$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa File: c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa (raw, json) Hash identifier: H4qH/lgfS9THxxF6hOjeTmwYoc/FEtIvNkxeOLYCTTk= Subject key identifier: 58:B0:D4:2E:C9:3A:2B:77:00:EC:74:41:7A:17:3A:2D:B0:0D:AD:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 044600D67D1288C47AE819EE7B6BB0B8DA6E14BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa Signing time: Fri 05 Sep 2025 00:11:03 +0000 ROA not before: Fri 05 Sep 2025 00:11:03 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.130.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:46:00:d6:7d:12:88:c4:7a:e8:19:ee:7b:6b:b0:b8:da:6e:14:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 00:11:03 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=b7bd36ecdd1a0f1a405bce7438f4ed53e8c693163e9dfe7a6c58fa214c635641, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:fd:0d:d3:b5:67:f5:b2:cb:68:34:c1:f0: 96:48:6f:f7:78:99:f4:ce:31:82:4d:2e:e8:de:f2: 63:07:46:5e:5e:c9:d5:ce:7e:d6:3a:d7:5a:28:40: e6:16:05:82:bb:26:fa:86:be:00:19:87:42:9e:d3: 8c:13:11:8e:73:91:79:de:63:25:f1:cb:a6:94:d9: 2e:21:a6:41:be:db:ef:b4:d8:2f:fa:a9:2b:7e:38: 40:1f:cb:79:39:bd:a3:31:20:39:e0:5d:65:01:06: b5:01:1e:70:c3:47:a4:e7:79:fc:c3:e9:a5:03:55: 09:3a:aa:fb:3c:34:6a:e2:51:dc:d2:70:8c:3a:23: e8:1c:66:94:a0:75:9b:d2:b8:c2:9e:65:f0:8e:38: 0c:3f:25:77:06:17:41:77:4c:45:98:65:6b:4f:ea: d9:73:c5:e8:32:e3:5c:26:fc:b6:d8:4e:ef:60:10: 30:99:55:17:42:9a:c9:60:3c:91:89:4d:13:57:4f: 71:0a:e7:21:17:d2:d7:66:9a:62:6a:d4:96:90:d6: 09:af:3a:37:da:ee:0d:ca:35:3c:ee:9c:5d:d6:0f: dd:b9:2f:53:57:fb:64:96:31:48:02:a2:08:11:ea: 6e:82:8c:66:a8:18:98:40:93:e9:8c:78:3f:4e:5f: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B0:D4:2E:C9:3A:2B:77:00:EC:74:41:7A:17:3A:2D:B0:0D:AD:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption d8:2d:11:85:7e:8a:84:e3:d1:06:43:cf:ef:14:8f:29:db:f9: 5a:5d:6e:08:73:6e:1b:f8:50:1e:3a:15:e4:d0:6d:39:57:79: 64:6e:5c:49:8a:11:0a:a0:2b:b5:c8:d6:5e:62:2a:af:3f:9c: 25:4e:86:f6:02:af:82:40:36:48:f3:0b:90:2e:53:ce:42:89: 7f:27:fb:18:65:e3:f2:6f:b1:7e:60:28:d8:d3:ce:1d:57:66: ef:55:1f:27:f8:6d:86:1d:4b:50:37:dd:06:04:96:1c:ac:ae: b0:b0:0a:0c:59:55:df:5b:08:22:49:33:96:bd:5b:da:87:68: 85:5f:dc:51:b4:4f:37:b7:4b:3c:3e:95:4d:1b:5a:51:8c:57: 53:a6:9c:f5:cd:db:d4:97:e6:33:d0:08:33:ea:19:05:4d:ea: 32:ad:d1:c1:66:46:1a:cf:36:b4:af:30:8b:b3:ea:2e:ca:c7: 1b:53:16:e6:12:88:11:f1:eb:14:92:97:5c:6b:ff:40:ae:ea: 3f:9c:97:34:af:2a:e6:1a:4e:49:eb:cd:d6:93:ee:13:3a:63: 57:c6:1e:ec:c8:3d:71:6c:8e:4e:da:c7:4e:ef:00:3e:99:2c: 14:65:28:02:0e:43:14:d6:3d:33:fc:73:8e:02:dd:97:bc:df: 2c:d0:52:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBEYA1n0SiMR66Bnue2uwuNpuFL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAxMTAzWhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2JkMzZlY2RkMWEwZjFhNDA1YmNlNzQzOGY0ZWQ1M2U4 YzY5MzE2M2U5ZGZlN2E2YzU4ZmEyMTRjNjM1NjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDh5f0N07Vn9bLLaDTB8JZIb/d4mfTOMYJNLuje8mMHRl5e ydXOftY611ooQOYWBYK7JvqGvgAZh0Ke04wTEY5zkXneYyXxy6aU2S4hpkG+2++0 2C/6qSt+OEAfy3k5vaMxIDngXWUBBrUBHnDDR6TnefzD6aUDVQk6qvs8NGriUdzS cIw6I+gcZpSgdZvSuMKeZfCOOAw/JXcGF0F3TEWYZWtP6tlzxegy41wm/LbYTu9g EDCZVRdCmslgPJGJTRNXT3EK5yEX0tdmmmJq1JaQ1gmvOjfa7g3KNTzunF3WD925 L1NX+2SWMUgCoggR6m6CjGaoGJhAk+mMeD9OX9XXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWLDULsk6K3cA7HRBehc6LbANrfQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2YzMDgwLWM4NjgtNGM2OS1hMjNlLThkOWQ3ZGNlOTFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgjANBgkqhkiG9w0BAQsFAAOCAQEA2C0RhX6KhOPRBkPP7xSPKdv5Wl1u CHNuG/hQHjoV5NBtOVd5ZG5cSYoRCqArtcjWXmIqrz+cJU6G9gKvgkA2SPMLkC5T zkKJfyf7GGXj8m+xfmAo2NPOHVdm71UfJ/hthh1LUDfdBgSWHKyusLAKDFlV31sI Ikkzlr1b2odohV/cUbRPN7dLPD6VTRtaUYxXU6ac9c3b1JfmM9AIM+oZBU3qMq3R wWZGGs82tK8wi7PqLsrHG1MW5hKIEfHrFJKXXGv/QK7qP5yXNK8q5hpOSevN1pPu EzpjV8Ye7Mg9cWyOTtrHTu8APpksFGUoAg5DFNY9M/xzjgLdl7zfLNBSwg== -----END CERTIFICATE-----Generated at Thu Sep 18 06:09:26 2025 by rpki-client