$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa File: 19c56357-2b65-4688-b2df-9f085ab31aa2.roa (raw, json) Hash identifier: qQGnQbNMuum1qdTf8NnB4sleoH9OQH1z48UjpuHadS4= Subject key identifier: 2B:5D:5C:D2:2C:05:3A:3C:CC:FC:94:54:A8:31:47:06:6E:F7:0F:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05C036DB719264B68E0AC5AACEF127B98A38C56A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa Signing time: Tue 12 Aug 2025 00:31:11 +0000 ROA not before: Tue 12 Aug 2025 00:31:11 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 56.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c0:36:db:71:92:64:b6:8e:0a:c5:aa:ce:f1:27:b9:8a:38:c5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:31:11 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=587fc3652ea63b7ca0575d911fdbed58b77c26a06e5f60cb5cc15d6fe0bcfb33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:22:e1:0c:aa:ab:86:31:23:6b:96:ad:ce: e3:7e:62:81:ce:37:11:b1:fa:02:f0:74:af:ca:78: 67:12:c5:d0:1a:e3:ef:33:bb:85:2a:d6:3b:f4:a4: 26:a4:9c:df:ad:94:11:49:0d:91:6e:e0:ee:6f:83: 2c:46:4b:56:d5:5e:07:3f:e9:75:15:d0:a1:cc:2a: 9e:7a:0b:ac:8d:cf:bb:51:88:ef:11:7a:df:0f:68: 00:dc:31:55:7b:cb:0f:5a:e7:f4:87:e0:0c:e9:d7: e7:6a:01:4c:ad:6a:21:b7:ca:25:26:30:9e:6e:0c: 7f:18:d5:6e:88:8c:0d:c5:17:d9:d2:1a:ee:cb:14: 1d:14:ce:46:0b:26:c4:66:e7:06:4e:c1:64:7d:f2: 9e:70:0c:ca:03:35:f9:c4:8a:1e:31:c6:7d:c6:d9: 93:1e:fa:99:28:32:3d:b0:f7:a9:d4:22:52:92:3f: a9:bc:61:3a:c8:bc:22:a9:69:f4:9f:8f:c0:7b:9f: c0:50:d6:10:a7:a0:e2:86:65:e1:b2:d3:fd:f8:6c: 90:0f:ee:b7:f6:7f:e3:d5:fe:37:a6:d1:87:b3:ef: d2:81:30:d1:a1:72:8f:c3:cf:0f:e3:d6:b0:8b:a8: bd:d0:4b:ff:3c:46:46:a8:a3:d8:43:38:24:77:ab: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5D:5C:D2:2C:05:3A:3C:CC:FC:94:54:A8:31:47:06:6E:F7:0F:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:6c:81:78:39:69:eb:fb:83:30:47:51:10:0e:ef:5e:fc:31: 17:bc:16:6e:f3:42:9f:cc:56:27:ce:6d:6d:89:57:0e:87:d5: 68:07:e9:93:51:9c:0b:8a:f9:12:9e:79:45:1c:19:cd:ee:c1: 1d:02:44:2f:4a:f1:a8:ee:4b:06:5e:a1:06:b3:52:c4:9b:f2: 5f:ff:4c:78:21:22:0b:fa:98:b6:d4:3f:49:5b:34:b6:7d:39: d2:3e:df:2e:88:14:c0:d3:7e:ac:40:a5:09:f9:4c:38:06:ee: 12:08:da:bd:24:97:12:80:71:c9:32:2b:d2:2e:1a:a9:41:5d: 49:87:53:80:2f:24:f2:24:4c:e5:c6:2b:c7:9e:d1:48:bb:d3: 97:a3:23:48:9a:6b:dc:bb:d2:bc:1d:58:a3:13:30:99:f5:61: 67:01:56:29:bf:7a:22:21:71:3f:89:ec:2d:3c:05:74:9d:1f: e1:f8:65:3f:a9:fa:c2:f7:fa:a1:c7:65:1e:f2:2e:5c:bb:ff: f3:5b:9b:36:ed:19:b9:88:f9:af:4f:30:96:cb:49:ad:62:09: f8:cb:d1:c9:a1:23:86:bc:de:d0:46:44:4f:f0:d4:bb:ac:cf: 1b:6e:97:15:33:95:76:37:3e:70:82:c1:e3:3f:fd:e9:f0:3e: 74:ee:81:21 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBcA223GSZLaOCsWqzvEnuYo4xWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAzMTExWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODdmYzM2NTJlYTYzYjdjYTA1NzVkOTExZmRiZWQ1OGI3 N2MyNmEwNmU1ZjYwY2I1Y2MxNWQ2ZmUwYmNmYjMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO5SLhDKqrhjEja5atzuN+YoHONxGx+gLwdK/KeGcSxdAa 4+8zu4Uq1jv0pCaknN+tlBFJDZFu4O5vgyxGS1bVXgc/6XUV0KHMKp56C6yNz7tR iO8Ret8PaADcMVV7yw9a5/SH4Azp1+dqAUytaiG3yiUmMJ5uDH8Y1W6IjA3FF9nS Gu7LFB0UzkYLJsRm5wZOwWR98p5wDMoDNfnEih4xxn3G2ZMe+pkoMj2w96nUIlKS P6m8YTrIvCKpafSfj8B7n8BQ1hCnoOKGZeGy0/34bJAP7rf2f+PV/jem0Yez79KB MNGhco/Dzw/j1rCLqL3QS/88Rkaoo9hDOCR3q1+/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUK11c0iwFOjzM/JRUqDFHBm73Dy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5YzU2MzU3LTJiNjUtNDY4OC1iMmRmLTlmMDg1YWIzMWFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA48jANBgkqhkiG9w0BAQsFAAOCAQEAM2yBeDlp6/uDMEdREA7vXvwxF7wW bvNCn8xWJ85tbYlXDofVaAfpk1GcC4r5Ep55RRwZze7BHQJEL0rxqO5LBl6hBrNS xJvyX/9MeCEiC/qYttQ/SVs0tn050j7fLogUwNN+rEClCflMOAbuEgjavSSXEoBx yTIr0i4aqUFdSYdTgC8k8iRM5cYrx57RSLvTl6MjSJpr3LvSvB1YoxMwmfVhZwFW Kb96IiFxP4nsLTwFdJ0f4fhlP6n6wvf6ocdlHvIuXLv/81ubNu0ZuYj5r08wlstJ rWIJ+MvRyaEjhrze0EZET/DUu6zPG26XFTOVdjc+cILB4z/96fA+dO6BIQ== -----END CERTIFICATE-----Generated at Thu Aug 21 19:01:29 2025 by rpki-client