$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6855d659-8072-4e52-8dc4-40cadee9ece3.roa File: 6855d659-8072-4e52-8dc4-40cadee9ece3.roa (raw, json) Hash identifier: VvY3UzhN+a6A1FvtVJ8h6eMqWJM39jdjwUA3tLwbNQA= Subject key identifier: 06:C9:CD:CE:3B:CF:4F:1D:4A:7B:5B:70:7A:D1:5E:4E:EC:EF:3E:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58F1A7F542B5CFE1735156A59CAA77D7CF1D992F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6855d659-8072-4e52-8dc4-40cadee9ece3.roa Signing time: Fri 05 Sep 2025 18:37:05 +0000 ROA not before: Fri 05 Sep 2025 18:37:05 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.54.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f1:a7:f5:42:b5:cf:e1:73:51:56:a5:9c:aa:77:d7:cf:1d:99:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 18:37:05 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=a91a2af25ed93f27f21ae223e9f39d6d6dbfff7c76c50560cfed87443c27f9bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:97:5a:ce:68:d5:5e:37:11:cc:bf:e8:f1: e5:7e:a1:6c:e4:5b:49:2e:98:c2:25:f5:31:fb:2c: 4f:b3:65:32:b2:62:b6:10:e2:9a:c5:5e:cf:5e:6f: 52:f8:e5:24:6e:1c:c7:7c:6c:de:f2:25:76:ff:56: 2e:92:f7:e1:e4:80:d5:b8:71:0a:c6:2b:4f:e1:85: 15:d6:08:68:3b:3e:f8:1a:76:35:dc:61:a8:54:46: a2:cf:4f:13:67:04:6a:05:af:11:85:35:26:4f:68: 04:5c:fd:d5:9a:c7:5c:15:b2:0c:2a:d3:bf:8b:42: ad:bf:ed:28:67:fc:73:9f:a1:e3:3c:8e:c3:42:1b: 9a:44:11:cf:a8:2f:62:ef:77:18:f4:03:d7:bb:74: 8c:fe:05:4d:f5:92:f9:24:d0:95:a7:a6:9e:7f:f0: f3:58:72:d0:d2:66:95:c8:88:dd:9b:ce:2a:91:8e: 3b:28:01:bb:b6:a0:b8:43:e6:66:47:2e:5f:24:51: f0:30:eb:1d:26:7d:de:61:28:6f:5c:7a:00:d9:c5: 63:d2:c9:cb:9d:d3:ae:13:0e:ec:34:a0:bd:0e:d2: 4b:68:87:ff:5e:ac:0e:e9:8d:87:08:63:3c:79:cd: 30:36:cb:d3:c5:94:e3:90:9a:ab:76:97:95:6b:80: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C9:CD:CE:3B:CF:4F:1D:4A:7B:5B:70:7A:D1:5E:4E:EC:EF:3E:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6855d659-8072-4e52-8dc4-40cadee9ece3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.50.0/24 Signature Algorithm: sha256WithRSAEncryption 95:2c:2d:0c:bc:7a:e0:97:67:c8:68:11:cb:2a:a9:c1:24:5f: b8:eb:dc:8b:bf:8e:29:6b:b2:b3:97:91:25:ce:e3:5d:f9:ba: 85:d4:6f:f9:53:ab:20:9e:82:8b:eb:02:80:82:1e:ff:69:39: ed:fa:2c:3f:75:5f:16:92:7c:5f:43:4c:30:bb:31:99:72:e0: fb:14:cc:70:70:95:84:97:40:73:aa:c5:58:48:29:c5:da:46: 19:d3:b1:8d:d3:19:d3:b3:7f:d5:a4:53:01:f1:2b:28:d8:24: 09:54:19:12:02:f7:c9:31:ba:40:45:ae:76:e9:41:b2:4b:f8: 68:0a:6b:6e:0e:06:c6:44:4e:66:00:d9:af:f6:f3:0c:c3:92: de:41:d9:d1:73:d3:5b:a0:b3:e4:c4:97:9e:c3:6e:60:47:1c: 9b:b5:81:86:ba:fc:c6:84:f0:51:f8:ec:bf:ba:bb:87:5b:7e: 40:d6:6c:db:1d:e4:4a:a4:33:ea:3e:25:50:e0:47:26:75:02: 04:67:86:d3:2b:5a:d9:dd:d0:16:e9:19:3b:c9:75:ac:f3:8a: 86:0a:f6:18:8a:2b:a5:cb:a8:40:80:e8:f6:34:79:18:88:69: 8f:45:da:a4:7d:09:71:43:b9:73:c1:9e:fb:5f:23:bd:c2:78: 85:6a:d2:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWPGn9UK1z+FzUValnKp3188dmS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MTgzNzA1WhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTFhMmFmMjVlZDkzZjI3ZjIxYWUyMjNlOWYzOWQ2ZDZk YmZmZjdjNzZjNTA1NjBjZmVkODc0NDNjMjdmOWJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4jZdazmjVXjcRzL/o8eV+oWzkW0kumMIl9TH7LE+zZTKy YrYQ4prFXs9eb1L45SRuHMd8bN7yJXb/Vi6S9+HkgNW4cQrGK0/hhRXWCGg7Pvga djXcYahURqLPTxNnBGoFrxGFNSZPaARc/dWax1wVsgwq07+LQq2/7Shn/HOfoeM8 jsNCG5pEEc+oL2Lvdxj0A9e7dIz+BU31kvkk0JWnpp5/8PNYctDSZpXIiN2bziqR jjsoAbu2oLhD5mZHLl8kUfAw6x0mfd5hKG9cegDZxWPSycud064TDuw0oL0O0kto h/9erA7pjYcIYzx5zTA2y9PFlOOQmqt2l5VrgJOxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBsnNzjvPTx1Ke1twetFeTuzvPtYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NTVkNjU5LTgwNzItNGU1Mi04ZGM0LTQwY2FkZWU5ZWNlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjNjIwDQYJKoZIhvcNAQELBQADggEBAJUsLQy8euCXZ8hoEcsqqcEkX7jr 3Iu/jilrsrOXkSXO4135uoXUb/lTqyCegovrAoCCHv9pOe36LD91XxaSfF9DTDC7 MZly4PsUzHBwlYSXQHOqxVhIKcXaRhnTsY3TGdOzf9WkUwHxKyjYJAlUGRIC98kx ukBFrnbpQbJL+GgKa24OBsZETmYA2a/28wzDkt5B2dFz01ugs+TEl57DbmBHHJu1 gYa6/MaE8FH47L+6u4dbfkDWbNsd5EqkM+o+JVDgRyZ1AgRnhtMrWtnd0BbpGTvJ dazzioYK9hiKK6XLqECA6PY0eRiIaY9F2qR9CXFDuXPBnvtfI73CeIVq0g0= -----END CERTIFICATE-----Generated at Sat Sep 6 16:54:27 2025 by rpki-client