$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce28414e-163d-40a7-b80d-2a26230cbbb4.roa File: ce28414e-163d-40a7-b80d-2a26230cbbb4.roa (raw, json) Hash identifier: J5dhAtsRG43sRGaBS+MVVw6e7NZ/r3ixSI0BAXUcgd4= Subject key identifier: CD:E5:33:7D:5C:04:1B:0C:BE:CC:B8:1A:C1:6B:DB:01:BD:81:CA:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E1497D0E77FF6A08AA58CE785614E7A04DCF87A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce28414e-163d-40a7-b80d-2a26230cbbb4.roa Signing time: Mon 04 Aug 2025 17:31:02 +0000 ROA not before: Mon 04 Aug 2025 17:31:02 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.112.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:14:97:d0:e7:7f:f6:a0:8a:a5:8c:e7:85:61:4e:7a:04:dc:f8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:02 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=6509e2aaa84db0b507af522b832c692f13368e40afe27060a23166b4fb3148aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:08:60:0d:83:da:44:2a:2c:02:6e:e1:70: 1b:4b:ab:80:f8:23:59:dd:34:04:80:dc:e1:0e:ce: 05:ec:dd:17:31:ca:96:4c:d8:36:f5:a7:78:d2:af: ae:61:2b:b4:ad:e2:d3:75:4d:c1:fa:37:76:92:65: 75:92:c2:2e:e4:57:1a:17:c5:75:80:a4:aa:ab:ea: aa:95:d8:37:8b:13:66:fd:55:31:55:24:b3:77:e2: f9:22:69:9b:cd:75:86:90:81:ca:c6:89:34:6a:fd: 0b:e3:f6:9e:d9:06:3d:37:31:3b:a6:dc:e4:6e:97: 61:39:9e:3e:db:4f:0e:5f:3a:1e:2e:dc:98:0c:c8: 6c:17:c1:22:d3:ee:e3:12:93:82:ee:5d:fe:0c:ce: 60:94:98:9a:5a:a0:54:92:67:a8:9e:17:99:fa:ce: 23:fc:92:75:b3:35:f5:bf:98:2a:79:25:b4:5c:28: 01:fe:b6:ce:b4:99:70:99:09:b6:0b:cf:2d:15:f6: b5:ff:22:ce:9b:46:c1:57:af:58:41:23:ed:75:87: 31:db:ca:b0:ff:eb:27:a2:51:e2:41:5b:c9:e4:23: a3:80:ad:e6:f8:02:9c:d9:14:72:8f:e4:65:6b:d0: b1:7e:63:97:78:ab:00:8a:43:99:4f:a1:a3:05:24: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:33:7D:5C:04:1B:0C:BE:CC:B8:1A:C1:6B:DB:01:BD:81:CA:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce28414e-163d-40a7-b80d-2a26230cbbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.112.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:84:f0:8a:48:9a:29:80:54:2e:b6:7e:90:52:4b:7e:01:56: fe:e0:c5:64:bd:52:60:76:2e:04:cb:05:62:3e:ad:a0:3a:ce: 6f:7e:8b:12:20:37:6b:53:78:c0:53:9a:6f:1f:99:ed:b4:4d: 9e:39:fb:3d:58:40:6b:31:7f:7e:0c:af:3a:9e:55:f3:83:ec: c9:07:69:f7:59:f7:6d:7c:26:f2:10:77:fa:e0:6d:bc:c6:7a: e9:ba:b2:8f:1b:45:a7:ce:d1:69:3c:1a:52:a5:00:87:9a:3a: 7a:2c:59:68:36:79:40:cc:68:5e:c0:6b:e1:c8:30:39:11:f3: 04:c7:98:51:c4:26:b7:7a:9e:98:24:4a:15:4f:7c:0a:65:eb: 87:a5:ac:6f:97:1d:27:9a:2f:02:5d:2c:58:86:ce:f1:9f:11: ef:b2:74:cc:9e:7d:98:c8:dc:34:86:89:69:28:51:b6:22:29: 81:d2:64:60:f5:52:81:06:2d:d7:90:02:e9:e7:d0:55:15:dd: 4e:5a:53:93:36:7d:43:17:8e:1e:e8:80:3b:3f:bc:f5:ef:9a: 61:13:67:68:7e:19:49:a9:6a:ab:6c:a4:4b:72:75:40:ce:4e: 8e:c4:83:11:72:38:57:3e:64:40:16:6e:cc:91:70:54:68:41: 9e:5a:e9:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfhSX0Od/9qCKpYznhWFOegTc+HowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTAyWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTA5ZTJhYWE4NGRiMGI1MDdhZjUyMmI4MzJjNjkyZjEz MzY4ZTQwYWZlMjcwNjBhMjMxNjZiNGZiMzE0OGFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNhwhgDYPaRCosAm7hcBtLq4D4I1ndNASA3OEOzgXs3Rcx ypZM2Db1p3jSr65hK7St4tN1TcH6N3aSZXWSwi7kVxoXxXWApKqr6qqV2DeLE2b9 VTFVJLN34vkiaZvNdYaQgcrGiTRq/Qvj9p7ZBj03MTum3ORul2E5nj7bTw5fOh4u 3JgMyGwXwSLT7uMSk4LuXf4MzmCUmJpaoFSSZ6ieF5n6ziP8knWzNfW/mCp5JbRc KAH+ts60mXCZCbYLzy0V9rX/Is6bRsFXr1hBI+11hzHbyrD/6yeiUeJBW8nkI6OA reb4ApzZFHKP5GVr0LF+Y5d4qwCKQ5lPoaMFJHh9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzeUzfVwEGwy+zLgawWvbAb2BysYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlMjg0MTRlLTE2M2QtNDBhNy1iODBkLTJhMjYyMzBjYmJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2cAAwDQYJKoZIhvcNAQELBQADggEBACqE8IpImimAVC62fpBSS34BVv7g xWS9UmB2LgTLBWI+raA6zm9+ixIgN2tTeMBTmm8fme20TZ45+z1YQGsxf34Mrzqe VfOD7MkHafdZ9218JvIQd/rgbbzGeum6so8bRafO0Wk8GlKlAIeaOnosWWg2eUDM aF7Aa+HIMDkR8wTHmFHEJrd6npgkShVPfApl64elrG+XHSeaLwJdLFiGzvGfEe+y dMyefZjI3DSGiWkoUbYiKYHSZGD1UoEGLdeQAunn0FUV3U5aU5M2fUMXjh7ogDs/ vPXvmmETZ2h+GUmpaqtspEtydUDOTo7EgxFyOFc+ZEAWbsyRcFRoQZ5a6WY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:58 2025 by rpki-client