$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59e96d8c-7105-46d4-916c-6ce69ea259a9.roa File: 59e96d8c-7105-46d4-916c-6ce69ea259a9.roa (raw, json) Hash identifier: GjSoIwoF2SdhgqOczzSuVWLjz5acEvWVbqV8B71F3ag= Subject key identifier: B6:AF:89:1B:BB:51:5F:BE:15:14:10:23:04:5D:2C:D2:34:CD:33:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F5F865E0EB1FA2E2A6BB3B7C2A5D5D608DF0F64 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59e96d8c-7105-46d4-916c-6ce69ea259a9.roa Signing time: Wed 13 Aug 2025 00:00:23 +0000 ROA not before: Wed 13 Aug 2025 00:00:23 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5f:86:5e:0e:b1:fa:2e:2a:6b:b3:b7:c2:a5:d5:d6:08:df:0f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:00:23 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=101e06e40d8abef61ba0cd86df902053df043512305ebac17fc692a3645cae53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:71:94:31:6a:67:0f:e1:62:46:af:58:a1: 47:6e:78:96:28:b8:21:07:4d:a7:48:2d:43:52:ee: e6:77:96:94:03:90:b6:37:52:e3:e5:d6:7f:5d:74: 63:27:0b:72:2b:8d:57:ab:e6:e2:98:ee:9b:48:27: c1:ed:38:61:a2:5f:aa:e4:79:92:4f:41:f2:0a:e7: 8d:01:9b:f3:87:07:92:b6:af:5d:de:66:b8:5e:40: b4:a6:7d:2a:d1:ee:3c:00:2b:ab:97:a7:00:5d:20: e4:75:29:e1:64:25:ff:c2:6a:ab:cc:4c:73:f7:b5: 27:ae:3b:c9:f6:00:a8:b8:6e:84:87:8a:f3:f6:e8: e4:08:f0:86:95:59:4b:de:a5:46:36:5f:de:1e:62: 2f:a7:f5:d7:e4:3f:f4:0e:bb:35:8a:8a:a4:37:46: 25:63:e8:f3:01:8f:cc:bb:85:98:a2:ca:96:18:cd: e8:f6:bc:a6:54:58:cb:92:fb:45:44:f2:e5:8c:b9: c3:2e:46:9c:be:ba:7f:bd:4f:af:b9:c0:94:84:ca: f8:7d:d8:86:47:d2:8f:1d:87:a2:b7:12:13:94:59: da:20:98:9d:fc:d1:9a:a1:31:3b:35:7f:77:0f:87: 6f:b6:be:4f:a5:03:79:43:a1:30:c2:68:24:ff:84: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:89:1B:BB:51:5F:BE:15:14:10:23:04:5D:2C:D2:34:CD:33:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59e96d8c-7105-46d4-916c-6ce69ea259a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.152.133.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:12:98:b1:37:5c:58:04:b6:c5:08:64:7e:00:a8:c8:6f:d1: 47:bd:e2:43:8c:f3:b3:da:18:70:1e:fa:70:f0:ab:76:c8:3f: 01:e1:bd:db:2a:a4:03:16:61:f1:cd:44:fe:ee:3e:8a:49:b6: 4d:c5:06:64:ab:7a:90:95:65:37:fa:77:44:f6:4f:72:76:1f: 5c:9a:7a:6e:65:9e:24:0e:c9:62:f2:7b:fd:c4:2a:3b:49:c6: ea:4a:56:54:fd:20:9a:b1:64:6f:39:30:94:c9:f5:4f:0c:f2: 3f:01:c0:04:97:e5:c8:1c:f7:af:dd:e9:01:36:cd:32:3e:c9: bd:94:a0:84:de:c6:a9:8a:59:bc:8f:ce:44:bd:eb:ea:b2:bf: f3:58:7c:f3:b7:61:e7:3a:7f:65:95:4e:fa:9c:07:b5:71:88: 64:df:e2:2d:eb:ba:a7:ac:96:ad:07:23:b1:8b:d9:04:9a:e6: e2:a7:11:a5:14:f2:65:9b:56:3b:1c:a1:94:b3:29:fb:9d:ed: 9c:b1:04:4a:8e:f2:fe:24:76:8c:50:b6:d2:6e:09:0c:65:e3: be:17:ba:c9:a5:15:cf:b5:5c:29:90:f2:0f:9f:3a:57:00:77: b8:68:77:83:71:d1:db:f1:4d:07:96:71:27:ac:55:5a:53:15: 22:fa:23:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf1+GXg6x+i4qa7O3wqXV1gjfD2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMDIzWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDFlMDZlNDBkOGFiZWY2MWJhMGNkODZkZjkwMjA1M2Rm MDQzNTEyMzA1ZWJhYzE3ZmM2OTJhMzY0NWNhZTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY13GUMWpnD+FiRq9YoUdueJYouCEHTadILUNS7uZ3lpQD kLY3UuPl1n9ddGMnC3IrjVer5uKY7ptIJ8HtOGGiX6rkeZJPQfIK540Bm/OHB5K2 r13eZrheQLSmfSrR7jwAK6uXpwBdIOR1KeFkJf/CaqvMTHP3tSeuO8n2AKi4boSH ivP26OQI8IaVWUvepUY2X94eYi+n9dfkP/QOuzWKiqQ3RiVj6PMBj8y7hZiiypYY zej2vKZUWMuS+0VE8uWMucMuRpy+un+9T6+5wJSEyvh92IZH0o8dh6K3EhOUWdog mJ380ZqhMTs1f3cPh2+2vk+lA3lDoTDCaCT/hAWbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtq+JG7tRX74VFBAjBF0s0jTNM5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ZTk2ZDhjLTcxMDUtNDZkNC05MTZjLTZjZTY5ZWEyNTlhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABrmIUwDQYJKoZIhvcNAQELBQADggEBAEoSmLE3XFgEtsUIZH4AqMhv0Ue9 4kOM87PaGHAe+nDwq3bIPwHhvdsqpAMWYfHNRP7uPopJtk3FBmSrepCVZTf6d0T2 T3J2H1yaem5lniQOyWLye/3EKjtJxupKVlT9IJqxZG85MJTJ9U8M8j8BwASX5cgc 96/d6QE2zTI+yb2UoITexqmKWbyPzkS96+qyv/NYfPO3Yec6f2WVTvqcB7VxiGTf 4i3ruqeslq0HI7GL2QSa5uKnEaUU8mWbVjscoZSzKfud7ZyxBEqO8v4kdoxQttJu CQxl474XusmlFc+1XCmQ8g+fOlcAd7hod4Nx0dvxTQeWcSesVVpTFSL6Ix0= -----END CERTIFICATE-----Generated at Sat Aug 23 08:22:22 2025 by rpki-client