$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa File: 26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa (raw, json) Hash identifier: b5vllW008tqddMBnzF/TutfvD8xpJd8IlFVXoao9CUQ= Subject key identifier: EE:AB:A3:D9:BC:A9:0B:37:11:2C:0D:1D:47:FE:CB:62:29:AF:4B:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28E875876D42F0864A775915F38B8FF8CB5348DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa Signing time: Tue 19 Aug 2025 00:11:45 +0000 ROA not before: Tue 19 Aug 2025 00:11:45 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.250.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e8:75:87:6d:42:f0:86:4a:77:59:15:f3:8b:8f:f8:cb:53:48:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:11:45 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=ffb589bc4b8d0ac59800d66a2afa64b840848b6f3142d66602186269147e5669, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:79:f3:54:6c:9a:a7:5e:2e:4c:15:0a:4c: aa:aa:27:eb:54:3d:4f:de:0a:a6:f3:c6:b9:7e:13: 20:e2:64:fc:e3:99:f7:3f:3b:7e:4b:b9:47:84:c4: c3:a1:75:81:7a:e6:56:e1:e9:d2:5b:17:d4:77:9b: 7b:8d:eb:4a:42:54:40:27:99:34:83:41:df:06:71: aa:8b:a5:1e:f6:07:4c:58:da:6c:fd:4a:db:0c:50: ab:12:59:2d:5d:cb:82:a7:86:e1:b6:32:04:bb:21: 6c:5d:a0:f1:22:67:d2:09:7a:70:fa:bf:5a:fa:90: 0b:6d:ef:e5:f6:72:d6:e1:a1:22:ed:4a:5e:a8:73: d5:71:63:a0:a1:1d:a7:12:ed:6a:af:f8:2f:57:77: dc:dc:a5:b0:09:31:b9:5f:b6:10:1d:eb:4a:f2:59: e8:59:0d:3b:8b:76:2b:40:26:b5:f9:78:24:3b:ff: 2a:d3:8d:aa:5b:9b:0d:41:2d:62:37:ca:d6:23:3f: f9:3f:7c:11:f3:2e:ec:8e:ac:05:47:3e:85:e9:7c: 7c:15:12:5f:1b:27:46:84:b9:c6:8a:95:05:a8:0c: 6c:4b:13:91:4b:ad:fb:64:20:21:97:a8:8e:27:17: 34:55:33:0f:50:df:ee:63:41:9d:ad:33:cd:fd:32: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:A3:D9:BC:A9:0B:37:11:2C:0D:1D:47:FE:CB:62:29:AF:4B:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:85:70:ea:2a:8d:0a:99:83:a3:01:c4:2d:82:cc:3c:c7:d0: d4:d5:b9:0d:56:d6:32:7e:ff:e8:b7:ed:23:70:a4:4c:7b:91: 7f:2f:17:0d:83:24:75:94:b8:cc:40:49:a7:3b:0d:1c:d3:a0: 74:0e:01:46:63:95:28:3f:0c:2d:00:29:f1:7b:78:d5:2a:f7: 69:51:53:2f:7f:1e:27:12:83:84:e6:49:05:e5:00:14:d2:1e: a0:39:d7:54:21:e4:9e:06:e7:bb:2a:a1:2b:eb:31:48:45:e4: e8:aa:6b:ec:5c:2a:79:ce:28:20:4e:7a:d8:2d:b0:e7:f7:15: 02:59:f1:62:3c:d6:0f:2a:be:64:b8:a3:75:9c:fa:b9:e3:65: 57:98:ab:84:03:85:26:a1:f6:5e:15:e2:c8:c3:fb:28:50:e3: e7:f6:7c:92:70:9c:4a:1d:f6:4f:c3:4e:bb:f8:b7:5b:92:24: 58:de:25:5a:e9:8e:15:0c:c8:fe:e6:04:b0:1b:94:39:d0:50: 22:a7:e5:fb:62:86:21:8b:5d:91:94:10:fd:6e:1c:6e:dd:67: 4b:66:8b:71:24:3c:4a:7d:1c:86:ca:62:05:5b:04:16:b7:e8: 83:f9:ac:19:d6:8b:90:ec:18:83:ca:2e:d2:42:d8:fb:ca:26: c5:74:4c:be -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKOh1h21C8IZKd1kV84uP+MtTSNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMTQ1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmI1ODliYzRiOGQwYWM1OTgwMGQ2NmEyYWZhNjRiODQw ODQ4YjZmMzE0MmQ2NjYwMjE4NjI2OTE0N2U1NjY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfDXnzVGyap14uTBUKTKqqJ+tUPU/eCqbzxrl+EyDiZPzj mfc/O35LuUeExMOhdYF65lbh6dJbF9R3m3uN60pCVEAnmTSDQd8GcaqLpR72B0xY 2mz9StsMUKsSWS1dy4KnhuG2MgS7IWxdoPEiZ9IJenD6v1r6kAtt7+X2ctbhoSLt Sl6oc9VxY6ChHacS7Wqv+C9Xd9zcpbAJMblfthAd60ryWehZDTuLditAJrX5eCQ7 /yrTjapbmw1BLWI3ytYjP/k/fBHzLuyOrAVHPoXpfHwVEl8bJ0aEucaKlQWoDGxL E5FLrftkICGXqI4nFzRVMw9Q3+5jQZ2tM839Mg4TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7quj2bypCzcRLA0dR/7LYimvSx0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2ZWJmMTViLThiODMtNGNhNy05Nzg2LTY1ZTU3ZTg4NzdjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4+jANBgkqhkiG9w0BAQsFAAOCAQEAFoVw6iqNCpmDowHELYLMPMfQ1NW5 DVbWMn7/6LftI3CkTHuRfy8XDYMkdZS4zEBJpzsNHNOgdA4BRmOVKD8MLQAp8Xt4 1Sr3aVFTL38eJxKDhOZJBeUAFNIeoDnXVCHkngbnuyqhK+sxSEXk6Kpr7Fwqec4o IE562C2w5/cVAlnxYjzWDyq+ZLijdZz6ueNlV5irhAOFJqH2XhXiyMP7KFDj5/Z8 knCcSh32T8NOu/i3W5IkWN4lWumOFQzI/uYEsBuUOdBQIqfl+2KGIYtdkZQQ/W4c bt1nS2aLcSQ8Sn0chspiBVsEFrfog/msGdaLkOwYg8ou0kLY+8omxXRMvg== -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:13 2025 by rpki-client