6mqcuSVOmdDW2eDHZDMXPjy Oap61+G0Am+qnRWCnA79b/YtgdV4AvewHGvxY16/5ln/alUIJCac5LCJryXDJ0zD Y0q2iPshaOVpemTY5nB917h0i8uaOb4uTjMvjvlHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUUjPj3ObQ5YsPw2+CsbUKOR3SGIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4YWZkYTM2LTMzZjItNGY2Mi05YjVhLTBjNjBjNmQ5ZWUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJILCQwDQYJKoZIhvcNAQELBQADggEBAMC9ioonW5tfUuzUPa8o9+SV8oCU lBQ/rRj7fh3PM5Se0jMKW88Pct3Vy+JYFe2I/r72sXDSdgcNg+FUSJU+fv0uAgUz jZavDQvPja0sBMkO7B4bbwv6uaqT8tbkJr70G7f5P/8Azr7LJ7WHm+1InKQTZY+5 reNVd6IZaScOojmxf+F1H4JT4E4meuWAFrnbbHrKrVlrBcsOez/wcgpdoIhMlIKx BUDxnisfc1eaiQ3rlYnpDVasi7ULqUT0ymhkwFN87PeIP12AB5FM7XSE+Vzcjv2I iq12fHUJwTInrtO1nu0S8VUTE//iTRK0n5jaf/pX0/oh+XlfEozoJNHJGZQ= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:30 2025 by rpki-client