$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa File: 465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa (raw, json) Hash identifier: OMVS95alRKqdgXpU6qYOm2gv8Of87PeKKfu5T5rvda4= Subject key identifier: 28:02:32:01:53:B5:78:7D:C0:8B:0E:83:CF:07:F3:0B:94:AB:49:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B8EF59E1419652C6AE0588FDFB38BD6E3EA5809 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa Signing time: Mon 04 Aug 2025 17:31:14 +0000 ROA not before: Mon 04 Aug 2025 17:31:14 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8e:f5:9e:14:19:65:2c:6a:e0:58:8f:df:b3:8b:d6:e3:ea:58:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:14 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=464cbde842791da6c11a5fd79687a19ef271fd80793f90803ad1a8e125a5e0f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:8a:70:b2:b7:bf:14:69:b0:da:ab:2f:a6: b1:46:b4:81:95:26:61:11:d9:e1:77:3c:52:2e:66: b5:1b:aa:03:d0:05:b5:6c:0a:ec:97:ff:c5:ef:e4: 54:8e:9e:9f:6f:f2:9a:a8:c2:48:c9:9d:51:29:85: ca:2d:e0:89:ad:77:ce:7a:4f:da:e4:50:40:4f:db: 38:77:5b:04:98:65:62:83:9d:19:dd:69:3e:79:5f: ca:6d:16:7a:18:e3:8c:84:d9:c5:db:14:59:bb:e6: e3:30:2e:04:57:c4:b8:90:f0:2a:eb:49:b1:78:5d: 32:45:b0:94:cd:4e:d1:d5:5b:03:e5:6c:50:14:21: dd:cf:13:08:07:a1:8b:37:3b:83:f2:e9:51:7d:b4: 69:69:31:55:fb:a7:d2:9c:93:b6:a9:47:6c:2c:b2: cd:c9:d5:ea:19:c0:7c:0f:76:6d:c8:5a:88:1b:a1: 68:d6:1f:93:fb:87:ed:f7:e2:8d:bf:b3:b4:b5:40: 3f:a5:ca:83:8c:61:ba:95:be:f1:97:9b:b7:0c:ed: 3c:0d:fd:e3:4e:18:3c:21:be:14:80:4d:68:a8:a1: 01:a1:8b:43:90:d9:85:d1:e1:9c:dc:d6:44:7d:13: d8:03:99:6d:6b:c5:4b:b1:44:8d:d8:66:7a:7c:88: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:02:32:01:53:B5:78:7D:C0:8B:0E:83:CF:07:F3:0B:94:AB:49:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.82.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:54:30:fe:03:1f:d4:71:f3:15:e4:6b:02:04:be:76:3f:67: b7:75:40:36:07:04:ba:39:12:1b:01:e1:e9:31:02:8b:4a:85: 48:5a:7f:50:63:ce:17:5d:38:94:49:d6:48:92:e4:b3:6e:00: 24:ba:d3:28:a6:97:7d:04:f8:7a:7f:48:56:ca:83:b7:ed:6b: fa:34:7c:85:cd:fe:42:10:6f:f6:42:e0:3a:a6:07:1a:f3:e6: 44:f3:b6:69:21:8d:37:95:7a:99:6c:58:12:ad:4a:c3:c1:16: 23:27:28:a7:53:38:df:56:45:84:7f:82:26:4a:f5:8b:8e:e4: 5e:76:1a:0c:50:c2:07:c8:17:25:e7:6d:84:6d:e9:cf:0f:9f: 9d:72:f4:ee:ad:6f:4d:59:c2:94:f3:de:fb:a4:12:ab:44:3f: 91:76:49:6f:44:05:8c:55:0e:51:bc:80:4a:bf:27:8b:c4:87: 5b:69:f4:3c:85:bb:6a:b1:c4:95:64:c7:5b:0c:c2:e3:06:11: e3:d1:64:c9:04:4f:fb:87:e6:a6:5e:79:cf:a0:13:80:85:eb: bf:54:97:89:9f:3f:d7:32:56:5e:a6:c1:67:78:c4:b2:41:a0: 5e:7d:25:52:f5:7b:69:4a:e2:cb:3b:1a:08:c0:6d:d2:85:ac: dc:06:66:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG471nhQZZSxq4FiP37OL1uPqWAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTE0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjRjYmRlODQyNzkxZGE2YzExYTVmZDc5Njg3YTE5ZWYy NzFmZDgwNzkzZjkwODAzYWQxYThlMTI1YTVlMGY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5PYpwsre/FGmw2qsvprFGtIGVJmER2eF3PFIuZrUbqgPQ BbVsCuyX/8Xv5FSOnp9v8pqowkjJnVEphcot4Imtd856T9rkUEBP2zh3WwSYZWKD nRndaT55X8ptFnoY44yE2cXbFFm75uMwLgRXxLiQ8CrrSbF4XTJFsJTNTtHVWwPl bFAUId3PEwgHoYs3O4Py6VF9tGlpMVX7p9Kck7apR2wsss3J1eoZwHwPdm3IWogb oWjWH5P7h+334o2/s7S1QD+lyoOMYbqVvvGXm7cM7TwN/eNOGDwhvhSATWiooQGh i0OQ2YXR4Zzc1kR9E9gDmW1rxUuxRI3YZnp8iMgTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKAIyAVO1eH3Aiw6DzwfzC5SrSZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NTk1MmVmLTdkMjQtNGViOC05YzljLTlmM2I5ZDc1OWU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GVIwDQYJKoZIhvcNAQELBQADggEBAHpUMP4DH9Rx8xXkawIEvnY/Z7d1 QDYHBLo5EhsB4ekxAotKhUhaf1BjzhddOJRJ1kiS5LNuACS60yiml30E+Hp/SFbK g7fta/o0fIXN/kIQb/ZC4DqmBxrz5kTztmkhjTeVeplsWBKtSsPBFiMnKKdTON9W RYR/giZK9YuO5F52GgxQwgfIFyXnbYRt6c8Pn51y9O6tb01ZwpTz3vukEqtEP5F2 SW9EBYxVDlG8gEq/J4vEh1tp9DyFu2qxxJVkx1sMwuMGEePRZMkET/uH5qZeec+g E4CF679Ul4mfP9cyVl6mwWd4xLJBoF59JVL1e2lK4ss7GgjAbdKFrNwGZso= -----END CERTIFICATE-----Generated at Tue Aug 5 20:03:46 2025 by rpki-client