$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4836893-5064-4b2a-8854-4dd9819d8223.roa File: c4836893-5064-4b2a-8854-4dd9819d8223.roa (raw, json) Hash identifier: 0u/CGShHv2e5qVl9+NaWEWVsuH3MSo6GjEDDGYz2L8I= Subject key identifier: FD:92:C5:49:01:7D:C0:40:50:9D:DF:47:9B:4C:34:64:26:BC:AF:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5044BD68C55D3B861D253D6983206FA7290ADE9E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4836893-5064-4b2a-8854-4dd9819d8223.roa Signing time: Mon 04 Aug 2025 17:40:58 +0000 ROA not before: Mon 04 Aug 2025 17:40:58 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.137.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:44:bd:68:c5:5d:3b:86:1d:25:3d:69:83:20:6f:a7:29:0a:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:40:58 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=24a0cb4143d3711b9a79974668d250e830a2b26e1578953b8b9306848605d122, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:83:96:a5:51:98:78:5f:da:09:2e:72:3b: 9d:62:75:35:32:c4:5f:63:bc:48:56:1a:9a:4e:d1: 9d:33:cc:f8:7c:d3:b6:6d:1f:65:0f:13:12:f2:66: 38:0d:68:3e:54:72:a4:01:0e:02:8a:9f:db:5e:8d: f3:35:bb:ad:12:35:50:43:f0:98:c0:16:55:08:32: c0:dd:83:7e:86:a5:26:b7:82:47:0f:31:53:55:ee: 09:a8:ab:a6:3e:cb:e1:85:70:e2:85:21:23:49:cb: 15:c1:ef:aa:5f:a4:b8:b6:db:09:db:87:a3:a2:62: a3:c6:5d:91:b9:cd:e3:f6:d0:0e:32:29:c6:99:ea: 86:64:c3:af:a9:81:e9:91:f9:f7:f4:9f:59:3b:f8: 5f:91:ee:6c:57:eb:73:e8:1e:d3:8f:88:83:f9:5f: f9:4f:11:f6:1d:55:63:45:0b:a1:a6:8b:ec:69:b5: 24:7e:09:d1:8d:52:4a:21:be:42:57:7a:01:d9:e8: 89:c8:ef:fa:0a:7a:4f:28:6b:d7:02:ff:e7:3d:8f: 48:1c:ee:35:40:f0:3e:d6:08:a4:22:ef:8f:0b:90: 2b:37:88:f9:7b:03:41:fb:ca:39:64:fe:e6:36:63: a6:7e:75:ff:23:3f:78:02:c3:5d:12:9f:74:0a:c6: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:C5:49:01:7D:C0:40:50:9D:DF:47:9B:4C:34:64:26:BC:AF:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4836893-5064-4b2a-8854-4dd9819d8223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:99:2f:e0:f0:c5:08:22:dc:d3:fc:36:96:33:b0:e4:ac:6d: 46:2d:c8:1c:6f:79:c3:4f:21:c4:6d:e7:15:1e:9f:33:b7:85: 6d:f1:39:4b:3d:5f:8e:9b:27:8f:d8:db:1a:2c:cd:ec:ec:5c: 39:79:30:73:91:fc:32:00:25:13:f2:39:be:62:7e:eb:98:5b: 87:85:55:50:07:b4:cf:b1:c4:1f:28:94:5a:a7:98:92:d9:43: ec:49:8b:2c:25:b8:e8:a6:07:69:78:87:41:76:db:23:0b:4b: 40:e5:9b:08:e2:5b:67:1f:14:b9:dd:88:ac:ee:e4:91:ed:60: 37:fc:4d:c9:48:ef:ca:c8:61:a4:7f:fe:34:25:1c:63:d6:5a: ac:b2:24:2a:e7:7a:a4:cf:0b:9d:5c:18:4f:d7:c7:2d:8d:cb: e5:34:ca:dd:06:7c:3e:7b:b8:43:73:71:41:1b:de:cc:f2:5e: 25:57:cc:70:6a:e8:7c:54:da:35:62:df:ff:32:98:65:2f:a1: 3e:02:5f:b9:59:f3:f1:19:eb:c6:67:4d:c9:95:10:9f:17:f4: 2d:e7:6a:65:77:bc:c0:30:e7:42:8b:71:02:39:31:cb:2b:78: 86:cc:98:9e:ec:25:69:f6:18:54:f9:d4:4b:52:ea:7e:b0:fd: 75:04:8e:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUES9aMVdO4YdJT1pgyBvpykK3p4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTc0MDU4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGEwY2I0MTQzZDM3MTFiOWE3OTk3NDY2OGQyNTBlODMw YTJiMjZlMTU3ODk1M2I4YjkzMDY4NDg2MDVkMTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2loOWpVGYeF/aCS5yO51idTUyxF9jvEhWGppO0Z0zzPh8 07ZtH2UPExLyZjgNaD5UcqQBDgKKn9tejfM1u60SNVBD8JjAFlUIMsDdg36GpSa3 gkcPMVNV7gmoq6Y+y+GFcOKFISNJyxXB76pfpLi22wnbh6OiYqPGXZG5zeP20A4y KcaZ6oZkw6+pgemR+ff0n1k7+F+R7mxX63PoHtOPiIP5X/lPEfYdVWNFC6Gmi+xp tSR+CdGNUkohvkJXegHZ6InI7/oKek8oa9cC/+c9j0gc7jVA8D7WCKQi748LkCs3 iPl7A0H7yjlk/uY2Y6Z+df8jP3gCw10Sn3QKxlyFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/ZLFSQF9wEBQnd9Hm0w0ZCa8r/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0ODM2ODkzLTUwNjQtNGIyYS04ODU0LTRkZDk4MTlkODIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4iTANBgkqhkiG9w0BAQsFAAOCAQEAppkv4PDFCCLc0/w2ljOw5KxtRi3I HG95w08hxG3nFR6fM7eFbfE5Sz1fjpsnj9jbGizN7OxcOXkwc5H8MgAlE/I5vmJ+ 65hbh4VVUAe0z7HEHyiUWqeYktlD7EmLLCW46KYHaXiHQXbbIwtLQOWbCOJbZx8U ud2IrO7kke1gN/xNyUjvyshhpH/+NCUcY9ZarLIkKud6pM8LnVwYT9fHLY3L5TTK 3QZ8Pnu4Q3NxQRvezPJeJVfMcGrofFTaNWLf/zKYZS+hPgJfuVnz8RnrxmdNyZUQ nxf0LedqZXe8wDDnQotxAjkxyyt4hsyYnuwlafYYVPnUS1LqfrD9dQSOqg== -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:59 2025 by rpki-client