$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa File: 13fff5ce-e24c-47b0-8733-aa45784ee06b.roa (raw, json) Hash identifier: tH7/DXRXM5q/A+QtWhUSkdXYu2vOznrjtv9EBrRcxZE= Subject key identifier: 37:96:AC:45:43:02:48:3D:64:31:E1:66:45:4A:C3:F8:51:E4:0C:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A7D2B671FDB134D4275E6CF57266203090BDF87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa Signing time: Sat 30 Aug 2025 00:31:49 +0000 ROA not before: Sat 30 Aug 2025 00:31:49 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.195.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7d:2b:67:1f:db:13:4d:42:75:e6:cf:57:26:62:03:09:0b:df:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:49 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=be4db420efb91831c7e2b44cf9b3d6ca61155c9a9410c747da26f3e1a4607ca3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:b4:57:bf:c9:a0:e7:a5:3b:28:b2:3b:68: f9:1f:fa:90:53:a7:68:cf:c7:44:40:c2:e0:b5:66: 9e:cd:26:85:27:52:ab:34:4c:c6:bd:0f:3a:3d:9f: 49:6d:a8:76:ad:f4:83:15:a7:03:4d:6a:18:58:73: 2c:4f:cb:2f:be:05:e0:66:b9:71:49:1b:07:7e:43: f9:e3:b7:c9:6a:4e:00:86:01:69:ca:dd:ff:d7:06: 3c:b9:c1:53:0e:60:f6:2e:5a:18:19:ef:bb:76:33: 05:d5:3e:64:7e:30:d6:67:1f:28:a2:a9:02:3a:2e: b4:8a:9b:44:fe:2e:fe:0f:1e:d5:49:a3:8b:0e:cb: 90:94:cf:64:b0:1c:a7:fb:3f:f3:fc:05:5c:94:cb: f7:d4:ca:4f:bc:a0:f3:0f:21:de:5d:aa:89:09:77: 13:47:47:82:73:42:d7:8a:b6:c0:d2:83:c1:3e:52: c2:12:eb:f0:85:50:83:38:1f:e3:db:d0:ab:1f:17: d8:ac:72:c1:6f:e2:73:82:f9:7a:fe:05:91:12:6b: 17:b1:5e:7e:87:88:a5:37:10:ed:ff:45:57:fc:9b: 85:55:7e:9f:f9:12:d8:5b:c0:a6:23:4f:84:55:65: af:0d:b3:82:d8:51:34:a3:21:aa:84:26:5e:4a:d2: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:96:AC:45:43:02:48:3D:64:31:E1:66:45:4A:C3:F8:51:E4:0C:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:f6:b3:57:33:30:75:7c:b4:0b:54:92:9d:87:49:60:f9:fd: ce:ca:4e:b3:ee:fc:7a:4a:40:99:5f:07:1f:19:ea:25:fb:a8: e6:b5:5b:3d:63:f6:6a:a6:4a:ba:d0:be:69:57:1e:11:68:26: bc:f7:2f:63:24:9f:e4:aa:b2:9e:5f:f0:e8:4f:b8:23:55:71: ae:e7:e0:11:f0:50:67:e2:50:4f:19:6b:15:ec:98:f4:a2:f6: 8b:95:01:35:c3:82:51:0f:74:20:98:d5:7e:79:d6:71:05:ae: b7:48:19:24:00:b3:6a:a1:55:01:02:3a:77:01:48:e3:a6:a1: 44:1e:92:7c:a6:99:a1:8b:56:32:6f:04:ad:2f:02:30:f3:ce: c0:6a:8c:f4:3d:63:b0:84:c2:c5:26:b4:e0:52:db:e6:83:6a: db:20:d4:06:95:d2:02:f2:4f:82:42:ab:b1:df:22:43:09:f0: 36:e4:1c:78:6b:ed:34:2f:59:88:98:74:e9:1e:89:4a:79:28: 00:0f:45:c1:0e:6b:c9:e5:c0:4e:8e:ca:f0:07:32:cc:c3:92: a3:d1:c7:b9:fb:61:fb:27:d9:8d:1e:90:58:34:b7:0c:8f:36: ef:f0:0f:80:62:f9:ee:4a:ee:bf:1e:58:9f:52:e8:cd:b4:1b: 69:08:91:9c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSn0rZx/bE01CdebPVyZiAwkL34cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTQ5WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTRkYjQyMGVmYjkxODMxYzdlMmI0NGNmOWIzZDZjYTYx MTU1YzlhOTQxMGM3NDdkYTI2ZjNlMWE0NjA3Y2EzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDp7RXv8mg56U7KLI7aPkf+pBTp2jPx0RAwuC1Zp7NJoUn Uqs0TMa9Dzo9n0ltqHat9IMVpwNNahhYcyxPyy++BeBmuXFJGwd+Q/njt8lqTgCG AWnK3f/XBjy5wVMOYPYuWhgZ77t2MwXVPmR+MNZnHyiiqQI6LrSKm0T+Lv4PHtVJ o4sOy5CUz2SwHKf7P/P8BVyUy/fUyk+8oPMPId5dqokJdxNHR4JzQteKtsDSg8E+ UsIS6/CFUIM4H+Pb0KsfF9iscsFv4nOC+Xr+BZESaxexXn6HiKU3EO3/RVf8m4VV fp/5EthbwKYjT4RVZa8Ns4LYUTSjIaqEJl5K0mTxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUN5asRUMCSD1kMeFmRUrD+FHkDDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzZmZmNWNlLWUyNGMtNDdiMC04NzMzLWFhNDU3ODRlZTA2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4wzANBgkqhkiG9w0BAQsFAAOCAQEAhfazVzMwdXy0C1SSnYdJYPn9zspO s+78ekpAmV8HHxnqJfuo5rVbPWP2aqZKutC+aVceEWgmvPcvYySf5Kqynl/w6E+4 I1VxrufgEfBQZ+JQTxlrFeyY9KL2i5UBNcOCUQ90IJjVfnnWcQWut0gZJACzaqFV AQI6dwFI46ahRB6SfKaZoYtWMm8ErS8CMPPOwGqM9D1jsITCxSa04FLb5oNq2yDU BpXSAvJPgkKrsd8iQwnwNuQceGvtNC9ZiJh06R6JSnkoAA9FwQ5ryeXATo7K8Acy zMOSo9HHufth+yfZjR6QWDS3DI827/APgGL57kruvx5Yn1LozbQbaQiRnA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:43 2025 by rpki-client