$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa File: 58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa (raw, json) Hash identifier: XduoeKQ7EGTT0VamjL0L5bpLQiZKWyktyzT7Pkmxx6k= Subject key identifier: 67:B4:1D:AD:50:3B:4E:6B:ED:2E:81:39:7C:35:70:BD:96:01:DB:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61737D658DD56A7066CDC2762C83085C68241326 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa Signing time: Sat 06 Sep 2025 00:30:36 +0000 ROA not before: Sat 06 Sep 2025 00:30:36 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:73:7d:65:8d:d5:6a:70:66:cd:c2:76:2c:83:08:5c:68:24:13:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:30:36 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=6dd5df036aa948f1d3e63b62d9851dd53581b4eec484bd59c26efaae42f746a7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a1:0e:6e:7c:46:74:df:da:f3:8d:fe:1d:c4: 06:7a:4b:28:99:cd:42:38:80:89:ae:71:04:a5:61: 84:b5:0f:56:d3:f9:e2:fe:23:aa:23:02:70:71:ca: de:4e:9f:a3:3b:d6:b9:d5:0c:9b:ac:9b:1a:fc:21: 61:1a:0e:3e:3e:48:11:25:ae:99:96:28:c4:e5:b7: 0c:f5:63:eb:49:83:84:8e:09:9e:5a:bb:c0:6d:f8: 47:95:b9:75:24:13:a0:5a:ab:0e:bf:47:9b:99:09: 2d:19:36:3c:b4:70:1a:6a:59:fe:e3:e8:9a:dc:2a: a0:e4:96:fa:30:ca:2a:17:bb:1a:d2:86:a7:e0:b1: 0e:22:2c:1d:1b:4c:6e:30:96:b2:07:02:d1:21:cf: e9:21:1a:e5:a3:18:37:14:30:f3:ea:e3:18:f5:84: 88:7b:d8:ea:21:e1:29:36:a6:40:19:d1:7e:08:09: 44:32:ed:9c:75:f1:76:50:90:83:77:82:86:ef:32: ab:17:9a:cd:26:ea:be:a7:5d:b2:fb:a3:71:59:78: be:61:68:2f:b7:40:03:45:fb:88:e7:5e:59:96:38: e6:ab:da:11:4a:20:42:37:20:8e:39:e2:1f:e2:32: 75:03:02:ee:76:3e:89:e7:59:f6:47:47:4c:6f:3c: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B4:1D:AD:50:3B:4E:6B:ED:2E:81:39:7C:35:70:BD:96:01:DB:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:47:9d:f1:5b:32:17:09:df:7c:0b:e7:c0:e8:f7:16:69:d3: 88:74:2e:eb:57:90:85:4e:ce:00:b5:a6:ad:d6:9f:67:f0:ec: 58:1f:6c:f4:f0:fe:b7:a5:51:69:88:9a:eb:a0:62:72:81:1b: c1:89:fc:43:e6:8b:5e:c4:0b:0d:f3:c2:d3:f8:8d:6d:25:90: d1:9f:13:69:b6:0a:7f:e8:de:19:d7:9c:14:db:05:71:b5:ac: db:10:da:2a:c6:c6:de:da:27:38:62:8b:a8:09:27:63:a5:70: 94:af:d4:f1:d5:e1:4b:2c:e5:ee:05:39:76:d1:d1:fb:25:69: 67:45:ad:93:91:db:dd:93:c2:be:5f:9b:47:43:a6:8e:78:c6: 13:a3:ba:2a:86:80:58:c2:64:d0:e3:a4:3e:8e:2e:48:52:87: 86:09:5a:a9:40:0b:2d:4a:b7:0b:08:0d:2e:ce:27:12:b8:4d: 0f:f3:de:34:b6:b7:95:ce:27:0a:72:bd:2b:84:82:d0:3e:52: 05:cb:3f:64:9c:53:d3:e0:75:11:1c:98:61:a8:16:9e:e0:0a: a5:07:c8:4d:93:27:09:f7:28:3e:fe:9e:be:9a:7f:22:ca:f7: e8:5b:d9:e0:2c:85:0b:d2:e5:b7:ea:cc:1f:a2:02:a1:d9:04: d4:0c:88:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYXN9ZY3VanBmzcJ2LIMIXGgkEyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAzMDM2WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGQ1ZGYwMzZhYTk0OGYxZDNlNjNiNjJkOTg1MWRkNTM1 ODFiNGVlYzQ4NGJkNTljMjZlZmFhZTQyZjc0NmE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqoQ5ufEZ039rzjf4dxAZ6SyiZzUI4gImucQSlYYS1D1bT +eL+I6ojAnBxyt5On6M71rnVDJusmxr8IWEaDj4+SBElrpmWKMTltwz1Y+tJg4SO CZ5au8Bt+EeVuXUkE6Baqw6/R5uZCS0ZNjy0cBpqWf7j6JrcKqDklvowyioXuxrS hqfgsQ4iLB0bTG4wlrIHAtEhz+khGuWjGDcUMPPq4xj1hIh72Ooh4Sk2pkAZ0X4I CUQy7Zx18XZQkIN3gobvMqsXms0m6r6nXbL7o3FZeL5haC+3QANF+4jnXlmWOOar 2hFKIEI3II454h/iMnUDAu52PonnWfZHR0xvPCE1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZ7QdrVA7TmvtLoE5fDVwvZYB260wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yjk2Yzc4LTk1NGItNDFjMi04N2ZmLTRjZjhmN2JlOWUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cjANBgkqhkiG9w0BAQsFAAOCAQEAI0ed8VsyFwnffAvnwOj3FmnTiHQu 61eQhU7OALWmrdafZ/DsWB9s9PD+t6VRaYia66BicoEbwYn8Q+aLXsQLDfPC0/iN bSWQ0Z8TabYKf+jeGdecFNsFcbWs2xDaKsbG3tonOGKLqAknY6VwlK/U8dXhSyzl 7gU5dtHR+yVpZ0Wtk5Hb3ZPCvl+bR0OmjnjGE6O6KoaAWMJk0OOkPo4uSFKHhgla qUALLUq3CwgNLs4nErhND/PeNLa3lc4nCnK9K4SC0D5SBcs/ZJxT0+B1ERyYYagW nuAKpQfITZMnCfcoPv6evpp/Isr36FvZ4CyFC9Llt+rMH6ICodkE1AyIkw== -----END CERTIFICATE-----Generated at Thu Sep 18 22:11:24 2025 by rpki-client