$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa File: 1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa (raw, json) Hash identifier: jGYtovKSKKkiXp6Pu5KfqX4WzhYTeCQTP0tlo9dytG4= Subject key identifier: 7B:AB:6F:53:57:0D:FB:11:50:D3:EE:FC:49:45:0E:04:BF:19:CF:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59171FB55DD3F705A89509D1415C8291F6BAED0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa Signing time: Mon 18 Aug 2025 15:51:05 +0000 ROA not before: Mon 18 Aug 2025 15:51:05 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 56.97.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:17:1f:b5:5d:d3:f7:05:a8:95:09:d1:41:5c:82:91:f6:ba:ed:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:51:05 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=941ac9077d7dbf10f02d10d070403abff2678469040bdf2ef3b02d31dbf72b37, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:de:b2:5b:6e:d0:af:af:a3:aa:c2:50:a3: 4f:9f:7a:04:96:40:e3:51:80:84:98:d0:0e:d9:19: e4:4b:2a:e2:93:59:69:93:b4:2f:cf:e6:9e:af:64: 7e:7d:60:93:52:ad:90:00:c3:9c:5a:a3:7c:ac:43: fb:4c:fc:f1:55:68:d4:1a:41:c4:bc:aa:5f:b5:05: e8:a8:12:dc:6d:cb:23:1e:a9:08:be:80:4e:07:2f: 1d:c2:ac:91:53:b0:e4:42:32:66:73:11:4b:c5:4b: 8b:f2:83:06:be:05:87:c5:66:b6:4e:a1:d0:d2:85: 19:dc:51:cd:07:cc:0b:6b:f8:39:ec:f4:62:e1:f1: cb:57:2f:ef:5f:24:c1:86:16:3c:68:cb:67:e3:d9: 14:be:a4:1d:f1:61:13:c2:65:dd:6c:8f:cd:98:79: 29:67:0f:56:b5:10:91:55:63:4f:41:f5:f3:d0:6f: f0:b3:e7:cc:56:ed:66:f1:4c:0a:26:12:1c:74:5b: 05:27:f8:f9:e7:15:da:4a:bd:3d:63:35:44:9a:25: 65:bc:60:a6:18:8b:71:29:e4:99:e2:95:b4:04:8c: 25:e4:56:f5:98:ef:f5:73:37:42:fa:52:41:4d:a2: 95:b3:30:d1:46:a6:c7:c8:ff:1f:da:51:1a:01:56: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AB:6F:53:57:0D:FB:11:50:D3:EE:FC:49:45:0E:04:BF:19:CF:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5f:28:d0:29:1b:5f:de:e4:cb:51:db:ff:5a:ab:c4:29:8a:f3: bd:3f:2f:72:03:aa:ba:14:bc:b2:fd:06:eb:33:38:77:25:76: 9b:ea:52:06:ca:59:28:53:a6:fc:ba:5e:c1:82:1e:66:75:5a: 1f:c2:bc:b4:3f:48:db:e9:92:98:98:8e:74:ad:b4:67:e9:ad: f2:d9:a4:15:3b:d0:22:9f:04:f1:7e:b3:91:f2:04:38:4e:98: dc:01:e9:75:5f:2d:1a:51:6c:c4:c4:d2:ae:79:c1:01:32:a9: 6f:3e:d8:a9:5a:0a:da:ee:6b:ae:15:04:1f:4f:98:1c:93:74: b0:79:3c:e2:ca:86:dd:aa:9a:e7:85:0e:5e:68:d2:a7:b9:5b: c3:69:ab:2c:f7:81:97:63:10:4b:e3:6d:97:b3:64:b0:f6:9f: 19:b8:2d:56:6d:98:cb:49:6f:ea:d2:47:d7:2e:df:36:74:dd: 6b:2a:1f:99:99:32:55:29:18:25:f2:67:df:fb:f3:4c:ff:e7: 12:ea:9f:f8:21:48:a5:3b:78:68:42:91:fd:c6:6c:4b:c9:a1: ac:6a:e6:60:9a:e2:93:47:3c:f9:36:81:17:3d:0c:f3:eb:74: 92:66:6a:2a:9d:b4:28:87:d8:c3:8b:bc:99:3f:64:db:ad:37: d0:62:a4:3b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWRcftV3T9wWolQnRQVyCkfa67QswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU1MTA1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDFhYzkwNzdkN2RiZjEwZjAyZDEwZDA3MDQwM2FiZmYy Njc4NDY5MDQwYmRmMmVmM2IwMmQzMWRiZjcyYjM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpj96yW27Qr6+jqsJQo0+fegSWQONRgISY0A7ZGeRLKuKT WWmTtC/P5p6vZH59YJNSrZAAw5xao3ysQ/tM/PFVaNQaQcS8ql+1BeioEtxtyyMe qQi+gE4HLx3CrJFTsORCMmZzEUvFS4vygwa+BYfFZrZOodDShRncUc0HzAtr+Dns 9GLh8ctXL+9fJMGGFjxoy2fj2RS+pB3xYRPCZd1sj82YeSlnD1a1EJFVY09B9fPQ b/Cz58xW7WbxTAomEhx0WwUn+PnnFdpKvT1jNUSaJWW8YKYYi3Ep5JnilbQEjCXk VvWY7/VzN0L6UkFNopWzMNFGpsfI/x/aURoBVkhBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUe6tvU1cN+xFQ0+78SUUOBL8Zz9MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhYTFjZTIyLTYxMWUtNDk3ZC1iNWEyLWE4NWEzNDkyOGU3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4YTANBgkqhkiG9w0BAQsFAAOCAQEAXyjQKRtf3uTLUdv/WqvEKYrzvT8v cgOquhS8sv0G6zM4dyV2m+pSBspZKFOm/LpewYIeZnVaH8K8tD9I2+mSmJiOdK20 Z+mt8tmkFTvQIp8E8X6zkfIEOE6Y3AHpdV8tGlFsxMTSrnnBATKpbz7YqVoK2u5r rhUEH0+YHJN0sHk84sqG3aqa54UOXmjSp7lbw2mrLPeBl2MQS+Ntl7NksPafGbgt Vm2Yy0lv6tJH1y7fNnTdayofmZkyVSkYJfJn3/vzTP/nEuqf+CFIpTt4aEKR/cZs S8mhrGrmYJrik0c8+TaBFz0M8+t0kmZqKp20KIfYw4u8mT9k26030GKkOw== -----END CERTIFICATE-----Generated at Thu Aug 21 18:53:40 2025 by rpki-client