$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2417053-332a-4d0f-aecb-16c3b0241ca9.roa File: e2417053-332a-4d0f-aecb-16c3b0241ca9.roa (raw, json) Hash identifier: 3teTNRKYJ23kql1WDP7WwoaGUGg5F66babd6der/o8I= Subject key identifier: 6A:7A:C5:02:30:F5:0E:C5:98:19:83:A2:47:FD:09:B4:90:3E:6C:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2412BB032F958263366FFB941F02446C21C13649 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2417053-332a-4d0f-aecb-16c3b0241ca9.roa Signing time: Tue 12 Aug 2025 00:01:57 +0000 ROA not before: Tue 12 Aug 2025 00:01:57 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:12:bb:03:2f:95:82:63:36:6f:fb:94:1f:02:44:6c:21:c1:36:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:01:57 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=5d713f2187bd7ad53b419f594fc01c03e93c6d018d1ff79d443129314fcec6dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:a0:9f:65:fd:ff:ed:46:9f:cb:c9:bf:57: 82:74:d8:1c:f3:ee:60:42:e7:2b:9f:e1:ad:38:47: 2d:c6:c4:47:57:f9:e1:c5:4e:00:25:29:e2:a9:4f: 8f:08:ff:7c:46:9b:fc:18:99:ff:4e:52:64:3e:d0: 05:d8:74:58:f3:b0:f7:f7:e9:d3:fe:cc:3a:85:1a: ae:ae:3d:57:52:6f:aa:1b:aa:0c:a7:0a:d6:50:4c: 27:3d:0f:65:24:68:9e:dc:37:07:09:d3:fa:db:23: 42:57:2f:05:9b:bb:ec:60:08:ef:49:4a:5e:7e:d6: 86:41:b5:63:c1:4f:27:24:0d:bf:5e:eb:b3:57:6e: e1:b0:d4:64:fa:f9:f0:8e:85:68:22:37:c1:12:ae: f4:43:22:16:31:c0:51:8f:5f:89:4e:8c:6f:b9:b5: 7e:d8:45:2c:23:71:78:1c:ec:73:06:3a:5e:46:0b: f1:b2:b8:d2:2b:31:ec:48:3c:0e:79:dd:1f:80:e6: 02:10:66:fa:16:33:23:3d:be:46:f3:7b:de:4a:46: 37:4b:61:d8:ed:71:cc:aa:1c:d1:a5:6b:9c:0f:90: 5e:31:23:08:6a:8a:aa:63:f6:70:76:4b:97:7e:e9: ce:34:59:37:fb:71:09:4e:0f:de:75:24:6e:c7:ae: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:C5:02:30:F5:0E:C5:98:19:83:A2:47:FD:09:B4:90:3E:6C:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2417053-332a-4d0f-aecb-16c3b0241ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:73:94:35:a2:15:60:21:7a:df:e6:6f:60:48:15:c2:30:f4: f4:e1:14:b6:3a:e7:d8:e8:f3:88:52:9a:31:15:c5:0f:19:93: ab:97:96:90:f8:50:71:b2:ba:9a:4e:e5:a4:6c:59:7e:30:67: 2f:98:20:73:66:54:4c:0b:a9:b6:6f:cd:29:b7:33:e5:f1:a7: f7:c0:df:d7:24:27:32:b5:72:58:4c:35:0f:d5:1b:0b:34:13: cf:ba:af:10:4c:55:29:f4:28:3e:dd:5e:bc:c8:57:6b:40:78: 32:19:c2:71:5a:53:e8:14:a6:53:16:1c:45:a7:4d:bb:ec:51: 0e:6d:03:1f:7a:86:17:c4:a4:14:1d:20:67:ab:04:bc:cd:3c: 98:d0:c2:58:59:1e:0e:ae:85:fc:33:e7:43:ee:1c:25:c2:e3: b7:2d:4e:16:7e:63:3b:81:11:4b:64:7e:3f:76:01:46:e6:6c: 7f:b9:e5:ac:4f:c8:f0:ec:9a:fb:d3:95:93:77:40:dd:31:62: 91:71:1f:d7:c4:e5:09:77:30:d3:79:8f:4c:5f:31:f4:2b:92: b3:a2:4d:91:df:ce:9d:19:0c:f1:38:74:fb:c5:7c:2a:8e:69: 8a:37:81:58:26:ee:44:b4:79:b4:bb:b6:09:99:05:b4:b5:5d: bd:cc:64:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJBK7Ay+VgmM2b/uUHwJEbCHBNkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAwMTU3WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDcxM2YyMTg3YmQ3YWQ1M2I0MTlmNTk0ZmMwMWMwM2U5 M2M2ZDAxOGQxZmY3OWQ0NDMxMjkzMTRmY2VjNmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL2KCfZf3/7Uafy8m/V4J02Bzz7mBC5yuf4a04Ry3GxEdX +eHFTgAlKeKpT48I/3xGm/wYmf9OUmQ+0AXYdFjzsPf36dP+zDqFGq6uPVdSb6ob qgynCtZQTCc9D2UkaJ7cNwcJ0/rbI0JXLwWbu+xgCO9JSl5+1oZBtWPBTyckDb9e 67NXbuGw1GT6+fCOhWgiN8ESrvRDIhYxwFGPX4lOjG+5tX7YRSwjcXgc7HMGOl5G C/GyuNIrMexIPA553R+A5gIQZvoWMyM9vkbze95KRjdLYdjtccyqHNGla5wPkF4x Iwhqiqpj9nB2S5d+6c40WTf7cQlOD951JG7HrhbzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUanrFAjD1DsWYGYOiR/0JtJA+bAYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyNDE3MDUzLTMzMmEtNGQwZi1hZWNiLTE2YzNiMDI0MWNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQWDANBgkqhkiG9w0BAQsFAAOCAQEAeXOUNaIVYCF63+ZvYEgVwjD09OEU tjrn2OjziFKaMRXFDxmTq5eWkPhQcbK6mk7lpGxZfjBnL5ggc2ZUTAuptm/NKbcz 5fGn98Df1yQnMrVyWEw1D9UbCzQTz7qvEExVKfQoPt1evMhXa0B4MhnCcVpT6BSm UxYcRadNu+xRDm0DH3qGF8SkFB0gZ6sEvM08mNDCWFkeDq6F/DPnQ+4cJcLjty1O Fn5jO4ERS2R+P3YBRuZsf7nlrE/I8Oya+9OVk3dA3TFikXEf18TlCXcw03mPTF8x 9CuSs6JNkd/OnRkM8Th0+8V8Ko5pijeBWCbuRLR5tLu2CZkFtLVdvcxk8A== -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:15 2025 by rpki-client