$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa File: 20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa (raw, json) Hash identifier: a86TmMJ35rtDEuwRylM9xTouySNShJE2L9aZThy4M+0= Subject key identifier: D1:80:9C:E9:E5:5F:99:98:75:B3:C3:9C:EB:D0:45:2F:DB:A6:2C:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 512F317151C7F97A28817A0B9A36F75EDC18F365 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa Signing time: Fri 08 Aug 2025 00:00:40 +0000 ROA not before: Fri 08 Aug 2025 00:00:40 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2f:31:71:51:c7:f9:7a:28:81:7a:0b:9a:36:f7:5e:dc:18:f3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:40 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=a34a063b0ad7fb0012dbedefc1eb237b97213c2d82f2311c64954386b936477c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:af:72:b3:01:d9:5f:39:98:d9:af:43:95: 9f:b2:5c:2c:99:08:3e:98:59:31:71:ac:22:88:6b: 20:d7:af:19:6e:2c:9f:60:a8:26:9b:45:c1:08:a4: be:eb:81:5e:2e:85:fd:92:6c:58:48:b1:2b:a2:b1: d7:90:5c:01:43:02:62:a6:fb:9b:2a:f9:36:68:a1: bb:3f:90:37:24:1a:44:3b:c5:f9:ce:9d:a8:4f:00: 45:41:62:ce:09:fa:37:2d:82:e1:95:21:82:0d:6d: e9:55:51:3f:ce:b1:02:1a:21:97:d8:81:7e:23:71: 5f:40:7a:c7:58:15:58:69:00:1a:c7:3b:e0:8c:82: b2:79:af:6f:e5:72:0c:51:10:34:95:94:17:26:4f: 7a:4e:48:f0:91:81:9f:a3:85:13:e9:83:77:c7:61: e4:cb:fc:4e:4a:21:a1:f9:13:62:8b:56:2b:e0:55: e8:d6:4a:46:59:6e:54:4f:2c:da:35:f8:68:3a:71: b8:12:8d:13:eb:b2:20:11:0d:7c:9d:d7:c3:48:8d: c9:13:84:8d:fd:45:34:ea:68:d2:80:fa:1d:55:e8: 9c:7b:88:4c:75:0a:41:75:e9:9c:cf:7e:8f:79:47: ad:6f:da:49:f8:50:19:a6:3a:bc:6d:e8:47:81:0e: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:80:9C:E9:E5:5F:99:98:75:B3:C3:9C:EB:D0:45:2F:DB:A6:2C:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 31:fa:d8:98:0d:36:22:8e:e1:26:cb:3e:4b:af:f3:06:37:db: 2d:f5:f6:27:49:b0:12:e6:d1:b6:ad:cf:64:f2:8b:2b:2a:29: a1:ee:81:4e:74:59:3f:3c:d1:0c:d3:63:4a:7f:19:f6:9b:98: 5f:a1:fa:e2:db:da:bb:56:c2:68:5b:bc:e7:0d:96:d3:0b:f9: 54:ed:18:99:35:79:15:16:e8:d1:55:bd:2a:af:47:a1:39:7d: e2:07:74:94:2b:ac:78:17:f0:63:d4:3d:12:2a:75:25:99:1d: 4c:50:8d:f1:4f:b6:cd:36:72:bf:4f:0b:9b:86:fc:4a:f3:cf: dd:0c:0a:77:e3:59:bd:cd:a5:dc:63:6f:b9:6f:a9:87:a6:68: 56:1c:bd:35:9b:bd:7c:fc:d7:31:4a:eb:fa:76:e2:6c:6f:b2: 42:75:9c:bc:ce:4c:fc:f3:1d:31:4a:0b:d1:90:8b:88:51:8c: 33:47:b3:41:84:2d:a9:4c:43:08:b2:a6:ff:d5:8d:c2:c9:d7: c5:67:cd:0d:1e:10:44:00:b1:27:ed:5f:b0:a4:66:e5:a7:2e: b0:e2:35:32:b9:de:06:a7:8d:34:2a:6e:38:ee:55:69:a9:62: 42:ed:6b:4b:0c:90:80:a4:2b:e0:55:fa:9d:01:a4:0f:31:53: 2c:31:2c:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUS8xcVHH+XoogXoLmjb3XtwY82UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMDQwWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzRhMDYzYjBhZDdmYjAwMTJkYmVkZWZjMWViMjM3Yjk3 MjEzYzJkODJmMjMxMWM2NDk1NDM4NmI5MzY0NzdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq2a9yswHZXzmY2a9DlZ+yXCyZCD6YWTFxrCKIayDXrxlu LJ9gqCabRcEIpL7rgV4uhf2SbFhIsSuisdeQXAFDAmKm+5sq+TZoobs/kDckGkQ7 xfnOnahPAEVBYs4J+jctguGVIYINbelVUT/OsQIaIZfYgX4jcV9AesdYFVhpABrH O+CMgrJ5r2/lcgxREDSVlBcmT3pOSPCRgZ+jhRPpg3fHYeTL/E5KIaH5E2KLVivg VejWSkZZblRPLNo1+Gg6cbgSjRPrsiARDXyd18NIjckThI39RTTqaNKA+h1V6Jx7 iEx1CkF16ZzPfo95R61v2kn4UBmmOrxt6EeBDmhRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0YCc6eVfmZh1s8Oc69BFL9umLB4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZWNkODNkLWU2YzItNGQ3NS1iOWNiLThhNzg5ODE3MmFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOSAwDQYJKoZIhvcNAQELBQADggEBADH62JgNNiKO4SbLPkuv8wY32y31 9idJsBLm0batz2TyiysqKaHugU50WT880QzTY0p/GfabmF+h+uLb2rtWwmhbvOcN ltML+VTtGJk1eRUW6NFVvSqvR6E5feIHdJQrrHgX8GPUPRIqdSWZHUxQjfFPts02 cr9PC5uG/Erzz90MCnfjWb3Npdxjb7lvqYemaFYcvTWbvXz81zFK6/p24mxvskJ1 nLzOTPzzHTFKC9GQi4hRjDNHs0GELalMQwiypv/VjcLJ18VnzQ0eEEQAsSftX7Ck ZuWnLrDiNTK53ganjTQqbjjuVWmpYkLta0sMkICkK+BV+p0BpA8xUywxLGM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:34 2025 by rpki-client