$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa File: 5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa (raw, json) Hash identifier: PD/PwiFp1ZtpysAC7lIGWxcOyE4MIHqsEQBBOc5/DN8= Subject key identifier: 25:57:F7:81:A5:E2:E7:87:F7:01:5C:37:18:8F:14:CA:FA:94:44:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D971967EBD6890AE8A148D4EC6F77CA07C08A12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa Signing time: Fri 08 Aug 2025 00:00:37 +0000 ROA not before: Fri 08 Aug 2025 00:00:37 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.29.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:97:19:67:eb:d6:89:0a:e8:a1:48:d4:ec:6f:77:ca:07:c0:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:37 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=dda15dac9dec05df808080b659c07dbc7776d8f96cf94000c049faf248f17cac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:64:a2:75:d4:18:7b:05:df:39:ad:c6:e4: 48:ae:be:f6:ff:a8:fc:91:7a:64:34:62:90:48:01: 35:cb:76:1a:86:b9:cc:ef:48:56:ed:0f:3e:c4:79: 72:70:8f:39:aa:72:b0:90:bf:48:39:47:91:bf:b4: 97:ec:8c:2b:a9:de:d7:f0:e3:c0:06:0a:8c:e2:6f: b3:c2:ea:bd:41:99:f9:25:6a:8c:ca:f7:1f:7c:93: 5a:04:d7:5c:54:e9:c4:5e:ef:a8:4e:c5:bf:08:ef: 59:ba:c3:b1:68:23:19:ea:eb:12:52:5a:58:1e:02: 3d:ae:20:42:12:60:59:34:21:b4:a4:00:d6:67:24: da:d5:3e:6f:b8:56:8c:b4:64:21:58:f6:58:64:18: f9:b6:de:26:e7:0d:f3:e6:56:bf:3c:5d:9b:2d:39: b4:b5:aa:9c:43:15:41:5f:a0:5d:c9:bd:87:1c:68: c9:73:43:29:07:ad:4f:27:1d:2a:ff:96:fa:d6:a0: c1:b1:07:e8:3d:e3:13:f2:08:da:70:8d:8c:0c:fc: 2a:2d:f8:21:d3:2c:e0:bc:7f:6f:94:57:93:29:de: 4f:fb:3e:fe:cc:e9:26:2b:1a:a5:8e:0a:1b:4f:1f: 1b:43:1c:55:69:26:4f:5c:4d:7d:cb:dd:41:e4:d1: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:F7:81:A5:E2:E7:87:F7:01:5C:37:18:8F:14:CA:FA:94:44:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5435e4c7-aa7b-47c7-ae98-99eba81841f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:d0:61:a7:8d:01:a1:9e:aa:58:3d:ea:bf:38:fb:0d:37:2f: 94:f7:2e:94:91:25:17:04:0a:ce:2f:6b:31:39:fe:81:e5:eb: 75:be:07:c8:a7:5d:ed:46:c0:e0:c5:0d:46:c2:c9:9d:98:ed: fb:1b:6c:09:9a:6a:cc:42:91:02:a0:33:4f:6f:d5:0e:a7:ee: 00:c7:22:16:b3:b7:d3:3c:80:5d:f9:6a:f0:1c:72:0b:8d:7e: 74:50:f5:29:dd:6d:7e:4c:f5:de:b6:68:c5:96:54:9d:04:0f: 2c:16:dc:d9:5a:9e:29:82:ab:98:79:4b:82:67:bb:47:7f:a7: d3:22:fc:e2:34:c7:ef:35:62:3a:0a:55:fd:c3:c5:bb:95:7f: b6:2c:36:88:e5:f3:56:47:b9:62:48:dc:68:0f:df:2a:4d:00: 2d:06:f4:e5:a1:c6:7c:c6:ad:99:02:ef:e0:19:b3:de:6b:8f: 28:52:5c:5f:db:ea:8c:42:c0:ad:da:e2:26:46:d7:f3:35:f1: 60:97:17:4a:91:88:77:dd:84:7e:55:f3:95:36:a6:38:75:d3: b4:b8:d3:a1:b1:24:7b:07:fd:a5:3e:d5:7c:6f:c4:aa:07:b6: 32:51:4d:b8:cc:74:d1:4d:f9:69:5d:1f:c1:2d:c8:de:5d:ea: 14:4e:e5:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHZcZZ+vWiQrooUjU7G93ygfAihIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMDM3WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGExNWRhYzlkZWMwNWRmODA4MDgwYjY1OWMwN2RiYzc3 NzZkOGY5NmNmOTQwMDBjMDQ5ZmFmMjQ4ZjE3Y2FjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoRGSiddQYewXfOa3G5Eiuvvb/qPyRemQ0YpBIATXLdhqG uczvSFbtDz7EeXJwjzmqcrCQv0g5R5G/tJfsjCup3tfw48AGCozib7PC6r1Bmfkl aozK9x98k1oE11xU6cRe76hOxb8I71m6w7FoIxnq6xJSWlgeAj2uIEISYFk0IbSk ANZnJNrVPm+4Voy0ZCFY9lhkGPm23ibnDfPmVr88XZstObS1qpxDFUFfoF3JvYcc aMlzQykHrU8nHSr/lvrWoMGxB+g94xPyCNpwjYwM/Cot+CHTLOC8f2+UV5Mp3k/7 Pv7M6SYrGqWOChtPHxtDHFVpJk9cTX3L3UHk0ZgRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJVf3gaXi54f3AVw3GI8UyvqURGIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0MzVlNGM3LWFhN2ItNDdjNy1hZTk4LTk5ZWJhODE4NDFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHTANBgkqhkiG9w0BAQsFAAOCAQEAS9Bhp40BoZ6qWD3qvzj7DTcvlPcu lJElFwQKzi9rMTn+geXrdb4HyKdd7UbA4MUNRsLJnZjt+xtsCZpqzEKRAqAzT2/V DqfuAMciFrO30zyAXflq8BxyC41+dFD1Kd1tfkz13rZoxZZUnQQPLBbc2VqeKYKr mHlLgme7R3+n0yL84jTH7zViOgpV/cPFu5V/tiw2iOXzVke5YkjcaA/fKk0ALQb0 5aHGfMatmQLv4Bmz3muPKFJcX9vqjELArdriJkbX8zXxYJcXSpGId92EflXzlTam OHXTtLjTobEkewf9pT7VfG/Eqge2MlFNuMx00U35aV0fwS3I3l3qFE7lCg== -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:43 2025 by rpki-client