$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa File: 8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa (raw, json) Hash identifier: GKBcqvjcRvLNd2fZ9wwMxpvM/EgjJitOgYdraRYwqUc= Subject key identifier: 9F:49:FD:8B:CB:E4:E9:78:EB:28:3E:B6:36:26:BD:F1:A8:60:0E:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 759029E9C3EFBA9664970F407BC4BC1074148993 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa Signing time: Sat 30 Aug 2025 00:41:19 +0000 ROA not before: Sat 30 Aug 2025 00:41:19 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.60.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:90:29:e9:c3:ef:ba:96:64:97:0f:40:7b:c4:bc:10:74:14:89:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:41:19 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=767c3139d8105dda8f0e9fb96790159c14baf64fcabd52bae68862c88fd6dfa9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:48:be:9a:fd:51:6b:17:0e:de:7b:27:c7: fc:01:64:7d:bc:26:37:15:c4:b4:a8:f9:79:f0:b5: 0a:78:0b:ec:4c:e0:70:38:76:0a:b9:89:a4:da:88: 6e:10:f3:3e:a7:6c:89:cd:c2:c5:84:ba:53:05:e4: 60:40:15:c5:45:43:b4:0c:78:9c:1b:cc:2a:3a:e6: 37:96:b8:70:f5:ae:3c:57:9f:ec:6a:b7:e2:6d:12: 5c:7e:55:db:e5:95:1f:7f:ad:6f:39:04:f1:e6:53: 37:aa:53:35:71:d0:c1:b5:bc:77:68:fb:c7:65:30: c6:dc:3b:2a:63:30:cf:da:da:cc:e2:37:7a:a7:ef: fe:1e:7e:5e:04:9f:f4:6d:1a:23:9d:a7:d5:0c:46: 89:89:67:72:a9:64:0b:15:7e:a6:6d:ec:8f:e8:65: de:1c:0f:57:1f:f6:6a:36:8e:22:74:e3:ae:c1:b0: e8:25:db:a5:75:a5:be:53:88:03:1b:d6:1e:28:7d: 10:5b:41:70:af:c8:6a:16:af:8e:88:6e:d1:4c:b1: 4d:0e:fd:67:ee:60:99:85:50:09:5e:98:c2:c7:56: a7:5c:9f:1b:c3:a9:08:48:2a:bf:40:a5:1f:d8:9c: 75:a1:7f:c6:5e:f2:de:2a:0c:a4:63:ee:63:b9:59: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:FD:8B:CB:E4:E9:78:EB:28:3E:B6:36:26:BD:F1:A8:60:0E:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption be:5c:fc:ef:4c:cd:be:12:b5:b0:02:a4:f5:18:3a:39:bb:14: 5b:ea:f0:f3:28:fc:d1:cf:a9:e7:c3:e2:b5:52:0e:6e:a2:cd: 93:48:7b:7b:ad:0b:c8:48:82:5f:dd:98:f7:05:30:63:ff:1e: 28:e6:e0:0d:d8:34:f2:aa:3d:13:15:17:ae:61:eb:cf:07:79: 00:76:a4:b9:4e:69:2e:09:88:b7:d5:f4:18:b0:45:56:13:7c: 83:0c:2b:12:89:e9:60:1f:57:65:2a:1b:a0:8f:d9:9e:bc:26: 13:ff:2e:44:ce:68:a4:4b:3b:e4:9b:76:f2:ff:c2:9e:ed:03: 85:86:4a:48:5b:10:9a:79:42:9e:47:89:c5:5b:86:1d:d9:21: 21:80:fe:2e:16:4a:cb:f7:1b:c7:3f:19:13:59:30:06:47:d4: 2b:1c:b6:13:e2:c4:8e:fd:bf:79:5e:af:c2:96:d5:06:b4:e1: cc:47:c6:06:fd:59:f8:c4:cc:d5:aa:fa:15:07:70:92:70:4c: e6:cc:dd:d5:e6:17:0a:a4:74:ad:fb:5d:e0:85:73:8d:41:9c: 08:74:e0:a0:ca:bf:ad:af:fe:d0:11:66:80:77:9b:c6:f0:44: c8:a0:24:d5:4c:30:70:b4:34:83:23:8c:42:f0:11:cc:af:21: f8:ab:df:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdZAp6cPvupZklw9Ae8S8EHQUiZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA0MTE5WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjdjMzEzOWQ4MTA1ZGRhOGYwZTlmYjk2NzkwMTU5YzE0 YmFmNjRmY2FiZDUyYmFlNjg4NjJjODhmZDZkZmE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9c0i+mv1RaxcO3nsnx/wBZH28JjcVxLSo+XnwtQp4C+xM 4HA4dgq5iaTaiG4Q8z6nbInNwsWEulMF5GBAFcVFQ7QMeJwbzCo65jeWuHD1rjxX n+xqt+JtElx+VdvllR9/rW85BPHmUzeqUzVx0MG1vHdo+8dlMMbcOypjMM/a2szi N3qn7/4efl4En/RtGiOdp9UMRomJZ3KpZAsVfqZt7I/oZd4cD1cf9mo2jiJ0467B sOgl26V1pb5TiAMb1h4ofRBbQXCvyGoWr46IbtFMsU0O/WfuYJmFUAlemMLHVqdc nxvDqQhIKr9ApR/YnHWhf8Ze8t4qDKRj7mO5WYK7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUn0n9i8vk6XjrKD62Nia98ahgDqIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkNmE4MDEyLTA4ZGQtNDZkMi1hNmVlLTg4OTExYzg3ZjFhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4PDANBgkqhkiG9w0BAQsFAAOCAQEAvlz870zNvhK1sAKk9Rg6ObsUW+rw 8yj80c+p58PitVIObqLNk0h7e60LyEiCX92Y9wUwY/8eKObgDdg08qo9ExUXrmHr zwd5AHakuU5pLgmIt9X0GLBFVhN8gwwrEonpYB9XZSoboI/ZnrwmE/8uRM5opEs7 5Jt28v/Cnu0DhYZKSFsQmnlCnkeJxVuGHdkhIYD+LhZKy/cbxz8ZE1kwBkfUKxy2 E+LEjv2/eV6vwpbVBrThzEfGBv1Z+MTM1ar6FQdwknBM5szd1eYXCqR0rftd4IVz jUGcCHTgoMq/ra/+0BFmgHebxvBEyKAk1UwwcLQ0gyOMQvARzK8h+Kvfow== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:02 2025 by rpki-client