$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e487e4-60ba-45b8-adcd-20a9ce2ba018.roa File: c4e487e4-60ba-45b8-adcd-20a9ce2ba018.roa (raw, json) Hash identifier: vKOTJhZt7RKeEULhlSpB08oGHJAKNIYD/uO0fYvvEFw= Subject key identifier: 75:57:6A:AB:C5:A7:D5:13:DC:6D:66:12:29:98:EA:A5:44:91:D0:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52EBE6F2E0B87C33460F15F4197DA64D8114819D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e487e4-60ba-45b8-adcd-20a9ce2ba018.roa Signing time: Fri 29 Aug 2025 16:41:31 +0000 ROA not before: Fri 29 Aug 2025 16:41:31 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.25.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:eb:e6:f2:e0:b8:7c:33:46:0f:15:f4:19:7d:a6:4d:81:14:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:41:31 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=47dca932acda016389ba9526fb7034ccbb0d94fc3e73c8206f4be088a3574034, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:b8:81:36:dd:c6:8f:11:0e:0b:00:b7:d2: a1:e2:85:75:1e:05:50:cb:2f:63:fb:f2:10:04:ed: ac:a6:36:ed:52:1f:c6:c2:cb:f5:ae:a2:d8:06:9c: 59:bf:77:e7:e8:65:e6:07:0d:00:58:d3:4e:c0:8a: 2c:21:b0:01:7a:82:66:4a:cc:6e:4b:58:c6:4f:c2: d7:0d:74:de:78:46:1a:5d:89:6a:1e:a2:54:05:a8: 29:ec:47:6e:e3:e1:8c:b4:33:d3:7e:ac:b0:7f:f3: 14:87:e8:6c:f3:ef:68:17:8c:0b:28:ec:c3:87:c4: de:3b:c0:82:56:43:fe:eb:21:ae:c5:a3:b2:6f:a4: 28:28:3a:04:3d:c4:41:04:a6:ef:06:a4:ef:67:de: b3:15:6e:c5:a5:92:d1:3c:7c:83:fd:da:37:30:10: 02:04:6b:d9:3a:af:d6:46:d0:c4:8b:65:05:77:de: 90:c3:43:67:65:4b:34:44:35:a8:7a:a8:08:2e:52: 39:15:be:03:ab:f2:c2:b5:2e:19:bc:af:74:ce:22: ba:af:52:89:6e:02:93:f0:a9:27:07:ef:db:b7:1c: 32:c9:2f:d3:69:d6:9e:7f:b4:db:2d:40:68:ec:d3: f3:73:ed:12:66:39:5e:76:f2:e6:1f:8d:5d:64:d9: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:57:6A:AB:C5:A7:D5:13:DC:6D:66:12:29:98:EA:A5:44:91:D0:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e487e4-60ba-45b8-adcd-20a9ce2ba018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.67.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b8:36:b0:bf:dd:a9:85:a4:c4:ff:1b:1c:16:02:99:93:4e: 5a:a9:b4:ef:8b:e4:52:d6:a0:7c:45:31:7a:43:71:37:85:2f: 07:5c:c7:51:f6:86:79:fb:e7:81:28:84:49:b2:c5:c8:20:69: b8:b5:5d:14:c3:d0:45:64:55:d5:a3:99:72:c5:78:12:db:ed: 7b:fb:6f:81:d3:57:46:7b:e5:c8:9b:58:fb:02:59:f8:ba:b1: ea:74:ee:99:04:ba:e5:20:06:1f:3a:c1:1d:f4:fe:03:1a:6d: 1f:1c:8c:f4:f7:48:a0:03:a8:69:8c:36:59:9e:be:d8:89:5c: 40:b7:f1:d0:27:f2:34:59:99:82:91:9e:96:74:5b:d1:e7:c9: bd:16:15:a5:9e:85:bd:de:42:1a:e8:d7:e0:17:2a:d6:8a:87: aa:de:25:98:a9:86:43:7d:39:75:37:65:d7:3a:b8:32:e0:c7: 58:8a:b0:20:9f:42:df:91:e4:77:09:7a:7d:13:2a:09:e2:ff: c8:7b:63:1a:e6:50:3b:37:3d:a4:be:97:e7:f5:b6:1e:7a:9c: a0:c5:62:31:c0:dd:79:96:89:cc:d7:14:e2:88:30:fc:b6:e4: 38:25:49:b3:35:6b:d9:5e:51:c1:22:f9:a6:92:46:71:3d:f0: 19:37:ea:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUuvm8uC4fDNGDxX0GX2mTYEUgZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTY0MTMxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2RjYTkzMmFjZGEwMTYzODliYTk1MjZmYjcwMzRjY2Ji MGQ5NGZjM2U3M2M4MjA2ZjRiZTA4OGEzNTc0MDM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoO7iBNt3GjxEOCwC30qHihXUeBVDLL2P78hAE7aymNu1S H8bCy/WuotgGnFm/d+foZeYHDQBY007AiiwhsAF6gmZKzG5LWMZPwtcNdN54Rhpd iWoeolQFqCnsR27j4Yy0M9N+rLB/8xSH6Gzz72gXjAso7MOHxN47wIJWQ/7rIa7F o7JvpCgoOgQ9xEEEpu8GpO9n3rMVbsWlktE8fIP92jcwEAIEa9k6r9ZG0MSLZQV3 3pDDQ2dlSzRENah6qAguUjkVvgOr8sK1Lhm8r3TOIrqvUoluApPwqScH79u3HDLJ L9Np1p5/tNstQGjs0/Nz7RJmOV528uYfjV1k2QcRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdVdqq8Wn1RPcbWYSKZjqpUSR0GcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0ZTQ4N2U0LTYwYmEtNDViOC1hZGNkLTIwYTljZTJiYTAxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUMwDQYJKoZIhvcNAQELBQADggEBABC4NrC/3amFpMT/GxwWApmTTlqp tO+L5FLWoHxFMXpDcTeFLwdcx1H2hnn754EohEmyxcggabi1XRTD0EVkVdWjmXLF eBLb7Xv7b4HTV0Z75cibWPsCWfi6sep07pkEuuUgBh86wR30/gMabR8cjPT3SKAD qGmMNlmevtiJXEC38dAn8jRZmYKRnpZ0W9Hnyb0WFaWehb3eQhro1+AXKtaKh6re JZiphkN9OXU3Zdc6uDLgx1iKsCCfQt+R5HcJen0TKgni/8h7YxrmUDs3PaS+l+f1 th56nKDFYjHA3XmWiczXFOKIMPy25DglSbM1a9leUcEi+aaSRnE98Bk36pE= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:00 2025 by rpki-client