$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa File: aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa (raw, json) Hash identifier: SXb1dmadrLonKStvvWQMFoBWYJU3xKfKTB0Do7ANrZE= Subject key identifier: 6E:B0:F7:30:60:25:E1:B5:99:26:EF:A2:88:A3:E6:F5:DC:6F:29:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5ACC61C442144DF206A8AB6EB579D9B0B4B1F010 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa Signing time: Wed 23 Jul 2025 00:30:31 +0000 ROA not before: Wed 23 Jul 2025 00:30:31 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.51.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cc:61:c4:42:14:4d:f2:06:a8:ab:6e:b5:79:d9:b0:b4:b1:f0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:31 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=54b2937f6ce7a7b2f1dda30a638b40d0cf7866e9cf8c51889fda81bc61decd14, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:10:f2:2d:82:95:87:32:f4:8f:01:4c:16: d9:c4:27:d9:9b:37:61:dc:de:90:ec:17:e1:b5:00: fc:33:6f:fc:0f:10:60:a5:9a:46:9f:81:be:83:cd: d0:d0:22:08:8b:dd:7c:3e:44:13:be:d3:d2:97:ef: aa:e2:bd:57:94:cb:c8:85:a0:01:46:32:f6:1b:4c: 7f:0c:39:a8:9a:df:51:ce:ce:14:1a:65:f4:cc:63: f7:4e:43:4f:5b:d7:d3:2b:28:88:ff:6c:42:55:e8: c1:d3:f9:d0:a7:5e:d0:fe:36:01:ad:d5:d4:b1:c5: 3a:b7:c3:c4:47:e8:59:97:4e:42:5f:53:b2:69:3b: f1:31:f1:28:8e:e5:c3:66:52:39:23:ff:19:fb:f4: 72:ef:cd:20:ea:a9:38:da:ff:2e:de:34:bb:11:38: 73:34:ed:d3:30:ab:3c:60:21:f6:d4:a6:dc:e2:2e: 17:0e:c8:05:fb:37:91:f5:1b:fc:40:aa:f3:28:08: b9:84:df:dd:2f:1f:55:cc:c8:8c:f2:c5:e9:4b:85: 4d:f0:a7:74:80:31:c6:11:ed:9d:58:30:33:23:d6: 4f:ef:74:65:a3:5d:16:df:8d:ab:3c:dd:98:99:7b: ed:bf:73:41:0a:cd:11:1f:7b:56:27:a1:90:a9:7f: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:F7:30:60:25:E1:B5:99:26:EF:A2:88:A3:E6:F5:DC:6F:29:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.51.224.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:06:0f:a1:f2:e5:82:3f:db:72:0d:bc:47:d7:fa:73:04:01: 55:f7:6b:d5:a7:2a:8c:f0:fe:6b:81:ed:e9:b2:31:32:23:41: 93:65:26:8f:de:e4:72:ec:f3:c5:5a:00:cf:2f:dc:90:d9:79: 3d:5f:46:62:af:e7:ed:94:a3:ba:10:49:cf:17:a4:6c:07:4a: bf:7f:88:2e:29:03:81:69:2f:ea:b5:6f:30:82:09:19:8c:81: a0:48:b9:e5:c8:75:0c:3a:cd:21:93:55:93:97:d9:bd:0d:2e: 88:00:57:b9:01:43:1b:d8:83:c8:9b:76:e5:47:70:0a:ab:97: 25:d0:a1:9b:1a:b1:86:7d:bf:67:e8:ab:17:02:6c:da:6f:62: 6e:bd:2d:7a:60:d7:e2:bf:dd:92:b6:73:64:25:0e:e3:bd:c9: c7:c8:7a:15:65:31:e7:c3:53:92:41:b7:7c:00:c4:7a:e6:d1: 17:d8:a8:3f:ac:13:17:30:03:7e:b5:34:30:76:a2:9f:57:63: 26:10:38:19:5c:4b:fb:ed:a4:c4:96:08:a2:38:af:d1:3b:f0: 9b:c4:6b:92:26:4e:2f:3e:4c:92:86:82:54:94:72:00:dc:d9: d2:80:66:fa:8d:e1:20:19:da:89:0c:70:03:f6:97:ce:ac:93: d1:27:58:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWsxhxEIUTfIGqKtutXnZsLSx8BAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAzMDMxWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGIyOTM3ZjZjZTdhN2IyZjFkZGEzMGE2MzhiNDBkMGNm Nzg2NmU5Y2Y4YzUxODg5ZmRhODFiYzYxZGVjZDE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1qRDyLYKVhzL0jwFMFtnEJ9mbN2Hc3pDsF+G1APwzb/wP EGClmkafgb6DzdDQIgiL3Xw+RBO+09KX76rivVeUy8iFoAFGMvYbTH8MOaia31HO zhQaZfTMY/dOQ09b19MrKIj/bEJV6MHT+dCnXtD+NgGt1dSxxTq3w8RH6FmXTkJf U7JpO/Ex8SiO5cNmUjkj/xn79HLvzSDqqTja/y7eNLsROHM07dMwqzxgIfbUptzi LhcOyAX7N5H1G/xAqvMoCLmE390vH1XMyIzyxelLhU3wp3SAMcYR7Z1YMDMj1k/v dGWjXRbfjas83ZiZe+2/c0EKzREfe1YnoZCpf2KTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbrD3MGAl4bWZJu+iiKPm9dxvKSswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZGIyZDU3LTM2MGUtNGM5YS1iNWNmLWM3MGEzNzRhYTM5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRM+AwDQYJKoZIhvcNAQELBQADggEBAF0GD6Hy5YI/23INvEfX+nMEAVX3 a9WnKozw/muB7emyMTIjQZNlJo/e5HLs88VaAM8v3JDZeT1fRmKv5+2Uo7oQSc8X pGwHSr9/iC4pA4FpL+q1bzCCCRmMgaBIueXIdQw6zSGTVZOX2b0NLogAV7kBQxvY g8ibduVHcAqrlyXQoZsasYZ9v2foqxcCbNpvYm69LXpg1+K/3ZK2c2QlDuO9ycfI ehVlMefDU5JBt3wAxHrm0RfYqD+sExcwA361NDB2op9XYyYQOBlcS/vtpMSWCKI4 r9E78JvEa5ImTi8+TJKGglSUcgDc2dKAZvqN4SAZ2okMcAP2l86sk9EnWA4= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:55 2025 by rpki-client