$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac285f19-324f-4769-988a-0b6c67139e64.roa File: ac285f19-324f-4769-988a-0b6c67139e64.roa (raw, json) Hash identifier: h1ImEJcFN7N5la2Xnpbxrv2rOOBy1NlLiaHM7mKs4S0= Subject key identifier: A5:29:36:9C:47:F1:C9:1D:EC:EB:35:47:61:68:9B:40:DB:2B:00:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4596DA42B9F5790ED1C88E656C80427EA870BD95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac285f19-324f-4769-988a-0b6c67139e64.roa Signing time: Fri 29 Aug 2025 16:40:23 +0000 ROA not before: Fri 29 Aug 2025 16:40:23 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.116.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:96:da:42:b9:f5:79:0e:d1:c8:8e:65:6c:80:42:7e:a8:70:bd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:40:23 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=865e19a0e36314011bf7de0cfc12a32f988acc5d80917508b0eb12285f4f40e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:16:64:5d:25:e9:89:a5:9a:7a:60:a3:cf: 9e:dc:28:1f:6a:d3:96:ab:ca:9e:00:1f:c9:d9:72: 44:3e:43:98:25:20:77:42:98:ed:9a:e4:16:67:4f: dc:f9:3e:7d:c2:4d:19:a0:f4:c2:0c:cb:77:24:7a: 17:ca:aa:d6:cb:c2:6e:ca:0e:5b:c0:ea:22:f5:bc: a3:6d:52:62:cc:c6:09:52:1f:17:4d:24:20:3c:e6: 9a:a8:e9:19:f9:ce:25:bb:c3:b3:14:e2:de:c6:6e: a3:fa:84:fd:c4:0f:71:1f:af:be:e4:b8:37:14:fa: 3b:78:df:22:9b:ea:56:4f:2a:d6:bd:56:54:73:41: 49:41:9a:58:ec:d4:5b:1a:d7:9b:df:27:ac:5e:af: cd:d1:c6:0f:bd:51:37:1f:3e:8e:54:fc:1c:08:8c: c9:e5:e2:99:d2:ff:00:f6:75:ec:48:e8:07:74:03: 1b:f2:42:53:ee:cb:40:3e:e4:6b:a3:23:48:ae:a4: 65:79:40:fc:1f:fd:1d:dd:ba:2f:c8:5a:f5:f0:da: 2c:28:d1:a9:e2:c2:6b:1c:55:dc:a8:86:85:05:0f: 2a:69:c2:03:07:8c:c5:83:bf:35:82:08:aa:f5:d7: ac:bd:1c:d6:46:60:6f:e9:09:55:c2:7e:ad:b0:65: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:36:9C:47:F1:C9:1D:EC:EB:35:47:61:68:9B:40:DB:2B:00:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac285f19-324f-4769-988a-0b6c67139e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.116.0.0/15 Signature Algorithm: sha256WithRSAEncryption 06:0c:86:3f:0c:ce:23:0c:77:97:7e:ac:d6:77:a6:b2:e2:f5: 4f:85:22:35:c9:91:d1:1b:ae:a2:78:99:a7:1b:bf:ef:52:d6: 03:40:8c:e9:ab:ea:26:12:37:ef:09:66:ee:c7:3d:ab:aa:c6: ec:2d:fd:f5:4c:e2:9c:7d:16:fe:01:22:14:b1:2d:f2:44:59: 5e:39:a4:1c:d0:52:65:3c:e3:86:00:b3:52:87:95:da:53:a4: 0c:bd:62:d7:a8:96:95:20:dd:1d:04:5f:06:21:dd:5b:fa:ad: dc:6b:4e:7a:86:11:01:34:5e:0b:8b:1a:94:ec:32:7b:ea:6d: 29:7e:89:b9:2e:ad:9d:64:8b:21:27:3d:57:d4:df:54:93:91: 1f:7f:74:73:e1:37:c7:06:d1:4d:67:7d:c9:59:f8:ca:cc:81: 5f:fe:78:5d:bf:7e:7a:ee:54:7c:59:70:73:3c:60:0a:5f:09: 25:74:36:e5:fd:ec:20:33:11:51:b5:46:4e:85:c8:2f:c3:9a: 1a:d9:57:9f:15:de:f8:65:e1:f0:a4:2f:27:84:51:b3:45:11: 99:5f:06:cc:a2:a6:5d:9b:5f:8d:94:fe:e9:ce:00:b7:21:ea: fb:f1:b7:68:c7:7f:89:a4:c9:7a:10:89:ba:04:6f:80:30:3c: 8c:61:dd:b1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURZbaQrn1eQ7RyI5lbIBCfqhwvZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTY0MDIzWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjVlMTlhMGUzNjMxNDAxMWJmN2RlMGNmYzEyYTMyZjk4 OGFjYzVkODA5MTc1MDhiMGViMTIyODVmNGY0MGU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr6RZkXSXpiaWaemCjz57cKB9q05aryp4AH8nZckQ+Q5gl IHdCmO2a5BZnT9z5Pn3CTRmg9MIMy3ckehfKqtbLwm7KDlvA6iL1vKNtUmLMxglS HxdNJCA85pqo6Rn5ziW7w7MU4t7GbqP6hP3ED3Efr77kuDcU+jt43yKb6lZPKta9 VlRzQUlBmljs1Fsa15vfJ6xer83Rxg+9UTcfPo5U/BwIjMnl4pnS/wD2dexI6Ad0 AxvyQlPuy0A+5GujI0iupGV5QPwf/R3dui/IWvXw2iwo0aniwmscVdyohoUFDypp wgMHjMWDvzWCCKr116y9HNZGYG/pCVXCfq2wZYhfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpSk2nEfxyR3s6zVHYWibQNsrAEMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMjg1ZjE5LTMyNGYtNDc2OS05ODhhLTBiNmM2NzEzOWU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2dDANBgkqhkiG9w0BAQsFAAOCAQEABgyGPwzOIwx3l36s1nemsuL1T4Ui NcmR0RuuoniZpxu/71LWA0CM6avqJhI37wlm7sc9q6rG7C399UzinH0W/gEiFLEt 8kRZXjmkHNBSZTzjhgCzUoeV2lOkDL1i16iWlSDdHQRfBiHdW/qt3GtOeoYRATRe C4salOwye+ptKX6JuS6tnWSLISc9V9TfVJORH390c+E3xwbRTWd9yVn4ysyBX/54 Xb9+eu5UfFlwczxgCl8JJXQ25f3sIDMRUbVGToXIL8OaGtlXnxXe+GXh8KQvJ4RR s0URmV8GzKKmXZtfjZT+6c4AtyHq+/G3aMd/iaTJehCJugRvgDA8jGHdsQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:48 2025 by rpki-client