$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa File: 28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa (raw, json) Hash identifier: C39/IOQIj4kInX9X0FajG7m/u7jY0TPuOmTAjwYeOlg= Subject key identifier: F8:BC:E7:B3:2D:7E:65:8C:EB:DD:7E:38:A1:E3:40:A6:DA:78:C7:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A14509E324FDA0E72EBAA61BCA90932D5E0EDE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa Signing time: Sat 16 Aug 2025 00:10:53 +0000 ROA not before: Sat 16 Aug 2025 00:10:53 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:14:50:9e:32:4f:da:0e:72:eb:aa:61:bc:a9:09:32:d5:e0:ed:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:10:53 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=5b594a0cf0624ba4b0138b78d8100d778a616de1f8aaf13d5b27a7d58f73a936, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:31:61:ed:3d:d1:e8:82:d5:03:fe:36:fd: 21:1c:ce:45:61:f8:89:03:bf:87:2e:79:dc:c6:06: 5b:f4:15:1a:1e:f5:f8:f7:50:00:11:aa:45:38:36: ec:9e:72:1c:5e:66:11:58:c1:ca:cc:e2:1b:5d:d1: d6:6c:23:d7:4d:a5:8d:bd:0f:d7:78:da:d5:a0:83: 9d:0f:1c:e2:dd:fd:f1:f1:3f:98:91:6e:bc:33:17: c4:a2:10:58:58:06:83:99:20:8e:d3:58:ce:c6:e4: f7:df:42:66:81:31:47:04:fd:24:f2:7a:2e:20:51: 4b:b6:77:6c:d7:c1:e7:8a:02:7e:9e:8a:6a:db:6e: 74:fb:3b:ab:40:d3:9d:92:2b:a9:0e:6a:20:5a:a0: b3:af:4a:40:43:dd:f9:6b:42:3b:b8:dc:94:af:e5: 0d:da:38:bb:1c:2c:2a:7c:ee:8d:0b:78:11:ef:47: 4e:89:d5:31:0a:fa:e4:e5:20:0e:27:4c:6a:96:d7: 49:e8:1b:09:3f:f4:0f:cb:32:a0:de:2a:e7:f2:72: 3b:47:dc:ce:6e:d5:fa:06:bb:d8:43:ff:53:17:f2: e3:dd:be:3b:9c:88:12:fd:10:14:8e:c4:8b:31:7b: 5d:b6:86:ae:71:87:c2:35:82:f6:17:78:d6:7f:a1: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BC:E7:B3:2D:7E:65:8C:EB:DD:7E:38:A1:E3:40:A6:DA:78:C7:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.0.0/20 Signature Algorithm: sha256WithRSAEncryption 21:8e:e8:bb:e6:34:30:a0:62:97:89:55:0f:98:93:82:a7:a2: ef:aa:5e:6d:93:4e:ec:b6:a2:bc:c1:ea:23:16:29:56:72:da: b0:9f:5e:95:26:65:2b:8c:14:da:a1:ec:db:a1:58:0b:83:84: 2e:3f:90:0e:c8:2a:50:12:f0:87:39:a9:f5:ee:bd:8b:2d:af: 5a:50:e3:9d:77:db:b1:92:de:18:07:16:b0:be:a5:55:76:46: c0:30:b0:2b:fd:7c:ff:b8:d0:00:d4:a2:5e:6e:f8:41:19:8a: dc:20:e6:87:2a:c4:0d:76:a4:e3:de:47:c0:8f:08:13:b4:86: 55:15:e9:af:f3:9a:3a:15:ce:07:11:a0:0c:8e:56:40:41:ba: 12:c7:eb:77:05:75:a6:b5:dc:0b:db:22:49:be:fc:2f:f8:f3: 7f:0c:77:91:0d:81:a9:0d:b4:f7:2c:51:32:7c:6d:be:4c:2e: ec:c6:39:5e:09:6c:b5:11:ac:1b:cd:24:c3:06:f6:d6:75:be: 69:31:3d:aa:4a:45:d7:15:02:c2:98:b7:b4:3b:ed:40:32:4b: 03:f5:68:1a:e0:e1:bf:6b:fe:ca:8f:09:cb:1c:88:f3:91:61: 35:23:1a:3d:c2:60:25:fa:fd:e6:8e:73:7e:33:9b:ef:2d:9c: 43:61:2c:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUShRQnjJP2g5y66phvKkJMtXg7eYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAxMDUzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjU5NGEwY2YwNjI0YmE0YjAxMzhiNzhkODEwMGQ3Nzhh NjE2ZGUxZjhhYWYxM2Q1YjI3YTdkNThmNzNhOTM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+4DFh7T3R6ILVA/42/SEczkVh+IkDv4cuedzGBlv0FRoe 9fj3UAARqkU4NuyechxeZhFYwcrM4htd0dZsI9dNpY29D9d42tWgg50PHOLd/fHx P5iRbrwzF8SiEFhYBoOZII7TWM7G5PffQmaBMUcE/STyei4gUUu2d2zXweeKAn6e imrbbnT7O6tA052SK6kOaiBaoLOvSkBD3flrQju43JSv5Q3aOLscLCp87o0LeBHv R06J1TEK+uTlIA4nTGqW10noGwk/9A/LMqDeKufycjtH3M5u1foGu9hD/1MX8uPd vjuciBL9EBSOxIsxe122hq5xh8I1gvYXeNZ/oRdJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+Lznsy1+ZYzr3X44oeNAptp4xycwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4YWU3YjdkLWM0MzgtNGMyZS1iOWQ0LTFhOGQ5ZTM1ZmFlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmgAwDQYJKoZIhvcNAQELBQADggEBACGO6LvmNDCgYpeJVQ+Yk4Knou+q Xm2TTuy2orzB6iMWKVZy2rCfXpUmZSuMFNqh7NuhWAuDhC4/kA7IKlAS8Ic5qfXu vYstr1pQ451327GS3hgHFrC+pVV2RsAwsCv9fP+40ADUol5u+EEZitwg5ocqxA12 pOPeR8CPCBO0hlUV6a/zmjoVzgcRoAyOVkBBuhLH63cFdaa13AvbIkm+/C/4838M d5ENgakNtPcsUTJ8bb5MLuzGOV4JbLURrBvNJMMG9tZ1vmkxPapKRdcVAsKYt7Q7 7UAySwP1aBrg4b9r/sqPCcsciPORYTUjGj3CYCX6/eaOc34zm+8tnENhLL0= -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:58 2025 by rpki-client