$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c114c210-04f4-4c1d-837f-f1386a80d31c.roa File: c114c210-04f4-4c1d-837f-f1386a80d31c.roa (raw, json) Hash identifier: 4QdlL/eMF6B3zDcPtdKfby9f+8u5e9Z8ELgnKskxDA0= Subject key identifier: DC:90:ED:CC:A2:30:65:DA:07:5B:EA:E2:ED:DA:93:B0:BF:8C:63:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 572C945397D4029B7318EF18EBD5E7BC322B75E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c114c210-04f4-4c1d-837f-f1386a80d31c.roa Signing time: Wed 09 Jul 2025 00:51:09 +0000 ROA not before: Wed 09 Jul 2025 00:51:09 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2c:94:53:97:d4:02:9b:73:18:ef:18:eb:d5:e7:bc:32:2b:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:51:09 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=5ca48897e7c6d8bf8a3942d9bab9d20080eba66f5b776e545d91f0eeae3a8684, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:cc:58:5c:14:a6:98:6c:cd:c4:0c:56:f5: b9:b9:6a:bb:a7:cb:ed:21:16:a5:7d:0b:91:53:6a: 87:75:50:7a:77:62:41:ec:05:08:19:52:5b:44:69: 93:7e:41:8b:25:53:56:ed:90:c7:b2:24:bb:b5:fd: e3:28:8b:9a:d7:63:68:66:0a:94:3a:09:0c:c5:2d: d1:23:ea:2e:91:55:10:e3:c5:88:54:bf:b1:99:63: 93:96:8b:65:96:55:c0:53:12:b5:55:a1:89:a2:bc: 9e:eb:fa:8f:4e:04:44:e9:fc:ea:7f:bd:76:45:81: e1:c3:e4:a7:ff:ef:e5:97:0e:e5:13:77:62:d1:8f: c5:6f:a4:c4:2b:c0:29:1a:d1:5e:cd:e6:ad:f7:96: c1:a0:85:34:53:ea:c2:89:b4:bf:92:18:46:20:b5: 91:b9:1a:56:7b:85:e6:fa:5d:75:35:82:99:d9:f2: a6:b1:01:85:54:ad:33:9d:c8:a3:e9:50:2b:37:60: fc:fb:4c:fd:3f:3d:d1:07:21:18:79:66:60:48:97: 90:4c:ac:34:0f:c1:a3:80:b6:73:71:da:7a:ec:14: 12:12:6b:f1:4f:50:fe:11:16:62:ff:14:98:c8:9a: 56:e1:b0:65:54:f3:15:7c:25:04:54:30:18:b0:15: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:ED:CC:A2:30:65:DA:07:5B:EA:E2:ED:DA:93:B0:BF:8C:63:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c114c210-04f4-4c1d-837f-f1386a80d31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:b1:a8:2b:94:39:10:1d:4e:fc:71:2a:c2:7f:ae:28:5d:5c: 3a:3d:e2:7e:56:21:2c:d3:80:ea:ca:69:66:04:7e:d0:da:d7: 36:9a:f7:51:75:5f:c5:48:62:1e:06:c8:37:47:57:3c:62:3a: bd:bf:a1:5f:05:d4:05:c6:5a:96:31:04:fb:42:4d:0c:f9:be: 2c:00:a2:14:a7:1c:27:4b:3b:8d:9f:9c:0c:01:f6:e1:d0:73: 25:53:59:37:b6:44:ff:b3:ac:31:97:65:c8:60:0a:76:de:0f: 84:13:80:8a:30:2f:3c:6b:c4:e7:a0:63:04:2e:40:08:03:2e: 9c:da:bc:9e:dd:c6:3f:a4:5c:ff:f7:87:48:4f:a6:e6:ca:3d: 87:bc:98:c5:15:01:f0:fb:11:02:55:e7:33:4e:15:fa:c5:2d: fd:52:ec:ec:93:37:34:bf:15:54:26:19:11:aa:25:01:06:69: 5a:40:b7:39:3d:59:54:77:5c:f0:94:64:2f:e6:03:46:b6:bf: 68:b5:7e:92:a4:bf:e6:7f:51:8c:d0:16:1a:9e:71:b8:77:5d: f4:63:c6:d3:3b:a9:9f:19:7f:75:8b:78:f0:f2:fc:5a:c1:ce: 43:bf:6d:4a:4d:e0:90:a1:2a:72:73:c8:fc:a6:d4:92:ce:38: 46:0c:d0:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVyyUU5fUAptzGO8Y69XnvDIrdegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MTA5WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2E0ODg5N2U3YzZkOGJmOGEzOTQyZDliYWI5ZDIwMDgw ZWJhNjZmNWI3NzZlNTQ1ZDkxZjBlZWFlM2E4Njg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD2cxYXBSmmGzNxAxW9bm5aruny+0hFqV9C5FTaod1UHp3 YkHsBQgZUltEaZN+QYslU1btkMeyJLu1/eMoi5rXY2hmCpQ6CQzFLdEj6i6RVRDj xYhUv7GZY5OWi2WWVcBTErVVoYmivJ7r+o9OBETp/Op/vXZFgeHD5Kf/7+WXDuUT d2LRj8VvpMQrwCka0V7N5q33lsGghTRT6sKJtL+SGEYgtZG5GlZ7heb6XXU1gpnZ 8qaxAYVUrTOdyKPpUCs3YPz7TP0/PdEHIRh5ZmBIl5BMrDQPwaOAtnNx2nrsFBIS a/FPUP4RFmL/FJjImlbhsGVU8xV8JQRUMBiwFeEDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3JDtzKIwZdoHW+ri7dqTsL+MYw0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxMTRjMjEwLTA0ZjQtNGMxZC04MzdmLWYxMzg2YTgwZDMxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ZjANBgkqhkiG9w0BAQsFAAOCAQEAqrGoK5Q5EB1O/HEqwn+uKF1cOj3i flYhLNOA6sppZgR+0NrXNpr3UXVfxUhiHgbIN0dXPGI6vb+hXwXUBcZaljEE+0JN DPm+LACiFKccJ0s7jZ+cDAH24dBzJVNZN7ZE/7OsMZdlyGAKdt4PhBOAijAvPGvE 56BjBC5ACAMunNq8nt3GP6Rc//eHSE+m5so9h7yYxRUB8PsRAlXnM04V+sUt/VLs 7JM3NL8VVCYZEaolAQZpWkC3OT1ZVHdc8JRkL+YDRra/aLV+kqS/5n9RjNAWGp5x uHdd9GPG0zupnxl/dYt48PL8WsHOQ79tSk3gkKEqcnPI/KbUks44RgzQow== -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:04 2025 by rpki-client