$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa File: d600ccd6-ff43-419e-9c88-f766b917445a.roa (raw, json) Hash identifier: Ax1An/OrzPvJcVeTNFtHor2gqFlx086Cxm4FH/ySnBE= Subject key identifier: 0E:16:DF:E1:EE:39:68:DD:C8:B4:E5:01:8D:3F:17:DA:7C:9D:58:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A6DA2254E9F44214F814F0740BD647115019106 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa Signing time: Tue 12 Aug 2025 00:31:36 +0000 ROA not before: Tue 12 Aug 2025 00:31:36 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.51.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6d:a2:25:4e:9f:44:21:4f:81:4f:07:40:bd:64:71:15:01:91:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:31:36 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=3be8264842cd8abd9c27b2e78c0c6251ae2e0c9fac2234fdbc5a9c85be50df2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:d9:27:0a:f9:73:47:b2:97:d5:b6:39:cb: 09:bb:6f:5e:27:73:33:aa:98:47:a4:3c:6b:af:6e: 2c:45:46:b0:1b:91:3e:3f:1b:18:4d:f1:a9:a9:6b: 2b:29:dd:4a:70:c6:d6:29:4f:5b:ec:8d:19:e1:3e: 59:ca:c7:42:4d:24:44:a8:45:b6:3f:70:05:b0:8b: 32:64:62:26:80:fe:49:d2:b8:11:8d:c6:f1:8d:45: 78:61:b9:f1:d1:33:f8:db:ea:83:c6:da:5c:b9:e3: 40:ab:5b:47:65:02:20:c7:ae:84:35:df:60:e3:d3: ea:10:e4:e5:31:17:a7:2c:d2:19:1c:43:e9:98:2f: 93:57:8e:f6:9a:8c:d6:bd:29:08:cf:28:67:42:ff: 80:66:07:4a:ac:fb:23:92:af:15:1f:bb:f4:44:37: 92:8a:1c:b4:ef:e5:3a:c2:4a:33:f9:00:05:a9:c8: 32:d9:c2:d9:6d:1a:d7:4a:b5:c3:c8:2c:82:8b:90: 66:73:7c:75:22:21:4a:29:ed:3c:47:40:01:67:0a: 13:a3:60:6a:e6:cd:7e:f0:f4:8f:90:dd:ef:89:b8: bd:8e:fe:56:7f:c4:08:df:e7:8f:82:8b:5c:5a:bc: b5:41:93:1a:b3:73:40:80:c7:9c:80:99:16:54:fb: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:16:DF:E1:EE:39:68:DD:C8:B4:E5:01:8D:3F:17:DA:7C:9D:58:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.51.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:ff:18:76:2b:67:be:f2:03:f3:f2:d3:73:b7:71:56:36:aa: 87:7f:16:59:08:2a:18:57:02:ca:c4:e6:7a:b0:0b:7b:a8:ef: a3:16:06:1d:5a:51:bd:31:41:df:28:4b:3f:3f:f1:bf:90:e6: f0:6d:9f:ae:1d:cf:67:b8:e4:89:83:9a:37:43:36:e3:a5:c0: 6f:f4:c4:c8:b7:e3:ac:70:ec:84:fb:94:61:54:d8:57:9e:72: a8:2a:e5:f6:7e:a2:db:33:3e:06:57:66:52:bf:c9:18:6a:42: df:df:d4:22:dd:d6:63:3c:66:e2:09:aa:96:7f:09:ad:f7:c3: ca:60:63:1c:b6:b3:33:a4:c2:4e:75:ce:f7:e0:6d:96:72:1f: fc:08:ed:4a:74:4b:db:af:f9:0d:19:20:b6:f6:e9:a4:a6:fd: d6:e1:68:b7:0f:3f:ce:84:ff:be:d0:3e:f5:fe:99:95:d7:c9: f9:5a:65:16:f3:85:00:e3:3c:f4:19:82:d1:bf:5b:2c:00:cd: 1e:69:5d:6e:56:fb:aa:74:e9:fd:8a:61:36:25:63:05:a3:a4: 44:a8:62:16:f5:47:b4:db:24:bf:87:70:ec:53:70:58:f6:58: c5:87:a7:90:ca:5e:d6:af:93:ad:76:93:5b:d0:de:a6:e7:a4: 00:4b:ea:11 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUam2iJU6fRCFPgU8HQL1kcRUBkQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAzMTM2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmU4MjY0ODQyY2Q4YWJkOWMyN2IyZTc4YzBjNjI1MWFl MmUwYzlmYWMyMjM0ZmRiYzVhOWM4NWJlNTBkZjJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDutdknCvlzR7KX1bY5ywm7b14nczOqmEekPGuvbixFRrAb kT4/GxhN8ampaysp3UpwxtYpT1vsjRnhPlnKx0JNJESoRbY/cAWwizJkYiaA/knS uBGNxvGNRXhhufHRM/jb6oPG2ly540CrW0dlAiDHroQ132Dj0+oQ5OUxF6cs0hkc Q+mYL5NXjvaajNa9KQjPKGdC/4BmB0qs+yOSrxUfu/REN5KKHLTv5TrCSjP5AAWp yDLZwtltGtdKtcPILIKLkGZzfHUiIUop7TxHQAFnChOjYGrmzX7w9I+Q3e+JuL2O /lZ/xAjf54+Ci1xavLVBkxqzc0CAx5yAmRZU+44pAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDhbf4e45aN3ItOUBjT8X2nydWBcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MDBjY2Q2LWZmNDMtNDE5ZS05Yzg4LWY3NjZiOTE3NDQ1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MzANBgkqhkiG9w0BAQsFAAOCAQEAcf8YditnvvID8/LTc7dxVjaqh38W WQgqGFcCysTmerALe6jvoxYGHVpRvTFB3yhLPz/xv5Dm8G2frh3PZ7jkiYOaN0M2 46XAb/TEyLfjrHDshPuUYVTYV55yqCrl9n6i2zM+BldmUr/JGGpC39/UIt3WYzxm 4gmqln8JrffDymBjHLazM6TCTnXO9+BtlnIf/AjtSnRL26/5DRkgtvbppKb91uFo tw8/zoT/vtA+9f6ZldfJ+VplFvOFAOM89BmC0b9bLADNHmldblb7qnTp/YphNiVj BaOkRKhiFvVHtNskv4dw7FNwWPZYxYenkMpe1q+TrXaTW9DepuekAEvqEQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:40 2025 by rpki-client