$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5a52770-75fd-4126-9116-3362d8dc25af.roa File: e5a52770-75fd-4126-9116-3362d8dc25af.roa (raw, json) Hash identifier: yEZt93nDlddvFE2h57UBno2IPGo4ndBg5DTgMB6W1qU= Subject key identifier: D2:EE:86:1C:E6:A0:2D:7D:41:3C:C0:CC:C7:16:8E:DD:A5:40:F8:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F2986BBDC3BF8D8A3A9BCBB2FEE7E844341E05D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5a52770-75fd-4126-9116-3362d8dc25af.roa Signing time: Fri 01 Aug 2025 15:10:20 +0000 ROA not before: Fri 01 Aug 2025 15:10:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.16.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:29:86:bb:dc:3b:f8:d8:a3:a9:bc:bb:2f:ee:7e:84:43:41:e0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:10:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=934aadaf4b51ef0924182cdf22000c75038b23b2fffcb204eb2b8be993fb8cbd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:e4:b3:5d:a7:38:f4:6f:5f:93:92:02:75: 69:fa:ce:e8:88:7a:0a:87:d6:1c:8c:1a:78:f6:03: 31:af:3b:7d:dd:45:60:db:bc:ff:fd:66:3f:32:aa: 64:1f:4b:9b:12:ee:ce:e6:75:a5:03:eb:2e:8c:58: fd:4d:63:84:b2:1f:6b:da:2f:a0:e0:a7:16:94:9a: 1b:b5:0d:ef:ac:aa:f0:d3:8f:39:e1:03:4f:7a:dc: 62:09:1f:ff:c9:b6:05:77:9c:ad:4f:c1:28:ef:e4: c6:4a:b2:42:ea:ed:75:86:66:92:d1:1e:95:98:a8: 69:9e:b8:27:c6:2a:8b:5f:fc:0a:61:c7:7a:61:f3: f4:06:ae:67:e1:68:6a:15:a0:9f:b9:86:e1:c7:ea: 9b:0c:aa:cf:fc:bb:23:33:e1:dc:4f:6d:54:83:6a: 15:c0:63:ca:7e:14:fb:a8:5c:f4:61:50:50:93:0e: 8e:dc:da:a2:98:93:ca:23:25:f1:b7:5f:58:68:cb: 64:f8:19:59:5e:31:c8:bb:74:9f:9b:15:95:4e:d9: c5:e0:f1:d0:cd:b3:11:af:49:b3:80:3b:8b:c3:45: 35:3e:5a:03:bf:66:e9:6b:09:27:48:63:89:50:4b: 45:25:d6:07:f3:29:1f:eb:d2:08:7d:aa:f7:10:f7: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:86:1C:E6:A0:2D:7D:41:3C:C0:CC:C7:16:8E:DD:A5:40:F8:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5a52770-75fd-4126-9116-3362d8dc25af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.16.108.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:ba:0a:c3:39:6f:62:0f:5d:81:ec:99:58:c3:0e:3c:f0:ab: 9f:68:b9:d9:04:6d:3c:ca:19:b1:97:76:f0:73:fb:aa:cb:e7: 5b:5c:16:e9:c6:9b:61:38:72:64:4a:34:39:20:ec:6f:0b:6d: e8:b6:58:c4:d9:6d:65:c4:fe:86:ed:65:d3:88:84:06:fd:7c: 9d:b3:36:c2:f7:ee:4b:4f:e2:63:f4:e6:4e:6c:b7:9b:27:38: f0:22:43:54:a4:13:ed:fd:b5:4a:b1:19:77:85:63:65:7d:3e: 44:07:fc:6d:cf:15:f4:55:01:96:3b:e3:9e:f6:42:b6:bb:11: df:06:2c:75:85:60:8a:2c:3c:67:de:29:2f:58:b7:fb:fe:74: 51:a3:87:43:fc:f2:0b:06:ce:04:8a:e0:f7:05:c9:ba:26:8d: 5b:0b:c2:48:4e:fc:52:54:37:c0:ec:28:d5:e3:c4:ad:cf:ac: 78:46:c6:18:a2:84:ba:0a:50:2b:2a:34:cb:59:5e:7d:8e:4f: 6d:97:07:af:c6:6d:e9:d4:a4:19:64:21:3a:fa:90:66:fe:3c: e3:a8:0b:4a:2b:3a:4b:9a:ef:37:0e:d4:bc:a7:6a:06:74:af: c3:1f:05:74:f9:69:17:90:16:3a:64:8e:8e:13:8e:63:88:71: 5c:f1:82:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHymGu9w7+Nijqby7L+5+hENB4F0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUxMDIwWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzRhYWRhZjRiNTFlZjA5MjQxODJjZGYyMjAwMGM3NTAz OGIyM2IyZmZmY2IyMDRlYjJiOGJlOTkzZmI4Y2JkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZq+SzXac49G9fk5ICdWn6zuiIegqH1hyMGnj2AzGvO33d RWDbvP/9Zj8yqmQfS5sS7s7mdaUD6y6MWP1NY4SyH2vaL6DgpxaUmhu1De+sqvDT jznhA0963GIJH//JtgV3nK1PwSjv5MZKskLq7XWGZpLRHpWYqGmeuCfGKotf/Aph x3ph8/QGrmfhaGoVoJ+5huHH6psMqs/8uyMz4dxPbVSDahXAY8p+FPuoXPRhUFCT Do7c2qKYk8ojJfG3X1hoy2T4GVleMci7dJ+bFZVO2cXg8dDNsxGvSbOAO4vDRTU+ WgO/ZulrCSdIY4lQS0Ul1gfzKR/r0gh9qvcQ92I/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0u6GHOagLX1BPMDMxxaO3aVA+HAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1YTUyNzcwLTc1ZmQtNDEyNi05MTE2LTMzNjJkOGRjMjVhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQEGwwDQYJKoZIhvcNAQELBQADggEBADu6CsM5b2IPXYHsmVjDDjzwq59o udkEbTzKGbGXdvBz+6rL51tcFunGm2E4cmRKNDkg7G8Lbei2WMTZbWXE/obtZdOI hAb9fJ2zNsL37ktP4mP05k5st5snOPAiQ1SkE+39tUqxGXeFY2V9PkQH/G3PFfRV AZY74572Qra7Ed8GLHWFYIosPGfeKS9Yt/v+dFGjh0P88gsGzgSK4PcFybomjVsL wkhO/FJUN8DsKNXjxK3PrHhGxhiihLoKUCsqNMtZXn2OT22XB6/GbenUpBlkITr6 kGb+POOoC0orOkua7zcO1LynagZ0r8MfBXT5aReQFjpkjo4TjmOIcVzxguc= -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:44 2025 by rpki-client