$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf6bc7b7-b5c5-4c39-8b0f-c9fbf1805308.roa File: cf6bc7b7-b5c5-4c39-8b0f-c9fbf1805308.roa (raw, json) Hash identifier: m4wgwyLu1126Kj3Jgx+tRx0Jy74WT7oHBUb6/gjhPCQ= Subject key identifier: F2:52:D8:E4:21:4C:02:F6:EB:77:B2:BF:23:94:94:92:B7:01:23:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07649106FAA63C3E7571824D32EDDA5969EC8BA5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf6bc7b7-b5c5-4c39-8b0f-c9fbf1805308.roa Signing time: Mon 01 Sep 2025 15:30:36 +0000 ROA not before: Mon 01 Sep 2025 15:30:36 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:64:91:06:fa:a6:3c:3e:75:71:82:4d:32:ed:da:59:69:ec:8b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:30:36 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=83bbf1e57773dcf246407e32c0da6188cfd206f1dfa645e59c230d03cb874766, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:32:fb:43:3a:38:71:e4:b9:c6:2f:67:62: 50:97:65:f4:bb:e3:47:e7:02:75:78:a4:e3:e6:6d: ad:e7:1c:69:52:e7:2f:db:7c:c7:d1:92:0a:2b:ab: ee:c5:5c:1a:84:a0:1b:bf:f6:f2:ae:b7:da:c8:48: 60:0d:b5:61:24:c1:6f:ea:9e:97:88:90:ba:03:88: 5b:be:1b:e9:df:06:71:af:4b:be:a0:5f:16:47:42: 80:56:ff:01:17:92:d2:e8:ea:f0:66:7d:b9:12:48: 1c:46:07:16:fa:bc:39:9b:22:d1:2e:15:7e:5a:fc: 0d:f7:a9:46:e2:e4:5b:8e:b9:16:19:d6:fc:0b:fc: a1:31:b3:31:ed:c7:3f:34:46:b7:2f:9e:a6:a3:e7: 95:3b:f8:81:4d:bc:70:48:a1:e6:43:ec:b6:08:46: 47:f8:df:34:90:a5:9c:40:24:11:9c:94:ad:2b:a7: 41:a3:bb:86:ef:1b:8b:8b:d8:55:d1:35:3d:69:37: 01:25:ee:6e:5d:96:a1:be:a2:88:b9:d9:a3:58:e4: 32:54:ae:94:c8:79:08:0c:8e:ba:3d:6d:19:a5:9b: fc:a5:af:f5:d3:1e:9b:2c:d8:08:7e:29:7f:94:8d: 37:6e:fa:66:55:c2:d7:63:04:7b:71:5f:42:93:f7: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:D8:E4:21:4C:02:F6:EB:77:B2:BF:23:94:94:92:B7:01:23:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf6bc7b7-b5c5-4c39-8b0f-c9fbf1805308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:45:ae:4f:37:45:12:a1:aa:a0:5a:db:26:81:da:d7:c2:1a: 29:88:e7:6c:d0:2a:21:da:ea:9e:55:1f:74:bc:ec:eb:70:c1: dc:88:9c:1b:91:d0:46:d0:43:1f:da:80:e0:7a:1e:eb:af:00: 47:83:2e:a2:8c:13:37:01:b7:23:99:02:f5:d2:cf:58:a8:05: 9a:4a:ac:00:b4:57:ea:e1:14:93:d1:f1:93:0e:e2:2e:d6:17: 29:8a:fb:8a:f5:c8:63:32:f9:55:21:04:74:16:81:5f:c7:07: 3b:f1:8d:63:29:60:d4:6c:de:37:f1:28:8b:76:2c:9b:30:fe: 77:ec:f2:13:10:a4:c3:84:5d:a9:38:f8:40:f5:74:59:af:4e: 70:27:d9:64:7f:bc:9d:7c:76:a7:b3:5a:b2:00:79:bc:72:4a: 34:51:ae:9c:eb:9c:4f:6b:0a:6b:7c:00:58:ca:4a:6a:ef:09: a2:6f:9d:7f:bb:a9:ba:09:cc:d6:2b:13:5e:7f:b8:b3:36:72: 44:55:f5:f8:38:16:3b:eb:8f:12:23:91:51:4c:e2:e9:23:09: e7:f4:0d:34:81:b9:ed:ef:72:ca:cd:31:3e:81:1f:9c:f2:5c: ae:07:aa:43:ad:00:4c:d6:10:73:12:21:04:8f:07:44:9e:6b: da:94:07:be -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB2SRBvqmPD51cYJNMu3aWWnsi6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUzMDM2WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2JiZjFlNTc3NzNkY2YyNDY0MDdlMzJjMGRhNjE4OGNm ZDIwNmYxZGZhNjQ1ZTU5YzIzMGQwM2NiODc0NzY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz/jL7Qzo4ceS5xi9nYlCXZfS740fnAnV4pOPmba3nHGlS 5y/bfMfRkgorq+7FXBqEoBu/9vKut9rISGANtWEkwW/qnpeIkLoDiFu+G+nfBnGv S76gXxZHQoBW/wEXktLo6vBmfbkSSBxGBxb6vDmbItEuFX5a/A33qUbi5FuOuRYZ 1vwL/KExszHtxz80Rrcvnqaj55U7+IFNvHBIoeZD7LYIRkf43zSQpZxAJBGclK0r p0Gju4bvG4uL2FXRNT1pNwEl7m5dlqG+ooi52aNY5DJUrpTIeQgMjro9bRmlm/yl r/XTHpss2Ah+KX+UjTdu+mZVwtdjBHtxX0KT9wmxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8lLY5CFMAvbrd7K/I5SUkrcBI2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNmJjN2I3LWI1YzUtNGMzOS04YjBmLWM5ZmJmMTgwNTMwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4OzANBgkqhkiG9w0BAQsFAAOCAQEALkWuTzdFEqGqoFrbJoHa18IaKYjn bNAqIdrqnlUfdLzs63DB3IicG5HQRtBDH9qA4Hoe668AR4MuoowTNwG3I5kC9dLP WKgFmkqsALRX6uEUk9Hxkw7iLtYXKYr7ivXIYzL5VSEEdBaBX8cHO/GNYylg1Gze N/Eoi3YsmzD+d+zyExCkw4RdqTj4QPV0Wa9OcCfZZH+8nXx2p7NasgB5vHJKNFGu nOucT2sKa3wAWMpKau8Jom+df7upugnM1isTXn+4szZyRFX1+DgWO+uPEiORUUzi 6SMJ5/QNNIG57e9yys0xPoEfnPJcrgeqQ60ATNYQcxIhBI8HRJ5r2pQHvg== -----END CERTIFICATE-----Generated at Tue Sep 16 22:27:19 2025 by rpki-client