$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa File: c01ab0fb-a853-4925-93fd-d23412f0342f.roa (raw, json) Hash identifier: 06Tl0E9OfOaLEB1iFAiJvH0tN200VygpiaK2d06eSFc= Subject key identifier: BE:DE:15:4D:0C:77:58:20:E4:CB:A5:CD:D7:F8:E1:68:9A:16:99:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 198210F62C62D1A3CD526ACE76314B3F5F3D0BBC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa Signing time: Tue 02 Sep 2025 17:07:21 +0000 ROA not before: Tue 02 Sep 2025 17:07:21 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:10:f6:2c:62:d1:a3:cd:52:6a:ce:76:31:4b:3f:5f:3d:0b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 17:07:21 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=08480d5b1460aa4aa9d4ad865dee2d31f2a075e54243a8f4dffda50e8919b6fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:38:85:ec:15:d2:e6:c4:a7:64:04:1f:26: a2:51:f2:64:4e:92:98:a0:0f:0f:d4:0a:1a:a8:f6: 54:ee:0e:9a:79:e1:59:ed:b5:ae:04:52:57:7d:af: 23:bc:fa:dc:cf:5c:e7:d5:a1:92:25:2a:75:c6:d3: ef:8d:af:3f:68:f6:ff:fe:fb:28:91:9c:76:f0:aa: f5:7f:37:30:3a:d9:d5:1e:9a:e4:74:66:24:c8:fe: 06:3a:9c:ab:35:a5:82:68:0c:b8:00:0d:74:11:22: 93:61:55:1b:33:32:af:5e:ca:cc:bd:e8:4c:19:65: e4:da:5c:6e:d9:ee:43:61:dc:20:22:fc:3e:64:09: a0:39:96:a2:04:af:4e:35:47:55:76:ed:e8:ad:02: 6c:b5:f9:e0:4c:73:a5:47:7a:5d:3a:22:61:ae:4d: a3:d9:0c:3b:2f:da:b9:db:b0:3a:0d:8d:59:e5:e2: a5:91:1e:f1:c5:0a:aa:40:c9:ee:cd:48:fc:bd:7e: 49:17:7c:d6:6b:00:68:af:c4:21:aa:35:9a:73:7a: 18:a0:0e:cf:56:68:f5:cf:fc:af:1c:d6:27:c8:b3: e6:f0:bf:14:5e:dd:0c:b8:50:43:62:ef:42:bb:c1: 54:c9:5b:5b:ce:56:64:a9:16:1a:da:04:fc:ec:c3: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:15:4D:0C:77:58:20:E4:CB:A5:CD:D7:F8:E1:68:9A:16:99:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.56.0/24 Signature Algorithm: sha256WithRSAEncryption a9:a5:18:8f:61:ad:f8:2b:06:25:99:10:65:e5:f6:14:9a:74: 34:40:c3:6c:4b:5a:41:dd:4b:d9:fc:9f:eb:0c:24:46:1f:b1: 25:3b:d9:59:35:24:49:10:49:28:70:9a:41:34:7d:63:ef:ed: 81:e9:b2:8e:36:2d:67:e8:66:bb:aa:81:ed:a3:00:3e:09:a9: e8:b5:1e:77:fc:6a:7a:77:73:80:ac:ce:95:ed:a3:dc:21:c4: c2:56:4d:5e:21:4c:1a:73:ff:9d:70:24:b0:85:f6:84:b2:31: 9c:99:db:12:af:aa:86:18:ba:c4:b1:dc:50:0b:78:19:54:7e: 5d:3b:27:6f:9a:32:40:5f:8e:48:68:f9:57:91:20:28:84:5f: 96:0f:9b:7a:d7:e0:2e:a5:52:bf:6a:97:69:f6:f7:5c:c9:42: 06:39:46:96:96:3c:8f:6a:9d:59:67:ef:2a:5c:e7:98:6a:09: bd:c9:9e:90:77:f0:66:f3:be:ee:a2:9f:b5:ca:d7:60:dd:17: d9:e3:a3:1e:4f:46:bf:08:c3:f8:90:f5:1f:ef:cd:03:3f:a5: 2a:c6:8c:b5:3c:b2:59:02:70:af:0d:e9:38:0f:ad:e0:ed:a9: 60:3e:12:d3:4f:bc:e1:42:48:f1:62:20:7a:f4:83:28:e5:58: e0:03:7b:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGYIQ9ixi0aPNUmrOdjFLP189C7wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMTcwNzIxWhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODQ4MGQ1YjE0NjBhYTRhYTlkNGFkODY1ZGVlMmQzMWYy YTA3NWU1NDI0M2E4ZjRkZmZkYTUwZTg5MTliNmZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3OziF7BXS5sSnZAQfJqJR8mROkpigDw/UChqo9lTuDpp5 4Vntta4EUld9ryO8+tzPXOfVoZIlKnXG0++Nrz9o9v/++yiRnHbwqvV/NzA62dUe muR0ZiTI/gY6nKs1pYJoDLgADXQRIpNhVRszMq9eysy96EwZZeTaXG7Z7kNh3CAi /D5kCaA5lqIEr041R1V27eitAmy1+eBMc6VHel06ImGuTaPZDDsv2rnbsDoNjVnl 4qWRHvHFCqpAye7NSPy9fkkXfNZrAGivxCGqNZpzehigDs9WaPXP/K8c1ifIs+bw vxRe3Qy4UENi70K7wVTJW1vOVmSpFhraBPzsw3u7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvt4VTQx3WCDky6XN1/jhaJoWmSUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMWFiMGZiLWE4NTMtNDkyNS05M2ZkLWQyMzQxMmYwMzQyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjNjgwDQYJKoZIhvcNAQELBQADggEBAKmlGI9hrfgrBiWZEGXl9hSadDRA w2xLWkHdS9n8n+sMJEYfsSU72Vk1JEkQSShwmkE0fWPv7YHpso42LWfoZruqge2j AD4Jqei1Hnf8anp3c4CszpXto9whxMJWTV4hTBpz/51wJLCF9oSyMZyZ2xKvqoYY usSx3FALeBlUfl07J2+aMkBfjkho+VeRICiEX5YPm3rX4C6lUr9ql2n291zJQgY5 RpaWPI9qnVln7ypc55hqCb3JnpB38Gbzvu6in7XK12DdF9njox5PRr8Iw/iQ9R/v zQM/pSrGjLU8slkCcK8N6TgPreDtqWA+EtNPvOFCSPFiIHr0gyjlWOADe6E= -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:53 2025 by rpki-client