$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/256c5404-865d-4e6f-a65f-9f146ff79dca.roa File: 256c5404-865d-4e6f-a65f-9f146ff79dca.roa (raw, json) Hash identifier: mM9bD7RqD+RtM7J853bFYn8ek0eeJN0t475Nyy+8XdA= Subject key identifier: 02:DE:AC:2C:27:3F:83:A8:C7:D9:61:6E:E8:EC:30:47:EA:D0:58:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 335668C48485C8AA211247781DD355D78770AF3D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/256c5404-865d-4e6f-a65f-9f146ff79dca.roa Signing time: Tue 05 Aug 2025 18:52:09 +0000 ROA not before: Tue 05 Aug 2025 18:52:09 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.196.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:56:68:c4:84:85:c8:aa:21:12:47:78:1d:d3:55:d7:87:70:af:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 18:52:09 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0fa324115017035b1ef3ccfb2008a978fdaea6b12ca801c93d971b9654c10a08, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:2a:18:d6:7c:6c:55:33:d0:8d:3d:67:0c: 45:e0:b6:b0:f1:12:c8:83:2f:7c:fb:0e:e8:ab:12: ea:92:fc:87:02:ba:0d:98:af:73:c3:5e:25:0e:59: 66:0c:cd:b7:a3:55:9d:db:1d:6d:c2:4a:c8:04:da: f9:c2:ce:77:da:2f:40:16:1c:4b:52:57:45:9f:52: 39:28:ba:f0:50:79:94:97:4b:74:bb:c7:ee:06:4f: e6:5d:b4:14:7d:93:44:48:d9:8b:f7:ce:40:72:2e: 39:c1:88:55:a0:95:2d:71:66:14:94:86:b1:93:62: 55:5d:d3:46:8a:62:bb:3e:e2:4a:a4:c5:c7:96:ad: e7:07:09:d3:f5:a0:59:9a:ce:0b:51:45:1c:9d:6f: 68:28:c6:62:46:47:f9:ae:6c:da:c5:53:2b:42:48: b6:46:6c:62:7b:14:64:d0:aa:96:26:d6:62:07:57: c5:ec:2d:0e:62:0d:b3:d2:8c:f9:a6:39:91:e4:c5: 7a:ba:58:e7:bc:ac:ed:cc:58:1e:62:aa:0a:ca:fd: 59:12:62:19:97:ff:2f:ce:19:f4:b4:d6:b1:9c:2d: 67:1b:dd:c3:dc:e5:db:56:be:e5:58:43:3b:18:2e: d7:06:8c:91:0b:99:05:dc:2d:b1:7d:5e:1f:a5:86: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DE:AC:2C:27:3F:83:A8:C7:D9:61:6E:E8:EC:30:47:EA:D0:58:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/256c5404-865d-4e6f-a65f-9f146ff79dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.196.0.0/14 Signature Algorithm: sha256WithRSAEncryption 68:fa:21:5c:b4:52:bc:06:f9:03:b4:50:14:32:f0:08:ed:18: a1:3d:0f:76:e3:96:24:ee:f7:54:89:70:c0:8b:e1:e5:5b:af: 1c:ee:99:5c:12:dd:b8:1d:de:89:c9:f1:8e:8b:9b:0e:07:ef: b6:e0:f8:c2:60:37:71:b9:90:e1:bd:35:20:5a:5b:3f:03:16: fe:09:5c:46:11:da:7d:57:4a:c6:e7:a7:23:c6:03:d5:b8:08: d9:16:11:f1:97:f3:d9:eb:83:c9:c3:2d:4b:e9:61:1e:87:46: 0d:e2:38:13:d6:a0:d8:f8:ab:58:6b:d5:d1:6f:87:79:3f:ce: 8e:31:92:92:fd:6e:03:15:be:06:64:bb:f9:d3:a5:5c:c0:e5: ad:a3:47:84:31:c3:b2:b6:7d:1e:9c:81:87:3b:86:04:43:5a: e2:a8:fe:39:44:d5:41:67:f5:7c:04:41:de:9b:67:9e:42:53: 1a:75:ce:61:ec:b3:17:5a:35:71:6c:2b:d0:63:7c:10:de:09: 91:d8:4b:12:17:e0:67:46:62:b7:ee:b5:68:2c:ee:8d:b9:dc: ae:ee:20:74:c7:97:12:ba:1d:b6:d1:4b:13:75:f8:ce:f3:ec: e4:50:9e:f4:62:78:6d:9a:35:7a:e8:06:6d:96:0d:3b:4b:cb: 93:77:b4:49 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM1ZoxISFyKohEkd4HdNV14dwrz0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTg1MjA5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmEzMjQxMTUwMTcwMzViMWVmM2NjZmIyMDA4YTk3OGZk YWVhNmIxMmNhODAxYzkzZDk3MWI5NjU0YzEwYTA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtWyoY1nxsVTPQjT1nDEXgtrDxEsiDL3z7DuirEuqS/IcC ug2Yr3PDXiUOWWYMzbejVZ3bHW3CSsgE2vnCznfaL0AWHEtSV0WfUjkouvBQeZSX S3S7x+4GT+ZdtBR9k0RI2Yv3zkByLjnBiFWglS1xZhSUhrGTYlVd00aKYrs+4kqk xceWrecHCdP1oFmazgtRRRydb2goxmJGR/mubNrFUytCSLZGbGJ7FGTQqpYm1mIH V8XsLQ5iDbPSjPmmOZHkxXq6WOe8rO3MWB5iqgrK/VkSYhmX/y/OGfS01rGcLWcb 3cPc5dtWvuVYQzsYLtcGjJELmQXcLbF9Xh+lhn/9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAt6sLCc/g6jH2WFu6OwwR+rQWHswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1NmM1NDA0LTg2NWQtNGU2Zi1hNjVmLTlmMTQ2ZmY3OWRjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINxDANBgkqhkiG9w0BAQsFAAOCAQEAaPohXLRSvAb5A7RQFDLwCO0YoT0P duOWJO73VIlwwIvh5VuvHO6ZXBLduB3eicnxjoubDgfvtuD4wmA3cbmQ4b01IFpb PwMW/glcRhHafVdKxuenI8YD1bgI2RYR8Zfz2euDycMtS+lhHodGDeI4E9ag2Pir WGvV0W+HeT/OjjGSkv1uAxW+BmS7+dOlXMDlraNHhDHDsrZ9HpyBhzuGBENa4qj+ OUTVQWf1fARB3ptnnkJTGnXOYeyzF1o1cWwr0GN8EN4JkdhLEhfgZ0Zit+61aCzu jbncru4gdMeXErodttFLE3X4zvPs5FCe9GJ4bZo1eugGbZYNO0vLk3e0SQ== -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:03 2025 by rpki-client