$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa File: 5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa (raw, json) Hash identifier: PdYaWvEknTUWDArKzvGj92qemsGuM0/VMtZ6uiz+b/I= Subject key identifier: 07:1E:88:A2:02:E6:92:17:F7:D2:2C:E9:7E:97:8D:B9:EE:4C:FD:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DD7BF1328F1DDF446315DF26DB4074F7F967CCE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa Signing time: Sat 06 Sep 2025 00:01:35 +0000 ROA not before: Sat 06 Sep 2025 00:01:35 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.213.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d7:bf:13:28:f1:dd:f4:46:31:5d:f2:6d:b4:07:4f:7f:96:7c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:01:35 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=b7ee314afe5883ef0373a076a8fb728a3a025b85b6652672ac708631cf6064a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:82:75:15:0b:96:3e:48:9c:f7:14:a7:9a: 3b:b7:16:c4:dc:a3:a1:dd:33:cd:49:a1:ea:69:41: 13:de:e4:a0:1a:6a:ef:5b:2b:95:37:25:08:c8:5b: e9:64:83:22:67:ba:8f:c4:dc:73:9f:1c:88:63:90: 0c:bd:28:2c:d9:78:94:00:f4:60:dc:e5:61:b7:20: 33:d2:f6:8e:8f:7f:a5:42:89:16:ba:32:78:c3:ca: f4:4f:b1:c3:43:bf:4e:cf:8e:77:39:5a:42:40:33: 9d:27:b0:f9:cc:57:bc:1c:83:ac:ae:f1:75:6b:31: 7f:36:89:58:31:bf:6e:ac:25:79:ea:76:98:1f:d0: 9c:d1:2b:36:6d:ed:39:2c:60:ee:2c:f6:d9:d9:da: d4:3b:91:c1:ae:a4:bd:f5:4c:1f:7b:93:b1:66:f8: 72:86:36:ac:9a:8c:67:9c:7c:39:81:07:82:81:a2: 0b:a7:95:cc:68:80:db:e8:6a:60:4f:f1:2b:88:56: b4:e2:27:e7:05:9c:1b:bc:8e:9f:76:dd:8b:41:a9: e9:ad:9e:aa:7c:7e:86:b1:f2:f5:d4:f7:6e:f8:d2: d4:ae:f2:c7:43:ce:37:10:35:9e:ae:68:c4:19:3f: d5:c6:cb:ad:88:ab:e6:e5:60:d2:39:2f:ff:20:05: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:88:A2:02:E6:92:17:F7:D2:2C:E9:7E:97:8D:B9:EE:4C:FD:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.213.232.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ad:e5:35:4c:76:9c:88:b5:fd:8b:09:e2:2e:0f:7f:f5:25: 05:05:ce:44:34:36:3a:42:89:97:cb:a4:74:b4:9c:a8:52:c8: 67:f8:bb:e9:41:cd:ae:3c:df:9b:aa:c0:33:24:0b:2a:23:b6: a8:ad:19:bb:4e:73:14:ed:3f:b1:c7:01:76:0b:47:af:ad:9b: db:04:43:74:8b:bf:44:ab:7a:36:a9:f4:97:7d:4b:5c:78:41: 1c:5c:bd:6e:6a:0d:0c:ac:00:0a:c8:99:73:4a:6a:de:97:8a: 26:24:b8:99:91:70:9c:5b:70:05:73:56:a3:18:b3:86:6a:49: 72:91:eb:76:5c:b2:88:1f:83:8f:cc:f2:c7:85:8a:84:6a:e9: 0e:de:b6:0a:a9:ca:f3:36:a8:90:18:a7:99:4a:7e:cf:db:b9: 41:bf:02:a9:cd:d4:ac:bb:b2:c4:5a:cb:3d:e8:16:a4:d6:3b: 83:43:9f:b9:fd:41:4e:cb:a7:ca:c6:56:f0:b3:df:9f:14:ed: 81:0d:0b:9c:f5:4c:27:b5:6f:4f:3e:09:65:9e:6b:df:c6:41: db:fd:b1:e8:bd:28:47:4f:78:71:67:0d:2b:e4:96:ca:4b:4e: da:4f:90:3b:41:c5:65:7f:9b:f7:48:00:3d:d7:b6:48:a3:7c: 61:cf:d1:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXde/Eyjx3fRGMV3ybbQHT3+WfM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAwMTM1WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2VlMzE0YWZlNTg4M2VmMDM3M2EwNzZhOGZiNzI4YTNh MDI1Yjg1YjY2NTI2NzJhYzcwODYzMWNmNjA2NGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKfoJ1FQuWPkic9xSnmju3FsTco6HdM81JoeppQRPe5KAa au9bK5U3JQjIW+lkgyJnuo/E3HOfHIhjkAy9KCzZeJQA9GDc5WG3IDPS9o6Pf6VC iRa6MnjDyvRPscNDv07Pjnc5WkJAM50nsPnMV7wcg6yu8XVrMX82iVgxv26sJXnq dpgf0JzRKzZt7TksYO4s9tnZ2tQ7kcGupL31TB97k7Fm+HKGNqyajGecfDmBB4KB ogunlcxogNvoamBP8SuIVrTiJ+cFnBu8jp923YtBqemtnqp8foax8vXU92740tSu 8sdDzjcQNZ6uaMQZP9XGy62Iq+blYNI5L/8gBcuxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBx6IogLmkhf30izpfpeNue5M/YMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlNzU4N2I5LWM5M2ItNDE2ZS04YTk2LWIxNDQ0OGNjMWJjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi1egwDQYJKoZIhvcNAQELBQADggEBACyt5TVMdpyItf2LCeIuD3/1JQUF zkQ0NjpCiZfLpHS0nKhSyGf4u+lBza4835uqwDMkCyojtqitGbtOcxTtP7HHAXYL R6+tm9sEQ3SLv0Srejap9Jd9S1x4QRxcvW5qDQysAArImXNKat6XiiYkuJmRcJxb cAVzVqMYs4ZqSXKR63Zcsogfg4/M8seFioRq6Q7etgqpyvM2qJAYp5lKfs/buUG/ AqnN1Ky7ssRayz3oFqTWO4NDn7n9QU7Lp8rGVvCz358U7YENC5z1TCe1b08+CWWe a9/GQdv9sei9KEdPeHFnDSvklspLTtpPkDtBxWV/m/dIAD3XtkijfGHP0SM= -----END CERTIFICATE-----Generated at Fri Sep 19 06:23:41 2025 by rpki-client