$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa File: 7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa (raw, json) Hash identifier: V+HGvIcDnMg0cC4oTvUjO0DxOg7MQlUJwisoKcQdT6U= Subject key identifier: 35:52:89:01:09:5E:D8:6E:18:4A:6E:A6:BC:A0:16:85:C4:75:E6:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5990C085FDCC421A738019167DE947A2C49481C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa Signing time: Wed 13 Aug 2025 00:00:19 +0000 ROA not before: Wed 13 Aug 2025 00:00:19 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.255.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:90:c0:85:fd:cc:42:1a:73:80:19:16:7d:e9:47:a2:c4:94:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:00:19 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=5443a1864f726daefc3fe92de715b4a757edcf5d039a9d74db3ac08d28134098, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:62:ca:80:8d:84:69:4e:d9:78:b7:5a:9d: c1:c4:4d:6d:eb:fb:37:5a:04:19:cf:06:5f:cd:f2: b8:bc:b7:62:59:01:ef:8d:bc:ea:61:4e:01:96:1c: be:36:dc:fa:f8:b9:f8:64:42:5e:38:17:d6:ec:c2: 55:d0:dd:00:22:54:03:30:5d:1b:26:88:d2:94:ff: 2b:dd:6c:a0:5f:e0:8c:50:6e:9a:5d:4d:05:6e:27: e9:3c:5a:88:85:07:f2:5e:31:1d:9d:d6:6c:c4:e8: 15:64:22:1f:4f:56:ee:d8:d0:0c:5f:ec:bd:78:a6: 2b:42:e6:40:76:8a:30:ef:cb:44:eb:82:09:2e:76: 8a:9e:71:54:af:08:e3:bf:6d:94:96:49:ed:84:99: ef:23:05:b1:8c:e8:0b:71:03:3c:d0:20:48:c7:16: c9:59:d0:af:35:78:2e:3e:23:92:99:6e:36:90:6e: b3:99:86:75:c6:51:79:04:38:13:55:ea:ab:aa:fc: 0a:ee:20:86:a1:9c:94:30:58:b8:a1:fe:49:bf:33: d0:f8:ea:e8:8b:39:e3:0a:0d:dd:37:88:e9:71:71: 7f:8f:5b:92:db:cb:8f:83:6f:c0:61:5d:cc:54:a6: ae:7d:70:af:77:0c:3b:51:95:33:8a:fb:8a:9a:dc: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:89:01:09:5E:D8:6E:18:4A:6E:A6:BC:A0:16:85:C4:75:E6:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.255.56.0/24 Signature Algorithm: sha256WithRSAEncryption a5:6b:9d:f6:ea:99:22:be:b2:e5:6a:41:65:6d:46:65:d8:36: 6b:7c:74:b0:ba:2d:ae:cd:2b:f4:c2:5b:8a:48:69:36:d4:36: 28:1c:40:87:d2:e3:f6:5c:8f:8e:c9:65:73:06:06:e5:61:0d: 17:4e:c5:99:ef:7c:f5:4e:e3:09:d6:1f:2d:bd:3b:3c:ac:1a: 26:38:ea:81:6b:93:5f:8a:c5:84:bc:a6:da:a5:69:40:af:9b: 51:0a:42:b0:a3:39:5f:2d:c5:48:45:11:50:fc:36:25:8e:7a: 04:ab:72:b3:13:43:66:32:9e:a6:93:e3:9c:43:0d:5e:98:f9: dc:f7:cf:2b:08:48:bf:2d:0d:aa:3a:5d:8c:af:f4:b9:98:83: ae:31:9b:cb:47:95:ea:c6:45:16:0b:b2:9d:31:c7:96:2f:62: de:0e:04:fe:a8:4f:bf:e6:81:af:48:46:c2:8e:f6:7b:1b:92: 59:51:e1:08:2e:75:2e:fa:63:0b:90:3e:24:cc:e2:3b:cb:53: c6:fe:41:94:9f:4a:ee:55:01:a5:86:3d:e3:0a:d3:f0:e7:34: da:7d:19:10:e1:2f:ed:eb:91:08:05:b6:fb:d4:ef:2b:7c:0e: 15:51:dd:a0:25:f6:e0:88:bf:8e:8a:1f:4e:9d:10:a8:95:79: f0:e9:64:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWZDAhf3MQhpzgBkWfelHosSUgcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMDE5WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDQzYTE4NjRmNzI2ZGFlZmMzZmU5MmRlNzE1YjRhNzU3 ZWRjZjVkMDM5YTlkNzRkYjNhYzA4ZDI4MTM0MDk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTIGLKgI2EaU7ZeLdancHETW3r+zdaBBnPBl/N8ri8t2JZ Ae+NvOphTgGWHL423Pr4ufhkQl44F9bswlXQ3QAiVAMwXRsmiNKU/yvdbKBf4IxQ bppdTQVuJ+k8WoiFB/JeMR2d1mzE6BVkIh9PVu7Y0Axf7L14pitC5kB2ijDvy0Tr ggkudoqecVSvCOO/bZSWSe2Eme8jBbGM6AtxAzzQIEjHFslZ0K81eC4+I5KZbjaQ brOZhnXGUXkEOBNV6quq/AruIIahnJQwWLih/km/M9D46uiLOeMKDd03iOlxcX+P W5Lby4+Db8BhXcxUpq59cK93DDtRlTOK+4qa3Lq1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNVKJAQle2G4YSm6mvKAWhcR15rgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjMGQxN2JlLTI1NmMtNGQyNi04M2JhLWIzYWU2OGFlZWY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABo/zgwDQYJKoZIhvcNAQELBQADggEBAKVrnfbqmSK+suVqQWVtRmXYNmt8 dLC6La7NK/TCW4pIaTbUNigcQIfS4/Zcj47JZXMGBuVhDRdOxZnvfPVO4wnWHy29 OzysGiY46oFrk1+KxYS8ptqlaUCvm1EKQrCjOV8txUhFEVD8NiWOegSrcrMTQ2Yy nqaT45xDDV6Y+dz3zysISL8tDao6XYyv9LmYg64xm8tHlerGRRYLsp0xx5YvYt4O BP6oT7/mga9IRsKO9nsbkllR4QgudS76YwuQPiTM4jvLU8b+QZSfSu5VAaWGPeMK 0/DnNNp9GRDhL+3rkQgFtvvU7yt8DhVR3aAl9uCIv46KH06dEKiVefDpZME= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:30 2025 by rpki-client