$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa File: aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa (raw, json) Hash identifier: C9wkpfWJOwh19kIx7oisv2JHZVkf+CU3PUQT52ssS8I= Subject key identifier: D9:E5:AA:18:B5:2F:43:41:2F:2A:F8:2F:AE:13:C1:5F:60:AB:68:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AE5CA881518B90A88DD69612DA218E47A53D3C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa Signing time: Sat 16 Aug 2025 00:00:27 +0000 ROA not before: Sat 16 Aug 2025 00:00:27 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e5:ca:88:15:18:b9:0a:88:dd:69:61:2d:a2:18:e4:7a:53:d3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:00:27 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=31552870b95db4c767fae0ef9fff87a2bd2de13f842041999a3dbb205421e9ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:99:f2:f1:54:78:f0:84:a0:82:a0:6b:01: 57:54:c0:f3:ea:34:24:ab:37:02:d6:a4:20:0f:55: 10:e3:86:e5:89:46:f2:6c:28:19:8d:08:36:d5:91: e2:4d:f7:c3:e3:51:fa:4b:d4:70:48:17:e1:74:4c: 98:42:7a:2e:b5:d4:19:89:0c:40:7e:2b:ef:83:59: fb:c1:91:09:03:6f:18:15:cf:41:97:13:b6:37:88: 07:ff:0a:48:e6:4e:80:c7:21:18:70:17:aa:81:70: 2d:61:1c:07:20:6e:b0:2c:d6:72:8e:2c:02:bc:71: 09:57:ec:2e:c1:43:71:80:a6:b9:40:25:f6:a2:d8: 20:4a:02:06:31:f3:b7:bf:ee:2f:9d:2f:a9:ac:bf: 29:9e:f3:6a:97:fc:95:0f:14:0c:0f:f0:f9:38:32: 82:9f:19:93:03:b4:a2:65:fa:21:cc:4a:5f:f5:6b: 53:36:ee:32:a8:d7:2c:77:24:ef:3a:11:57:48:cc: 82:34:a6:d1:52:c8:47:c5:9a:4c:93:1e:97:26:75: 9e:fe:4f:87:fc:44:2d:d8:e2:50:11:72:8a:b7:5a: c1:f0:37:fd:ac:19:17:10:83:11:56:35:bc:af:ff: 20:58:2b:23:b3:0a:15:fd:d8:e0:fb:bf:c1:a8:98: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:AA:18:B5:2F:43:41:2F:2A:F8:2F:AE:13:C1:5F:60:AB:68:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aff5f6ba-f0fc-4111-b2db-2eb6d2591660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.128.0/20 Signature Algorithm: sha256WithRSAEncryption 87:51:ef:21:76:96:7e:54:87:06:3e:bc:f7:04:88:74:7d:fa: 32:68:3e:a5:06:35:d7:42:e5:69:3b:ee:57:10:31:7d:62:66: f0:6b:9f:7f:88:e7:7b:a6:65:b5:fe:de:87:e2:e2:7a:d2:31: 7c:18:34:1e:ff:b1:d7:d9:79:c5:dc:ff:c3:da:04:ce:32:29: 1d:19:61:ff:bb:4a:c8:9d:ea:8b:d5:4b:fa:de:3e:be:1a:e2: e5:1d:94:25:bb:32:16:ce:d3:d1:e0:d2:fe:57:8e:b9:10:de: e0:c0:db:4d:d2:4f:2a:36:f2:4c:c5:bd:47:d0:6c:6a:2a:fe: 47:f8:16:d1:a6:33:31:e8:de:b1:d6:15:0b:b0:a1:7c:b4:fc: 96:84:3e:f0:f1:3d:e8:4c:bd:1a:66:35:be:ef:ad:c4:9e:85: f7:67:78:6b:eb:ba:2e:59:14:9b:38:df:9e:5e:86:b3:9e:dd: d1:43:99:f2:2a:d0:a4:d2:d8:13:7a:ba:5c:bb:1b:3f:1f:1e: 80:ba:cd:a4:52:a4:b5:0d:9e:78:b3:bf:b8:08:3a:9c:83:4e: 87:72:b9:8c:0c:ac:2d:9b:c0:5c:dd:6a:90:27:c3:f1:cf:42: cd:a4:be:2e:95:ef:7e:fc:24:ef:c5:1e:ae:f9:90:08:26:a3: e2:22:ff:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSuXKiBUYuQqI3WlhLaIY5HpT08YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAwMDI3WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTU1Mjg3MGI5NWRiNGM3NjdmYWUwZWY5ZmZmODdhMmJk MmRlMTNmODQyMDQxOTk5YTNkYmIyMDU0MjFlOWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkEpny8VR48ISggqBrAVdUwPPqNCSrNwLWpCAPVRDjhuWJ RvJsKBmNCDbVkeJN98PjUfpL1HBIF+F0TJhCei611BmJDEB+K++DWfvBkQkDbxgV z0GXE7Y3iAf/CkjmToDHIRhwF6qBcC1hHAcgbrAs1nKOLAK8cQlX7C7BQ3GAprlA Jfai2CBKAgYx87e/7i+dL6msvyme82qX/JUPFAwP8Pk4MoKfGZMDtKJl+iHMSl/1 a1M27jKo1yx3JO86EVdIzII0ptFSyEfFmkyTHpcmdZ7+T4f8RC3Y4lARcoq3WsHw N/2sGRcQgxFWNbyv/yBYKyOzChX92OD7v8GomFsDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2eWqGLUvQ0EvKvgvrhPBX2CraNUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmZjVmNmJhLWYwZmMtNDExMS1iMmRiLTJlYjZkMjU5MTY2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgIAwDQYJKoZIhvcNAQELBQADggEBAIdR7yF2ln5UhwY+vPcEiHR9+jJo PqUGNddC5Wk77lcQMX1iZvBrn3+I53umZbX+3ofi4nrSMXwYNB7/sdfZecXc/8Pa BM4yKR0ZYf+7Ssid6ovVS/rePr4a4uUdlCW7MhbO09Hg0v5XjrkQ3uDA203STyo2 8kzFvUfQbGoq/kf4FtGmMzHo3rHWFQuwoXy0/JaEPvDxPehMvRpmNb7vrcSehfdn eGvrui5ZFJs4355ehrOe3dFDmfIq0KTS2BN6uly7Gz8fHoC6zaRSpLUNnnizv7gI OpyDTodyuYwMrC2bwFzdapAnw/HPQs2kvi6V7378JO/FHq75kAgmo+Ii/yE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:23:16 2025 by rpki-client