$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb94eff4-ff16-47a8-8e36-71449cf05257.roa File: bb94eff4-ff16-47a8-8e36-71449cf05257.roa (raw, json) Hash identifier: vHlD0e788rj/jAXP1IrDDMoqH2i+Jdl/WEZi7EMsinQ= Subject key identifier: 5B:14:A5:D3:C4:DA:A7:D3:E7:94:BB:9B:AF:34:5F:7D:D6:1F:2D:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15651809F96DA98176F9CF8B1A544C9A9CDB730D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb94eff4-ff16-47a8-8e36-71449cf05257.roa Signing time: Tue 05 Aug 2025 00:30:29 +0000 ROA not before: Tue 05 Aug 2025 00:30:29 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:65:18:09:f9:6d:a9:81:76:f9:cf:8b:1a:54:4c:9a:9c:db:73:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:29 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=e33378c5ac7a13ec5772fea10cdabcd2cbafe2faf41b62963ac32d14960f0c03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:21:2c:88:13:68:7b:26:5d:de:1c:af:3b: 49:be:ad:d2:b5:ef:9f:dd:ad:61:a5:9b:35:af:e0: 6b:4d:00:08:8e:25:0a:1a:f6:6a:6c:42:b3:a3:f4: e6:ba:98:d3:8c:bc:d9:1d:0e:1f:17:d7:ce:82:21: 06:b3:fa:d8:fe:06:1f:a3:1c:b0:4d:4f:94:32:33: 4b:17:63:12:d4:29:35:39:0f:99:6c:5e:b7:44:c7: 98:d3:77:cd:bf:38:78:ed:b7:79:eb:e5:0b:6b:14: c2:0f:01:ad:06:14:14:3b:21:c3:7e:1e:0c:fb:32: a8:65:0b:8c:e0:de:86:d6:11:0d:b5:b9:18:a5:d4: be:4d:38:40:db:25:cc:ae:07:6d:67:b9:bc:6a:88: b5:5a:b9:e2:7c:f3:07:96:0f:16:8f:9d:1c:cf:51: 2a:1b:7d:ec:fb:91:8b:0b:24:ae:56:a9:41:56:fe: 95:e8:89:f2:e7:07:14:1e:2f:10:2d:46:17:38:85: e9:76:3b:7e:ef:67:f3:48:70:e5:7d:f8:33:b2:65: 54:2e:12:b3:95:3d:5e:84:50:5e:f2:ec:3b:ad:1f: 00:c5:e1:0c:1f:01:d9:c2:68:14:14:7a:d0:1f:b0: cc:d4:e2:64:71:1d:47:6f:ec:39:e8:9c:72:96:d8: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:A5:D3:C4:DA:A7:D3:E7:94:BB:9B:AF:34:5F:7D:D6:1F:2D:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb94eff4-ff16-47a8-8e36-71449cf05257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption cf:28:cd:51:af:ae:06:cf:24:67:31:ad:06:08:2f:0c:6c:8c: 9c:32:c8:0a:c9:28:36:18:c6:6a:63:e4:2e:fb:c9:a2:d7:d4: 6b:31:bb:b1:36:53:36:01:d3:21:68:97:c3:10:6f:00:bb:89: 96:f0:78:17:fb:df:34:8c:7d:0b:40:bc:9e:b2:7e:e1:10:d4: 37:78:5a:55:8d:41:af:05:79:23:22:e5:2d:a3:7e:72:4d:20: cf:f2:30:b1:fe:56:24:ef:1b:61:2e:0f:1b:06:d1:c5:63:2e: 90:91:49:f1:74:94:19:0a:ed:d6:60:d4:b5:b6:06:d7:b4:74: c6:7e:61:92:2d:34:0a:27:0f:5e:d5:9d:13:6f:61:f5:46:82: 31:de:8f:16:6e:2f:de:65:9c:70:57:d1:26:a0:c2:58:4f:02: cf:b8:8b:a8:d4:b8:72:ef:85:70:49:8d:ee:d6:cf:94:07:f1: 45:66:1b:3a:1e:60:a7:dc:72:09:40:be:0c:f8:78:c5:24:ca: e6:d3:2d:31:58:c6:33:84:94:19:4b:fc:39:11:a4:b1:c1:86: 87:64:68:1d:91:e7:c5:db:cf:df:fe:2e:82:43:ae:1e:fa:be: da:84:56:25:48:c3:7e:59:1d:21:31:14:3d:6e:38:90:74:2b: 5f:5b:12:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFWUYCfltqYF2+c+LGlRMmpzbcw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAzMDI5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzMzNzhjNWFjN2ExM2VjNTc3MmZlYTEwY2RhYmNkMmNi YWZlMmZhZjQxYjYyOTYzYWMzMmQxNDk2MGYwYzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOSyEsiBNoeyZd3hyvO0m+rdK175/drWGlmzWv4GtNAAiO JQoa9mpsQrOj9Oa6mNOMvNkdDh8X186CIQaz+tj+Bh+jHLBNT5QyM0sXYxLUKTU5 D5lsXrdEx5jTd82/OHjtt3nr5QtrFMIPAa0GFBQ7IcN+Hgz7MqhlC4zg3obWEQ21 uRil1L5NOEDbJcyuB21nubxqiLVaueJ88weWDxaPnRzPUSobfez7kYsLJK5WqUFW /pXoifLnBxQeLxAtRhc4hel2O37vZ/NIcOV9+DOyZVQuErOVPV6EUF7y7DutHwDF 4QwfAdnCaBQUetAfsMzU4mRxHUdv7DnonHKW2AyLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWxSl08Tap9PnlLubrzRffdYfLZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiOTRlZmY0LWZmMTYtNDdhOC04ZTM2LTcxNDQ5Y2YwNTI1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA41jANBgkqhkiG9w0BAQsFAAOCAQEAzyjNUa+uBs8kZzGtBggvDGyMnDLI CskoNhjGamPkLvvJotfUazG7sTZTNgHTIWiXwxBvALuJlvB4F/vfNIx9C0C8nrJ+ 4RDUN3haVY1BrwV5IyLlLaN+ck0gz/Iwsf5WJO8bYS4PGwbRxWMukJFJ8XSUGQrt 1mDUtbYG17R0xn5hki00CicPXtWdE29h9UaCMd6PFm4v3mWccFfRJqDCWE8Cz7iL qNS4cu+FcEmN7tbPlAfxRWYbOh5gp9xyCUC+DPh4xSTK5tMtMVjGM4SUGUv8ORGk scGGh2RoHZHnxdvP3/4ugkOuHvq+2oRWJUjDflkdITEUPW44kHQrX1sS4Q== -----END CERTIFICATE-----Generated at Fri Aug 8 20:49:02 2025 by rpki-client