$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa File: ef414d28-7d98-4c41-931b-d7958ded262d.roa (raw, json) Hash identifier: bL0wUIIrClEGqCWaBg1xqIt8kBfG9B13ht91Hl4jn0Q= Subject key identifier: B3:98:7F:CE:BF:BE:09:FC:D9:C9:EB:B5:DA:88:7A:A3:51:77:C2:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65CF70D11D95CB77EFF861028E9735BD40BCE51D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa Signing time: Tue 02 Sep 2025 00:21:37 +0000 ROA not before: Tue 02 Sep 2025 00:21:37 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cf:70:d1:1d:95:cb:77:ef:f8:61:02:8e:97:35:bd:40:bc:e5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:21:37 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=96b41128bd9d21803c59fc61e70f0b737273a325b7c1622b0a70ff024c17b9e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:fe:e7:95:1d:60:a2:57:7b:35:9a:a1:96: 47:82:8a:45:7d:c0:ef:58:d8:c5:6a:31:b7:05:5d: 29:9a:62:98:23:0e:b3:3d:38:15:24:79:96:d6:4a: 56:b3:e1:b8:06:d6:d9:47:82:62:5a:bf:02:0c:cc: 76:c4:e8:38:44:33:07:45:cc:5d:f7:eb:cc:39:7a: 55:66:a6:0c:7f:a5:5e:18:f5:58:4d:8e:fa:d4:d2: c2:f4:03:56:2e:a3:19:a2:45:3d:17:9c:aa:09:dd: 75:bd:a2:83:7f:82:f2:48:8e:99:66:f0:14:3c:1a: 42:ac:31:c1:60:97:fb:e1:ec:bb:33:9b:32:3e:1b: 31:8d:9e:7f:cd:1e:b4:7c:7e:64:da:37:f2:fd:62: de:48:52:df:04:e6:b4:51:4e:a1:97:24:bc:05:80: 1e:e7:75:80:7a:2c:9b:6f:e6:2c:33:1c:2f:7b:d5: 5f:6a:71:47:30:ef:42:59:5f:a3:54:56:a2:86:37: 42:ab:13:57:18:77:19:35:90:aa:1e:00:09:d1:c8: 43:2a:09:04:c6:e2:2b:db:2f:39:57:3b:46:2c:86: 07:85:b5:4c:b3:f2:c3:65:5e:0f:bb:2e:fa:b4:a8: 7e:7a:ba:fe:26:1a:84:ab:42:39:c1:19:3a:29:a6: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:7F:CE:BF:BE:09:FC:D9:C9:EB:B5:DA:88:7A:A3:51:77:C2:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:ff:8f:f5:66:a3:6a:6e:cb:94:2b:24:33:f4:a9:55:e0:30: ac:45:f9:b9:1f:f1:5a:4a:7f:bd:ba:54:02:23:52:43:c8:a6: 36:f9:66:fc:7a:ec:fd:37:2d:f4:e2:28:ef:39:bc:fb:ab:a5: 2d:9e:48:e4:5c:df:bc:87:38:17:f1:d0:ce:7d:4a:8d:92:c5: 24:71:0e:24:47:2b:f1:56:45:a3:93:f3:cf:fa:ce:c5:63:31: 2a:e6:15:d0:a7:66:9c:ab:e0:4b:4d:8c:f4:3b:2c:86:e0:f3: 0a:9e:03:02:29:64:34:f0:e3:2f:39:a8:d1:ee:f7:32:f2:c1: ef:4b:ee:42:df:22:36:3a:6b:41:67:64:b1:99:13:21:4f:ea: 2e:7c:01:1f:86:dc:61:02:f4:56:cb:03:d3:98:0b:a9:47:da: d5:ef:4e:09:33:41:73:62:e2:20:26:3f:51:81:46:8f:7a:48: 47:78:b5:4a:b5:32:47:52:54:57:02:f1:fe:ea:3c:90:fb:8c: 3a:5e:0d:2f:53:fc:d5:72:29:5f:87:a3:ad:39:17:39:9e:bd: 70:0b:69:8a:56:40:7f:21:bc:09:82:3f:cc:33:6a:e7:89:9c: fe:ae:96:99:6a:18:4a:37:b5:9c:3a:8f:51:45:00:82:ba:e3: c7:11:9e:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZc9w0R2Vy3fv+GECjpc1vUC85R0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAyMTM3WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmI0MTEyOGJkOWQyMTgwM2M1OWZjNjFlNzBmMGI3Mzcy NzNhMzI1YjdjMTYyMmIwYTcwZmYwMjRjMTdiOWUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjsv7nlR1gold7NZqhlkeCikV9wO9Y2MVqMbcFXSmaYpgj DrM9OBUkeZbWSlaz4bgG1tlHgmJavwIMzHbE6DhEMwdFzF3368w5elVmpgx/pV4Y 9VhNjvrU0sL0A1YuoxmiRT0XnKoJ3XW9ooN/gvJIjplm8BQ8GkKsMcFgl/vh7Lsz mzI+GzGNnn/NHrR8fmTaN/L9Yt5IUt8E5rRRTqGXJLwFgB7ndYB6LJtv5iwzHC97 1V9qcUcw70JZX6NUVqKGN0KrE1cYdxk1kKoeAAnRyEMqCQTG4ivbLzlXO0YshgeF tUyz8sNlXg+7Lvq0qH56uv4mGoSrQjnBGToppkEdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUs5h/zr++CfzZyeu12oh6o1F3wkkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNDE0ZDI4LTdkOTgtNGM0MS05MzFiLWQ3OTU4ZGVkMjYyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5WTANBgkqhkiG9w0BAQsFAAOCAQEAAP+P9Wajam7LlCskM/SpVeAwrEX5 uR/xWkp/vbpUAiNSQ8imNvlm/Hrs/Tct9OIo7zm8+6ulLZ5I5FzfvIc4F/HQzn1K jZLFJHEOJEcr8VZFo5Pzz/rOxWMxKuYV0KdmnKvgS02M9DsshuDzCp4DAilkNPDj Lzmo0e73MvLB70vuQt8iNjprQWdksZkTIU/qLnwBH4bcYQL0VssD05gLqUfa1e9O CTNBc2LiICY/UYFGj3pIR3i1SrUyR1JUVwLx/uo8kPuMOl4NL1P81XIpX4ejrTkX OZ69cAtpilZAfyG8CYI/zDNq54mc/q6WmWoYSje1nDqPUUUAgrrjxxGeJw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:48 2025 by rpki-client