$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa File: e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa (raw, json) Hash identifier: 5k3GZuFZ0t4jenI0r4y/i4pcsAt+MomWfBVVGhtsaCQ= Subject key identifier: CB:58:46:9A:54:B7:D7:63:6F:AD:15:31:12:CA:91:A6:AA:91:31:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38CD6CFB1ECDD89E4445F948F58E2E48AE762EE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa Signing time: Tue 12 Aug 2025 00:50:56 +0000 ROA not before: Tue 12 Aug 2025 00:50:56 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:6c:fb:1e:cd:d8:9e:44:45:f9:48:f5:8e:2e:48:ae:76:2e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:50:56 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=b31b00d33c1fc5a6ad8a719aad5cd21d84c0ac818dd488f885a84d80b55ee2a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:83:7b:a3:5e:7d:7e:27:6b:74:96:37:aa: 30:20:e4:7b:18:bc:5c:9c:19:99:72:f1:36:24:cb: a7:b1:9a:74:73:ef:d2:9f:80:e2:a7:09:51:76:84: 74:7d:3a:7c:3e:0a:be:23:55:4a:b8:8c:a9:7d:45: 08:15:a3:38:72:57:f7:2e:9f:94:89:2d:fc:5b:95: ad:68:1c:ea:f9:b4:6a:4e:39:50:c2:9a:2d:01:a2: 21:77:ae:2d:b6:9f:00:b5:dd:88:03:ba:5b:2b:c4: 9e:91:16:06:8d:78:a3:0d:6e:f9:f3:57:df:33:54: 27:98:6b:e6:86:36:02:44:c8:7d:5a:55:4d:2d:2c: 55:75:62:71:1b:eb:bb:69:83:1a:9e:ae:ab:56:ab: 9c:a8:3b:0f:b5:e5:de:0a:00:24:77:6b:48:1e:32: b7:4d:9c:28:e4:0c:e5:24:31:2a:ef:b4:21:ed:4e: bb:74:45:ab:2c:4f:95:ac:f9:7d:0d:5d:97:4f:2d: 3f:80:0c:8c:31:ee:a2:cd:4e:84:82:61:9f:f6:ea: c5:10:4d:a7:4a:4d:d8:4e:a6:33:7b:ec:a5:c4:72: 3a:c5:c3:92:42:3f:58:2b:c3:9e:17:39:da:2f:99: 0b:36:00:05:ee:a4:53:5b:8c:e1:d2:75:a3:01:ed: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:58:46:9A:54:B7:D7:63:6F:AD:15:31:12:CA:91:A6:AA:91:31:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.56.0/22 Signature Algorithm: sha256WithRSAEncryption c8:b0:e6:d1:94:f7:8b:4a:10:d8:63:3b:b2:ea:2c:d5:6b:e7: 80:ae:79:f1:4a:f2:74:49:d3:33:ce:6e:05:00:df:0f:b3:91: f4:bd:c0:bd:8f:47:df:cf:29:ca:57:a4:2f:91:3d:e8:75:0a: 50:52:9b:ea:6e:95:7b:bd:ff:ad:b5:07:3f:8b:e0:ba:70:bc: 63:fe:d3:da:9e:30:c2:4c:8b:b5:8c:90:e0:5b:c4:36:4f:27: 31:06:d7:3d:bc:a6:69:c6:a7:b5:65:96:b2:43:f1:69:b5:71: ba:87:85:da:55:28:9b:0d:70:8b:97:48:75:85:5a:a1:6d:d1: fd:0b:65:0b:a0:27:93:89:11:29:b0:78:78:0e:2c:95:52:ac: cc:55:e2:93:c4:67:bf:78:6f:87:73:a9:a6:05:55:bd:72:32: a7:7d:1e:5c:18:e0:3f:b7:dd:24:22:c2:97:aa:f9:59:f5:04: 01:b7:47:dd:86:13:86:46:86:dc:b4:43:6a:01:8d:85:19:d3: 70:39:89:24:ee:ee:b8:a7:a0:4b:5d:ca:df:97:38:9e:32:bf: be:c7:c9:bc:40:1c:1d:f9:29:f3:ae:bc:92:65:8d:e3:97:26: 5e:5d:ee:b6:15:2f:40:f1:df:4d:ae:c9:9d:d5:e7:64:85:29: 7c:c9:4b:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOM1s+x7N2J5ERflI9Y4uSK52LuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MDU2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzFiMDBkMzNjMWZjNWE2YWQ4YTcxOWFhZDVjZDIxZDg0 YzBhYzgxOGRkNDg4Zjg4NWE4NGQ4MGI1NWVlMmE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBYYN7o159fidrdJY3qjAg5HsYvFycGZly8TYky6exmnRz 79KfgOKnCVF2hHR9Onw+Cr4jVUq4jKl9RQgVozhyV/cun5SJLfxbla1oHOr5tGpO OVDCmi0BoiF3ri22nwC13YgDulsrxJ6RFgaNeKMNbvnzV98zVCeYa+aGNgJEyH1a VU0tLFV1YnEb67tpgxqerqtWq5yoOw+15d4KACR3a0geMrdNnCjkDOUkMSrvtCHt Trt0RassT5Ws+X0NXZdPLT+ADIwx7qLNToSCYZ/26sUQTadKTdhOpjN77KXEcjrF w5JCP1grw54XOdovmQs2AAXupFNbjOHSdaMB7VWnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy1hGmlS312NvrRUxEsqRpqqRMc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1ZjEwMzI2LWFiODItNGQ3My1hNDlhLTliNzU5ZThmOGY5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgADgwDQYJKoZIhvcNAQELBQADggEBAMiw5tGU94tKENhjO7LqLNVr54Cu efFK8nRJ0zPObgUA3w+zkfS9wL2PR9/PKcpXpC+RPeh1ClBSm+pulXu9/621Bz+L 4LpwvGP+09qeMMJMi7WMkOBbxDZPJzEG1z28pmnGp7VllrJD8Wm1cbqHhdpVKJsN cIuXSHWFWqFt0f0LZQugJ5OJESmweHgOLJVSrMxV4pPEZ794b4dzqaYFVb1yMqd9 HlwY4D+33SQiwpeq+Vn1BAG3R92GE4ZGhty0Q2oBjYUZ03A5iSTu7rinoEtdyt+X OJ4yv77HybxAHB35KfOuvJJljeOXJl5d7rYVL0Dx302uyZ3V52SFKXzJS7A= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:33 2025 by rpki-client