$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa File: e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa (raw, json) Hash identifier: Op7c05jEdU+U964Cmq+yDRO4nTO5k7JBByUcCemLnKo= Subject key identifier: 0A:01:CB:CC:E1:8E:16:39:64:3B:05:0D:C3:B8:26:C2:F6:D3:56:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 767345B314D1C8FAFBCACAEFC0047BD230257635 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa Signing time: Mon 01 Sep 2025 15:11:07 +0000 ROA not before: Mon 01 Sep 2025 15:11:07 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:73:45:b3:14:d1:c8:fa:fb:ca:ca:ef:c0:04:7b:d2:30:25:76:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:11:07 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=b7a0a8a7bb333d288e04e3a29bd32dd6531098b6f8b5872e17c38c7986006c9b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:13:91:57:e1:46:c4:7d:64:c3:2f:a9:72: 4a:10:cb:05:08:f9:96:ae:5a:dd:9e:dd:a5:e9:0d: c4:0f:70:fc:b1:22:50:21:6a:c1:78:a9:a4:31:2c: 7b:a4:30:f5:f2:45:22:66:88:14:18:25:9b:72:3f: 43:55:e1:42:07:b9:0e:3e:32:2a:95:1c:52:69:d2: 79:44:84:43:c6:9e:56:61:36:9e:8b:0d:6f:ca:16: a0:43:78:92:72:59:60:65:50:1b:52:5f:78:03:e0: b8:5f:60:7c:64:c2:48:0b:e4:26:77:e1:26:fc:97: b2:b0:93:38:28:fb:f8:e2:e8:ea:37:d7:5b:de:1a: b9:51:a5:d3:98:fe:93:ff:a6:d8:ad:be:46:c8:c6: 0c:6b:d6:c7:21:41:8f:13:e6:50:42:bc:b1:52:f0: cf:b0:39:2b:58:31:05:84:9c:17:9e:db:c3:b0:56: b7:33:67:2c:2c:e0:b5:2d:42:57:1a:70:6b:57:f2: 69:6c:2d:e4:af:6a:a1:91:ec:50:ac:8b:42:ab:53: 8b:28:ad:72:49:70:47:c3:3d:c9:94:75:d7:60:c0: 45:00:d8:3e:d1:dd:6d:95:18:e3:e4:c3:53:1a:e3: bb:fd:e6:d1:7b:52:2c:e7:a1:ac:09:ca:05:27:1c: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:01:CB:CC:E1:8E:16:39:64:3B:05:0D:C3:B8:26:C2:F6:D3:56:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.224.0/19 Signature Algorithm: sha256WithRSAEncryption 44:54:93:03:b6:dc:c4:bd:04:df:40:d9:53:10:76:c6:bd:2b: e8:4a:75:b4:5c:50:4f:09:90:75:05:e8:d4:96:31:a4:06:8f: f7:b2:c5:2f:6a:c2:d5:44:cf:99:04:c0:e0:5d:15:d6:0a:1c: 61:46:b7:73:c4:c5:fe:f0:cd:75:2a:5d:c1:61:e8:0a:df:39: 8c:c2:75:93:4d:7b:3b:99:fb:8b:39:16:47:09:c7:3d:a3:6a: 18:09:a3:a1:86:8b:f7:9f:da:b9:03:c9:ac:4b:68:1c:54:98: 73:ff:7c:08:ec:f5:06:6c:14:31:fc:bf:6a:af:e1:50:60:4b: 46:f2:1c:2e:4a:15:f4:be:d9:46:11:eb:47:62:33:4c:5e:78: 66:ca:0a:30:97:f0:c1:c2:8d:89:c0:6f:ba:6d:99:f2:2d:02: 44:bf:ae:4d:1f:3c:4e:aa:fa:00:19:0b:d5:e7:7d:64:38:ce: 26:cc:3a:c5:8b:a1:fa:98:5c:fb:e7:13:c3:eb:32:6c:8f:69: 63:55:18:24:ae:3a:31:95:db:3f:d9:9e:04:e3:80:2b:5b:34: 11:6a:cc:b5:c2:ee:5e:6f:35:4d:b7:2d:51:21:9c:81:15:f6: 93:87:86:19:e4:72:9e:5b:71:40:d5:d4:ff:2e:6a:00:66:b5: 4c:31:f8:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdnNFsxTRyPr7ysrvwAR70jAldjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUxMTA3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2EwYThhN2JiMzMzZDI4OGUwNGUzYTI5YmQzMmRkNjUz MTA5OGI2ZjhiNTg3MmUxN2MzOGM3OTg2MDA2YzliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmuBORV+FGxH1kwy+pckoQywUI+ZauWt2e3aXpDcQPcPyx IlAhasF4qaQxLHukMPXyRSJmiBQYJZtyP0NV4UIHuQ4+MiqVHFJp0nlEhEPGnlZh Np6LDW/KFqBDeJJyWWBlUBtSX3gD4LhfYHxkwkgL5CZ34Sb8l7Kwkzgo+/ji6Oo3 11veGrlRpdOY/pP/ptitvkbIxgxr1schQY8T5lBCvLFS8M+wOStYMQWEnBee28Ow VrczZyws4LUtQlcacGtX8mlsLeSvaqGR7FCsi0KrU4sorXJJcEfDPcmUdddgwEUA 2D7R3W2VGOPkw1Ma47v95tF7UiznoawJygUnHNc1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCgHLzOGOFjlkOwUNw7gmwvbTVvkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1MTFjM2FiLWEzZDQtNDM0NC05ZTE5LWRkZDViOGMwZTEwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOOAwDQYJKoZIhvcNAQELBQADggEBAERUkwO23MS9BN9A2VMQdsa9K+hK dbRcUE8JkHUF6NSWMaQGj/eyxS9qwtVEz5kEwOBdFdYKHGFGt3PExf7wzXUqXcFh 6ArfOYzCdZNNezuZ+4s5FkcJxz2jahgJo6GGi/ef2rkDyaxLaBxUmHP/fAjs9QZs FDH8v2qv4VBgS0byHC5KFfS+2UYR60diM0xeeGbKCjCX8MHCjYnAb7ptmfItAkS/ rk0fPE6q+gAZC9XnfWQ4zibMOsWLofqYXPvnE8PrMmyPaWNVGCSuOjGV2z/ZngTj gCtbNBFqzLXC7l5vNU23LVEhnIEV9pOHhhnkcp5bcUDV1P8uagBmtUwx+GA= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:32 2025 by rpki-client