$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edc4465e-72f7-4c57-9f13-d96fb509acfc.roa File: edc4465e-72f7-4c57-9f13-d96fb509acfc.roa (raw, json) Hash identifier: kHAMft2JTSO8vV51G8vBinALCx65W86s8R5D14yMOqs= Subject key identifier: 6E:E0:62:DA:A5:46:11:80:F8:2F:F6:24:0E:E0:26:A1:CD:F8:F4:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17FBCA6172E30D7EFA59D3071851A65A4FE1587F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edc4465e-72f7-4c57-9f13-d96fb509acfc.roa Signing time: Tue 12 Aug 2025 00:40:26 +0000 ROA not before: Tue 12 Aug 2025 00:40:26 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 68.66.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fb:ca:61:72:e3:0d:7e:fa:59:d3:07:18:51:a6:5a:4f:e1:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:40:26 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=a65e2b75a66afdd867516482f23f325aca6438fff2fcc621c641ae5b04617860, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:46:e1:cb:e5:b2:ba:98:7e:e2:4a:39:49: 00:71:f3:cb:ef:1d:84:98:22:13:24:bf:d3:fc:3a: d8:fe:c2:f7:c1:ce:a8:cd:dd:60:11:02:7b:80:c4: 2c:c7:82:f3:1a:2e:81:6f:d2:9d:10:50:cc:7a:7c: 7d:02:0b:cf:2e:d5:bd:5f:e0:a0:a1:7a:5f:76:ed: 34:ad:da:7b:96:1a:9e:25:db:e2:84:19:48:d4:a4: 3a:8a:2f:25:6b:af:9a:9b:96:71:b7:14:a9:26:51: 8f:13:6d:83:f8:2e:6e:3f:c6:a3:f5:3c:aa:f7:90: e1:22:27:5a:3c:db:7f:90:29:37:d7:a5:c6:6d:70: c8:f0:38:5f:37:cf:b1:a5:06:2f:46:59:4f:ff:5a: 5b:bc:bf:f6:da:ff:5f:2e:85:52:01:4c:45:f5:56: de:3e:4e:e4:a0:02:a5:23:dd:ae:bc:ce:38:d2:9c: 40:25:0e:09:2b:e8:4f:b2:87:59:1d:79:de:b1:55: a1:ba:de:eb:38:93:d1:d8:5e:3f:54:3d:8e:45:9c: 19:b3:0c:04:56:fb:1c:8a:64:92:51:5a:c0:da:b3: 96:df:3e:82:f1:9f:7e:ab:fe:27:65:c9:b3:d3:9b: 2b:f1:a8:86:91:2c:80:e7:1a:93:32:23:f6:0d:2d: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E0:62:DA:A5:46:11:80:F8:2F:F6:24:0E:E0:26:A1:CD:F8:F4:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edc4465e-72f7-4c57-9f13-d96fb509acfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:67:8e:a0:c5:2a:26:0c:35:a1:52:cb:d4:ed:a9:ae:4b:37: de:c9:da:b4:d2:98:7f:2b:fd:c3:91:d4:52:40:b0:c7:96:d6: e6:76:9e:83:3a:0f:76:a7:9c:af:d7:0f:12:08:3f:6b:64:ff: bb:bc:75:6c:4d:73:1e:d5:7a:a0:39:36:10:e8:35:51:0a:28: 68:d1:8a:e0:54:f1:cc:1d:8d:e0:d5:3b:d4:95:50:16:2a:61: 17:dd:d1:95:db:3d:b7:d7:5b:71:4d:c0:a0:96:e2:89:dc:05: 6f:c1:6c:f7:d9:52:29:d3:c9:ce:ea:a1:08:82:ef:3b:82:f5: ef:64:e3:64:62:95:84:c2:fa:c9:d8:24:32:9b:e7:c6:10:a2: 16:01:2f:14:e6:e6:e4:d0:cf:8d:8e:3b:38:71:08:ed:98:88: eb:9f:ac:fa:da:49:75:ef:2e:0f:00:cb:2a:08:84:d4:fa:8f: 82:38:93:93:e2:69:86:72:46:da:7e:11:f0:c3:9d:1b:5e:e7: 1b:04:8d:a3:50:b4:0a:07:81:67:0d:17:3d:7f:06:fd:88:71: 05:1f:e9:74:8c:ac:78:4c:94:61:56:c7:d3:c4:fc:dc:9a:5f: 89:0b:eb:dc:70:f2:a1:56:92:f8:c3:51:2c:2f:39:48:59:7f: 31:a3:66:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF/vKYXLjDX76WdMHGFGmWk/hWH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MDI2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjVlMmI3NWE2NmFmZGQ4Njc1MTY0ODJmMjNmMzI1YWNh NjQzOGZmZjJmY2M2MjFjNjQxYWU1YjA0NjE3ODYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHoEbhy+Wyuph+4ko5SQBx88vvHYSYIhMkv9P8Otj+wvfB zqjN3WARAnuAxCzHgvMaLoFv0p0QUMx6fH0CC88u1b1f4KChel927TSt2nuWGp4l 2+KEGUjUpDqKLyVrr5qblnG3FKkmUY8TbYP4Lm4/xqP1PKr3kOEiJ1o823+QKTfX pcZtcMjwOF83z7GlBi9GWU//Wlu8v/ba/18uhVIBTEX1Vt4+TuSgAqUj3a68zjjS nEAlDgkr6E+yh1kded6xVaG63us4k9HYXj9UPY5FnBmzDARW+xyKZJJRWsDas5bf PoLxn36r/idlybPTmyvxqIaRLIDnGpMyI/YNLQifAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbuBi2qVGEYD4L/YkDuAmoc349IcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYzQ0NjVlLTcyZjctNGM1Ny05ZjEzLWQ5NmZiNTA5YWNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAREQnAwDQYJKoZIhvcNAQELBQADggEBAIxnjqDFKiYMNaFSy9Ttqa5LN97J 2rTSmH8r/cOR1FJAsMeW1uZ2noM6D3annK/XDxIIP2tk/7u8dWxNcx7VeqA5NhDo NVEKKGjRiuBU8cwdjeDVO9SVUBYqYRfd0ZXbPbfXW3FNwKCW4oncBW/BbPfZUinT yc7qoQiC7zuC9e9k42RilYTC+snYJDKb58YQohYBLxTm5uTQz42OOzhxCO2YiOuf rPraSXXvLg8AyyoIhNT6j4I4k5PiaYZyRtp+EfDDnRte5xsEjaNQtAoHgWcNFz1/ Bv2IcQUf6XSMrHhMlGFWx9PE/NyaX4kL69xw8qFWkvjDUSwvOUhZfzGjZoQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:14 2025 by rpki-client