$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa File: 44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa (raw, json) Hash identifier: eZX0sfiq8BtqzwVlXZyZcPAuEcb0FsD6NpqV8/lWlLw= Subject key identifier: 11:98:11:30:42:81:CA:17:3B:12:4C:EB:AD:48:95:BE:C7:70:97:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2508BA897347AAE6FE543B4CF0EED9CCDF6FBBBB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa Signing time: Tue 05 Aug 2025 00:00:22 +0000 ROA not before: Tue 05 Aug 2025 00:00:22 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.101.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:08:ba:89:73:47:aa:e6:fe:54:3b:4c:f0:ee:d9:cc:df:6f:bb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:00:22 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=d1670897dd2093c7a052178bf18ff5467fecb0485d8bd5e906da69883afb98a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:87:e2:8a:b3:48:ba:5c:9b:65:da:5f:df: b0:0c:a6:4a:fa:ef:ae:b6:da:24:0c:82:45:9a:8f: db:51:33:f3:f6:30:2c:f4:c1:2e:80:cf:67:a5:73: 0f:f0:65:56:c9:70:ef:1a:91:87:c4:49:f2:bb:6b: 93:f2:82:1b:75:21:76:7c:d6:64:3d:f7:4f:78:08: 87:b6:fb:3d:38:c4:69:e6:6e:eb:65:d3:ef:8a:98: 95:96:f4:75:0b:30:29:75:6f:0e:71:fd:a0:e5:62: da:3d:dd:12:9d:d1:72:06:49:b5:ee:24:a4:3f:f6: f1:18:74:3f:c6:ae:39:73:41:dc:4b:65:38:f1:51: d6:13:c8:d7:ab:68:6a:54:35:9a:9b:37:55:c6:89: b3:8b:4c:48:b4:f4:a3:19:f2:d5:37:6a:f5:07:5a: a1:a7:52:c5:06:c6:55:9a:c0:74:d3:22:53:d7:7a: 75:08:ae:64:e6:7c:13:65:a8:d0:76:18:88:a6:b7: 53:52:58:6c:75:6a:99:ba:55:81:ca:dd:b3:ca:b4: ab:dd:86:f3:02:96:73:c3:ff:01:74:a7:49:f3:e8: 78:76:99:fc:d0:7f:68:d7:88:66:ab:6d:50:33:b6: e6:2d:7d:f5:ad:90:e3:5b:e4:55:18:5e:d3:d0:bd: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:11:30:42:81:CA:17:3B:12:4C:EB:AD:48:95:BE:C7:70:97:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:71:ab:db:37:c8:bc:7f:18:53:b9:9e:81:3c:09:c5:87:7b: 14:3a:f3:c9:8d:f4:e8:f1:6c:6a:c1:84:42:03:9c:b4:5b:62: 72:9e:63:8e:39:65:ad:0a:72:eb:ef:78:1a:2b:29:fd:34:35: 26:78:67:77:f2:b4:ee:e1:c6:7d:15:4b:3e:e5:57:81:b8:75: 37:23:0c:a2:85:fd:dd:53:b0:de:da:0d:6a:83:cb:fd:d4:a3: a5:5b:6d:7f:70:74:b7:10:a0:d4:51:0d:2b:90:70:79:9d:fd: c7:45:34:b7:e2:0a:7a:86:42:36:30:52:a3:b7:20:15:70:26: e0:3b:40:80:cc:67:b0:7c:c0:77:5a:43:28:0b:58:a7:51:1a: 4f:2b:05:14:e0:d9:3d:1d:d6:91:b2:05:ef:95:eb:cc:60:d5: fb:04:4c:d9:aa:e9:31:29:ef:21:40:42:d3:c5:eb:7d:d4:d6: a9:65:d2:bb:f2:73:43:0b:7d:d8:55:aa:30:f8:d9:d3:fc:98: 04:d0:03:bf:ff:aa:39:9b:bd:0c:ad:e6:dc:ea:69:0f:f6:9a: ed:a5:48:3b:b7:ec:9d:bf:3a:a0:77:94:5b:16:24:dd:9d:c3: 65:74:e6:0d:de:67:87:3a:b8:10:19:ff:06:35:45:69:08:8a: 2a:76:7b:62 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJQi6iXNHqub+VDtM8O7ZzN9vu7swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAwMDIyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTY3MDg5N2RkMjA5M2M3YTA1MjE3OGJmMThmZjU0Njdm ZWNiMDQ4NWQ4YmQ1ZTkwNmRhNjk4ODNhZmI5OGEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXT4fiirNIulybZdpf37AMpkr676622iQMgkWaj9tRM/P2 MCz0wS6Az2elcw/wZVbJcO8akYfESfK7a5Pyght1IXZ81mQ99094CIe2+z04xGnm butl0++KmJWW9HULMCl1bw5x/aDlYto93RKd0XIGSbXuJKQ/9vEYdD/GrjlzQdxL ZTjxUdYTyNeraGpUNZqbN1XGibOLTEi09KMZ8tU3avUHWqGnUsUGxlWawHTTIlPX enUIrmTmfBNlqNB2GIimt1NSWGx1apm6VYHK3bPKtKvdhvMClnPD/wF0p0nz6Hh2 mfzQf2jXiGarbVAztuYtffWtkONb5FUYXtPQvZ4DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEZgRMEKByhc7EkzrrUiVvsdwl5gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0ZWI2OGZkLTljMDMtNDE3MC04NGU0LWRiYmNhNjk1MmNkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQZTANBgkqhkiG9w0BAQsFAAOCAQEAKHGr2zfIvH8YU7megTwJxYd7FDrz yY306PFsasGEQgOctFticp5jjjllrQpy6+94Gisp/TQ1Jnhnd/K07uHGfRVLPuVX gbh1NyMMooX93VOw3toNaoPL/dSjpVttf3B0txCg1FENK5BweZ39x0U0t+IKeoZC NjBSo7cgFXAm4DtAgMxnsHzAd1pDKAtYp1EaTysFFODZPR3WkbIF75XrzGDV+wRM 2arpMSnvIUBC08XrfdTWqWXSu/JzQwt92FWqMPjZ0/yYBNADv/+qOZu9DK3m3Opp D/aa7aVIO7fsnb86oHeUWxYk3Z3DZXTmDd5nhzq4EBn/BjVFaQiKKnZ7Yg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:18 2025 by rpki-client