$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa File: c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa (raw, json) Hash identifier: IDX/8/p+yfoGqKjBAnjsygYOlpDhaIUwnmas1T9TaME= Subject key identifier: 7A:02:2B:D6:9B:43:48:91:97:17:47:33:25:12:5E:74:B0:C0:48:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BE0707739B49A7BBDC28BF039F9B662949FE9D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa Signing time: Mon 11 Aug 2025 15:11:46 +0000 ROA not before: Mon 11 Aug 2025 15:11:46 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.130.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e0:70:77:39:b4:9a:7b:bd:c2:8b:f0:39:f9:b6:62:94:9f:e9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:11:46 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=e66d259ab322bc978402acc73111a62f93f0b71c037d5d5ab7369e15fd49e871, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:02:75:57:0d:98:9a:de:f7:75:49:c8:8e: b0:7f:56:12:01:4a:2b:65:89:85:01:3b:2f:4e:2e: 70:c6:b2:8b:68:19:51:a6:78:bd:ed:90:90:3b:95: ac:fc:91:b5:fb:6e:72:2c:0e:1d:88:d0:c2:87:a6: a9:dd:5f:e2:b5:fa:d5:bc:3c:be:65:d0:4e:9b:18: 32:3c:32:43:57:b8:72:81:dc:63:a6:eb:45:88:82: 62:cf:23:9c:34:28:83:09:cd:da:67:7b:e5:2e:a3: a1:4d:f6:52:bb:f0:78:ad:38:17:33:9a:1a:91:fe: d5:18:3f:8a:b5:17:71:ae:06:be:91:4b:71:47:e8: 54:4c:c1:67:d4:76:32:21:e9:f5:af:51:14:87:45: 75:bc:cb:2c:9d:16:3b:69:17:a2:d2:82:87:ba:1c: 24:41:38:9a:77:eb:ec:11:70:8d:9a:b1:d1:84:b6: 16:2a:50:b3:20:77:7b:2a:2d:74:c7:ee:ad:c5:53: 66:fd:ae:1f:24:8c:de:4e:81:e1:d3:3f:11:6c:30: 92:39:65:1c:8b:81:42:0e:e6:b4:35:dd:69:1c:e5: ab:e1:fe:bf:04:11:13:59:fb:fb:9c:d8:2e:ed:24: 15:d3:25:0e:b4:e0:d8:c1:02:27:49:f8:dc:02:91: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:2B:D6:9B:43:48:91:97:17:47:33:25:12:5E:74:B0:C0:48:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:ec:ba:f6:d3:4f:1d:ca:02:60:87:9a:0a:c4:1b:41:05:6c: 86:bd:56:6d:cd:96:8a:38:73:81:0f:34:0a:e1:f0:8b:cc:0a: 48:bb:e5:08:8f:68:f0:1c:e6:a9:d1:54:1b:6d:2d:ea:64:66: 9a:fb:3f:7a:06:a2:57:eb:e0:f4:03:74:df:46:f4:35:56:91: dd:10:83:a3:fe:7a:65:30:cb:51:cd:39:14:0b:22:53:35:cd: 78:e7:71:77:ae:b9:4d:34:1b:83:32:fc:3e:f3:8b:c4:c2:d1: a0:78:69:51:3b:14:54:35:50:f1:35:eb:7a:77:56:e5:ac:4f: 16:ec:12:13:b2:4d:e1:fc:ab:9d:cc:3f:40:80:56:d6:a7:04: cd:37:a0:82:d6:1d:b7:31:f8:84:bd:8c:89:42:ac:bd:3f:71: cb:9b:21:8f:a8:16:3d:5d:89:b7:d6:d7:41:a3:37:63:e5:f3: 71:71:e0:a1:43:c9:b0:43:86:03:48:3b:b2:66:09:ca:b6:f1: 4c:dc:e1:38:e5:15:4d:57:b8:9c:03:2f:94:5e:d2:b3:71:c3: f2:4e:be:e8:af:c8:8a:09:2c:d0:9e:4b:af:ff:2e:e0:f0:eb: 9e:bb:5b:28:b8:45:73:c9:3f:72:30:ae:9a:a4:80:9f:13:b7: da:5e:20:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW+Bwdzm0mnu9wovwOfm2YpSf6dcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUxMTQ2WhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjZkMjU5YWIzMjJiYzk3ODQwMmFjYzczMTExYTYyZjkz ZjBiNzFjMDM3ZDVkNWFiNzM2OWUxNWZkNDllODcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBLQJ1Vw2Ymt73dUnIjrB/VhIBSitliYUBOy9OLnDGsoto GVGmeL3tkJA7laz8kbX7bnIsDh2I0MKHpqndX+K1+tW8PL5l0E6bGDI8MkNXuHKB 3GOm60WIgmLPI5w0KIMJzdpne+Uuo6FN9lK78HitOBczmhqR/tUYP4q1F3GuBr6R S3FH6FRMwWfUdjIh6fWvURSHRXW8yyydFjtpF6LSgoe6HCRBOJp36+wRcI2asdGE thYqULMgd3sqLXTH7q3FU2b9rh8kjN5OgeHTPxFsMJI5ZRyLgUIO5rQ13Wkc5avh /r8EERNZ+/uc2C7tJBXTJQ604NjBAidJ+NwCkcctAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUegIr1ptDSJGXF0czJRJedLDASJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2YzMDgwLWM4NjgtNGM2OS1hMjNlLThkOWQ3ZGNlOTFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgjANBgkqhkiG9w0BAQsFAAOCAQEACey69tNPHcoCYIeaCsQbQQVshr1W bc2WijhzgQ80CuHwi8wKSLvlCI9o8BzmqdFUG20t6mRmmvs/egaiV+vg9AN030b0 NVaR3RCDo/56ZTDLUc05FAsiUzXNeOdxd665TTQbgzL8PvOLxMLRoHhpUTsUVDVQ 8TXrendW5axPFuwSE7JN4fyrncw/QIBW1qcEzTeggtYdtzH4hL2MiUKsvT9xy5sh j6gWPV2Jt9bXQaM3Y+XzcXHgoUPJsEOGA0g7smYJyrbxTNzhOOUVTVe4nAMvlF7S s3HD8k6+6K/Iigks0J5Lr/8u4PDrnrtbKLhFc8k/cjCumqSAnxO32l4g/Q== -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:06 2025 by rpki-client