$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa File: 65567a94-d95d-47b7-8408-7d05fa62f0ba.roa (raw, json) Hash identifier: Y56W93s7FWQ9ppJ6VdKgErv5+dNhSmxLMCs07PsvKkw= Subject key identifier: 9E:F7:08:29:DB:9D:78:26:F4:42:6D:40:19:A8:C1:FF:22:91:0B:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57A8F61002D5D59F3E7A7BBBF12F97558F26A88F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa Signing time: Wed 27 Aug 2025 00:32:00 +0000 ROA not before: Wed 27 Aug 2025 00:32:00 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.137.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a8:f6:10:02:d5:d5:9f:3e:7a:7b:bb:f1:2f:97:55:8f:26:a8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:32:00 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=4d0cd819c6a94f6a34e6ebca12c10c097e9854e4feda91e328f4d68d9ccbf299, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:73:73:11:c8:ef:96:6c:37:d3:3a:e0:9b: 79:cf:f7:1f:84:69:cc:f8:99:9c:74:af:26:d4:3b: 79:21:0e:1b:61:a1:99:41:04:d6:e2:c9:04:01:fc: a2:a6:d9:ce:d7:d5:f4:ba:c0:86:98:6b:f0:7c:57: 5c:9e:b7:7a:cd:78:17:b7:ca:23:2f:e6:52:c0:c0: 96:89:fa:b9:6d:d2:4e:cd:13:81:02:4b:6f:84:bd: e8:cf:b3:4a:e4:23:62:2e:92:e6:ad:ee:06:45:64: 6c:cc:fd:2b:2a:81:88:66:41:7b:45:eb:d9:ea:8f: 87:62:b4:1d:f9:da:50:27:75:c4:dc:bd:33:78:7c: 5a:5f:d8:40:4f:53:1e:b6:b7:e5:b3:76:59:6c:b2: fe:1d:43:98:6b:71:81:e9:9c:86:7b:1d:57:cd:44: 50:aa:cb:6b:c9:40:6c:28:48:77:a6:91:cc:40:f9: 7a:a2:f7:cc:83:46:74:5a:43:34:19:39:f2:db:f8: d3:14:e2:31:07:d5:f9:57:29:cf:6b:cc:d7:c8:88: 0e:11:3c:4a:67:07:9a:17:33:aa:5b:6c:d7:66:47: 03:f8:a0:ee:ad:fe:f1:07:72:ad:79:24:b4:2d:46: 8c:2c:b9:d0:0f:45:f8:b3:fc:d1:73:46:cb:f1:57: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F7:08:29:DB:9D:78:26:F4:42:6D:40:19:A8:C1:FF:22:91:0B:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:43:fc:d8:72:c3:8d:c9:7d:78:52:0a:35:11:2f:56:32:e8: ca:89:79:2e:b2:15:9d:1b:af:c0:09:54:7e:89:16:e6:a3:9d: 3f:64:69:f4:bf:df:08:30:17:a2:72:14:6f:85:a4:9d:5c:a4: 97:c7:7c:4f:72:c2:c7:22:33:e0:55:93:2c:b6:d7:81:7f:d9: 34:bf:ab:b4:21:a6:49:f2:d7:c0:10:f1:4c:13:f8:1a:25:38: 73:8e:ff:90:8d:61:c7:6f:04:fc:68:56:63:a2:ad:ac:9a:b1: 62:be:07:29:b3:27:79:0d:03:8d:90:e1:22:04:37:93:ec:eb: 61:78:50:0d:74:ad:a2:07:d3:fd:9b:65:25:d4:b9:44:23:b9: f5:cd:56:de:b7:33:30:a7:31:54:d7:6e:d6:2e:9c:21:b5:d9: c5:21:69:27:fa:12:86:af:bc:38:58:67:d2:7e:2f:c1:3c:30: b5:81:8e:6a:c4:5b:53:44:4c:8b:16:a9:34:d5:3f:8d:65:21: 71:92:7d:3b:c6:6f:7f:13:4b:d1:e6:c1:66:be:1e:c2:30:f8: 92:c8:a6:78:41:04:4c:b1:9e:11:65:e3:a6:92:16:b6:3b:74: 5a:af:76:9e:00:23:68:17:fd:18:f1:44:da:84:03:c9:ec:50: c4:09:e6:c1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUV6j2EALV1Z8+enu78S+XVY8mqI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDAzMjAwWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDBjZDgxOWM2YTk0ZjZhMzRlNmViY2ExMmMxMGMwOTdl OTg1NGU0ZmVkYTkxZTMyOGY0ZDY4ZDljY2JmMjk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnxHNzEcjvlmw30zrgm3nP9x+Eacz4mZx0rybUO3khDhth oZlBBNbiyQQB/KKm2c7X1fS6wIaYa/B8V1yet3rNeBe3yiMv5lLAwJaJ+rlt0k7N E4ECS2+EvejPs0rkI2Iukuat7gZFZGzM/SsqgYhmQXtF69nqj4ditB352lAndcTc vTN4fFpf2EBPUx62t+Wzdllssv4dQ5hrcYHpnIZ7HVfNRFCqy2vJQGwoSHemkcxA +Xqi98yDRnRaQzQZOfLb+NMU4jEH1flXKc9rzNfIiA4RPEpnB5oXM6pbbNdmRwP4 oO6t/vEHcq15JLQtRowsudAPRfiz/NFzRsvxV1bTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnvcIKdudeCb0Qm1AGajB/yKRC4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1NTY3YTk0LWQ5NWQtNDdiNy04NDA4LTdkMDVmYTYyZjBiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBsiTANBgkqhkiG9w0BAQsFAAOCAQEAYkP82HLDjcl9eFIKNREvVjLoyol5 LrIVnRuvwAlUfokW5qOdP2Rp9L/fCDAXonIUb4WknVykl8d8T3LCxyIz4FWTLLbX gX/ZNL+rtCGmSfLXwBDxTBP4GiU4c47/kI1hx28E/GhWY6KtrJqxYr4HKbMneQ0D jZDhIgQ3k+zrYXhQDXStogfT/ZtlJdS5RCO59c1W3rczMKcxVNdu1i6cIbXZxSFp J/oShq+8OFhn0n4vwTwwtYGOasRbU0RMixapNNU/jWUhcZJ9O8ZvfxNL0ebBZr4e wjD4ksimeEEETLGeEWXjppIWtjt0Wq92ngAjaBf9GPFE2oQDyexQxAnmwQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:08 2025 by rpki-client