$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa File: b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa (raw, json) Hash identifier: G0bp8AIJilZfQMwW5qrD1oy0QPwXu+PavwzsmLvYiEk= Subject key identifier: 66:5C:4C:1B:32:44:5A:9F:4A:7C:91:E0:8D:39:D9:13:E1:7A:BB:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 242B701CE1E50709FB59A7BD8E1289C57D8B5244 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa Signing time: Sat 02 Aug 2025 00:31:54 +0000 ROA not before: Sat 02 Aug 2025 00:31:54 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.176.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2b:70:1c:e1:e5:07:09:fb:59:a7:bd:8e:12:89:c5:7d:8b:52:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:31:54 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=5719edae38149f5d6b4e030e1e9eb7953aafb92b38bc1c84e5d1db7225fe3d5b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:1f:56:73:af:1a:4d:a3:8d:72:87:be:19: 39:c4:18:3e:46:58:33:57:3b:0b:6c:00:eb:47:79: 54:fe:ef:fa:97:90:d2:a5:d1:72:1b:df:aa:ef:f2: fc:7c:91:a0:24:fd:7e:a0:c5:c3:d9:35:33:52:54: 10:dd:4e:be:a3:78:13:83:d9:59:d4:25:44:1d:f6: dd:2c:2d:b7:10:bd:b0:9a:43:e8:2a:62:3f:e1:85: a6:5c:41:ae:b9:93:6f:cb:63:6f:98:59:e4:c9:96: 23:09:12:6d:51:4f:bc:35:e4:6a:26:7b:2b:23:9f: 7e:6b:de:b9:3c:b0:9c:4a:be:3e:04:fa:11:94:fd: b0:52:33:d0:6b:22:51:9b:0f:ea:66:1d:13:f2:26: a8:ef:89:16:db:28:ac:a6:89:35:9e:93:16:cb:ae: e4:ca:c4:01:47:04:2a:b8:4e:64:05:34:21:32:90: 4c:73:ba:14:49:83:47:d6:e0:72:40:40:85:31:77: 8a:7f:de:0b:a5:08:39:d4:94:d7:a9:b2:43:71:a1: b1:97:c7:ac:e1:1b:0c:49:28:4a:3a:7b:85:e3:e6: 56:ad:58:ba:b2:fc:7c:75:a4:09:4e:6b:5e:8b:c9: 1a:31:56:da:e3:fc:cb:12:3d:0a:fc:f9:16:79:c0: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:4C:1B:32:44:5A:9F:4A:7C:91:E0:8D:39:D9:13:E1:7A:BB:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.176.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8c:76:3a:56:93:af:36:72:df:84:d5:d6:ea:a4:55:aa:6c:41: aa:5f:d4:34:ad:5a:68:e3:d8:35:81:01:c7:58:ad:ec:cd:ea: 76:11:60:a3:04:e5:85:bf:bf:07:bb:7c:e3:cb:d2:13:e0:cb: f3:83:6e:62:7d:43:bc:2f:3b:69:03:d4:35:f9:5a:58:21:25: 91:b4:16:2f:b8:3b:42:88:5b:69:f5:be:2a:1a:41:4b:68:06: 12:57:f5:2f:51:18:d6:7d:14:a0:83:53:5a:49:68:b7:9c:6d: 6a:76:e3:0b:c4:18:86:24:d2:c5:bf:d8:d9:c5:fa:be:ce:62: 57:dd:71:80:05:a8:e6:db:b2:2a:19:4b:d3:72:c5:21:19:46: d1:bf:bf:51:8e:08:52:3c:20:f9:9f:9d:a6:bc:c3:00:d4:ee: c1:cb:cf:5a:d9:c1:27:b3:34:44:d3:fc:d9:d0:47:75:c2:a7: 93:75:09:21:98:9c:0a:42:4c:0d:68:f8:6a:7b:4c:c5:09:3c: 65:3a:c6:bc:cc:24:a9:6a:ed:b1:25:ed:63:31:58:c6:02:25: 1c:17:19:c9:0c:b6:8b:ac:2c:40:f7:8d:ca:f6:a4:1b:a4:ec: 01:9c:f7:9e:c6:67:25:3f:a1:7c:02:5b:8d:73:89:6d:04:a5: 47:d5:69:97 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJCtwHOHlBwn7Wae9jhKJxX2LUkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAzMTU0WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzE5ZWRhZTM4MTQ5ZjVkNmI0ZTAzMGUxZTllYjc5NTNh YWZiOTJiMzhiYzFjODRlNWQxZGI3MjI1ZmUzZDViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpJR9Wc68aTaONcoe+GTnEGD5GWDNXOwtsAOtHeVT+7/qX kNKl0XIb36rv8vx8kaAk/X6gxcPZNTNSVBDdTr6jeBOD2VnUJUQd9t0sLbcQvbCa Q+gqYj/hhaZcQa65k2/LY2+YWeTJliMJEm1RT7w15Gomeysjn35r3rk8sJxKvj4E +hGU/bBSM9BrIlGbD+pmHRPyJqjviRbbKKymiTWekxbLruTKxAFHBCq4TmQFNCEy kExzuhRJg0fW4HJAQIUxd4p/3gulCDnUlNepskNxobGXx6zhGwxJKEo6e4Xj5lat WLqy/Hx1pAlOa16LyRoxVtrj/MsSPQr8+RZ5wKcRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZlxMGzJEWp9KfJHgjTnZE+F6u8cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ZmM3ZmE5LThhNGYtNDVjNi1iYWVlLTFiNmU4ZDI4ODI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIQsDANBgkqhkiG9w0BAQsFAAOCAQEAjHY6VpOvNnLfhNXW6qRVqmxBql/U NK1aaOPYNYEBx1it7M3qdhFgowTlhb+/B7t848vSE+DL84NuYn1DvC87aQPUNfla WCElkbQWL7g7QohbafW+KhpBS2gGElf1L1EY1n0UoINTWklot5xtanbjC8QYhiTS xb/Y2cX6vs5iV91xgAWo5tuyKhlL03LFIRlG0b+/UY4IUjwg+Z+dprzDANTuwcvP WtnBJ7M0RNP82dBHdcKnk3UJIZicCkJMDWj4antMxQk8ZTrGvMwkqWrtsSXtYzFY xgIlHBcZyQy2i6wsQPeNyvakG6TsAZz3nsZnJT+hfAJbjXOJbQSlR9Vplw== -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:25 2025 by rpki-client