$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa File: b0e40c41-1ab6-4eb5-8522-0209480072ff.roa (raw, json) Hash identifier: tkUqesHqBRar1Nb6nB1/zmzNZ9bLRHqc5u9N4n5DSQs= Subject key identifier: 50:6A:5F:19:CB:55:25:41:0B:A7:57:16:59:3F:2A:D6:DF:2F:93:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12C6A4933EC94899D433FE7FEF25E98FED151920 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa Signing time: Wed 13 Aug 2025 00:00:20 +0000 ROA not before: Wed 13 Aug 2025 00:00:20 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.255.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c6:a4:93:3e:c9:48:99:d4:33:fe:7f:ef:25:e9:8f:ed:15:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:00:20 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=9d6e1a6bf0949d49ddc4392034fe8a3364a9801364a8b0475b73e945a73ed2f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:d8:20:5e:36:72:d9:3a:46:48:ff:ac:ec: c7:89:d8:d7:3b:fd:81:1d:3e:5b:f6:f9:25:a9:79: c6:ac:2b:20:5a:06:91:fe:80:b1:75:13:d0:61:ee: 6d:9c:28:87:0b:b3:b3:d8:4e:f9:84:cb:44:8f:3c: 8f:a6:90:4d:4b:19:7a:c7:36:30:b9:70:fb:ed:27: b5:ad:20:1f:f4:2e:81:68:16:64:d6:2d:68:02:a7: 35:b3:c7:92:4c:20:21:ef:8c:81:fc:bc:0a:1c:f3: 5e:08:1a:0c:2a:e2:49:03:da:96:9c:f3:9d:e6:34: 7b:21:c3:57:6b:19:1d:c9:c7:1f:df:12:d1:8e:ee: bc:47:a9:c2:5c:74:34:70:8e:15:84:28:8f:e4:e4: 5a:2b:c7:7f:3a:1e:60:b2:37:b7:d1:98:5a:3c:d5: fb:85:b8:19:b5:2f:83:3d:42:7b:26:d2:c3:e0:5b: d6:89:35:af:50:24:19:5e:81:22:00:76:fd:da:2d: 0c:54:fd:4e:8e:ca:f2:f7:1a:8a:f3:ba:44:8c:a7: 26:51:b5:41:02:03:a8:0f:08:32:ab:a8:e8:e1:0a: 0c:41:1e:04:aa:fd:9f:0f:48:1a:20:8f:93:8a:75: 12:9d:d6:27:73:3a:46:90:ca:84:46:e5:58:f3:35: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6A:5F:19:CB:55:25:41:0B:A7:57:16:59:3F:2A:D6:DF:2F:93:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.255.56.0/21 Signature Algorithm: sha256WithRSAEncryption 83:f5:7c:f4:21:28:3e:dd:0a:42:66:d7:4f:b6:af:a8:35:06: e1:7b:00:5e:43:63:41:dd:a0:df:59:8f:79:3b:f1:e7:90:df: 53:20:8a:8d:0f:b6:5d:d2:13:34:9b:43:c4:2c:dd:6b:d3:08: 26:71:97:d5:d4:bc:52:73:94:a8:bb:6f:1e:04:47:e5:9f:79: 5d:74:cf:ed:4c:a4:37:c0:d1:ff:34:cd:ed:d4:d7:9d:cc:24: 8c:d9:4c:74:e7:06:78:c9:68:e4:60:5d:be:78:dd:e4:fb:b3: e3:05:bf:1e:06:7e:d3:53:b6:20:eb:69:b5:7f:95:62:b4:41: 3c:a1:96:3d:ec:38:6b:2c:6e:2a:80:f2:45:8e:6e:2c:1a:72: 57:d6:b0:8e:51:f8:9b:e4:07:e8:8b:66:cb:d3:8a:11:68:0a: 19:5b:e1:db:8b:ca:1f:83:4a:e0:95:5e:23:fa:3a:2e:9a:e7: 0e:97:49:b3:01:f5:92:90:ac:df:cf:b3:04:78:32:ff:df:0a: df:2b:6f:2d:dd:58:ab:9c:67:28:16:68:fb:1a:ac:a2:d2:73: 6d:40:d6:2d:df:d3:33:4e:81:17:ba:f7:31:96:ed:19:7b:44: 17:41:d7:da:26:45:9f:35:5d:16:82:ed:62:83:41:bf:67:82: c8:0f:a0:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEsakkz7JSJnUM/5/7yXpj+0VGSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMDIwWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDZlMWE2YmYwOTQ5ZDQ5ZGRjNDM5MjAzNGZlOGEzMzY0 YTk4MDEzNjRhOGIwNDc1YjczZTk0NWE3M2VkMmY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCdNggXjZy2TpGSP+s7MeJ2Nc7/YEdPlv2+SWpecasKyBa BpH+gLF1E9Bh7m2cKIcLs7PYTvmEy0SPPI+mkE1LGXrHNjC5cPvtJ7WtIB/0LoFo FmTWLWgCpzWzx5JMICHvjIH8vAoc814IGgwq4kkD2pac853mNHshw1drGR3Jxx/f EtGO7rxHqcJcdDRwjhWEKI/k5Forx386HmCyN7fRmFo81fuFuBm1L4M9Qnsm0sPg W9aJNa9QJBlegSIAdv3aLQxU/U6OyvL3GorzukSMpyZRtUECA6gPCDKrqOjhCgxB HgSq/Z8PSBogj5OKdRKd1idzOkaQyoRG5VjzNQ2LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUGpfGctVJUELp1cWWT8q1t8vk3MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwZTQwYzQxLTFhYjYtNGViNS04NTIyLTAyMDk0ODAwNzJmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANo/zgwDQYJKoZIhvcNAQELBQADggEBAIP1fPQhKD7dCkJm10+2r6g1BuF7 AF5DY0HdoN9Zj3k78eeQ31Mgio0Ptl3SEzSbQ8Qs3WvTCCZxl9XUvFJzlKi7bx4E R+WfeV10z+1MpDfA0f80ze3U153MJIzZTHTnBnjJaORgXb543eT7s+MFvx4GftNT tiDrabV/lWK0QTyhlj3sOGssbiqA8kWObiwaclfWsI5R+JvkB+iLZsvTihFoChlb 4duLyh+DSuCVXiP6Oi6a5w6XSbMB9ZKQrN/PswR4Mv/fCt8rby3dWKucZygWaPsa rKLSc21A1i3f0zNOgRe69zGW7Rl7RBdB19omRZ81XRaC7WKDQb9ngsgPoIE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:16 2025 by rpki-client