$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa File: aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa (raw, json) Hash identifier: 9Xu8h86nrmYNEyZ20UXiHQNOu6qLqK2q7w5Mnh/nIuA= Subject key identifier: 36:97:69:6D:03:1D:58:E4:DD:9F:01:37:2C:BE:BC:3E:F8:C5:EA:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45C0B120308FD6D83360FB58D85FC215DF6BD432 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa Signing time: Tue 19 Aug 2025 00:11:29 +0000 ROA not before: Tue 19 Aug 2025 00:11:29 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.100.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c0:b1:20:30:8f:d6:d8:33:60:fb:58:d8:5f:c2:15:df:6b:d4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:11:29 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=973c7cb4fc1e46115ef7422edc874f87ced4808bad191fc99f7372478f3a3201, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:38:a4:5b:8c:ff:72:da:6f:6f:2c:ae:3f:69: a6:6a:1b:fb:d9:7e:98:b9:86:71:01:d8:27:59:c6: 21:af:96:55:d5:59:ca:d5:a7:48:d0:c9:b8:eb:ff: f6:e9:c3:9d:06:08:09:3f:9e:96:0f:65:03:3a:98: 3a:01:57:3c:3c:bc:8c:05:36:a4:3d:10:d0:bc:97: 4b:a7:0e:2a:69:8a:c1:df:cd:61:8a:38:fb:62:fb: c3:46:46:9d:cb:8f:2b:96:0a:5e:ad:12:02:ca:1b: 6c:00:d2:7c:1e:eb:d1:ef:d8:eb:1b:9d:56:74:40: 8c:72:15:f6:a0:6b:20:a8:83:69:e7:52:88:5b:c6: 79:7d:0f:27:05:ec:ee:cd:d1:7e:49:00:cd:32:0b: c7:fb:6d:0d:09:ef:2c:a0:e3:b6:57:58:d7:3d:5b: 78:62:77:f2:77:99:b6:2f:a5:d9:82:32:a2:5d:36: 23:e1:4a:e8:17:94:ff:35:87:63:52:5a:94:d1:25: 48:1f:75:76:d4:6b:1f:fe:2d:b6:3d:a9:84:5e:13: d3:01:d6:32:8c:2d:c8:e1:92:d5:32:99:f0:68:7e: 4f:30:56:fe:2f:f0:52:34:0a:c0:0b:cd:71:ac:73: a8:3a:36:6e:0e:f5:44:46:52:6e:29:0b:33:f8:d0: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:69:6D:03:1D:58:E4:DD:9F:01:37:2C:BE:BC:3E:F8:C5:EA:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:3e:be:f4:d1:fa:f1:41:61:86:b8:9a:2e:22:66:dd:9d:37: 03:39:03:a9:62:3a:1d:6c:9d:c5:5e:f6:3a:68:b7:5e:df:ff: 5d:37:43:3c:a1:e5:4e:7d:72:b4:46:22:a5:73:25:da:84:d0: f3:69:41:ba:1b:d7:e4:2c:f8:3e:53:f8:b3:31:13:87:a1:82: b1:05:1b:36:53:0b:a8:e0:dc:ff:1e:d1:9c:d3:cc:c6:11:bc: 85:6e:02:7b:16:9d:b4:6c:92:87:98:e0:77:0e:b8:8d:e2:12: 66:f4:d5:82:68:e5:5c:a0:18:a6:f1:11:91:42:5a:45:8f:ff: 77:40:00:6c:bf:64:9d:aa:22:07:3f:77:fc:ff:5b:11:a4:6f: 26:57:9e:21:fa:e1:9c:8e:e7:a6:4c:a8:66:aa:87:cc:fc:eb: 66:9b:49:96:87:9d:89:84:95:11:cc:46:5b:eb:da:0b:09:e6: e0:c7:3e:f6:47:82:0c:9f:bb:62:f1:a1:28:c3:c0:b1:66:bc: b0:fa:39:74:5c:d3:fc:71:92:c0:41:f1:cb:27:5a:f5:51:e1: a4:9d:70:dc:0d:94:8a:0e:28:82:6f:02:cd:5a:51:9a:78:b2: 8b:f5:92:fe:c5:ce:5d:6c:82:89:18:99:fd:e3:f1:b8:80:01: 51:e5:e1:de -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURcCxIDCP1tgzYPtY2F/CFd9r1DIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMTI5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzNjN2NiNGZjMWU0NjExNWVmNzQyMmVkYzg3NGY4N2Nl ZDQ4MDhiYWQxOTFmYzk5ZjczNzI0NzhmM2EzMjAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuOKRbjP9y2m9vLK4/aaZqG/vZfpi5hnEB2CdZxiGvllXV WcrVp0jQybjr//bpw50GCAk/npYPZQM6mDoBVzw8vIwFNqQ9ENC8l0unDippisHf zWGKOPti+8NGRp3LjyuWCl6tEgLKG2wA0nwe69Hv2OsbnVZ0QIxyFfagayCog2nn Uohbxnl9DycF7O7N0X5JAM0yC8f7bQ0J7yyg47ZXWNc9W3hid/J3mbYvpdmCMqJd NiPhSugXlP81h2NSWpTRJUgfdXbUax/+LbY9qYReE9MB1jKMLcjhktUymfBofk8w Vv4v8FI0CsALzXGsc6g6Nm4O9URGUm4pCzP40DNJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNpdpbQMdWOTdnwE3LL68PvjF6vAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYzU2MDZkLWI4YTQtNDZmMi1iN2NlLTFkNmY3NWJlZjM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ZDANBgkqhkiG9w0BAQsFAAOCAQEAQD6+9NH68UFhhriaLiJm3Z03AzkD qWI6HWydxV72Omi3Xt//XTdDPKHlTn1ytEYipXMl2oTQ82lBuhvX5Cz4PlP4szET h6GCsQUbNlMLqODc/x7RnNPMxhG8hW4CexadtGySh5jgdw64jeISZvTVgmjlXKAY pvERkUJaRY//d0AAbL9knaoiBz93/P9bEaRvJleeIfrhnI7npkyoZqqHzPzrZptJ loediYSVEcxGW+vaCwnm4Mc+9keCDJ+7YvGhKMPAsWa8sPo5dFzT/HGSwEHxyyda 9VHhpJ1w3A2Uig4ogm8CzVpRmniyi/WS/sXOXWyCiRiZ/ePxuIABUeXh3g== -----END CERTIFICATE-----Generated at Sat Aug 23 08:22:19 2025 by rpki-client