$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcddbf1e-022e-430f-aca7-a70f4ae3a8d2.roa File: fcddbf1e-022e-430f-aca7-a70f4ae3a8d2.roa (raw, json) Hash identifier: zvIoCiKEw/M2HD8VcSmt2g6ZVvDOR85TCMdH5h1cRrs= Subject key identifier: D1:5E:95:62:13:A6:B7:50:D4:0E:B2:3A:3B:31:C2:03:0A:24:54:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04F85BACC79A131FAAD2376D665D715677A3CA11 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcddbf1e-022e-430f-aca7-a70f4ae3a8d2.roa Signing time: Sat 06 Sep 2025 00:51:22 +0000 ROA not before: Sat 06 Sep 2025 00:51:22 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f8:5b:ac:c7:9a:13:1f:aa:d2:37:6d:66:5d:71:56:77:a3:ca:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:51:22 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=c3ad3714ca44cf700d091be286755eb6f0d758e5878ac6332913e8ae1c1b0fe3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:d0:d5:b8:aa:97:7c:4b:1b:a5:55:c0:7f: 4f:9c:27:2a:66:57:d3:97:bf:36:5c:f5:80:37:9b: 69:2f:96:db:22:aa:d7:56:e8:76:56:46:29:f6:d2: 6a:7e:ce:31:92:d3:6b:30:27:73:d4:bd:13:2a:54: e7:4c:9d:6c:91:1c:37:ec:ae:c6:60:90:95:d4:33: 5b:9b:e1:ed:b6:3c:7d:1c:39:97:9b:c1:13:76:f3: 82:64:de:91:4c:02:79:9b:62:03:c2:18:0a:64:ac: 30:52:da:3f:c6:d5:46:26:f6:16:f9:3c:c5:5e:db: 80:62:84:91:c9:a3:10:61:d2:4b:09:76:48:fd:ad: c8:17:f1:cd:f1:db:53:c6:e9:f1:fc:db:ee:18:a3: 23:c8:ca:1f:30:56:be:54:6b:c5:88:d8:44:ba:41: db:ef:12:0d:d9:1d:80:cb:ad:15:f1:e8:8a:f3:6a: 2f:f9:56:5e:04:63:f6:e5:82:24:26:80:a8:94:2b: a5:94:e8:73:d2:55:8a:42:3a:f7:24:f4:2c:4c:01: 9b:44:24:d0:62:fd:03:d7:af:ee:2a:ed:08:56:3a: d7:aa:5d:ef:c8:7f:74:68:a4:2f:b3:3d:a3:89:d5: da:8d:83:62:34:19:1a:92:4f:67:6f:0c:68:8f:0a: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:95:62:13:A6:B7:50:D4:0E:B2:3A:3B:31:C2:03:0A:24:54:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcddbf1e-022e-430f-aca7-a70f4ae3a8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.142.0/24 Signature Algorithm: sha256WithRSAEncryption 36:58:46:37:57:39:f9:3f:07:e9:ed:47:f5:c2:97:17:2a:2a: 4d:2b:bb:67:91:b1:f0:57:63:2c:66:6b:00:44:4e:e2:b1:41: 2e:e2:9f:49:8a:d6:b4:e9:be:9c:de:ee:b7:d1:39:7b:44:eb: 6e:60:f5:64:4b:f6:32:a1:d2:b9:71:15:f1:8d:72:22:33:38: 83:22:1d:0e:4a:54:58:ff:62:a9:25:86:98:5a:79:3d:e7:c0: 81:e7:c5:96:93:48:49:2c:9f:aa:f9:47:e6:72:e4:61:ad:04: fa:92:ab:7e:de:f6:eb:34:9a:a0:7d:3c:e2:91:d5:31:56:86: 96:08:e7:4f:ff:08:55:00:90:01:1d:e1:81:73:ea:b8:38:af: 88:6c:3f:87:c9:5d:b9:36:bd:1e:1d:07:7a:81:0b:e9:2d:86: 98:3b:3d:ae:ae:f1:0e:4c:57:fc:d8:83:0d:7d:07:11:61:c2: 29:d5:3c:6d:32:1c:9b:19:7b:e0:08:8c:7b:f2:c1:e5:df:64: c3:86:6b:96:bc:52:79:e3:c9:91:0f:0d:f5:75:62:05:10:43: 49:01:56:6c:9e:3e:34:8d:93:0b:59:73:ee:30:81:c2:be:42: 9b:d2:6b:36:f1:27:29:41:b3:03:62:d8:3b:66:ae:6a:77:7a: 14:3e:fe:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPhbrMeaEx+q0jdtZl1xVnejyhEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDA1MTIyWhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2FkMzcxNGNhNDRjZjcwMGQwOTFiZTI4Njc1NWViNmYw ZDc1OGU1ODc4YWM2MzMyOTEzZThhZTFjMWIwZmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2lNDVuKqXfEsbpVXAf0+cJypmV9OXvzZc9YA3m2kvltsi qtdW6HZWRin20mp+zjGS02swJ3PUvRMqVOdMnWyRHDfsrsZgkJXUM1ub4e22PH0c OZebwRN284Jk3pFMAnmbYgPCGApkrDBS2j/G1UYm9hb5PMVe24BihJHJoxBh0ksJ dkj9rcgX8c3x21PG6fH82+4YoyPIyh8wVr5Ua8WI2ES6QdvvEg3ZHYDLrRXx6Irz ai/5Vl4EY/blgiQmgKiUK6WU6HPSVYpCOvck9CxMAZtEJNBi/QPXr+4q7QhWOteq Xe/If3RopC+zPaOJ1dqNg2I0GRqST2dvDGiPCjYtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0V6VYhOmt1DUDrI6OzHCAwokVEMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjZGRiZjFlLTAyMmUtNDMwZi1hY2E3LWE3MGY0YWUzYThkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTY4wDQYJKoZIhvcNAQELBQADggEBADZYRjdXOfk/B+ntR/XClxcqKk0r u2eRsfBXYyxmawBETuKxQS7in0mK1rTpvpze7rfROXtE625g9WRL9jKh0rlxFfGN ciIzOIMiHQ5KVFj/YqklhphaeT3nwIHnxZaTSEksn6r5R+Zy5GGtBPqSq37e9us0 mqB9POKR1TFWhpYI50//CFUAkAEd4YFz6rg4r4hsP4fJXbk2vR4dB3qBC+kthpg7 Pa6u8Q5MV/zYgw19BxFhwinVPG0yHJsZe+AIjHvyweXfZMOGa5a8UnnjyZEPDfV1 YgUQQ0kBVmyePjSNkwtZc+4wgcK+QpvSazbxJylBswNi2Dtmrmp3ehQ+/kI= -----END CERTIFICATE-----Generated at Thu Sep 18 01:46:33 2025 by rpki-client