$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa File: 8bc29e57-60be-4639-8427-3dbeab2c826b.roa (raw, json) Hash identifier: FNJ9PvTtG7Ntxy4IyzJGHt0BhbSN449iFpkdyPj/qUA= Subject key identifier: 0E:50:AB:AA:F9:04:8C:95:CD:5B:E9:9A:B4:66:1B:8E:14:43:8C:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11AA23ED82A37E9331A4B84E76F1E08337AE04E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa Signing time: Tue 05 Aug 2025 00:00:26 +0000 ROA not before: Tue 05 Aug 2025 00:00:26 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:aa:23:ed:82:a3:7e:93:31:a4:b8:4e:76:f1:e0:83:37:ae:04:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:00:26 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=ff01992a3613ab4e54d332670bf52525086a8339c50f233d5d0c2568df1284b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:2a:2a:d4:81:6f:f3:cb:5c:f0:99:b4:31: eb:e9:0b:1c:ae:9b:25:84:ab:fa:61:f7:06:19:8e: 3c:1a:e5:4f:eb:14:db:9f:cb:c5:02:5f:a4:e1:2c: e2:ba:06:50:fc:4b:da:8d:ac:53:b7:f0:76:35:3a: ec:e6:c6:8e:55:c5:dc:09:08:cd:b4:f1:16:06:61: 54:b6:d9:3b:8e:3e:1c:57:c9:59:88:42:52:60:f4: 68:c2:4e:5a:ac:95:e0:46:64:17:f1:6b:a7:ff:18: 0c:4f:49:f3:66:01:ae:dc:ef:1f:90:bc:ef:8d:53: b3:f6:b1:ec:a4:fd:ba:7d:ef:29:ce:2b:9f:3f:9c: 9e:04:42:0e:44:ed:a9:9f:df:f7:d5:3f:53:68:67: b7:2b:cb:db:b2:25:d9:63:03:87:93:b3:c9:83:76: e7:ba:eb:ea:ea:9a:62:0c:02:f2:79:d2:14:e9:86: 43:0f:77:5e:ba:88:1e:b2:d6:99:77:5a:47:6b:7c: ee:77:3e:51:d8:72:86:46:6f:fb:14:7c:06:3e:9b: eb:68:88:e1:a8:fa:66:c1:7d:96:5c:4f:eb:5c:87: bd:58:96:0c:a3:71:d8:86:0a:46:ef:e1:67:73:f3: 4f:3b:5d:15:76:87:15:32:93:f7:a1:5b:13:aa:ef: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:AB:AA:F9:04:8C:95:CD:5B:E9:9A:B4:66:1B:8E:14:43:8C:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5b:ee:48:d4:5e:74:96:69:da:d7:ea:f6:f1:c3:f3:d7:86:86: 7e:79:9d:0f:66:29:ad:de:da:91:88:94:23:ec:c5:72:73:8e: 88:cc:a4:d5:2c:5a:f1:b0:3a:5c:17:68:27:72:ec:22:5b:a3: 78:47:6f:2d:1f:f3:55:ac:1e:e6:3a:e7:35:90:83:ba:01:7d: 6f:a2:81:c0:4d:10:0a:0f:fb:73:23:92:77:88:12:2f:fe:e2: d0:c5:63:4f:0a:0a:01:fc:4b:79:7e:e0:27:f9:d8:06:2d:a3: 67:3d:57:10:37:b1:7f:80:43:9d:ea:98:ea:8b:26:bc:b2:e8: e7:4a:09:7c:52:50:82:55:7e:24:38:8c:b7:87:5d:ec:3b:f4: 4a:9a:30:eb:e9:a6:1a:6c:09:b4:0d:66:7b:d1:e0:ba:86:07: d0:8d:10:ca:2a:63:ee:e5:89:0f:eb:39:d4:cc:f9:37:20:a0: 33:9c:d4:de:aa:3c:95:15:7b:81:33:fd:6c:bc:a8:f5:61:1a: 36:1a:14:98:c3:45:6f:d4:21:0c:1c:bd:be:84:7f:45:93:2a: 8d:5a:1b:b8:54:e9:fe:0f:a0:26:6d:69:73:c8:9f:5b:2b:dc: 53:42:db:b4:0b:98:0d:8d:ed:35:9e:07:93:1e:16:d2:a8:38: ca:59:68:3f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEaoj7YKjfpMxpLhOdvHggzeuBOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAwMDI2WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjAxOTkyYTM2MTNhYjRlNTRkMzMyNjcwYmY1MjUyNTA4 NmE4MzM5YzUwZjIzM2Q1ZDBjMjU2OGRmMTI4NGIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwmCoq1IFv88tc8Jm0MevpCxyumyWEq/ph9wYZjjwa5U/r FNufy8UCX6ThLOK6BlD8S9qNrFO38HY1Ouzmxo5VxdwJCM208RYGYVS22TuOPhxX yVmIQlJg9GjCTlqsleBGZBfxa6f/GAxPSfNmAa7c7x+QvO+NU7P2seyk/bp97ynO K58/nJ4EQg5E7amf3/fVP1NoZ7cry9uyJdljA4eTs8mDdue66+rqmmIMAvJ50hTp hkMPd166iB6y1pl3WkdrfO53PlHYcoZGb/sUfAY+m+toiOGo+mbBfZZcT+tch71Y lgyjcdiGCkbv4Wdz8087XRV2hxUyk/ehWxOq72dHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDlCrqvkEjJXNW+matGYbjhRDjHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiYzI5ZTU3LTYwYmUtNDYzOS04NDI3LTNkYmVhYjJjODI2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMTANBgkqhkiG9w0BAQsFAAOCAQEAW+5I1F50lmna1+r28cPz14aGfnmd D2Yprd7akYiUI+zFcnOOiMyk1Sxa8bA6XBdoJ3LsIlujeEdvLR/zVawe5jrnNZCD ugF9b6KBwE0QCg/7cyOSd4gSL/7i0MVjTwoKAfxLeX7gJ/nYBi2jZz1XEDexf4BD neqY6osmvLLo50oJfFJQglV+JDiMt4dd7Dv0Spow6+mmGmwJtA1me9HguoYH0I0Q yipj7uWJD+s51Mz5NyCgM5zU3qo8lRV7gTP9bLyo9WEaNhoUmMNFb9QhDBy9voR/ RZMqjVobuFTp/g+gJm1pc8ifWyvcU0LbtAuYDY3tNZ4Hkx4W0qg4ylloPw== -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:23 2025 by rpki-client