$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b21c677d-50e7-454f-babb-5348e47e691d.roa File: b21c677d-50e7-454f-babb-5348e47e691d.roa (raw, json) Hash identifier: g7mAehtZ6mL8dzXyj7RawjHPneNvAxYLdWDdgbvE4A0= Subject key identifier: CB:14:7F:7B:C6:ED:A6:2F:27:62:57:7E:13:6F:01:80:02:0A:DF:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 237B8EC2EA86D22A15B9B5FE779DB9343A533E1A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b21c677d-50e7-454f-babb-5348e47e691d.roa Signing time: Tue 22 Jul 2025 15:02:20 +0000 ROA not before: Tue 22 Jul 2025 15:02:20 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.185.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:8e:c2:ea:86:d2:2a:15:b9:b5:fe:77:9d:b9:34:3a:53:3e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 15:02:20 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=1cd4007ae9e1b23d9afced169e35ad38c15761af0782a32a2bf5af24058dfe80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:23:72:69:0c:1d:78:f3:86:42:39:8d:23: 2f:ee:0c:4f:e1:05:cb:d1:fc:e6:b6:91:a1:23:1b: 88:9b:b6:bc:77:01:55:e6:9f:9d:00:ae:43:7e:1b: 1e:38:1e:72:8f:6e:f0:1c:57:62:2f:4e:b4:9c:a4: bd:7f:68:ab:62:27:72:9b:24:4f:4c:99:9e:6e:19: b0:8b:21:85:2d:7a:3d:55:61:0c:6e:08:96:b7:ae: a9:c8:fe:43:1b:78:c8:28:c0:c0:5f:06:b8:94:d5: 53:7e:71:4e:c5:0f:00:2a:37:a8:bd:6c:65:da:11: 4f:19:2c:12:fe:36:13:ff:a1:6c:d6:2a:a9:a5:9a: 32:61:e1:0b:72:07:c4:e1:46:72:48:7f:fa:7b:00: ba:8c:9a:58:ed:b5:0d:5d:fc:8b:3e:3f:62:95:e5: 87:76:7e:8e:15:b8:2c:3a:28:d3:64:24:dc:7f:00: a9:a5:51:27:cf:6b:dc:77:9a:24:81:02:da:a5:a9: 5a:cf:bb:d0:0a:84:a0:cf:a9:77:16:e5:44:8e:83: 88:19:f7:f6:46:1d:ea:08:7d:47:db:b6:33:43:dd: d8:ba:ff:7f:eb:c3:c2:8e:a7:20:07:25:52:d1:22: cd:89:c2:1c:9f:3c:e3:fe:e7:b4:0d:d5:ae:5a:6a: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:7F:7B:C6:ED:A6:2F:27:62:57:7E:13:6F:01:80:02:0A:DF:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b21c677d-50e7-454f-babb-5348e47e691d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:7e:71:a0:3a:97:6a:41:f5:b6:53:3b:14:6b:00:cf:d8:2f: d8:7d:c1:fa:9e:ce:26:60:84:06:02:79:25:62:a5:87:5e:53: ab:59:23:4f:2c:30:d1:24:01:77:0b:99:5e:46:3c:73:7b:67: 38:3f:a4:63:02:cf:b0:1e:bd:58:06:81:78:be:cf:dc:a7:88: a2:d6:3c:a9:87:1b:32:cb:62:9d:a9:8b:78:ce:3f:75:aa:96: ed:d4:e9:6e:e3:06:6a:c8:0a:7d:be:ca:3b:27:10:35:62:c1: d2:03:14:cb:cc:9a:47:4c:c7:bc:e4:3f:3e:75:86:d3:d3:fe: 41:c3:88:09:de:aa:b4:f9:8d:b5:7b:2d:00:dd:a1:e7:00:39: 04:d8:8e:66:bc:b9:7d:5c:03:78:e8:55:90:ce:58:08:65:36: 2d:52:66:53:f0:6d:e2:f6:f1:24:aa:92:39:92:c5:18:c8:16: 6c:9e:3a:21:2c:7e:f0:ca:ca:27:30:d5:b6:3c:d7:b9:89:43: d1:06:f9:26:76:3c:09:d9:88:e8:02:59:b9:63:30:fb:ab:07: 5d:72:a0:8b:55:86:d6:f7:31:0b:37:c0:40:17:52:1d:7f:2b: fe:35:86:2c:55:77:c3:1a:42:47:1f:c5:3c:0b:72:3f:e4:97: 70:36:f0:0b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI3uOwuqG0ioVubX+d525NDpTPhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMTUwMjIwWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2Q0MDA3YWU5ZTFiMjNkOWFmY2VkMTY5ZTM1YWQzOGMx NTc2MWFmMDc4MmEzMmEyYmY1YWYyNDA1OGRmZTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCudiNyaQwdePOGQjmNIy/uDE/hBcvR/Oa2kaEjG4ibtrx3 AVXmn50ArkN+Gx44HnKPbvAcV2IvTrScpL1/aKtiJ3KbJE9MmZ5uGbCLIYUtej1V YQxuCJa3rqnI/kMbeMgowMBfBriU1VN+cU7FDwAqN6i9bGXaEU8ZLBL+NhP/oWzW KqmlmjJh4QtyB8ThRnJIf/p7ALqMmljttQ1d/Is+P2KV5Yd2fo4VuCw6KNNkJNx/ AKmlUSfPa9x3miSBAtqlqVrPu9AKhKDPqXcW5USOg4gZ9/ZGHeoIfUfbtjND3di6 /3/rw8KOpyAHJVLRIs2JwhyfPOP+57QN1a5aajNhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyxR/e8btpi8nYld+E28BgAIK3xYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyMWM2NzdkLTUwZTctNDU0Zi1iYWJiLTUzNDhlNDdlNjkxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4uTANBgkqhkiG9w0BAQsFAAOCAQEAfX5xoDqXakH1tlM7FGsAz9gv2H3B +p7OJmCEBgJ5JWKlh15Tq1kjTyww0SQBdwuZXkY8c3tnOD+kYwLPsB69WAaBeL7P 3KeIotY8qYcbMstinamLeM4/daqW7dTpbuMGasgKfb7KOycQNWLB0gMUy8yaR0zH vOQ/PnWG09P+QcOICd6qtPmNtXstAN2h5wA5BNiOZry5fVwDeOhVkM5YCGU2LVJm U/Bt4vbxJKqSOZLFGMgWbJ46ISx+8MrKJzDVtjzXuYlD0Qb5JnY8CdmI6AJZuWMw +6sHXXKgi1WG1vcxCzfAQBdSHX8r/jWGLFV3wxpCRx/FPAtyP+SXcDbwCw== -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:35 2025 by rpki-client