$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa File: c590db87-4707-46ca-8c28-ace87ad34efb.roa (raw, json) Hash identifier: MkShcHlDEwZfPekd2z+WvBw0EhYWBaIbR1T7Ag64Tjw= Subject key identifier: 1E:9E:F7:F6:DA:44:86:B8:11:3D:5B:0F:AC:3B:86:D5:2F:0B:C1:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 332AE4CF7B88196E2C4ECCB5E034BFCA46A7D748 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa Signing time: Wed 13 Aug 2025 00:21:13 +0000 ROA not before: Wed 13 Aug 2025 00:21:13 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2a:e4:cf:7b:88:19:6e:2c:4e:cc:b5:e0:34:bf:ca:46:a7:d7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:21:13 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=fccdd16040a45b9ccc62095331a5093178cf982c1ded5f6477e53745f629977d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:97:9c:4b:b7:74:8f:4d:e8:59:23:a0:90: 30:e7:10:c9:8d:03:e8:1c:05:38:cc:66:a9:70:84: 44:f9:5c:b0:47:7b:29:97:2e:3f:f9:db:68:06:33: d2:e2:30:b5:7a:79:fb:6a:98:63:a0:ff:df:59:d2: 4b:dd:95:c4:75:8d:cf:24:35:cc:7f:c8:8b:4b:7d: 5c:bc:20:e8:56:80:b7:69:f7:33:31:b9:ee:47:e1: 63:6e:bb:a3:96:3b:37:3a:71:58:9f:3b:ff:62:07: 8c:af:ec:34:de:77:1a:6e:7c:b0:f6:cb:40:6f:61: 68:ab:d6:f9:7c:64:55:b6:24:4a:e5:ed:06:77:1c: 05:a0:5a:b9:98:f5:7d:19:03:61:19:f4:90:32:3c: 0b:40:f8:50:06:45:86:b7:81:c5:79:20:77:7a:00: 6c:c5:f9:4f:75:08:10:30:eb:40:e6:f8:f9:98:85: 05:52:65:3e:95:15:42:5f:3c:ae:83:57:31:79:ac: 75:3b:f6:8b:54:02:8f:1b:50:f8:8c:cf:25:f0:f0: 51:05:db:07:0b:be:95:e1:93:c1:4b:bd:0a:1e:a9: 13:1d:10:a2:1a:6d:ee:b0:9b:4a:84:3a:af:c9:fa: 94:6a:de:63:5b:20:10:eb:47:03:6f:2d:92:05:88: 34:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:F7:F6:DA:44:86:B8:11:3D:5B:0F:AC:3B:86:D5:2F:0B:C1:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:d6:d6:47:e7:3c:ff:35:e9:17:09:de:9c:d1:2f:dc:a8:6c: 64:bd:d2:08:f3:1a:38:fc:89:fc:d4:22:91:88:f1:26:e0:7d: 03:9e:94:95:3d:9c:0d:b3:98:8d:39:ea:e1:c9:7d:9d:07:15: 9d:d3:3e:3e:7a:4b:15:c7:b9:f9:8b:c0:d8:eb:0a:ac:e2:a4: c4:12:a5:03:9a:8c:c0:e7:b4:cd:83:d3:db:69:72:89:76:0b: 12:45:95:42:95:65:9c:7e:77:da:49:73:ce:82:36:18:5a:e3: a7:20:11:fb:01:e7:2b:41:af:6a:b7:ce:11:39:4a:01:6c:1f: 45:3a:b2:f4:c4:ae:9a:2a:21:8f:97:23:74:df:57:bb:d5:55: fd:33:4c:5c:c4:c3:7a:4a:e7:8c:3e:33:b0:14:b8:af:97:6b: d3:fc:e6:26:a7:df:f4:f1:e3:fa:24:da:f1:b4:81:bc:f3:84: 5c:70:36:e9:90:fb:54:e8:c3:b7:41:b5:43:ff:c0:10:a5:15: 37:d6:13:6c:ed:b1:66:1d:68:b2:a1:85:ad:94:b1:1d:e2:4b: 3c:fc:ae:b9:3a:7e:79:16:63:8c:69:35:f0:5a:1b:ab:f6:e7: b9:45:3a:1e:b8:10:ea:1f:21:16:d8:3d:e7:31:4c:b3:be:06: ad:57:b9:7b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMyrkz3uIGW4sTsy14DS/ykan10gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAyMTEzWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2NkZDE2MDQwYTQ1YjljY2M2MjA5NTMzMWE1MDkzMTc4 Y2Y5ODJjMWRlZDVmNjQ3N2U1Mzc0NWY2Mjk5NzdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjC5ecS7d0j03oWSOgkDDnEMmNA+gcBTjMZqlwhET5XLBH eymXLj/522gGM9LiMLV6eftqmGOg/99Z0kvdlcR1jc8kNcx/yItLfVy8IOhWgLdp 9zMxue5H4WNuu6OWOzc6cVifO/9iB4yv7DTedxpufLD2y0BvYWir1vl8ZFW2JErl 7QZ3HAWgWrmY9X0ZA2EZ9JAyPAtA+FAGRYa3gcV5IHd6AGzF+U91CBAw60Dm+PmY hQVSZT6VFUJfPK6DVzF5rHU79otUAo8bUPiMzyXw8FEF2wcLvpXhk8FLvQoeqRMd EKIabe6wm0qEOq/J+pRq3mNbIBDrRwNvLZIFiDQVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHp739tpEhrgRPVsPrDuG1S8LwWswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1OTBkYjg3LTQ3MDctNDZjYS04YzI4LWFjZTg3YWQzNGVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2ITANBgkqhkiG9w0BAQsFAAOCAQEABdbWR+c8/zXpFwnenNEv3KhsZL3S CPMaOPyJ/NQikYjxJuB9A56UlT2cDbOYjTnq4cl9nQcVndM+PnpLFce5+YvA2OsK rOKkxBKlA5qMwOe0zYPT22lyiXYLEkWVQpVlnH532klzzoI2GFrjpyAR+wHnK0Gv arfOETlKAWwfRTqy9MSumiohj5cjdN9Xu9VV/TNMXMTDekrnjD4zsBS4r5dr0/zm Jqff9PHj+iTa8bSBvPOEXHA26ZD7VOjDt0G1Q//AEKUVN9YTbO2xZh1osqGFrZSx HeJLPPyuuTp+eRZjjGk18Fobq/bnuUU6HrgQ6h8hFtg95zFMs74GrVe5ew== -----END CERTIFICATE-----Generated at Thu Aug 21 19:02:35 2025 by rpki-client