$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb16875-7d51-4a6f-a829-501138597a73.roa File: 1fb16875-7d51-4a6f-a829-501138597a73.roa (raw, json) Hash identifier: pn1k/ZTcV5D2n6tifhhulsozr1u3ixfZJ7TLlGzfPc0= Subject key identifier: 65:7D:49:6B:62:BA:83:BA:B6:29:FB:DD:6F:38:37:D3:99:27:38:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CE6EFA68EDD137C7007394C6DF1E021A6A1D3CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb16875-7d51-4a6f-a829-501138597a73.roa Signing time: Fri 08 Aug 2025 00:21:25 +0000 ROA not before: Fri 08 Aug 2025 00:21:25 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 56.156.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e6:ef:a6:8e:dd:13:7c:70:07:39:4c:6d:f1:e0:21:a6:a1:d3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:21:25 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=b5b8f72ec9f00047d2afe6b2fc537204a1a9f166781b1d2d44e9e44f0671abb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:52:bf:be:e6:74:3a:e7:1c:bc:89:7f:6b: 7e:c0:39:2f:ae:02:e2:04:c5:07:28:85:14:7f:61: aa:bf:d1:93:d6:9f:be:1f:b2:57:2a:c7:39:e4:2d: 25:c1:a9:05:44:26:9b:b2:c0:61:7d:bd:fd:c8:47: b6:f9:9c:b1:12:88:bf:79:3f:f1:de:90:a3:4f:81: 74:fb:55:21:3f:12:bc:22:0d:84:9c:e0:fd:e0:be: 7d:f1:33:3b:d8:e7:b1:f4:9a:85:6c:e8:6c:32:6d: 6b:70:d8:37:bc:bb:05:77:05:29:9a:35:70:57:51: 56:ca:8c:2d:7e:58:1b:0f:4b:20:11:4a:0b:18:26: ab:57:b9:45:3a:03:3d:fb:f3:64:d4:9d:21:59:41: 19:14:01:69:46:5d:7c:97:dc:5b:99:d8:fa:e5:8c: 90:49:f6:3a:b0:17:03:0f:17:19:60:5f:ee:05:74: 9d:0f:2d:ae:97:e3:5a:29:61:f1:07:43:fd:ea:79: fc:16:11:04:fe:21:28:18:56:b1:f6:1a:52:7c:12: 10:7e:bb:aa:b1:b3:11:85:49:d5:ac:35:d4:ad:ac: b8:50:06:f6:fa:d6:ed:9a:2f:b1:c7:58:ef:bd:30: 4f:17:93:f1:2a:0a:f7:01:f9:07:32:f5:29:dc:a7: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7D:49:6B:62:BA:83:BA:B6:29:FB:DD:6F:38:37:D3:99:27:38:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb16875-7d51-4a6f-a829-501138597a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.156.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2f:22:27:b8:fb:d4:b0:7f:b6:c0:39:00:8c:a0:e8:b4:e1:be: 23:e7:0c:df:6e:84:b0:5d:71:fc:9b:74:7d:e7:d9:16:80:e8: ee:fa:a2:09:6f:4d:90:fd:f2:24:2a:4b:f0:3d:14:9a:69:89: 87:38:a4:67:ba:d9:aa:e8:d1:b5:3b:95:d2:96:c2:ae:c2:c5: 85:15:6e:8f:59:f2:ac:bf:f7:2c:41:b1:4c:47:d0:75:32:42: 30:f4:86:1a:48:2b:fc:aa:65:03:af:18:fa:47:e3:53:b4:fd: 4f:57:5d:06:21:8b:a5:71:7a:fd:51:4f:33:3b:bd:0d:58:95: 02:16:83:a8:eb:2a:e2:2d:c6:04:37:3e:e8:e6:6d:75:98:67: 18:1e:78:fc:dc:49:b5:9b:ae:72:d4:be:3a:9d:34:80:22:36: 36:fc:a6:68:d8:d6:38:20:0d:90:8f:4e:b9:ec:4f:84:6f:fa: 89:67:07:6c:83:80:8f:6c:a5:c1:ce:35:b6:2a:69:32:ef:b8: 52:75:d4:37:9d:01:99:b7:7a:71:66:9c:4b:c4:43:3a:24:4e: b7:70:8e:da:cc:3b:84:a6:5d:a0:58:42:41:eb:73:4f:9e:f7: 51:21:31:6b:1d:e4:b1:0f:ea:89:8c:d9:ca:73:a6:ec:62:c6: 53:e0:1e:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfObvpo7dE3xwBzlMbfHgIaah08wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAyMTI1WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWI4ZjcyZWM5ZjAwMDQ3ZDJhZmU2YjJmYzUzNzIwNGEx YTlmMTY2NzgxYjFkMmQ0NGU5ZTQ0ZjA2NzFhYmIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUB1K/vuZ0OuccvIl/a37AOS+uAuIExQcohRR/Yaq/0ZPW n74fslcqxznkLSXBqQVEJpuywGF9vf3IR7b5nLESiL95P/HekKNPgXT7VSE/Erwi DYSc4P3gvn3xMzvY57H0moVs6GwybWtw2De8uwV3BSmaNXBXUVbKjC1+WBsPSyAR SgsYJqtXuUU6Az3782TUnSFZQRkUAWlGXXyX3FuZ2PrljJBJ9jqwFwMPFxlgX+4F dJ0PLa6X41opYfEHQ/3qefwWEQT+ISgYVrH2GlJ8EhB+u6qxsxGFSdWsNdStrLhQ Bvb61u2aL7HHWO+9ME8Xk/EqCvcB+Qcy9Sncp7+tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZX1Ja2K6g7q2Kfvdbzg305knOIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmYjE2ODc1LTdkNTEtNGE2Zi1hODI5LTUwMTEzODU5N2E3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE4nDANBgkqhkiG9w0BAQsFAAOCAQEALyInuPvUsH+2wDkAjKDotOG+I+cM 326EsF1x/Jt0fefZFoDo7vqiCW9NkP3yJCpL8D0UmmmJhzikZ7rZqujRtTuV0pbC rsLFhRVuj1nyrL/3LEGxTEfQdTJCMPSGGkgr/KplA68Y+kfjU7T9T1ddBiGLpXF6 /VFPMzu9DViVAhaDqOsq4i3GBDc+6OZtdZhnGB54/NxJtZuuctS+Op00gCI2Nvym aNjWOCANkI9OuexPhG/6iWcHbIOAj2ylwc41tippMu+4UnXUN50Bmbd6cWacS8RD OiROt3CO2sw7hKZdoFhCQetzT573USExax3ksQ/qiYzZynOm7GLGU+Ae2g== -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:43 2025 by rpki-client