$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa File: 5bba0470-96dd-404d-b988-2277e8fcd55f.roa (raw, json) Hash identifier: TZO7dfVNhBwdY8yMdS1fWgQKbmWm6X04kbF5ytG2an4= Subject key identifier: 28:62:E3:39:C4:2A:CC:29:0A:D4:11:4F:44:50:25:EA:D9:EA:B2:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22E37D379D32C682AEB07D76F9F96CE2C8034E74 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa Signing time: Sat 30 Aug 2025 00:31:53 +0000 ROA not before: Sat 30 Aug 2025 00:31:53 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:7d:37:9d:32:c6:82:ae:b0:7d:76:f9:f9:6c:e2:c8:03:4e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:53 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=d3b3e4791a48003cd79f870bc8d89df6c5dcfc7d4aa07ed94b40be61d3bbb49e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:f4:09:03:a6:78:ab:ac:62:d3:0b:5d:fd: b2:c9:ce:aa:cd:2d:a0:1c:8e:29:f6:8d:51:3c:9c: 55:c8:0d:fe:e9:1d:47:9c:c9:5a:b2:9b:c0:13:9b: 9e:4b:c4:f9:21:fd:82:23:78:d5:19:6f:c1:56:b9: 83:55:17:f8:6f:06:83:c8:7c:54:3f:d4:7a:aa:49: 14:53:ec:b6:c8:b2:c4:7b:34:80:8e:bb:e8:d6:04: 2f:e9:af:e8:eb:6e:c4:ff:c2:94:32:58:27:01:fe: d8:fb:db:5d:eb:c1:8c:d0:60:ac:81:41:7d:e8:66: f6:2d:93:6e:4b:06:df:66:23:a7:3a:06:a9:19:9c: 3d:ab:d9:9e:0b:20:af:79:9e:14:ec:a6:48:bc:28: 4f:c1:8a:78:1e:89:5a:d3:bf:ee:b5:26:ca:00:3a: 18:ee:b0:cc:06:80:c4:ec:4c:33:c9:8d:dd:93:41: 43:f9:86:18:3c:1a:e4:c7:b9:b9:70:f6:55:0d:c6: 61:b2:23:11:22:9c:0c:fa:5e:f1:b2:d7:e3:9c:46: 09:bc:0c:51:6c:a0:db:20:e8:33:76:59:e0:f5:79: 2e:85:a0:a3:bb:2a:2e:c0:c1:1c:3e:b2:2c:b5:cc: 01:28:9f:19:d1:b1:09:7c:ca:c1:e2:98:c9:d2:b9: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:E3:39:C4:2A:CC:29:0A:D4:11:4F:44:50:25:EA:D9:EA:B2:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1e:ad:c8:87:65:0f:73:44:3f:32:fe:ad:20:17:79:8c:0d:69: 28:07:99:69:4b:91:b9:1a:37:b4:ca:25:02:23:57:11:b3:5b: 2f:4c:6f:bd:8c:5e:7b:73:4d:98:9d:ca:eb:5c:53:f7:7b:39: 41:44:82:0e:7f:9f:8b:9f:9e:70:75:cc:07:05:eb:03:96:00: b2:49:da:93:eb:cf:7e:8b:28:f4:0b:d6:55:cb:00:1a:cb:eb: 20:c0:d6:2c:3a:db:de:56:51:60:60:23:af:17:80:db:b9:d8: e7:cb:e4:57:91:e6:27:9c:f5:80:37:95:a1:8e:1e:72:d3:3d: 44:73:ed:e1:14:28:88:6a:fd:c1:ad:25:d0:c5:e5:e8:b8:9a: 01:e2:16:f5:c2:7e:3e:e6:9b:be:2a:88:75:be:41:d0:1e:f8: 11:bf:81:84:27:2b:35:bf:00:79:a1:06:80:f8:32:2c:b7:c0: 14:d5:b3:92:0c:af:69:cd:3d:f8:c7:08:ff:29:7c:57:8c:85: aa:ea:ae:5b:7d:75:52:3f:c0:fa:2d:a0:db:1f:f2:21:1f:e8: 10:0b:e0:a1:3d:70:e1:45:12:b4:e3:45:12:c9:55:66:92:65: 01:3a:29:cb:e7:2a:c1:73:fd:30:e8:e0:25:76:80:b8:ca:39: ce:dd:ad:9a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIuN9N50yxoKusH12+fls4sgDTnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTUzWhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2IzZTQ3OTFhNDgwMDNjZDc5Zjg3MGJjOGQ4OWRmNmM1 ZGNmYzdkNGFhMDdlZDk0YjQwYmU2MWQzYmJiNDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAzvQJA6Z4q6xi0wtd/bLJzqrNLaAcjin2jVE8nFXIDf7p HUecyVqym8ATm55LxPkh/YIjeNUZb8FWuYNVF/hvBoPIfFQ/1HqqSRRT7LbIssR7 NICOu+jWBC/pr+jrbsT/wpQyWCcB/tj7213rwYzQYKyBQX3oZvYtk25LBt9mI6c6 BqkZnD2r2Z4LIK95nhTspki8KE/BingeiVrTv+61JsoAOhjusMwGgMTsTDPJjd2T QUP5hhg8GuTHublw9lUNxmGyIxEinAz6XvGy1+OcRgm8DFFsoNsg6DN2WeD1eS6F oKO7Ki7AwRw+siy1zAEonxnRsQl8ysHimMnSuYTJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKGLjOcQqzCkK1BFPRFAl6tnqsugwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViYmEwNDcwLTk2ZGQtNDA0ZC1iOTg4LTIyNzdlOGZjZDU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4yDANBgkqhkiG9w0BAQsFAAOCAQEAHq3Ih2UPc0Q/Mv6tIBd5jA1pKAeZ aUuRuRo3tMolAiNXEbNbL0xvvYxee3NNmJ3K61xT93s5QUSCDn+fi5+ecHXMBwXr A5YAsknak+vPfoso9AvWVcsAGsvrIMDWLDrb3lZRYGAjrxeA27nY58vkV5HmJ5z1 gDeVoY4ectM9RHPt4RQoiGr9wa0l0MXl6LiaAeIW9cJ+PuabviqIdb5B0B74Eb+B hCcrNb8AeaEGgPgyLLfAFNWzkgyvac09+McI/yl8V4yFququW311Uj/A+i2g2x/y IR/oEAvgoT1w4UUStONFEslVZpJlATopy+cqwXP9MOjgJXaAuMo5zt2tmg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:56 2025 by rpki-client