$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa File: 210af08c-2d71-431e-812f-721b1a0d5ceb.roa (raw, json) Hash identifier: PGjAgm8gFm8LTCVcIRMxcVJR+fRRDm2iJSW1IkHE3iQ= Subject key identifier: B8:74:5B:6B:F7:71:AC:6F:CE:EC:73:BA:E7:DA:63:50:BE:C4:0F:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D150D6C105D8AE473351434960C17D88D643A8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa Signing time: Fri 29 Aug 2025 16:41:43 +0000 ROA not before: Fri 29 Aug 2025 16:41:43 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:0d:6c:10:5d:8a:e4:73:35:14:34:96:0c:17:d8:8d:64:3a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:41:43 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=e150dc4967bcc330a4c3ba774bbe910680f113f6b850d1427fe8c1cbebc3cf72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:a7:dc:c8:b0:55:cd:af:16:c3:ed:67:ae: 47:cb:b6:43:31:68:04:78:7a:19:db:46:8a:9a:d1: 7e:36:f5:36:cf:19:19:f3:1d:5d:8a:4e:2c:f9:ed: 24:9c:77:a3:e9:68:ad:dc:4c:4e:10:98:42:a9:be: 61:16:21:79:ab:d2:51:0f:24:fa:a6:8f:4a:0f:dc: 97:87:41:70:5a:b4:24:63:ca:a7:c5:17:18:fb:a5: 42:3c:26:53:68:88:e1:2a:97:ee:ca:a5:b3:d2:29: 3f:bf:fb:0f:e4:ea:21:4c:a6:33:16:0c:4b:7f:f1: 59:89:c1:a1:dd:b0:44:a8:05:48:74:72:ef:97:49: 14:59:31:37:4a:57:44:d8:87:89:f8:b9:aa:dd:71: fd:73:93:58:b8:d8:b6:61:62:2c:5a:b7:40:dc:21: 3c:9e:4e:db:6b:01:ff:bd:f4:da:e7:1c:c9:53:a9: da:76:fa:6d:4c:5c:be:77:3d:2c:3b:eb:73:1b:f6: 27:9b:74:8a:11:5a:60:0d:d8:a7:96:83:cd:ef:16: 57:9f:f9:1d:99:55:2b:5f:10:09:04:ea:ac:10:3e: 65:f4:5a:f6:4b:65:b0:84:02:e6:1e:19:98:bf:24: 2b:50:63:00:fc:06:60:38:b9:a5:24:15:41:20:2f: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:74:5B:6B:F7:71:AC:6F:CE:EC:73:BA:E7:DA:63:50:BE:C4:0F:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:b7:db:8a:09:31:65:e7:dc:b7:53:4a:28:7a:5d:94:36:ab: 0e:c5:00:d4:4e:8f:59:64:97:ab:c8:98:90:7a:66:38:4c:67: 1f:98:ae:c1:fd:d1:eb:e2:86:9d:96:bb:40:f0:8e:53:67:ba: b0:ac:14:76:0c:50:ef:7f:c3:9c:06:88:28:b2:f2:e9:b3:4f: 97:ab:bb:72:6f:56:c6:12:25:57:6a:9f:85:f2:76:3f:89:b1: 57:39:cd:6f:bb:27:b0:0c:48:13:54:b0:e6:ff:ce:ab:5b:01: 9e:e9:4d:0f:56:46:36:43:91:38:44:b8:82:b4:54:00:dc:f8: dc:82:db:b0:ac:72:7b:88:4b:0a:4a:36:9f:0a:d2:d7:df:9e: 36:d6:64:7e:5f:a8:0c:50:03:85:bb:46:7b:f1:7b:7b:a5:56: be:a1:d4:93:10:9a:c0:0c:b0:14:43:76:5a:e4:92:11:17:df: f6:fb:2d:d4:6e:bd:7f:59:e1:24:2a:ef:2b:75:9e:fb:ab:50: 1f:72:6f:f8:60:f8:fd:83:39:61:28:3c:34:85:8d:6a:ad:50: d9:5c:a6:4d:7c:ad:d7:b4:41:69:17:23:ce:16:52:55:78:f0: 05:24:6b:a3:dc:1f:f3:f4:89:a1:a5:14:6d:1a:e0:c7:96:d6: c4:05:bc:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULRUNbBBdiuRzNRQ0lgwX2I1kOowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTY0MTQzWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTUwZGM0OTY3YmNjMzMwYTRjM2JhNzc0YmJlOTEwNjgw ZjExM2Y2Yjg1MGQxNDI3ZmU4YzFjYmViYzNjZjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhV6fcyLBVza8Ww+1nrkfLtkMxaAR4ehnbRoqa0X429TbP GRnzHV2KTiz57SScd6PpaK3cTE4QmEKpvmEWIXmr0lEPJPqmj0oP3JeHQXBatCRj yqfFFxj7pUI8JlNoiOEql+7KpbPSKT+/+w/k6iFMpjMWDEt/8VmJwaHdsESoBUh0 cu+XSRRZMTdKV0TYh4n4uardcf1zk1i42LZhYixat0DcITyeTttrAf+99NrnHMlT qdp2+m1MXL53PSw763Mb9iebdIoRWmAN2KeWg83vFlef+R2ZVStfEAkE6qwQPmX0 WvZLZbCEAuYeGZi/JCtQYwD8BmA4uaUkFUEgLxuZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuHRba/dxrG/O7HO659pjUL7ED4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxMGFmMDhjLTJkNzEtNDMxZS04MTJmLTcyMWIxYTBkNWNlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cDANBgkqhkiG9w0BAQsFAAOCAQEADrfbigkxZefct1NKKHpdlDarDsUA 1E6PWWSXq8iYkHpmOExnH5iuwf3R6+KGnZa7QPCOU2e6sKwUdgxQ73/DnAaIKLLy 6bNPl6u7cm9WxhIlV2qfhfJ2P4mxVznNb7snsAxIE1Sw5v/Oq1sBnulND1ZGNkOR OES4grRUANz43ILbsKxye4hLCko2nwrS19+eNtZkfl+oDFADhbtGe/F7e6VWvqHU kxCawAywFEN2WuSSERff9vst1G69f1nhJCrvK3We+6tQH3Jv+GD4/YM5YSg8NIWN aq1Q2VymTXyt17RBaRcjzhZSVXjwBSRro9wf8/SJoaUUbRrgx5bWxAW8Wg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:17 2025 by rpki-client