$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa File: 19c56357-2b65-4688-b2df-9f085ab31aa2.roa (raw, json) Hash identifier: 6ahlv2Sy75dZEH8YG/Qkri0XwmWT0RlhH2Eu8VcwU8I= Subject key identifier: A7:13:11:21:C2:58:6C:D7:44:C9:C8:E9:D3:3D:66:8E:95:37:A7:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F5A4F43DB7699A3AABB6FE051177F23BC04C715 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa Signing time: Wed 06 Aug 2025 13:23:05 +0000 ROA not before: Wed 06 Aug 2025 13:23:05 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 56.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5a:4f:43:db:76:99:a3:aa:bb:6f:e0:51:17:7f:23:bc:04:c7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 13:23:05 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=b226364a280fe5b554a318b83717d61027bef5a146b9f2d4569e9240aa72c12c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:3c:2f:65:19:ed:db:52:1a:8f:b3:58:16: ec:7c:5b:c9:e8:78:c9:a8:86:6d:c5:f9:3e:ea:0e: 65:a1:94:5a:bf:69:80:58:89:ca:29:ae:ac:00:ba: 08:12:04:0e:b2:0f:0c:f6:70:c9:69:41:3e:c6:17: c6:df:da:a2:3e:d2:d0:64:12:1f:15:84:da:07:98: 6a:0d:8f:5b:5e:0a:f5:0a:73:d9:ee:c5:62:23:22: 1f:1d:43:41:9b:a3:bd:ff:f3:6c:ec:53:e8:db:ae: cc:b6:f4:cf:b3:c9:b1:fe:60:cc:99:82:c0:b6:d5: 6e:4b:0a:27:74:f9:1e:2b:46:a4:7d:c2:86:22:f4: 24:5c:71:e6:ce:3a:25:c6:a6:71:0d:5d:00:95:8b: 3d:16:83:c1:3c:9a:15:af:13:e9:e3:96:55:3f:b1: d6:cd:0d:c3:26:ef:e5:43:21:2c:8c:2b:cc:a1:12: 6d:34:1f:23:e3:b4:93:3e:e2:c4:f0:4e:12:2f:68: 5d:34:13:64:c9:26:a9:5e:7d:a0:6d:99:39:ae:34: 90:20:73:7d:39:30:9f:91:b5:e6:be:bf:66:88:ff: 5a:9c:17:92:9d:04:0d:e9:c0:b4:5b:c2:8d:20:9c: 4d:58:0f:f2:d9:4a:21:26:8c:f1:c2:0d:35:c8:1e: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:11:21:C2:58:6C:D7:44:C9:C8:E9:D3:3D:66:8E:95:37:A7:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:8e:c8:88:37:10:0d:e6:48:4f:5f:d5:fd:e4:b8:34:85:28: 0e:bb:13:bf:0b:f6:ab:10:73:c2:95:51:5a:78:fe:7b:2d:52: 4f:11:d7:83:18:e3:2e:cd:8c:01:0c:0b:3c:da:f6:a6:a9:4b: 3e:cd:2b:2c:40:1d:4d:c7:32:7a:c8:4c:fd:8d:c2:75:34:e4: f4:3b:71:97:44:68:1d:f9:e2:65:f7:1d:76:c9:29:a3:dd:65: ff:56:3b:54:72:6d:0a:b9:eb:b6:0f:0b:52:2a:08:87:e0:46: bb:0b:38:24:85:62:27:1d:b9:92:f3:07:97:0f:9c:cf:9c:88: 3d:26:58:1e:03:99:8b:2b:80:cc:35:c3:6d:44:b6:03:d9:e1: a8:b2:18:74:33:4f:50:e0:e6:3b:e0:e8:84:03:93:1c:e3:c6: 65:9f:0a:ea:f1:36:e0:db:89:46:f3:20:b4:b5:ec:2e:cf:2f: bc:1e:d0:6b:85:8d:84:98:a5:96:6b:da:4c:18:7c:39:70:04: 16:d5:26:69:b7:e6:6e:67:e0:11:a1:47:15:1a:d3:e0:fa:5d: ab:48:bf:89:4b:03:b5:6c:a9:ee:f4:04:cb:73:36:93:71:cc: b4:a9:05:4e:5f:e4:1f:53:e0:06:76:4f:98:75:23:e6:c2:ab: 37:89:63:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD1pPQ9t2maOqu2/gURd/I7wExxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MTMyMzA1WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjI2MzY0YTI4MGZlNWI1NTRhMzE4YjgzNzE3ZDYxMDI3 YmVmNWExNDZiOWYyZDQ1NjllOTI0MGFhNzJjMTJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5HzwvZRnt21Iaj7NYFux8W8noeMmohm3F+T7qDmWhlFq/ aYBYicoprqwAuggSBA6yDwz2cMlpQT7GF8bf2qI+0tBkEh8VhNoHmGoNj1teCvUK c9nuxWIjIh8dQ0Gbo73/82zsU+jbrsy29M+zybH+YMyZgsC21W5LCid0+R4rRqR9 woYi9CRccebOOiXGpnENXQCViz0Wg8E8mhWvE+njllU/sdbNDcMm7+VDISyMK8yh Em00HyPjtJM+4sTwThIvaF00E2TJJqlefaBtmTmuNJAgc305MJ+Rtea+v2aI/1qc F5KdBA3pwLRbwo0gnE1YD/LZSiEmjPHCDTXIHp2LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpxMRIcJYbNdEycjp0z1mjpU3p9wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5YzU2MzU3LTJiNjUtNDY4OC1iMmRmLTlmMDg1YWIzMWFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA48jANBgkqhkiG9w0BAQsFAAOCAQEACY7IiDcQDeZIT1/V/eS4NIUoDrsT vwv2qxBzwpVRWnj+ey1STxHXgxjjLs2MAQwLPNr2pqlLPs0rLEAdTccyeshM/Y3C dTTk9Dtxl0RoHfniZfcddskpo91l/1Y7VHJtCrnrtg8LUioIh+BGuws4JIViJx25 kvMHlw+cz5yIPSZYHgOZiyuAzDXDbUS2A9nhqLIYdDNPUODmO+DohAOTHOPGZZ8K 6vE24NuJRvMgtLXsLs8vvB7Qa4WNhJillmvaTBh8OXAEFtUmabfmbmfgEaFHFRrT 4Ppdq0i/iUsDtWyp7vQEy3M2k3HMtKkFTl/kH1PgBnZPmHUj5sKrN4lj/w== -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:49 2025 by rpki-client