$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa File: 054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa (raw, json) Hash identifier: uVePOS0FvgRVvo9goUz36XPDlroYcpHxuUL9fmVGj4A= Subject key identifier: 1B:C2:F3:D0:35:42:42:E6:91:65:D1:57:4D:4C:A5:11:7F:E4:33:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 036ACA3765E1E005331659E6D902E99BEA0EFDC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa Signing time: Fri 01 Aug 2025 15:10:20 +0000 ROA not before: Fri 01 Aug 2025 15:10:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6a:ca:37:65:e1:e0:05:33:16:59:e6:d9:02:e9:9b:ea:0e:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:10:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=363d8405d15abe73b6e1bf9b87ea7b221cc208e114934ccd456a76098c03ef46, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:17:74:5f:ab:d2:32:1a:c4:f5:aa:60:00: f2:60:26:1c:c3:b3:d7:cc:3e:b4:fc:ea:e0:9a:57: 0a:59:48:b0:c6:8f:47:60:98:41:de:e0:fe:e4:2e: 3a:d6:17:be:48:86:d9:5e:b7:4e:be:be:91:74:d6: c4:64:63:a3:5f:b4:af:b2:e2:21:42:6d:62:97:8d: 88:17:f6:4c:23:7d:de:f3:ca:a3:81:9c:cc:1f:08: ef:17:26:04:b3:b3:9b:e8:6c:63:b5:fd:03:98:95: 6e:00:26:52:09:ac:5b:cf:48:72:75:e8:82:b4:45: b7:6a:b8:0c:a7:f8:5a:e3:d9:71:f6:4b:40:4f:4c: 2c:60:5a:77:9a:d1:c0:fe:e6:a8:9e:8b:8e:5b:d7: a7:6b:b0:c3:2e:9f:a6:80:1f:b6:9d:a3:26:6b:01: 78:c5:82:0b:22:d7:7b:e6:8f:ff:b5:21:59:d5:cb: 3e:c9:21:f2:43:d8:56:cd:88:3a:3e:35:52:c0:49: 77:20:70:d4:5f:30:5a:5d:66:ad:f6:48:ef:94:9a: 07:c0:5b:77:97:2d:4d:b6:f1:b5:5d:c5:af:b8:b3: 7f:10:10:3a:a8:c9:a5:63:40:a3:9a:bb:33:bf:76: be:ef:6e:a6:5e:14:25:52:2e:1a:a6:33:53:6e:3c: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:F3:D0:35:42:42:E6:91:65:D1:57:4D:4C:A5:11:7F:E4:33:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:46:76:6c:4b:97:8f:b1:93:73:b6:f3:4d:6f:e9:b9:aa:af: d7:ad:56:89:f7:87:21:23:f2:fb:b0:9d:5a:54:94:cd:5a:f1: 6f:bf:a6:01:a3:2d:63:3a:86:d4:bc:db:fc:9b:0f:94:d0:25: a1:39:f1:bc:86:c1:f7:3e:1f:3b:ed:29:0e:bc:6c:10:26:cf: 9b:f7:27:7c:8b:15:d1:fd:5d:fd:57:2b:7d:fe:51:72:e6:3a: 8a:2f:82:91:cc:83:89:34:77:79:a8:59:30:8e:92:fa:4f:13: 86:e0:e9:e8:09:39:49:f0:a5:7b:35:4d:86:74:dc:1c:83:05: 96:8a:df:f7:77:a5:38:4c:68:2d:9e:07:a2:8d:dd:45:02:8b: 9b:2e:ca:97:f2:71:2c:9b:14:7c:7d:d3:37:83:c7:cd:c3:c6: 9e:2f:74:bd:1e:15:28:b5:5f:6b:41:6c:f9:73:66:35:1c:1b: 31:4d:b5:2e:63:70:4d:0f:73:71:76:0e:1b:92:1b:ae:e0:6e: 40:6e:bf:6c:ab:28:5e:f3:f4:99:05:99:21:a3:01:82:02:92: 6a:bc:f3:40:1b:f9:e6:26:10:f2:5b:1f:15:2c:59:21:43:4f: bf:9d:26:1d:12:15:e7:80:5b:ad:15:12:52:0b:b7:bf:20:57: 0e:29:50:b0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUA2rKN2Xh4AUzFlnm2QLpm+oO/ckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMDIwWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjNkODQwNWQxNWFiZTczYjZlMWJmOWI4N2VhN2IyMjFj YzIwOGUxMTQ5MzRjY2Q0NTZhNzYwOThjMDNlZjQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM3Rd0X6vSMhrE9apgAPJgJhzDs9fMPrT86uCaVwpZSLDG j0dgmEHe4P7kLjrWF75Ihtlet06+vpF01sRkY6NftK+y4iFCbWKXjYgX9kwjfd7z yqOBnMwfCO8XJgSzs5vobGO1/QOYlW4AJlIJrFvPSHJ16IK0RbdquAyn+Frj2XH2 S0BPTCxgWnea0cD+5qiei45b16drsMMun6aAH7adoyZrAXjFggsi13vmj/+1IVnV yz7JIfJD2FbNiDo+NVLASXcgcNRfMFpdZq32SO+UmgfAW3eXLU228bVdxa+4s38Q EDqoyaVjQKOauzO/dr7vbqZeFCVSLhqmM1NuPCFxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUG8Lz0DVCQuaRZdFXTUylEX/kMw4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NDk0OGNkLTQwZWQtNDgwNy1iMmZjLThhOGMzOGY4ZGRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQEDANBgkqhkiG9w0BAQsFAAOCAQEAo0Z2bEuXj7GTc7bzTW/puaqv161W ifeHISPy+7CdWlSUzVrxb7+mAaMtYzqG1Lzb/JsPlNAloTnxvIbB9z4fO+0pDrxs ECbPm/cnfIsV0f1d/Vcrff5RcuY6ii+CkcyDiTR3eahZMI6S+k8ThuDp6Ak5SfCl ezVNhnTcHIMFlorf93elOExoLZ4Hoo3dRQKLmy7Kl/JxLJsUfH3TN4PHzcPGni90 vR4VKLVfa0Fs+XNmNRwbMU21LmNwTQ9zcXYOG5IbruBuQG6/bKsoXvP0mQWZIaMB ggKSarzzQBv55iYQ8lsfFSxZIUNPv50mHRIV54BbrRUSUgu3vyBXDilQsA== -----END CERTIFICATE-----Generated at Wed Aug 6 07:50:54 2025 by rpki-client