$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa File: 30290b49-2338-484b-b6b1-a4e2daf71d2c.roa (raw, json) Hash identifier: GQ982jRBhwUWZj3Mn+OoS1PaH+H/8rg5elL8B8tHo40= Subject key identifier: AA:2D:29:07:24:40:0F:16:DC:82:30:60:E1:E7:08:FE:20:4A:3A:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18D198B22825AEF2163B3BA2DCC5C656EEB4A2C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa Signing time: Sat 06 Sep 2025 00:31:55 +0000 ROA not before: Sat 06 Sep 2025 00:31:55 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d1:98:b2:28:25:ae:f2:16:3b:3b:a2:dc:c5:c6:56:ee:b4:a2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:31:55 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=b47b8cd825f1e99608fe634e10c14d8ba4331c3e8a879bf8134e5cafe020e38b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:94:83:e1:18:7b:41:8e:93:b7:f7:5d:08: 05:86:b5:63:8f:4d:66:63:e1:84:21:66:d1:9b:fa: c1:c9:9a:bf:8e:9c:fc:8c:a5:bc:b6:43:fd:29:68: 63:80:8b:7e:16:8a:56:2a:c3:59:5c:fb:87:ec:4c: 22:fe:97:3f:53:96:71:18:8b:cc:ca:68:19:bb:85: 31:af:b7:40:7e:56:91:c7:70:bc:6d:5e:0c:22:aa: 4b:8d:5b:35:00:cf:7b:79:fc:b9:90:b0:ee:ef:65: 73:0a:3f:c0:77:88:ba:eb:1b:21:4c:fc:23:3c:57: 91:41:5b:24:28:2b:18:7c:cf:11:b2:96:44:e9:7b: db:98:94:34:62:b2:c6:b1:52:f7:a9:4e:6e:0f:cd: 21:8a:08:91:f9:3f:2a:9d:09:d6:fc:1f:27:2f:42: 45:db:8e:b6:12:26:4b:e4:42:f4:35:d5:95:2d:a4: 65:32:21:bb:c7:43:cc:93:71:8d:e6:4a:3d:69:01: ec:9f:e6:48:dc:5a:f4:f7:64:0a:df:6f:2e:71:93: 59:13:b1:29:31:a5:ac:1f:7e:71:55:58:fc:eb:fc: 6e:06:70:3a:64:3f:b1:3f:ec:1f:7b:06:0e:b2:e6: 2a:0a:3f:4e:db:78:d2:2d:c4:8d:ac:ec:9c:12:02: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:29:07:24:40:0F:16:DC:82:30:60:E1:E7:08:FE:20:4A:3A:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:90:33:d1:4f:86:a3:d1:52:fe:84:d8:8c:0a:c6:2f:de:71: 2e:6b:fc:a8:01:c5:fe:81:84:19:db:7e:51:da:fd:b2:fb:cc: 13:3f:b9:c4:5c:ea:9a:d8:53:1b:b8:b6:1f:1e:26:68:2d:e6: b9:4f:29:3e:7a:c6:22:c7:23:76:a1:af:ac:13:9c:51:ec:41: 19:95:61:4f:af:c6:ad:d5:47:1a:f3:39:60:81:d6:e0:b0:61: 0c:1d:51:24:da:51:c8:ca:5f:5f:d8:01:ae:dc:ba:ca:45:9e: 06:29:1c:fd:cf:f7:67:b3:48:23:b5:09:f1:75:03:d2:29:34: 4f:14:4b:51:ec:da:59:06:9b:c5:ba:4d:99:d4:ff:d7:a8:ee: 37:1d:d3:cc:7c:45:dc:fc:45:75:4b:18:bb:6b:50:b0:3d:05: e8:04:9e:0a:6c:d0:01:ee:b0:0b:78:8a:53:3f:ef:e9:d3:fb: 5a:75:ef:ff:2c:48:62:f4:13:1b:f3:79:99:5f:c8:21:87:0c: f3:f5:92:a5:56:5d:19:82:a4:c2:81:47:fd:f2:ba:92:d3:b2: 96:54:45:19:b2:dc:cd:8f:ee:9c:93:5f:e6:27:e8:8c:68:3b: 8e:e3:ef:d6:e7:ab:31:62:7f:0f:4b:33:9b:d7:c1:29:ab:0a: a5:92:45:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGNGYsiglrvIWOzui3MXGVu60osMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAzMTU1WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDdiOGNkODI1ZjFlOTk2MDhmZTYzNGUxMGMxNGQ4YmE0 MzMxYzNlOGE4NzliZjgxMzRlNWNhZmUwMjBlMzhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY/JSD4Rh7QY6Tt/ddCAWGtWOPTWZj4YQhZtGb+sHJmr+O nPyMpby2Q/0paGOAi34WilYqw1lc+4fsTCL+lz9TlnEYi8zKaBm7hTGvt0B+VpHH cLxtXgwiqkuNWzUAz3t5/LmQsO7vZXMKP8B3iLrrGyFM/CM8V5FBWyQoKxh8zxGy lkTpe9uYlDRissaxUvepTm4PzSGKCJH5PyqdCdb8HycvQkXbjrYSJkvkQvQ11ZUt pGUyIbvHQ8yTcY3mSj1pAeyf5kjcWvT3ZArfby5xk1kTsSkxpawffnFVWPzr/G4G cDpkP7E/7B97Bg6y5ioKP07beNItxI2s7JwSAmz/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqi0pByRADxbcgjBg4ecI/iBKOvMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMjkwYjQ5LTIzMzgtNDg0Yi1iNmIxLWE0ZTJkYWY3MWQyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4JjANBgkqhkiG9w0BAQsFAAOCAQEABpAz0U+Go9FS/oTYjArGL95xLmv8 qAHF/oGEGdt+Udr9svvMEz+5xFzqmthTG7i2Hx4maC3muU8pPnrGIscjdqGvrBOc UexBGZVhT6/GrdVHGvM5YIHW4LBhDB1RJNpRyMpfX9gBrty6ykWeBikc/c/3Z7NI I7UJ8XUD0ik0TxRLUezaWQabxbpNmdT/16juNx3TzHxF3PxFdUsYu2tQsD0F6ASe CmzQAe6wC3iKUz/v6dP7WnXv/yxIYvQTG/N5mV/IIYcM8/WSpVZdGYKkwoFH/fK6 ktOyllRFGbLczY/unJNf5ifojGg7juPv1uerMWJ/D0szm9fBKasKpZJF0w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:57 2025 by rpki-client