$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa File: b8b00ce6-94f4-49aa-9139-7d3156871f35.roa (raw, json) Hash identifier: 8OEwvonl45SqaTn+ofucljU1Bh/2TmDdj1YsOyCccUc= Subject key identifier: CF:F0:B3:5F:C5:03:F6:04:1F:DB:15:BA:F1:E2:AF:6A:1F:7C:BE:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DBF3C00A9F511B06F91EBF4B5D85EC1DD0BC67D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa Signing time: Mon 04 Aug 2025 17:31:21 +0000 ROA not before: Mon 04 Aug 2025 17:31:21 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bf:3c:00:a9:f5:11:b0:6f:91:eb:f4:b5:d8:5e:c1:dd:0b:c6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:21 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=4c43ae85ec0a028b82cef856b4add620fa2b6776eafda26f61bb1c021398c61b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:af:2e:da:d1:de:ba:ba:7c:64:17:85:0d: 38:08:ff:ff:54:30:a2:58:01:57:4b:c4:d7:a3:50: ed:e0:2b:45:a3:15:8c:17:76:c7:15:ec:54:8c:59: 44:87:ab:67:a6:6a:5e:cd:e2:73:f4:48:c3:2d:6f: 2d:b4:50:d1:b8:17:e3:c1:5b:c6:2d:dc:06:0d:9d: f1:0b:11:3e:bd:b2:0a:8c:71:94:d3:de:de:b9:10: 7e:51:e2:46:11:15:e4:70:14:40:84:14:da:66:31: 9a:3a:63:2a:ac:52:bc:15:bd:36:7c:44:91:ef:75: 2b:6e:f2:cc:6a:9d:d3:58:3f:f9:0c:ec:77:88:f4: bf:f2:1c:74:03:c2:e9:af:bc:a1:37:60:f7:40:5f: b6:e8:fc:b4:bf:b2:2e:9a:ea:ac:82:7e:bb:ff:b3: 4f:06:c4:f8:b8:38:86:9e:fb:9d:4a:76:c1:7c:83: 15:a9:70:16:6b:a1:b0:c4:c2:74:97:50:42:31:af: 37:22:9d:84:e4:a1:ce:fd:ce:96:96:b5:bb:bd:09: ca:a5:18:3b:ec:6b:07:aa:6b:62:56:f4:5c:c0:6b: 88:cc:fd:00:5a:99:0f:46:ec:d2:0c:bc:aa:79:54: e4:9e:b6:19:c2:43:c4:65:ca:13:c9:fc:8b:4a:70: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:B3:5F:C5:03:F6:04:1F:DB:15:BA:F1:E2:AF:6A:1F:7C:BE:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.15.0/24 Signature Algorithm: sha256WithRSAEncryption 84:af:2a:18:92:d0:28:25:c1:c7:92:8d:c0:48:61:52:5d:af: 1f:68:e1:bd:45:51:07:e3:a6:03:c8:8d:4f:a3:71:81:34:2b: c2:db:34:99:a5:92:8b:bb:60:69:23:2d:b1:70:aa:a9:4e:34: 94:05:a9:42:11:54:28:ba:1c:ea:aa:02:d7:ec:5e:6f:df:ad: 88:45:05:9b:ca:32:c0:84:4c:12:89:b7:4d:80:0d:65:28:3b: 8c:84:57:40:ae:6c:05:a4:fa:fa:33:26:d6:1f:81:68:0d:23: b3:9e:e4:0d:4e:1a:47:f4:f8:10:c6:1b:0d:19:cb:0b:75:7c: 1d:dc:04:b5:d9:15:7f:8b:6d:8c:8a:91:8e:cc:ac:22:eb:e3: 3c:5c:ad:f6:b0:fa:2d:20:fe:79:09:a5:30:ce:03:9d:f1:9f: 9c:57:6e:0b:e5:15:c0:ba:d5:e0:de:80:03:7d:b6:70:34:57: d5:75:41:1c:af:ac:e0:0a:ba:49:cd:86:1c:58:76:04:91:ab: e7:be:59:a9:68:b0:7c:f2:6f:3d:e0:f0:d4:24:14:be:36:93: 82:04:0b:21:66:cf:af:57:27:fd:59:2a:0b:b4:a8:9b:71:aa: 2e:c0:00:f9:99:4e:21:07:7e:1c:85:5c:a1:9e:a2:a3:aa:40: 1e:01:46:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbb88AKn1EbBvkev0tdhewd0Lxn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTIxWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzQzYWU4NWVjMGEwMjhiODJjZWY4NTZiNGFkZDYyMGZh MmI2Nzc2ZWFmZGEyNmY2MWJiMWMwMjEzOThjNjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChi68u2tHeurp8ZBeFDTgI//9UMKJYAVdLxNejUO3gK0Wj FYwXdscV7FSMWUSHq2emal7N4nP0SMMtby20UNG4F+PBW8Yt3AYNnfELET69sgqM cZTT3t65EH5R4kYRFeRwFECEFNpmMZo6YyqsUrwVvTZ8RJHvdStu8sxqndNYP/kM 7HeI9L/yHHQDwumvvKE3YPdAX7bo/LS/si6a6qyCfrv/s08GxPi4OIae+51KdsF8 gxWpcBZrobDEwnSXUEIxrzcinYTkoc79zpaWtbu9CcqlGDvsaweqa2JW9FzAa4jM /QBamQ9G7NIMvKp5VOSethnCQ8RlyhPJ/ItKcNl7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz/CzX8UD9gQf2xW68eKvah98vgcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YjAwY2U2LTk0ZjQtNDlhYS05MTM5LTdkMzE1Njg3MWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAISvKhiS0CglwceSjcBIYVJdrx9o 4b1FUQfjpgPIjU+jcYE0K8LbNJmlkou7YGkjLbFwqqlONJQFqUIRVCi6HOqqAtfs Xm/frYhFBZvKMsCETBKJt02ADWUoO4yEV0CubAWk+vozJtYfgWgNI7Oe5A1OGkf0 +BDGGw0Zywt1fB3cBLXZFX+LbYyKkY7MrCLr4zxcrfaw+i0g/nkJpTDOA53xn5xX bgvlFcC61eDegAN9tnA0V9V1QRyvrOAKuknNhhxYdgSRq+e+WalosHzybz3g8NQk FL42k4IECyFmz69XJ/1ZKgu0qJtxqi7AAPmZTiEHfhyFXKGeoqOqQB4BRnc= -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:43 2025 by rpki-client