$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa File: a8deb530-6bda-498d-a591-72495d07fc40.roa (raw, json) Hash identifier: 1TBJop4NsUKVxLWAwDXOFgwS27YW5VU20b/ajVFzPHk= Subject key identifier: 2F:39:5A:C2:F9:C9:EF:BC:06:4D:03:CF:1B:39:8C:E4:1F:ED:A2:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 469E28368DDA38295C40401DAFCCA2324AFB24A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa Signing time: Tue 05 Aug 2025 00:30:20 +0000 ROA not before: Tue 05 Aug 2025 00:30:20 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9e:28:36:8d:da:38:29:5c:40:40:1d:af:cc:a2:32:4a:fb:24:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:20 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=26430d13d0b599d134700625884b3bd64e634c43b1cd46ccde3d36676246fed4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:ae:ee:88:3a:8c:89:5e:ca:60:dd:77:04: e1:36:ff:df:6f:2a:86:00:6d:ed:e7:dd:02:86:ea: 87:62:48:6f:de:67:ce:75:8d:51:49:bc:cf:3f:ae: 69:29:76:50:bb:cc:0e:e5:5b:e4:cc:94:5c:54:e0: ec:43:bb:9d:92:d6:5a:84:1c:25:80:c8:f9:c4:80: cb:50:8e:41:18:e5:38:27:f5:95:70:fd:62:a8:f8: 2e:3a:4f:e2:3e:69:6c:c6:ba:7b:62:03:78:9c:f7: 49:49:8c:32:49:a3:7b:27:44:6b:8e:28:a0:44:ab: 70:03:76:ea:0d:4d:64:cc:1d:79:10:11:3d:02:c6: 15:76:12:35:d8:24:18:b0:e0:42:f4:2c:c5:ff:7e: 28:5b:2b:66:97:d8:d2:c9:77:b8:23:41:51:84:9d: 6c:48:2b:9f:bd:45:21:6c:3e:17:bf:bb:ff:62:9d: 4b:7b:21:cf:78:0f:cd:ac:b5:44:0a:25:29:4c:2c: 8d:96:38:ea:54:a3:0d:3f:5b:b8:36:b8:f2:a2:74: 2b:f9:c4:aa:55:9b:28:ef:f2:f4:2a:d7:06:73:fb: 71:55:88:5d:43:70:ae:4e:0f:9c:94:38:19:7c:fb: d4:5b:95:bd:b4:2b:f8:e4:6d:cd:81:b3:49:c7:7c: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:39:5A:C2:F9:C9:EF:BC:06:4D:03:CF:1B:39:8C:E4:1F:ED:A2:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:10:d5:8d:fb:51:ed:3d:ea:8f:98:90:60:68:4e:35:c6:6d: e8:74:61:17:45:61:50:c9:d2:d2:cc:ed:2b:7d:30:83:7a:c0: f1:94:5a:9b:03:65:8e:9c:d6:84:f2:83:70:87:72:80:ca:db: 6a:0f:dc:68:49:ff:87:86:43:58:69:47:b3:b2:b7:6f:8c:f9: db:99:f4:a5:d9:fd:69:f2:cf:bc:db:86:55:44:3c:d8:ef:11: c7:76:a5:59:a6:8a:11:f3:56:b8:12:a0:28:6b:82:ce:3d:07: 5f:e6:20:4b:03:d6:3d:1f:01:b8:cc:2b:09:e0:c4:7e:67:fb: b7:04:47:09:4b:a8:d4:1e:30:b6:c5:4c:39:36:5e:ef:fc:d2: 29:18:ba:14:3a:07:07:ce:87:b0:f4:16:3c:a1:9b:1e:1d:de: b8:14:c6:9d:e7:a7:6d:1c:fc:d6:1f:fb:0d:b1:94:93:30:bb: a2:d1:a8:01:fc:2f:1f:d7:d6:87:2a:bc:e1:b1:7a:58:35:cc: df:6f:00:29:c4:0a:98:6f:10:c0:2d:78:3d:4b:50:05:e0:e4: 89:66:20:ec:c0:df:38:61:e2:28:8f:79:28:0a:fb:c0:c8:82: 1b:ac:96:67:8b:ca:da:c7:59:60:44:a1:10:82:f0:fc:5e:ed: 1b:96:1f:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURp4oNo3aOClcQEAdr8yiMkr7JKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAzMDIwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjQzMGQxM2QwYjU5OWQxMzQ3MDA2MjU4ODRiM2JkNjRl NjM0YzQzYjFjZDQ2Y2NkZTNkMzY2NzYyNDZmZWQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2C67uiDqMiV7KYN13BOE2/99vKoYAbe3n3QKG6odiSG/e Z851jVFJvM8/rmkpdlC7zA7lW+TMlFxU4OxDu52S1lqEHCWAyPnEgMtQjkEY5Tgn 9ZVw/WKo+C46T+I+aWzGuntiA3ic90lJjDJJo3snRGuOKKBEq3ADduoNTWTMHXkQ ET0CxhV2EjXYJBiw4EL0LMX/fihbK2aX2NLJd7gjQVGEnWxIK5+9RSFsPhe/u/9i nUt7Ic94D82stUQKJSlMLI2WOOpUow0/W7g2uPKidCv5xKpVmyjv8vQq1wZz+3FV iF1DcK5OD5yUOBl8+9Rblb20K/jkbc2Bs0nHfOkZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULzlawvnJ77wGTQPPGzmM5B/tolIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4ZGViNTMwLTZiZGEtNDk4ZC1hNTkxLTcyNDk1ZDA3ZmM0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4FDANBgkqhkiG9w0BAQsFAAOCAQEArxDVjftR7T3qj5iQYGhONcZt6HRh F0VhUMnS0sztK30wg3rA8ZRamwNljpzWhPKDcIdygMrbag/caEn/h4ZDWGlHs7K3 b4z525n0pdn9afLPvNuGVUQ82O8Rx3alWaaKEfNWuBKgKGuCzj0HX+YgSwPWPR8B uMwrCeDEfmf7twRHCUuo1B4wtsVMOTZe7/zSKRi6FDoHB86HsPQWPKGbHh3euBTG neenbRz81h/7DbGUkzC7otGoAfwvH9fWhyq84bF6WDXM328AKcQKmG8QwC14PUtQ BeDkiWYg7MDfOGHiKI95KAr7wMiCG6yWZ4vK2sdZYEShEILw/F7tG5Yf9Q== -----END CERTIFICATE-----Generated at Thu Aug 7 02:03:49 2025 by rpki-client