$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa File: 9b9e07de-e076-42d6-a7cb-8400f81babe2.roa (raw, json) Hash identifier: pdMB6zqYVLsulXAQd4gcjrPcjdjJio7eLFWmhhxDkJw= Subject key identifier: ED:2D:B3:85:85:8D:7B:36:8B:B1:40:32:55:5D:32:EF:82:3D:E2:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53D2FF0A70EDD66C9316357082F349E181B169EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa Signing time: Tue 12 Aug 2025 00:41:06 +0000 ROA not before: Tue 12 Aug 2025 00:41:06 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.91.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d2:ff:0a:70:ed:d6:6c:93:16:35:70:82:f3:49:e1:81:b1:69:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:41:06 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=8cb11eeb96cdf45d1b1189e717fd294bc736eec337d470a23bbf348f246107c0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:c7:15:f8:35:cf:ac:9e:ce:b0:0f:d0:84: 15:2a:e1:e4:26:cb:2d:87:00:00:42:2c:bd:d7:e2: e7:45:7d:24:fe:d5:94:24:1e:d6:ef:41:b4:c3:98: 31:4f:92:5d:35:0a:fd:c3:a8:26:29:60:33:29:67: 0e:be:4f:3e:b0:32:08:45:8a:f1:61:6c:cf:92:79: bf:5c:2a:95:a9:93:a3:ae:ca:c7:cf:ba:c9:39:99: 74:f2:82:8b:22:d9:a3:49:72:27:81:97:06:6e:36: 41:50:fc:97:3c:5b:1e:57:73:d5:55:89:50:5e:04: a6:b9:14:af:4a:73:53:1b:29:b8:2c:15:67:7b:80: e8:ee:fd:2b:d7:23:f2:aa:fb:78:cf:6e:68:31:fd: 24:8a:18:3c:99:c6:78:96:4e:ba:10:f5:df:28:b0: bb:8d:a5:7e:1e:80:b8:c4:f1:69:46:db:14:b7:b8: 15:79:55:7c:84:f9:4c:43:c6:6a:31:14:5a:7a:f8: 27:7a:3b:66:55:e9:3f:f6:2c:c0:33:3f:30:3d:a6: 71:5c:8b:ec:3b:d2:22:c5:31:88:aa:fb:b8:c7:7e: d1:d4:bd:5d:bd:95:c8:4f:64:75:db:b7:0d:58:59: a3:72:db:1b:e8:74:29:75:ff:eb:ec:b8:23:74:91: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:B3:85:85:8D:7B:36:8B:B1:40:32:55:5D:32:EF:82:3D:E2:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:5b:e9:c2:ec:77:b8:eb:3b:f0:77:bb:62:17:9f:53:9f:92: 29:99:51:77:83:f8:b3:d0:79:e3:9a:c4:bd:11:05:a4:0a:25: 0e:56:90:c6:22:ea:a9:21:d6:90:da:80:74:e1:5f:6f:e2:3e: 68:6e:3e:8c:fa:64:11:17:af:ce:ba:02:75:8d:d2:1d:e0:9e: 7a:7e:7d:04:30:f4:50:fd:cb:64:09:bc:9d:a8:6c:40:13:a1: 90:15:1c:89:6a:34:47:9b:20:27:98:77:de:6c:a0:df:2a:d9: 23:0c:e1:d1:30:f1:5d:ca:65:18:2d:18:c8:07:64:91:2f:a8: b3:26:9d:69:5f:1b:a6:3d:af:4a:8f:35:61:d2:8a:59:36:99: 28:c5:9f:d2:f9:72:b2:1c:98:5c:c3:38:54:3b:c4:72:28:04: 58:16:28:75:7f:95:23:30:f4:08:fb:5c:0e:f0:2c:b2:57:75: a4:45:61:c3:72:a2:3d:e6:b8:fa:00:8a:8d:33:d2:4c:aa:e2: b3:ab:ac:ea:4f:69:e6:0d:79:e7:a6:e3:76:83:ed:63:8d:b2: 59:b4:46:9e:ce:df:d6:56:48:8d:7d:e9:ca:2b:2a:14:9c:b6: cf:c5:34:c6:b2:5c:a3:71:64:99:86:29:75:cc:e5:40:15:e4: e1:2a:93:09 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU9L/CnDt1myTFjVwgvNJ4YGxaeowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MTA2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2IxMWVlYjk2Y2RmNDVkMWIxMTg5ZTcxN2ZkMjk0YmM3 MzZlZWMzMzdkNDcwYTIzYmJmMzQ4ZjI0NjEwN2MwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjGscV+DXPrJ7OsA/QhBUq4eQmyy2HAABCLL3X4udFfST+ 1ZQkHtbvQbTDmDFPkl01Cv3DqCYpYDMpZw6+Tz6wMghFivFhbM+Seb9cKpWpk6Ou ysfPusk5mXTygosi2aNJcieBlwZuNkFQ/Jc8Wx5Xc9VViVBeBKa5FK9Kc1MbKbgs FWd7gOju/SvXI/Kq+3jPbmgx/SSKGDyZxniWTroQ9d8osLuNpX4egLjE8WlG2xS3 uBV5VXyE+UxDxmoxFFp6+Cd6O2ZV6T/2LMAzPzA9pnFci+w70iLFMYiq+7jHftHU vV29lchPZHXbtw1YWaNy2xvodCl1/+vsuCN0kQ2fAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7S2zhYWNezaLsUAyVV0y74I94vIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOWUwN2RlLWUwNzYtNDJkNi1hN2NiLTg0MDBmODFiYWJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5WzANBgkqhkiG9w0BAQsFAAOCAQEAoVvpwux3uOs78He7YhefU5+SKZlR d4P4s9B545rEvREFpAolDlaQxiLqqSHWkNqAdOFfb+I+aG4+jPpkERevzroCdY3S HeCeen59BDD0UP3LZAm8nahsQBOhkBUciWo0R5sgJ5h33myg3yrZIwzh0TDxXcpl GC0YyAdkkS+osyadaV8bpj2vSo81YdKKWTaZKMWf0vlyshyYXMM4VDvEcigEWBYo dX+VIzD0CPtcDvAssld1pEVhw3KiPea4+gCKjTPSTKris6us6k9p5g1556bjdoPt Y42yWbRGns7f1lZIjX3pyisqFJy2z8U0xrJco3FkmYYpdczlQBXk4SqTCQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:11:00 2025 by rpki-client