$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa File: 5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa (raw, json) Hash identifier: 6LMJUgGt9/xPl7vAc4PnpEUocoL4XFXfuPkZAKUAA+o= Subject key identifier: EE:C6:7D:1C:83:05:12:CE:4A:9B:89:D5:7D:F8:D0:95:35:7D:B1:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 171A4B6B156BE856CAB9807AAAE01EC5A2F5187E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa Signing time: Mon 14 Jul 2025 15:02:08 +0000 ROA not before: Mon 14 Jul 2025 15:02:08 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1a:4b:6b:15:6b:e8:56:ca:b9:80:7a:aa:e0:1e:c5:a2:f5:18:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:02:08 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=3864dd017f89451e3492ecc49ee6a5314bb59f8490400cdd14349be81f192532, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:cd:5f:27:fd:5d:a8:e0:31:71:fe:40:ce: 99:f7:51:64:01:04:bb:ee:6a:b8:25:95:df:ec:6b: 91:4b:44:83:ed:8a:30:ee:10:00:d1:25:90:3f:3a: 8e:51:58:e1:1f:bc:e8:7e:76:dc:78:51:92:21:f3: aa:51:93:91:ce:d5:06:92:74:6d:22:a8:13:85:6a: 5e:de:44:bd:6d:4c:46:c0:32:b7:24:c8:ca:6a:08: cd:5e:44:54:b9:f3:b9:cf:32:bd:01:3d:48:11:bd: bb:4a:a9:82:a5:35:ef:ed:d9:ef:4d:65:e2:a3:4d: 33:08:79:6a:73:78:78:74:5a:ab:f4:39:0f:05:29: 85:bf:49:da:9f:95:e6:0f:94:16:b3:91:d6:64:77: 99:03:0d:2a:84:47:2b:f0:57:f2:89:70:fe:97:b5: eb:b4:99:bf:3a:ab:63:bc:eb:10:77:20:19:7e:20: 61:c3:24:6b:89:d3:e0:e8:9c:3f:28:57:2e:a3:4b: ae:da:8f:7a:fd:93:54:c0:86:d4:73:af:b4:5d:bc: 87:ae:9f:11:6a:4e:11:2b:24:3e:d2:00:80:1a:22: 47:f6:b2:8d:eb:cc:33:46:78:3c:69:59:c9:ca:6b: 55:d0:0b:b6:58:dc:af:a2:cb:25:e2:ba:ba:e0:40: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C6:7D:1C:83:05:12:CE:4A:9B:89:D5:7D:F8:D0:95:35:7D:B1:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:25:41:47:89:04:ba:c0:4b:63:d4:81:a6:44:0f:a9:eb:2c: 9b:79:53:72:bf:33:02:d2:c4:c1:f0:ca:00:26:4a:73:7e:76: cd:1a:2d:17:95:40:c7:69:a1:c6:4d:ec:aa:fb:f2:ea:40:b7: 16:4b:ce:20:d1:65:e7:3e:3f:f5:7d:fd:b9:57:10:c4:9f:59: 13:ce:f3:02:e7:e6:51:2a:a1:d3:82:99:9c:03:01:e8:84:0f: 93:aa:69:04:42:33:c4:74:85:2f:5f:a9:ea:3c:f3:de:4c:52: 90:1d:c8:03:7d:2a:09:72:09:f5:0c:94:05:09:f4:86:2f:07: ce:31:b1:8b:19:97:b2:a2:a1:60:e9:23:02:7c:b7:97:88:7a: ec:9e:45:4b:c3:98:43:d6:28:26:4e:ac:cb:04:ad:15:49:4e: 32:06:1a:a4:a3:fc:f4:cc:4a:91:03:6f:89:b1:9b:cf:73:b2: 40:59:47:a2:00:7f:f2:27:47:11:35:81:72:e7:eb:0c:57:35: 01:30:49:43:38:2d:6e:05:9f:18:a7:96:7e:4b:bc:31:cc:77: cf:6a:89:50:d1:9c:a6:f3:e7:ae:bf:21:db:a0:1c:1a:58:77: db:90:5a:23:3c:2a:73:d9:02:16:3a:9c:5e:b8:f1:bb:4d:4b: 1c:86:24:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFxpLaxVr6FbKuYB6quAexaL1GH4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMjA4WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODY0ZGQwMTdmODk0NTFlMzQ5MmVjYzQ5ZWU2YTUzMTRi YjU5Zjg0OTA0MDBjZGQxNDM0OWJlODFmMTkyNTMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUTM1fJ/1dqOAxcf5Azpn3UWQBBLvuarglld/sa5FLRIPt ijDuEADRJZA/Oo5RWOEfvOh+dtx4UZIh86pRk5HO1QaSdG0iqBOFal7eRL1tTEbA MrckyMpqCM1eRFS587nPMr0BPUgRvbtKqYKlNe/t2e9NZeKjTTMIeWpzeHh0Wqv0 OQ8FKYW/SdqfleYPlBazkdZkd5kDDSqERyvwV/KJcP6Xteu0mb86q2O86xB3IBl+ IGHDJGuJ0+DonD8oVy6jS67aj3r9k1TAhtRzr7RdvIeunxFqThErJD7SAIAaIkf2 so3rzDNGeDxpWcnKa1XQC7ZY3K+iyyXiurrgQHcJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7sZ9HIMFEs5Km4nVffjQlTV9sUIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmOTg5ZTNhLThlM2QtNDVjZS1hODNkLWQ1MzQ5MWFiNGEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQOTANBgkqhkiG9w0BAQsFAAOCAQEAEyVBR4kEusBLY9SBpkQPqessm3lT cr8zAtLEwfDKACZKc352zRotF5VAx2mhxk3sqvvy6kC3FkvOINFl5z4/9X39uVcQ xJ9ZE87zAufmUSqh04KZnAMB6IQPk6ppBEIzxHSFL1+p6jzz3kxSkB3IA30qCXIJ 9QyUBQn0hi8HzjGxixmXsqKhYOkjAny3l4h67J5FS8OYQ9YoJk6sywStFUlOMgYa pKP89MxKkQNvibGbz3OyQFlHogB/8idHETWBcufrDFc1ATBJQzgtbgWfGKeWfku8 Mcx3z2qJUNGcpvPnrr8h26AcGlh325BaIzwqc9kCFjqcXrjxu01LHIYk3w== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:17 2025 by rpki-client