$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa File: 703459b2-ae55-466c-a7c4-c1fb57f7704e.roa (raw, json) Hash identifier: ubcq8I/nWaV8I+tg5KOaWl26B1MblmAweGKEJZ60sUk= Subject key identifier: E8:7B:9B:F8:D3:7E:94:B3:9E:CB:FA:BF:42:A9:BD:4C:4D:51:BC:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FF423AEBE97F43224CD04400511B5629E823018 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa Signing time: Sat 30 Aug 2025 00:31:07 +0000 ROA not before: Sat 30 Aug 2025 00:31:07 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f4:23:ae:be:97:f4:32:24:cd:04:40:05:11:b5:62:9e:82:30:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:07 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=ae7bf33c7a6132319efa6932d2cb1ef86087bcb0e7b062659024cf92d96fbb44, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:35:85:11:88:37:1c:31:5a:9d:e3:0d:2a: 4f:d6:7b:a4:34:9a:1f:6c:c8:46:51:f5:88:c5:86: 71:47:bd:a3:2b:b4:bb:e5:5d:84:b1:33:d1:cf:92: 8c:2a:83:e2:e5:02:ee:c1:48:5f:ed:a0:1c:a3:de: 08:dd:f3:12:63:fc:2d:82:78:bf:c3:5b:ec:6f:af: d9:ec:ea:23:7a:43:ac:c3:9c:d8:56:3d:3d:d3:2c: 20:f5:b5:ad:88:a1:9a:87:4c:35:70:75:fd:6b:d5: 12:26:0e:73:76:87:57:bd:91:9b:1a:62:b4:70:a0: db:76:4a:7d:07:f6:ec:88:f5:4d:0f:17:ae:f5:ef: 08:ac:d9:5e:ce:c1:9f:e8:57:43:e2:f5:12:b4:dd: 49:c0:9d:b8:84:03:eb:da:99:15:d9:90:4a:ed:cb: 60:34:20:74:44:f6:6a:0e:69:91:04:6a:6b:32:dd: 28:9c:75:6b:f0:af:46:62:1d:4d:1a:81:68:ba:00: c7:44:c9:c8:f4:7f:ed:1c:96:2d:72:3f:b0:35:4d: d6:52:bf:71:a9:b0:22:78:af:41:8b:9b:df:7f:d4: 0b:98:9c:20:16:12:33:88:60:22:5b:74:71:f6:cb: 5d:39:4b:fd:bf:44:d1:b2:cb:5f:07:19:54:27:59: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7B:9B:F8:D3:7E:94:B3:9E:CB:FA:BF:42:A9:BD:4C:4D:51:BC:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.161.0.0/16 Signature Algorithm: sha256WithRSAEncryption ba:ac:d8:21:40:ab:45:9b:fe:3e:6f:bb:ed:3f:48:e3:5c:ad: f1:aa:99:3f:74:29:75:cf:f1:31:fc:eb:ca:b6:bb:eb:1d:af: 04:40:31:3e:36:dd:3c:68:ae:f0:b3:7e:f0:f8:72:cc:4d:c1: 16:07:63:8a:ec:69:45:74:39:e7:19:3d:ca:9d:4f:b4:c1:97: 6e:62:ae:15:87:e9:b2:4b:1d:a2:51:a0:73:ef:06:69:42:40: 9d:0c:47:bf:ee:f7:a3:39:17:27:ce:6c:e3:6d:3b:2e:c3:07: 56:90:54:76:6b:7b:11:f0:6d:67:b3:71:e1:51:53:6c:fd:01: fd:6b:15:07:f6:ad:cf:6a:13:81:a5:27:6f:90:28:2a:8d:83: 01:f5:7d:77:49:73:a9:ed:a3:15:5c:a3:df:91:83:eb:ee:de: 11:15:b3:85:aa:a6:a3:ce:b5:9d:8c:07:3c:73:cf:9d:94:91: bd:83:71:91:98:77:08:c1:76:6d:0a:18:7a:f5:fa:2c:74:7e: 8a:b8:7f:a3:ae:b4:8a:5f:17:f2:26:65:59:84:0c:93:07:22: 85:66:72:86:bf:74:bb:c2:6c:9d:b7:26:a0:4c:85:6f:24:0a: 0d:29:80:f3:4b:72:ad:5b:b0:26:eb:90:15:37:75:46:5a:ad: f0:82:4b:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX/Qjrr6X9DIkzQRABRG1Yp6CMBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTA3WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTdiZjMzYzdhNjEzMjMxOWVmYTY5MzJkMmNiMWVmODYw ODdiY2IwZTdiMDYyNjU5MDI0Y2Y5MmQ5NmZiYjQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE6TWFEYg3HDFaneMNKk/We6Q0mh9syEZR9YjFhnFHvaMr tLvlXYSxM9HPkowqg+LlAu7BSF/toByj3gjd8xJj/C2CeL/DW+xvr9ns6iN6Q6zD nNhWPT3TLCD1ta2IoZqHTDVwdf1r1RImDnN2h1e9kZsaYrRwoNt2Sn0H9uyI9U0P F6717wis2V7OwZ/oV0Pi9RK03UnAnbiEA+vamRXZkErty2A0IHRE9moOaZEEamsy 3SicdWvwr0ZiHU0agWi6AMdEycj0f+0cli1yP7A1TdZSv3GpsCJ4r0GLm99/1AuY nCAWEjOIYCJbdHH2y105S/2/RNGyy18HGVQnWej/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6Hub+NN+lLOey/q/Qqm9TE1RvCcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwMzQ1OWIyLWFlNTUtNDY2Yy1hN2M0LWMxZmI1N2Y3NzA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4oTANBgkqhkiG9w0BAQsFAAOCAQEAuqzYIUCrRZv+Pm+77T9I41yt8aqZ P3Qpdc/xMfzryra76x2vBEAxPjbdPGiu8LN+8PhyzE3BFgdjiuxpRXQ55xk9yp1P tMGXbmKuFYfpsksdolGgc+8GaUJAnQxHv+73ozkXJ85s4207LsMHVpBUdmt7EfBt Z7Nx4VFTbP0B/WsVB/atz2oTgaUnb5AoKo2DAfV9d0lzqe2jFVyj35GD6+7eERWz haqmo861nYwHPHPPnZSRvYNxkZh3CMF2bQoYevX6LHR+irh/o660il8X8iZlWYQM kwcihWZyhr90u8JsnbcmoEyFbyQKDSmA80tyrVuwJuuQFTd1Rlqt8IJL0w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:47 2025 by rpki-client