$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa File: 4241cd7d-6764-4829-9ae0-6e63780008af.roa (raw, json) Hash identifier: 6b2KszjfUdO969uqRvlXVRaTLIFH6koXPwjTqqZt+xk= Subject key identifier: CD:DB:59:3C:B2:60:5A:51:75:31:39:AC:4D:47:5A:49:18:32:47:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1996C7B7EB2E32968DC4C0C002C041A808F782FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa Signing time: Sat 30 Aug 2025 00:41:20 +0000 ROA not before: Sat 30 Aug 2025 00:41:20 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.62.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:96:c7:b7:eb:2e:32:96:8d:c4:c0:c0:02:c0:41:a8:08:f7:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:41:20 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=6d6f944925cba26c1ab35b6d980997c4c295b669beedc2de82048bed50534bbe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:86:aa:2d:33:23:1a:6e:31:6d:cf:ff:a5: aa:3d:c1:20:a4:ef:c1:e1:7b:9d:20:68:f2:53:ec: 94:7e:6a:be:c2:1d:28:90:5c:bf:37:14:49:9b:09: c3:41:ee:ec:05:e5:64:0d:0e:2e:25:23:e3:2b:10: 04:88:37:80:fe:75:d8:b3:c2:f0:dd:b4:25:2d:79: 12:4e:35:75:d5:28:9d:20:93:90:d7:d1:88:4a:b4: 31:97:7d:58:19:67:a8:c4:57:00:ab:15:4f:a3:bc: 4d:0a:52:fa:95:05:e8:4b:5b:b8:1c:6f:bc:04:15: 7c:e8:94:32:cc:28:8a:7a:22:c0:f7:81:b6:ef:71: 15:0a:be:1c:51:ca:97:59:35:5f:f6:b0:05:6c:84: 20:8a:37:e7:af:39:dc:e6:11:f8:95:de:fc:88:9e: 67:dd:2f:b9:e5:0e:81:dc:64:0a:28:74:ef:21:62: c3:48:fa:38:bb:50:bb:04:8b:6f:b4:61:5f:f8:5f: 29:2f:3e:7e:9d:3b:c6:67:90:e9:42:65:98:8a:da: d8:9a:07:2b:68:c4:e1:f6:39:c3:e5:bc:35:49:5a: b0:42:6d:75:25:70:00:8a:c4:4f:76:0f:17:a3:2d: 96:91:fa:08:11:ad:29:7e:b6:93:7e:d8:a2:d4:79: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:59:3C:B2:60:5A:51:75:31:39:AC:4D:47:5A:49:18:32:47:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.62.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:cd:06:f3:ac:90:eb:14:64:db:cf:2c:f7:7b:d1:91:49:54: ff:5d:10:66:f8:2e:9d:54:d1:3b:74:e5:41:4e:d5:a9:f2:be: 85:c8:c6:86:82:61:1e:92:c9:09:7d:88:d6:d3:23:8e:b6:df: 3e:1d:26:fd:82:1c:36:59:a8:85:dd:97:64:a5:ab:0e:10:99: f6:87:03:fd:93:43:47:cb:10:58:95:6b:2a:f3:b5:5c:50:40: cf:18:d6:12:15:c9:0a:7e:1f:6a:a7:82:89:db:dd:21:8d:40: 4e:3e:86:3e:11:96:3c:cf:55:a1:95:dc:22:01:d2:3a:31:8b: 69:92:75:9e:b0:05:00:e5:b7:ac:a1:de:47:9f:01:a4:d1:0f: a8:3f:9e:75:b5:2a:23:46:6c:18:6b:9e:7e:a1:3a:7b:dd:db: 3a:49:06:08:c9:73:c8:f1:a0:cd:79:20:69:c8:f2:c5:30:b7: 86:fa:9d:23:96:ae:9a:5c:9b:57:94:77:45:01:98:94:24:b2: 3e:d7:0d:c7:37:11:ea:41:cf:cd:22:89:81:ac:60:91:9f:a9: af:b7:98:33:cf:95:69:82:3b:81:c6:c8:63:1e:3f:69:65:a5: 08:57:91:0b:86:32:00:92:93:81:e4:1d:68:83:69:9f:e6:5b: 29:51:66:c7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGZbHt+suMpaNxMDAAsBBqAj3gv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA0MTIwWhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDZmOTQ0OTI1Y2JhMjZjMWFiMzViNmQ5ODA5OTdjNGMy OTViNjY5YmVlZGMyZGU4MjA0OGJlZDUwNTM0YmJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm94aqLTMjGm4xbc//pao9wSCk78Hhe50gaPJT7JR+ar7C HSiQXL83FEmbCcNB7uwF5WQNDi4lI+MrEASIN4D+ddizwvDdtCUteRJONXXVKJ0g k5DX0YhKtDGXfVgZZ6jEVwCrFU+jvE0KUvqVBehLW7gcb7wEFXzolDLMKIp6IsD3 gbbvcRUKvhxRypdZNV/2sAVshCCKN+evOdzmEfiV3vyInmfdL7nlDoHcZAoodO8h YsNI+ji7ULsEi2+0YV/4XykvPn6dO8ZnkOlCZZiK2tiaBytoxOH2OcPlvDVJWrBC bXUlcACKxE92DxejLZaR+ggRrSl+tpN+2KLUeSfDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzdtZPLJgWlF1MTmsTUdaSRgyRzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNDFjZDdkLTY3NjQtNDgyOS05YWUwLTZlNjM3ODAwMDhhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4PjANBgkqhkiG9w0BAQsFAAOCAQEAts0G86yQ6xRk288s93vRkUlU/10Q ZvgunVTRO3TlQU7VqfK+hcjGhoJhHpLJCX2I1tMjjrbfPh0m/YIcNlmohd2XZKWr DhCZ9ocD/ZNDR8sQWJVrKvO1XFBAzxjWEhXJCn4faqeCidvdIY1ATj6GPhGWPM9V oZXcIgHSOjGLaZJ1nrAFAOW3rKHeR58BpNEPqD+edbUqI0ZsGGuefqE6e93bOkkG CMlzyPGgzXkgacjyxTC3hvqdI5aumlybV5R3RQGYlCSyPtcNxzcR6kHPzSKJgaxg kZ+pr7eYM8+VaYI7gcbIYx4/aWWlCFeRC4YyAJKTgeQdaINpn+ZbKVFmxw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:20 2025 by rpki-client