$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229b06bd-df5d-4bed-83a6-bdaeb9c7d293.roa File: 229b06bd-df5d-4bed-83a6-bdaeb9c7d293.roa (raw, json) Hash identifier: DAbyO58Z0bTy7RoQGB0zJ+p5PuuN/wtCZu8SpcDevso= Subject key identifier: E5:EC:AF:CF:8D:DA:91:9B:05:14:64:0B:F6:F4:48:15:25:75:4C:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25C090955E50651289843F3E9EB2BA8B113A4EB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229b06bd-df5d-4bed-83a6-bdaeb9c7d293.roa Signing time: Mon 11 Aug 2025 15:10:18 +0000 ROA not before: Mon 11 Aug 2025 15:10:18 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.27.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c0:90:95:5e:50:65:12:89:84:3f:3e:9e:b2:ba:8b:11:3a:4e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:10:18 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=15ab6e93b78ac6ee320b6850917c807794faaf5fcdc01a58706fac8a6f4d92fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:2a:ff:24:7a:09:70:e0:04:ea:58:44:de: 19:01:4b:89:66:45:cf:bb:ec:ea:94:3f:14:10:3f: 4b:54:43:d3:e2:0a:45:f8:3a:f5:96:99:a0:ab:ec: 37:bd:ee:40:ba:fb:e2:39:97:70:d9:cd:82:dd:7b: f3:a8:ac:eb:6d:dd:34:c4:6a:cb:55:c0:58:43:ef: 13:de:d6:42:e8:f2:69:5b:33:96:52:b7:b2:04:a0: c0:38:8a:7b:27:27:f2:31:4f:c3:63:4f:68:d1:a1: 3b:58:70:c7:15:16:b0:b3:b6:ee:b0:b1:71:72:62: 34:80:c0:a3:a4:ae:76:7a:ad:ba:6c:4d:cf:3f:72: de:73:9f:74:56:e9:d2:b3:ad:51:81:8e:59:fc:26: 5f:74:8d:5e:87:c9:f7:63:fe:d2:bb:9b:01:9a:a6: 83:fe:31:a8:c5:74:0f:0f:23:95:9e:7b:75:81:d7: ab:1d:f3:19:d6:00:82:e7:1e:4b:93:91:72:67:62: ce:72:ca:95:f1:5e:7a:fe:8b:85:7b:98:01:43:d8: 62:0d:3c:ed:6b:3c:31:c2:1a:59:c8:1c:4f:e6:14: f8:62:d6:8b:75:ba:88:31:f2:d8:0e:a2:c8:c4:45: 96:4b:91:26:78:69:eb:cb:c4:42:38:d2:5a:e2:09: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EC:AF:CF:8D:DA:91:9B:05:14:64:0B:F6:F4:48:15:25:75:4C:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229b06bd-df5d-4bed-83a6-bdaeb9c7d293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:79:83:b8:f3:c6:1a:7c:5c:18:54:67:0d:dd:cf:84:c9:96: 01:6f:ee:85:ec:f0:c5:c1:6e:1b:c1:76:0d:49:02:45:62:9a: 0d:3d:32:33:90:06:e6:49:d0:9e:ae:d5:b1:2e:6a:c4:0b:f7: 82:a2:43:a4:34:24:91:d4:9b:fc:72:c2:2d:83:2a:a8:a1:74: 70:69:7d:d0:b2:56:75:14:1d:16:96:69:b3:19:ba:76:d7:1e: 1a:43:d3:8c:00:f1:88:42:f8:e0:cd:58:fb:08:9e:f7:63:9f: 0e:cc:c2:91:bd:f9:9f:64:5c:aa:0e:9f:19:30:49:f8:e1:cc: 57:91:3e:1d:fd:72:25:a1:21:9b:de:bf:1f:17:38:06:21:0f: 60:4d:86:23:1b:5c:a5:e3:40:e9:ea:53:e7:85:12:b3:ba:4c: da:b8:a0:19:a5:a4:ee:a2:f1:ea:34:5a:75:c5:41:37:67:b0: ea:7b:76:a6:fa:52:10:80:d6:63:fc:3a:9b:73:46:e0:ed:6e: 9d:03:51:c6:19:46:54:f3:2b:ba:ac:70:64:5f:f9:1f:54:58: 26:4b:15:b5:e2:0b:2b:9a:7d:fd:ef:48:a8:e1:13:4e:18:1a: c3:41:7b:ec:2d:13:f2:fe:cc:00:6b:20:13:7b:b4:fd:32:52: 54:fa:6b:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJcCQlV5QZRKJhD8+nrK6ixE6TrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUxMDE4WhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWFiNmU5M2I3OGFjNmVlMzIwYjY4NTA5MTdjODA3Nzk0 ZmFhZjVmY2RjMDFhNTg3MDZmYWM4YTZmNGQ5MmZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0xir/JHoJcOAE6lhE3hkBS4lmRc+77OqUPxQQP0tUQ9Pi CkX4OvWWmaCr7De97kC6++I5l3DZzYLde/OorOtt3TTEastVwFhD7xPe1kLo8mlb M5ZSt7IEoMA4insnJ/IxT8NjT2jRoTtYcMcVFrCztu6wsXFyYjSAwKOkrnZ6rbps Tc8/ct5zn3RW6dKzrVGBjln8Jl90jV6Hyfdj/tK7mwGapoP+MajFdA8PI5Wee3WB 16sd8xnWAILnHkuTkXJnYs5yypXxXnr+i4V7mAFD2GINPO1rPDHCGlnIHE/mFPhi 1ot1uogx8tgOosjERZZLkSZ4aevLxEI40lriCfe7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5eyvz43akZsFFGQL9vRIFSV1TOQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyOWIwNmJkLWRmNWQtNGJlZC04M2E2LWJkYWViOWM3ZDI5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGzANBgkqhkiG9w0BAQsFAAOCAQEAmnmDuPPGGnxcGFRnDd3PhMmWAW/u hezwxcFuG8F2DUkCRWKaDT0yM5AG5knQnq7VsS5qxAv3gqJDpDQkkdSb/HLCLYMq qKF0cGl90LJWdRQdFpZpsxm6dtceGkPTjADxiEL44M1Y+wie92OfDszCkb35n2Rc qg6fGTBJ+OHMV5E+Hf1yJaEhm96/Hxc4BiEPYE2GIxtcpeNA6epT54USs7pM2rig GaWk7qLx6jRadcVBN2ew6nt2pvpSEIDWY/w6m3NG4O1unQNRxhlGVPMruqxwZF/5 H1RYJksVteILK5p9/e9IqOETThgaw0F77C0T8v7MAGsgE3u0/TJSVPpr1g== -----END CERTIFICATE-----Generated at Thu Aug 21 18:59:09 2025 by rpki-client