$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa File: d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa (raw, json) Hash identifier: RLMzf9gOknuUcFU96Dm+lDZMME17u5Lry0nDzGYTnhM= Subject key identifier: D6:50:98:66:EA:DD:5D:CB:8F:62:05:F7:B7:0B:FB:25:18:99:9C:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BEB6EEF6AF424746E2573F909C5E6CB7DD9373E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa Signing time: Wed 27 Aug 2025 00:41:40 +0000 ROA not before: Wed 27 Aug 2025 00:41:40 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.63.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:eb:6e:ef:6a:f4:24:74:6e:25:73:f9:09:c5:e6:cb:7d:d9:37:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:41:40 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=5e873e0da92033c47125130538ddcb63e94ade3ac0111cf688d5a27e80e73782, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:40:a3:44:be:c0:68:3f:a7:ec:56:3f:c6: bf:65:4c:3a:a3:ed:ea:76:da:ae:d4:b1:2d:eb:bd: 94:7b:db:e2:00:f9:11:61:60:27:12:39:d4:44:f3: 4c:f3:2e:59:54:1f:dc:35:e2:48:cc:b4:f7:5e:c5: 10:6a:5f:2b:6a:dd:9f:98:71:de:8c:0c:37:71:2e: 8f:d9:c1:e9:fd:83:85:d9:6f:8c:6d:1a:f9:61:d4: 1a:10:c5:e7:fe:de:a5:25:b3:85:06:c2:84:2e:1d: b0:c4:54:26:6a:8b:9e:ad:f3:19:6b:53:6d:b4:92: ed:27:46:f1:fa:17:a3:a4:a6:2f:48:81:68:2e:2e: 5c:da:f6:ed:88:13:41:79:8d:5e:40:fe:8d:a0:b3: af:06:52:1d:89:a5:2a:19:7e:54:d1:93:bc:eb:2a: 3e:0a:5c:90:b3:87:29:4e:85:dc:04:12:b5:d3:6b: dc:1a:23:c3:3c:d6:5b:4d:98:f8:51:72:ff:af:d8: 5c:68:e1:61:ff:02:d5:65:1d:2f:78:98:96:4e:5a: 88:9f:8e:85:f6:7e:bd:cd:b4:cf:fe:9a:13:e7:9a: 13:f2:fd:78:c2:15:bc:2c:2f:4f:df:36:18:37:20: 59:2a:f9:ca:9c:86:1c:19:ff:f8:74:7e:78:75:6a: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:98:66:EA:DD:5D:CB:8F:62:05:F7:B7:0B:FB:25:18:99:9C:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.63.92.0/23 Signature Algorithm: sha256WithRSAEncryption cd:f7:41:29:bd:f9:a7:ab:ea:3f:28:f7:5e:b1:b3:f3:c9:bb: 8c:2a:76:4e:da:9c:6e:81:96:64:d8:6f:47:b0:94:f9:44:74: 9e:d3:65:91:a2:f5:48:5f:a7:d4:12:29:89:c9:9d:fb:4d:5c: 36:37:e4:a4:be:9d:60:d1:3e:74:87:35:f4:69:b0:ed:dc:d2: dd:ef:5b:c2:d6:79:b4:38:ec:bc:1a:93:27:44:ae:1b:6b:5b: 38:7b:b0:a2:27:8f:dd:95:06:e1:4d:3b:93:f2:65:d4:13:be: 3c:91:c9:32:74:61:38:dd:ee:b6:47:e0:c5:eb:22:3d:f3:97: 73:50:a8:66:ed:e9:ef:d6:a6:72:88:2a:5d:8a:98:e4:96:16: 27:f2:af:6f:39:3b:2f:50:76:9e:a5:3d:ee:1b:2e:8c:8c:9d: dc:b5:d4:3d:bb:56:e6:d0:94:33:77:81:95:e1:35:2e:28:5c: 9d:e4:e4:97:88:f4:72:c8:f6:dc:1e:7f:60:a7:e6:f9:d7:da: 44:ab:a3:65:fe:a4:ab:f9:2c:22:cc:9c:c7:aa:59:96:77:75: d4:0a:30:97:d8:59:be:28:36:1b:1f:be:2f:5c:56:72:d0:82: 37:d7:32:3f:75:ac:e8:3a:7d:24:c7:49:d8:1e:ef:01:96:22: 7c:7a:47:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK+tu72r0JHRuJXP5CcXmy33ZNz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA0MTQwWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTg3M2UwZGE5MjAzM2M0NzEyNTEzMDUzOGRkY2I2M2U5 NGFkZTNhYzAxMTFjZjY4OGQ1YTI3ZTgwZTczNzgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp00CjRL7AaD+n7FY/xr9lTDqj7ep22q7UsS3rvZR72+IA +RFhYCcSOdRE80zzLllUH9w14kjMtPdexRBqXytq3Z+Ycd6MDDdxLo/Zwen9g4XZ b4xtGvlh1BoQxef+3qUls4UGwoQuHbDEVCZqi56t8xlrU220ku0nRvH6F6Okpi9I gWguLlza9u2IE0F5jV5A/o2gs68GUh2JpSoZflTRk7zrKj4KXJCzhylOhdwEErXT a9waI8M81ltNmPhRcv+v2Fxo4WH/AtVlHS94mJZOWoifjoX2fr3NtM/+mhPnmhPy /XjCFbwsL0/fNhg3IFkq+cqchhwZ//h0fnh1arJPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1lCYZurdXcuPYgX3twv7JRiZnOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyODY4ZTMwLTIxYjQtNDUxNi1hNjNjLWZjNzZjMDliYjdkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQP1wwDQYJKoZIhvcNAQELBQADggEBAM33QSm9+aer6j8o916xs/PJu4wq dk7anG6BlmTYb0ewlPlEdJ7TZZGi9Uhfp9QSKYnJnftNXDY35KS+nWDRPnSHNfRp sO3c0t3vW8LWebQ47LwakydErhtrWzh7sKInj92VBuFNO5PyZdQTvjyRyTJ0YTjd 7rZH4MXrIj3zl3NQqGbt6e/WpnKIKl2KmOSWFifyr285Oy9Qdp6lPe4bLoyMndy1 1D27VubQlDN3gZXhNS4oXJ3k5JeI9HLI9twef2Cn5vnX2kSro2X+pKv5LCLMnMeq WZZ3ddQKMJfYWb4oNhsfvi9cVnLQgjfXMj91rOg6fSTHSdge7wGWInx6R48= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:11 2025 by rpki-client