$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa File: 053eb650-9bae-428e-9e11-1465fd0cd03a.roa (raw, json) Hash identifier: g/HssLWyIR7dQ+wnoe5/LtbnO5BKFmOoDQ/+o/MJc4c= Subject key identifier: 27:42:7E:E9:F5:EE:3F:A9:7C:3C:F3:70:32:7B:31:67:1F:27:C4:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44D25D55CB64D4010FC2A46D33DD67553939FF2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa Signing time: Sat 02 Aug 2025 00:31:19 +0000 ROA not before: Sat 02 Aug 2025 00:31:19 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.56.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d2:5d:55:cb:64:d4:01:0f:c2:a4:6d:33:dd:67:55:39:39:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:31:19 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=fdfe15e88bf92559f1aba23a0ffc1b939ae655f4babfb4feef14d757fae19d3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:25:40:37:3b:4b:b7:d6:55:e9:40:30:4b: 6f:c8:e8:5f:fc:57:fb:9d:35:bf:ce:76:28:2c:0e: d4:79:d3:ca:e3:14:de:9b:4b:bf:cf:c6:98:05:4e: 31:92:a6:c3:6a:b4:e8:ab:8e:b0:45:28:fb:86:2c: 8b:9c:46:f0:a1:d5:0a:a4:80:9c:3e:27:11:af:9f: 9a:0c:42:6a:4e:0e:c2:85:6d:f2:3d:8c:10:bb:56: b7:6f:3a:d6:e6:23:78:02:33:33:db:af:56:ea:8a: 74:a6:9b:c6:26:ca:51:f7:2d:40:f5:7f:ad:7d:68: 9c:87:a8:b2:92:5b:e3:96:42:83:88:ed:df:67:6b: c9:cc:ab:be:06:12:e0:c6:3c:6d:68:ce:ed:46:27: 21:b2:92:c9:35:7a:d8:f5:c3:f4:dd:73:78:96:c3: cd:b3:be:7d:9d:d0:ec:38:ab:08:40:fe:41:11:c6: dc:13:36:86:fc:37:47:9e:60:3f:42:b6:d7:46:91: 3a:33:f6:ca:55:99:a2:fe:94:3c:0a:c5:8d:99:18: af:9f:bf:70:5c:cf:57:14:52:fc:59:b7:7a:40:7c: ec:39:85:8f:8f:45:28:11:b9:1f:36:2c:b1:ac:9a: df:ec:6b:d9:0d:4c:cd:dd:1c:9e:43:69:3c:a6:f7: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:7E:E9:F5:EE:3F:A9:7C:3C:F3:70:32:7B:31:67:1F:27:C4:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1f:9b:f6:62:32:70:c0:9a:ed:1e:e3:6f:34:7a:78:94:d3:6d: 0d:2c:15:e8:b7:01:3d:a3:72:f4:e3:2b:01:90:12:93:9e:8e: 41:98:96:9b:85:79:40:e1:07:52:4c:61:9a:d5:ba:ea:59:00: 9f:f4:b6:54:88:01:e0:64:2c:8b:de:ee:23:41:06:8e:cd:58: 2a:58:dc:a0:8f:30:09:49:24:bf:1c:5f:61:86:57:0e:89:c5: 73:53:81:11:99:f5:23:c9:1e:44:af:63:98:f1:56:7b:6e:0f: fd:2b:fa:2f:1a:76:67:60:eb:e2:92:b2:2f:c3:38:ac:b6:ac: 04:cc:ea:74:6d:e9:f8:1d:38:fd:4d:7b:db:01:5d:fe:01:f1: 70:cb:11:c1:0d:a5:57:21:5b:f6:3b:eb:6a:5c:c5:fb:8c:46: fe:bf:36:03:a5:af:7b:2b:17:68:58:64:5f:e2:3a:c8:e0:86: 6c:77:f3:2e:19:58:62:d9:a3:f3:4c:38:d9:ae:f0:94:3f:cb: db:4a:5c:79:17:8d:12:a1:94:ff:e8:78:a3:d1:06:5c:21:a7: 97:c9:bd:bc:d5:b2:86:b5:17:c8:32:b9:35:52:a3:72:51:cc: ef:28:2e:5b:72:59:73:29:ce:74:d4:d1:e7:ef:d0:46:a3:b0: de:3e:d3:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURNJdVctk1AEPwqRtM91nVTk5/yswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAzMTE5WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGZlMTVlODhiZjkyNTU5ZjFhYmEyM2EwZmZjMWI5Mzlh ZTY1NWY0YmFiZmI0ZmVlZjE0ZDc1N2ZhZTE5ZDNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNHiVANztLt9ZV6UAwS2/I6F/8V/udNb/OdigsDtR508rj FN6bS7/PxpgFTjGSpsNqtOirjrBFKPuGLIucRvCh1QqkgJw+JxGvn5oMQmpODsKF bfI9jBC7VrdvOtbmI3gCMzPbr1bqinSmm8YmylH3LUD1f619aJyHqLKSW+OWQoOI 7d9na8nMq74GEuDGPG1ozu1GJyGyksk1etj1w/Tdc3iWw82zvn2d0Ow4qwhA/kER xtwTNob8N0eeYD9CttdGkToz9spVmaL+lDwKxY2ZGK+fv3Bcz1cUUvxZt3pAfOw5 hY+PRSgRuR82LLGsmt/sa9kNTM3dHJ5DaTym96b7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ0J+6fXuP6l8PPNwMnsxZx8nxBcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1M2ViNjUwLTliYWUtNDI4ZS05ZTExLTE0NjVmZDBjZDAzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOAAwDQYJKoZIhvcNAQELBQADggEBAB+b9mIycMCa7R7jbzR6eJTTbQ0s Fei3AT2jcvTjKwGQEpOejkGYlpuFeUDhB1JMYZrVuupZAJ/0tlSIAeBkLIve7iNB Bo7NWCpY3KCPMAlJJL8cX2GGVw6JxXNTgRGZ9SPJHkSvY5jxVntuD/0r+i8admdg 6+KSsi/DOKy2rATM6nRt6fgdOP1Ne9sBXf4B8XDLEcENpVchW/Y762pcxfuMRv6/ NgOlr3srF2hYZF/iOsjghmx38y4ZWGLZo/NMONmu8JQ/y9tKXHkXjRKhlP/oeKPR Blwhp5fJvbzVsoa1F8gyuTVSo3JRzO8oLltyWXMpznTU0efv0EajsN4+068= -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:13 2025 by rpki-client