$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa File: edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa (raw, json) Hash identifier: 8DA5bTQaZ+xMR8H37oyIl87QzPYxdCgWK2K9k/heZnU= Subject key identifier: 4F:CC:BD:B9:39:91:6A:C3:0E:F4:2B:0B:7A:99:D5:6D:41:BC:F0:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B0A786CC25A07278C49E1793CE3E84832172A34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa Signing time: Sat 30 Aug 2025 00:31:17 +0000 ROA not before: Sat 30 Aug 2025 00:31:17 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.18.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0a:78:6c:c2:5a:07:27:8c:49:e1:79:3c:e3:e8:48:32:17:2a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:17 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=be0cbb52ace5fc4c45052ecc6d2db302fe7c440823ef9eb18703bac407c007c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:9c:96:f5:17:16:8f:e7:d6:94:86:ad:7f: 0b:6c:fe:80:7b:99:0c:be:6b:8d:92:b8:d2:b2:87: f3:ef:e8:48:77:9f:7a:2d:61:59:81:5f:21:11:18: 86:72:2f:1b:bb:ac:11:aa:24:62:ce:6c:f0:10:83: 8c:62:12:c7:03:8d:56:8b:6e:d9:6e:8f:00:71:a2: 17:86:b6:ea:0a:48:64:36:c5:ab:18:c7:4f:27:92: 8a:b6:2f:9a:ae:3b:04:55:d3:9f:ee:cb:bf:28:12: 5b:96:8e:f8:8c:fa:d2:0f:25:68:d0:9e:60:22:b7: 22:14:31:b6:30:7b:8e:fe:02:47:56:c3:13:af:71: b3:14:0b:f4:1b:5d:ff:7e:12:ac:f3:b8:09:bd:72: af:57:83:1a:20:16:ab:a6:59:98:72:b6:11:f3:bf: e2:43:dc:c1:3c:1e:de:da:62:13:57:93:ac:a3:dc: e0:f9:ac:6c:b1:61:f1:ca:4d:dd:e9:72:72:92:e9: de:6b:76:8c:13:5c:e1:1e:b6:cf:f9:d9:f4:fd:ad: 87:76:74:17:20:11:0e:06:7d:92:80:c3:59:3e:b7: f0:16:e4:e5:7b:02:eb:f0:96:8d:09:07:c2:a5:35: 08:23:d4:64:da:4c:c4:ac:59:66:f4:56:34:af:7e: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CC:BD:B9:39:91:6A:C3:0E:F4:2B:0B:7A:99:D5:6D:41:BC:F0:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.18.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:a4:d1:c5:9d:fc:dd:1f:c7:2d:55:c3:29:a3:b0:6e:85:31: 16:14:db:f3:b0:a1:de:01:3e:84:e1:8d:ee:69:cf:a9:6e:bb: 40:5a:75:3c:34:1e:d6:54:6b:c8:4d:29:da:7f:2e:52:69:a9: e3:41:23:1f:da:27:6f:1a:2b:18:48:5b:55:70:ef:1c:7a:43: c0:29:a9:f3:63:da:59:50:51:20:75:c8:da:d8:10:dd:a9:45: 4a:dd:65:c2:db:db:2e:3f:22:b3:fe:61:e8:c0:34:03:b6:e2: 8e:a9:e8:76:1f:32:25:0c:de:1b:9e:c6:59:c3:1d:da:33:22: f8:81:0a:90:7b:a0:f1:d1:66:b9:d5:a8:e4:97:b3:f8:1a:77: e5:f8:19:cc:95:e7:81:cb:72:ce:d0:59:bc:ca:dd:4a:e6:8a: 11:f4:e1:8e:ef:80:91:0b:32:0b:47:13:16:64:4e:ea:e3:2a: 03:30:75:48:4d:14:cb:69:fb:b0:c7:d4:ed:eb:0b:0c:6d:ee: e8:2b:64:c4:13:6f:8b:72:79:26:32:81:0d:36:44:36:99:ca: b8:a0:0f:62:02:87:32:f8:4c:b8:8e:7c:4c:bf:6c:46:c1:c9: 75:2d:d6:37:36:88:8b:00:9c:0d:83:f8:88:30:3f:0f:f0:0e: 52:ce:41:46 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOwp4bMJaByeMSeF5POPoSDIXKjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTE3WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTBjYmI1MmFjZTVmYzRjNDUwNTJlY2M2ZDJkYjMwMmZl N2M0NDA4MjNlZjllYjE4NzAzYmFjNDA3YzAwN2MyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEe5yW9RcWj+fWlIatfwts/oB7mQy+a42SuNKyh/Pv6Eh3 n3otYVmBXyERGIZyLxu7rBGqJGLObPAQg4xiEscDjVaLbtlujwBxoheGtuoKSGQ2 xasYx08nkoq2L5quOwRV05/uy78oEluWjviM+tIPJWjQnmAityIUMbYwe47+AkdW wxOvcbMUC/QbXf9+EqzzuAm9cq9XgxogFqumWZhythHzv+JD3ME8Ht7aYhNXk6yj 3OD5rGyxYfHKTd3pcnKS6d5rdowTXOEets/52fT9rYd2dBcgEQ4GfZKAw1k+t/AW 5OV7Auvwlo0JB8KlNQgj1GTaTMSsWWb0VjSvfh/jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUT8y9uTmRasMO9CsLepnVbUG88JgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYWY2ZWI0LWVmNGYtNDljZC1iMDZlLTk3ZTJiZDc4YzgyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4EjANBgkqhkiG9w0BAQsFAAOCAQEAGKTRxZ383R/HLVXDKaOwboUxFhTb 87Ch3gE+hOGN7mnPqW67QFp1PDQe1lRryE0p2n8uUmmp40EjH9onbxorGEhbVXDv HHpDwCmp82PaWVBRIHXI2tgQ3alFSt1lwtvbLj8is/5h6MA0A7bijqnodh8yJQze G57GWcMd2jMi+IEKkHug8dFmudWo5Jez+Bp35fgZzJXngctyztBZvMrdSuaKEfTh ju+AkQsyC0cTFmRO6uMqAzB1SE0Uy2n7sMfU7esLDG3u6CtkxBNvi3J5JjKBDTZE NpnKuKAPYgKHMvhMuI58TL9sRsHJdS3WNzaIiwCcDYP4iDA/D/AOUs5BRg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:13 2025 by rpki-client