$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1b0dde4-8459-4136-9e01-d91b5fe0e83b.roa File: b1b0dde4-8459-4136-9e01-d91b5fe0e83b.roa (raw, json) Hash identifier: CIPgopnVFxkDacx49vKCE4AtrXgW0Pce2EMRFLpBd40= Subject key identifier: 02:1F:6E:A7:F0:26:EE:1B:95:65:97:4D:54:0D:90:9C:C7:2A:84:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71EDF967A526D355F380A3671043FC420460ED55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1b0dde4-8459-4136-9e01-d91b5fe0e83b.roa Signing time: Tue 02 Sep 2025 17:07:23 +0000 ROA not before: Tue 02 Sep 2025 17:07:23 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ed:f9:67:a5:26:d3:55:f3:80:a3:67:10:43:fc:42:04:60:ed:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 17:07:23 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=167f4707a33cb69031fa3f67b99f4f8beff6937038b9f8f17caf5584b11538ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:aa:cb:7c:57:8a:16:a7:e3:b5:36:d0:8c: 31:4c:5b:c1:4f:2a:ec:fe:71:76:61:e8:0d:9c:27: b0:41:eb:ed:ab:d5:0f:66:1e:db:60:36:11:c0:68: 76:c6:84:62:ef:22:43:49:b4:fb:89:de:b8:bc:91: df:ec:ed:71:64:6c:e5:60:0b:b0:1b:8f:be:5f:88: ec:5d:37:93:1d:0d:16:98:0d:0c:f5:eb:da:ea:af: 1b:08:a3:2b:4e:55:7b:37:ca:bf:a3:85:45:ff:eb: 87:43:8a:d6:a7:a4:9b:f2:6e:0b:99:2a:13:30:7f: 3c:95:a7:2b:cd:b3:77:30:27:69:ea:18:48:b6:4d: 74:3f:61:f9:1b:9a:6b:1f:82:12:74:23:3d:4e:0c: b8:1f:c6:4e:8e:d9:01:d5:6e:a3:7c:91:34:31:18: c7:0b:0b:04:a2:80:40:3b:92:f9:8f:04:a5:64:fe: ef:4d:c9:52:83:9d:79:12:d6:ad:c2:f4:b6:91:38: d1:c2:89:9f:e8:ce:e0:10:dd:7e:e1:06:b9:4f:60: 72:9d:ae:09:57:9e:c6:e5:37:c0:a8:b3:3b:80:d5: 63:93:24:09:43:7b:88:f2:b4:c0:8f:34:99:d7:b1: 40:e7:3d:8b:48:40:9b:95:52:bd:d6:6d:57:ef:02: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:6E:A7:F0:26:EE:1B:95:65:97:4D:54:0D:90:9C:C7:2A:84:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1b0dde4-8459-4136-9e01-d91b5fe0e83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.59.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:79:cd:5f:84:fe:d4:63:c3:3d:13:92:b6:12:96:32:61:85: 7a:d1:f6:28:c1:3e:3d:fa:c3:99:17:51:86:05:a2:77:a2:35: 4a:0c:bf:18:41:c0:88:61:b7:f1:32:0a:0e:ba:4a:7b:7a:2e: cb:66:93:d2:2d:1b:41:f6:eb:05:7f:f9:ec:0d:4f:6b:fd:ea: c7:69:df:6d:3d:30:aa:d5:fb:fb:54:61:b3:0e:4e:bf:6e:eb: 78:1e:0d:2e:93:d0:db:b1:d6:a0:d1:f4:04:43:85:77:87:a2: c4:10:01:52:14:7f:c9:50:f4:9e:4f:e6:65:0b:5d:fb:25:11: 00:91:8f:28:28:a1:1a:f0:00:4d:22:22:cd:d2:cd:a7:15:c4: b4:f2:2d:15:98:c3:ba:89:1c:a3:ef:74:8b:37:da:d7:f4:6c: 05:c3:9c:d2:c7:a7:4d:b0:65:6a:d7:e7:7d:64:75:18:a6:ad: a2:32:1c:33:88:f0:df:3c:87:f5:6b:0d:2a:c0:cd:f1:40:b1: e1:87:f4:f9:78:4f:94:89:a6:2d:43:05:f0:c6:af:54:3a:1c: 0c:c3:a1:d9:be:7e:d2:6e:a3:72:58:8c:43:5b:a7:31:c0:6e: b8:f3:b3:5e:e0:38:50:ba:58:09:3f:c0:8a:cc:a8:f1:14:b1: 31:c7:f0:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUce35Z6Um01XzgKNnEEP8QgRg7VUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMTcwNzIzWhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjdmNDcwN2EzM2NiNjkwMzFmYTNmNjdiOTlmNGY4YmVm ZjY5MzcwMzhiOWY4ZjE3Y2FmNTU4NGIxMTUzOGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFDKrLfFeKFqfjtTbQjDFMW8FPKuz+cXZh6A2cJ7BB6+2r 1Q9mHttgNhHAaHbGhGLvIkNJtPuJ3ri8kd/s7XFkbOVgC7Abj75fiOxdN5MdDRaY DQz169rqrxsIoytOVXs3yr+jhUX/64dDitanpJvybguZKhMwfzyVpyvNs3cwJ2nq GEi2TXQ/YfkbmmsfghJ0Iz1ODLgfxk6O2QHVbqN8kTQxGMcLCwSigEA7kvmPBKVk /u9NyVKDnXkS1q3C9LaRONHCiZ/ozuAQ3X7hBrlPYHKdrglXnsblN8CoszuA1WOT JAlDe4jytMCPNJnXsUDnPYtIQJuVUr3WbVfvAqbVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAh9up/Am7huVZZdNVA2QnMcqhNowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxYjBkZGU0LTg0NTktNDEzNi05ZTAxLWQ5MWI1ZmUwZTgzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjNjswDQYJKoZIhvcNAQELBQADggEBAEp5zV+E/tRjwz0TkrYSljJhhXrR 9ijBPj36w5kXUYYFoneiNUoMvxhBwIhht/EyCg66Snt6Lstmk9ItG0H26wV/+ewN T2v96sdp3209MKrV+/tUYbMOTr9u63geDS6T0Nux1qDR9ARDhXeHosQQAVIUf8lQ 9J5P5mULXfslEQCRjygooRrwAE0iIs3SzacVxLTyLRWYw7qJHKPvdIs32tf0bAXD nNLHp02wZWrX531kdRimraIyHDOI8N88h/VrDSrAzfFAseGH9Pl4T5SJpi1DBfDG r1Q6HAzDodm+ftJuo3JYjENbpzHAbrjzs17gOFC6WAk/wIrMqPEUsTHH8Kw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:43 2025 by rpki-client