$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa File: a8deb530-6bda-498d-a591-72495d07fc40.roa (raw, json) Hash identifier: p7saOXxxAtXshsMyzowXsGzUvFcv0QVWdipEGF0HaVU= Subject key identifier: 92:71:BD:21:15:4B:41:E3:2B:B0:60:13:92:8C:6A:E7:FE:84:02:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CA2CDBB9A2FC6FA85E2EAA89223574A781EEF67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa Signing time: Sat 30 Aug 2025 00:31:52 +0000 ROA not before: Sat 30 Aug 2025 00:31:52 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a2:cd:bb:9a:2f:c6:fa:85:e2:ea:a8:92:23:57:4a:78:1e:ef:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:52 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=fbe3ad828dd0e0506b8048b4c51c2e156e40b64546a49785898830a86c01bc26, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:94:31:5a:02:11:81:84:c8:e3:17:11:d9: a4:86:f6:2e:f1:17:c8:c9:5d:85:01:36:f6:15:35: b3:1b:9b:fa:73:86:13:5e:98:87:f8:f4:d2:40:49: d1:e1:1c:5c:d4:20:2d:8f:9c:01:be:42:56:38:5e: f0:02:25:f4:b3:14:f2:e0:2e:50:90:8d:c8:65:be: 61:98:93:0c:0f:ae:63:5b:c0:50:f3:4f:1c:d8:80: fc:e9:8e:eb:89:06:56:43:90:dd:5e:9c:07:bc:c6: 52:40:40:5f:d9:08:56:58:45:2e:a4:1a:5c:f8:fd: df:82:8f:46:ee:99:0d:12:6c:fa:13:09:da:1d:29: d8:1a:b6:9e:24:da:91:08:dc:f1:68:82:75:6d:d7: 2b:d0:36:f3:f8:6a:cb:94:31:de:3a:61:c8:30:49: b7:6d:81:6b:8c:fd:c7:03:29:96:7a:0a:b2:79:d3: b9:e0:3d:2b:8b:7b:61:80:dc:ca:e4:ea:6e:73:2e: bf:e7:20:2f:13:67:fc:81:c7:3d:6f:fe:cb:b5:31: 45:19:4f:d1:d3:c2:11:64:3c:76:55:b7:4f:e1:d1: 88:45:71:ca:c7:53:2e:ea:96:2b:6d:64:f0:c0:a4: f8:dd:e0:95:a6:6c:65:fe:d8:26:1c:fb:43:47:56: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:BD:21:15:4B:41:E3:2B:B0:60:13:92:8C:6A:E7:FE:84:02:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:fb:9c:da:2a:43:38:a7:e6:d3:9b:d0:3a:ee:d6:c1:26:18: 2f:7f:17:f8:3d:c1:ae:62:23:54:5e:40:a6:69:30:38:02:4f: 9f:5a:60:80:db:41:30:b2:f1:29:5a:ac:45:6b:00:b6:5b:a4: ed:09:d5:21:63:9c:39:8d:16:89:14:70:d1:66:a1:e1:25:92: ee:65:e9:c1:8e:8a:6c:10:f4:46:2e:4f:02:39:ef:35:0a:61: 8d:69:f2:69:09:32:e6:fc:35:7c:f8:7b:ef:9a:c8:bb:6e:3a: 87:04:79:b6:bb:7b:e8:98:e3:b5:6c:2b:b1:58:e7:a7:69:51: 03:2e:af:10:39:9a:28:83:f8:90:92:3c:f2:7d:7c:7c:e7:9e: 91:80:4d:ce:20:06:05:9f:0b:45:cb:45:c0:37:f8:e3:a8:a1: 6c:32:d9:54:b2:b4:89:c5:17:93:43:51:46:17:71:3e:ec:4b: a5:a2:c6:9d:b1:5c:be:be:11:bd:ae:4f:58:ba:d5:94:51:2e: cb:c2:25:20:8a:27:03:98:18:9f:f5:c2:67:36:bb:19:b9:34: 0c:9c:0a:c9:a8:8e:b8:9b:73:5d:bf:71:03:a6:28:c7:39:bf: 52:a3:78:30:b8:e8:83:10:03:f0:8c:8a:e1:25:f5:a9:6a:e3: 3f:b7:76:24 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDKLNu5ovxvqF4uqokiNXSnge72cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTUyWhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmUzYWQ4MjhkZDBlMDUwNmI4MDQ4YjRjNTFjMmUxNTZl NDBiNjQ1NDZhNDk3ODU4OTg4MzBhODZjMDFiYzI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL2ZQxWgIRgYTI4xcR2aSG9i7xF8jJXYUBNvYVNbMbm/pz hhNemIf49NJASdHhHFzUIC2PnAG+QlY4XvACJfSzFPLgLlCQjchlvmGYkwwPrmNb wFDzTxzYgPzpjuuJBlZDkN1enAe8xlJAQF/ZCFZYRS6kGlz4/d+Cj0bumQ0SbPoT CdodKdgatp4k2pEI3PFognVt1yvQNvP4asuUMd46YcgwSbdtgWuM/ccDKZZ6CrJ5 07ngPSuLe2GA3Mrk6m5zLr/nIC8TZ/yBxz1v/su1MUUZT9HTwhFkPHZVt0/h0YhF ccrHUy7qlittZPDApPjd4JWmbGX+2CYc+0NHVtltAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUknG9IRVLQeMrsGATkoxq5/6EAgowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4ZGViNTMwLTZiZGEtNDk4ZC1hNTkxLTcyNDk1ZDA3ZmM0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4FDANBgkqhkiG9w0BAQsFAAOCAQEAGfuc2ipDOKfm05vQOu7WwSYYL38X +D3BrmIjVF5ApmkwOAJPn1pggNtBMLLxKVqsRWsAtluk7QnVIWOcOY0WiRRw0Wah 4SWS7mXpwY6KbBD0Ri5PAjnvNQphjWnyaQky5vw1fPh775rIu246hwR5trt76Jjj tWwrsVjnp2lRAy6vEDmaKIP4kJI88n18fOeekYBNziAGBZ8LRctFwDf446ihbDLZ VLK0icUXk0NRRhdxPuxLpaLGnbFcvr4Rva5PWLrVlFEuy8IlIIonA5gYn/XCZza7 Gbk0DJwKyaiOuJtzXb9xA6Yoxzm/UqN4MLjogxAD8IyK4SX1qWrjP7d2JA== -----END CERTIFICATE-----Generated at Sat Sep 6 16:54:33 2025 by rpki-client