$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa File: 2e5b9eda-6cec-440b-8755-0a826f9cf187.roa (raw, json) Hash identifier: O7MBImjBPM39W2W9e7Na9Ox/MFOX54IfboilmIhWqZI= Subject key identifier: 51:5E:DD:29:21:C4:DB:5B:C8:E7:0B:56:ED:0D:6D:DA:A7:D8:55:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F67B0AA14C404A49E70FC3C7557D6858F1DC19E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa Signing time: Fri 05 Sep 2025 00:11:40 +0000 ROA not before: Fri 05 Sep 2025 00:11:40 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:67:b0:aa:14:c4:04:a4:9e:70:fc:3c:75:57:d6:85:8f:1d:c1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 00:11:40 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=9e731ddeb1cecc3dcf1f90145b1561c61a96b7f3d2505985152fa38a98b0cc22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:0d:27:3b:94:da:9a:2a:65:a3:4f:b2:bd: 43:99:f7:00:d5:cb:46:b7:ae:c8:04:9a:a1:e3:1a: 2f:a9:f7:6e:f7:97:4c:9f:61:8e:a5:7e:94:ea:53: 19:71:2b:78:5d:4a:59:82:a9:0a:ea:52:a2:a7:c7: 3a:9e:10:e1:07:02:fa:28:55:96:a2:a4:cc:69:ea: fd:76:0e:25:ba:1d:90:ac:4e:96:3f:8f:ed:c4:b3: fe:9a:a6:e8:af:4a:25:9b:aa:62:84:62:f7:64:5f: 68:c5:64:e2:24:d7:13:f9:4f:11:36:21:cf:4d:76: 38:15:19:99:61:78:c6:a4:aa:ea:0d:88:96:f0:cf: 44:15:a6:71:e4:22:c5:88:53:9b:1f:9c:5c:5e:f6: 72:8f:d5:ee:0e:9f:8f:e0:3a:a4:17:f7:a9:89:eb: e7:03:24:e6:a6:ad:cc:0c:46:26:74:99:cb:39:72: d2:76:39:64:80:00:bb:74:17:07:2b:75:bc:86:d5: c2:6e:89:38:7b:e5:ce:44:9c:24:f6:19:7e:3c:6d: 39:00:f3:0b:77:91:a0:12:ad:3d:4b:63:df:64:9c: 8e:a3:99:24:ca:d6:d2:81:0b:e3:f0:c0:ff:38:a8: 02:2d:b5:d3:39:7b:03:9b:24:66:cf:bc:74:2f:6c: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5E:DD:29:21:C4:DB:5B:C8:E7:0B:56:ED:0D:6D:DA:A7:D8:55:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:e6:53:fd:29:f7:54:05:3e:6e:f2:ae:8b:58:4c:a7:d1:07: d7:ab:64:60:0d:99:c6:9b:49:4d:c9:54:ee:da:46:23:81:2b: ab:b2:72:9c:70:6c:f1:38:86:c9:6b:4b:54:cf:82:f3:be:10: 61:cd:67:6f:39:32:b3:a7:2a:ef:ac:85:98:19:f9:7a:49:d6: 2e:35:5d:cc:7b:51:f9:93:0a:b4:e4:ca:07:a6:6f:d4:8d:d5: 1e:1d:66:e2:c5:73:58:56:b9:a4:eb:38:2f:4a:5e:e6:23:fb: f7:5d:eb:f8:82:b2:39:03:00:4e:12:e0:84:ba:b4:7a:9b:2b: 10:d0:40:0d:80:40:76:45:ac:a9:64:b1:f1:ee:9f:e7:4d:1e: e7:43:23:1c:0c:af:fa:f5:a8:dd:0e:5b:2c:a8:a9:18:bf:f4: 2a:bb:26:ff:08:b2:9b:c5:31:3a:ea:62:14:61:00:5d:76:23: 88:04:fd:f8:7a:37:3f:81:dd:99:1b:60:c8:8f:70:29:07:b1: aa:cd:5c:c1:59:77:62:3d:15:dc:3c:62:3d:bd:a8:9c:ea:af: 0b:ff:49:c4:08:61:04:85:32:86:dd:f8:70:a5:69:dc:4d:58: 28:f1:f5:2b:4e:53:dc:b2:91:89:0d:b6:bf:d0:a4:16:66:ef: 45:24:e0:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT2ewqhTEBKSecPw8dVfWhY8dwZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAxMTQwWhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTczMWRkZWIxY2VjYzNkY2YxZjkwMTQ1YjE1NjFjNjFh OTZiN2YzZDI1MDU5ODUxNTJmYTM4YTk4YjBjYzIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzgw0nO5Tamiplo0+yvUOZ9wDVy0a3rsgEmqHjGi+p9273 l0yfYY6lfpTqUxlxK3hdSlmCqQrqUqKnxzqeEOEHAvooVZaipMxp6v12DiW6HZCs TpY/j+3Es/6apuivSiWbqmKEYvdkX2jFZOIk1xP5TxE2Ic9NdjgVGZlheMakquoN iJbwz0QVpnHkIsWIU5sfnFxe9nKP1e4On4/gOqQX96mJ6+cDJOamrcwMRiZ0mcs5 ctJ2OWSAALt0FwcrdbyG1cJuiTh75c5EnCT2GX48bTkA8wt3kaASrT1LY99knI6j mSTK1tKBC+PwwP84qAIttdM5ewObJGbPvHQvbNZtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUV7dKSHE21vI5wtW7Q1t2qfYVaUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlNWI5ZWRhLTZjZWMtNDQwYi04NzU1LTBhODI2ZjljZjE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQrzANBgkqhkiG9w0BAQsFAAOCAQEAEuZT/Sn3VAU+bvKui1hMp9EH16tk YA2ZxptJTclU7tpGI4Erq7JynHBs8TiGyWtLVM+C874QYc1nbzkys6cq76yFmBn5 eknWLjVdzHtR+ZMKtOTKB6Zv1I3VHh1m4sVzWFa5pOs4L0pe5iP7913r+IKyOQMA ThLghLq0epsrENBADYBAdkWsqWSx8e6f500e50MjHAyv+vWo3Q5bLKipGL/0Krsm /wiym8UxOupiFGEAXXYjiAT9+Ho3P4HdmRtgyI9wKQexqs1cwVl3Yj0V3DxiPb2o nOqvC/9JxAhhBIUyht34cKVp3E1YKPH1K05T3LKRiQ22v9CkFmbvRSTgQw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:27 2025 by rpki-client