$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa File: d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa (raw, json) Hash identifier: RlMLdIHOYgSph+ODldR19/ki1Oefo1Rue3/0hpXLVSo= Subject key identifier: 92:18:5A:2F:4A:29:63:06:BF:78:75:0D:9B:61:B2:52:DF:14:84:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68D91E03AE8E8E52C185B609DE4B4530557247 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa Signing time: Tue 05 Aug 2025 00:30:39 +0000 ROA not before: Tue 05 Aug 2025 00:30:39 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d9:1e:03:ae:8e:8e:52:c1:85:b6:09:de:4b:45:30:55:72:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:39 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0d4bcfd0037b789651d770a6549090fef83b17bee0e739ad8e6004ccba871c4d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:94:69:02:98:04:07:85:50:4b:4b:25:e1: 2a:67:4c:91:69:c8:74:2e:c0:8d:e4:3f:18:2d:2f: d6:22:6b:0f:10:0b:2f:02:cc:dd:c2:ce:68:1b:90: 76:1b:aa:94:3b:0b:95:d7:2e:53:3e:83:ad:de:f1: 7d:42:9e:34:ba:80:08:16:18:51:e7:c5:81:e8:a7: 39:0e:22:1c:f3:b6:09:ea:d5:37:a2:4a:06:6d:8c: c3:1d:b5:14:03:4c:1b:60:ea:a4:b3:50:a5:fb:1e: af:70:aa:e2:a7:c5:ac:89:bd:3b:3c:9e:2c:59:35: 9e:85:31:50:7b:5a:22:77:e7:69:ee:23:01:64:83: cc:98:8d:5d:45:de:9d:38:72:5a:4f:a0:7b:90:b1: 74:57:0e:fd:9b:44:6e:4d:95:bf:ab:64:00:26:50: 5b:0a:1d:0e:e0:a9:ba:26:7c:b4:08:22:32:94:66: ac:34:95:4f:ae:4e:25:c8:5b:33:84:e3:62:ba:ea: 88:f8:11:9c:e1:36:8f:64:ac:a7:af:b9:0b:46:a8: b5:a1:13:64:2f:f5:7a:25:5f:e7:0d:3a:22:f6:0c: 7a:81:5b:aa:97:c4:bb:58:19:2c:77:9a:7d:84:8c: 73:4e:2d:96:14:51:9b:eb:9f:68:61:64:5a:d1:26: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:5A:2F:4A:29:63:06:BF:78:75:0D:9B:61:B2:52:DF:14:84:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:e8:f0:10:61:dc:77:1c:d6:27:b8:a5:6f:94:14:2e:e2:b0: e5:ba:f2:d0:3d:21:5a:23:c9:c5:84:ff:47:da:93:ea:63:3d: 00:f0:ab:a4:5a:16:28:4d:da:90:fc:63:3e:ef:87:35:1d:d7: 29:e8:36:f8:b3:47:0f:5e:20:09:e9:13:02:ef:f6:a5:ae:99: 3c:01:0c:52:60:38:99:e8:49:c7:65:34:b2:d5:8e:36:c4:f8: e3:4d:4d:58:43:6c:c9:fb:ea:2e:bb:8e:dc:c9:ac:b4:4a:dc: 7b:e4:98:61:54:5a:4e:fa:27:eb:36:dd:be:b7:00:93:7a:8b: 1c:72:d9:89:c4:4e:81:4b:c4:8d:15:4d:ca:93:9d:0d:2b:6f: 3f:8a:4c:fa:ed:93:e2:4b:58:a5:b4:35:1d:cc:cf:79:79:cb: 38:b5:4c:d3:c5:cc:3e:29:43:5f:81:39:da:55:93:98:b5:1d: e9:42:43:ef:fb:5b:db:40:0a:e1:8c:e8:e3:5c:0b:0f:bd:ad: 83:12:f3:e9:ae:44:b0:52:2f:c6:dc:69:ab:9f:45:9d:23:95: a3:4a:6b:09:46:96:71:b1:57:07:6a:63:98:08:20:49:8b:a5: 83:27:6a:f5:03:81:20:c6:a9:39:ee:2f:19:2a:a5:b9:50:6b: e3:13:fd:f8 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITaNkeA66OjlLBhbYJ3ktFMFVyRzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA4MDUwMDMwMzlaFw0yNTA5MDkyMzU5NTla MHoxSTBHBgNVBAUTQDBkNGJjZmQwMDM3Yjc4OTY1MWQ3NzBhNjU0OTA5MGZlZjgz YjE3YmVlMGU3MzlhZDhlNjAwNGNjYmE4NzFjNGQxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALUzlGkCmAQHhVBLSyXhKmdMkWnIdC7AjeQ/GC0v1iJrDxAL LwLM3cLOaBuQdhuqlDsLldcuUz6Drd7xfUKeNLqACBYYUefFgeinOQ4iHPO2CerV N6JKBm2Mwx21FANMG2DqpLNQpfser3Cq4qfFrIm9OzyeLFk1noUxUHtaInfnae4j AWSDzJiNXUXenThyWk+ge5CxdFcO/ZtEbk2Vv6tkACZQWwodDuCpuiZ8tAgiMpRm rDSVT65OJchbM4TjYrrqiPgRnOE2j2Ssp6+5C0aotaETZC/1eiVf5w06IvYMeoFb qpfEu1gZLHeafYSMc04tlhRRm+ufaGFkWtEmXkcCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBSSGFovSiljBr94dQ2bYbJS3xSEGTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZDY1ZTRiMGQtYTU5NC00ZmU1LWE4ZjUtYTZjYWY2MjIzNGRhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDADjoMA0GCSqGSIb3DQEBCwUAA4IBAQA/6PAQYdx3HNYnuKVvlBQu4rDluvLQ PSFaI8nFhP9H2pPqYz0A8KukWhYoTdqQ/GM+74c1Hdcp6Db4s0cPXiAJ6RMC7/al rpk8AQxSYDiZ6EnHZTSy1Y42xPjjTU1YQ2zJ++ouu47cyay0Stx75JhhVFpO+ifr Nt2+twCTeoscctmJxE6BS8SNFU3Kk50NK28/ikz67ZPiS1iltDUdzM95ecs4tUzT xcw+KUNfgTnaVZOYtR3pQkPv+1vbQArhjOjjXAsPva2DEvPprkSwUi/G3Gmrn0Wd I5WjSmsJRpZxsVcHamOYCCBJi6WDJ2r1A4Egxqk57i8ZKqW5UGvjE/34 -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:40 2025 by rpki-client