$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9a02d66-5ff2-4f4f-a4d5-f86f5ee0f37f.roa File: f9a02d66-5ff2-4f4f-a4d5-f86f5ee0f37f.roa (raw, json) Hash identifier: Sl7wqhSMKnO/E/vKP/xKKu6hTQ1Utv2JOkT6QDu2e6c= Subject key identifier: C4:BF:6E:FA:F3:30:22:40:87:FC:58:2D:63:DE:A5:00:85:4A:91:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54B642E40B5D2AB93DF6E4286AEC645F509401DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9a02d66-5ff2-4f4f-a4d5-f86f5ee0f37f.roa Signing time: Mon 18 Aug 2025 15:51:57 +0000 ROA not before: Mon 18 Aug 2025 15:51:57 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 56.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b6:42:e4:0b:5d:2a:b9:3d:f6:e4:28:6a:ec:64:5f:50:94:01:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:51:57 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=b579fc7253db8cd521b2b19bd4d1ec67f3b828305f8278aa92a3df298472a5ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:31:93:77:ca:72:b2:e2:b4:12:3c:93:a1: 95:e1:56:09:69:fc:4b:e0:c1:9f:e0:6b:88:f7:0f: 1f:10:f6:2c:e3:d9:f3:9d:46:5e:ba:3d:23:8e:4e: 73:02:83:44:f5:c7:42:d4:5e:48:2a:77:8c:d2:69: 01:17:14:a4:bc:0f:90:ae:5f:d7:ac:3d:8b:8b:5f: 82:e2:a3:d6:6b:6b:b8:27:17:77:16:6a:19:42:ac: 13:af:bb:0d:ab:2f:c4:a3:d1:ad:1a:6a:75:33:dc: 7d:99:24:a6:c2:32:7f:51:84:09:68:38:9b:a8:2f: ec:d4:72:dd:0b:0c:e0:78:b2:27:c1:93:20:a0:72: c0:2d:91:11:0d:8b:74:e6:a2:5b:89:af:89:4f:8b: 97:74:47:92:14:a9:1b:1d:c6:d6:43:23:ab:b6:3f: 43:bc:be:03:85:52:43:e9:bb:99:a8:72:9f:9e:d6: 1c:73:38:47:4b:73:ba:27:aa:9e:1e:8e:e4:f1:41: 47:0a:f6:41:80:19:d5:32:ab:e5:7c:44:68:93:b6: c8:c6:fb:92:3a:aa:e3:8c:8b:2a:cd:76:6a:2f:9d: a6:23:07:2c:15:9a:32:a8:68:9a:45:ba:38:f5:4d: 62:c7:9d:65:11:f0:d4:65:97:7b:d0:65:16:1e:e7: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:6E:FA:F3:30:22:40:87:FC:58:2D:63:DE:A5:00:85:4A:91:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9a02d66-5ff2-4f4f-a4d5-f86f5ee0f37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:74:6c:e9:20:ba:8c:90:e7:a9:41:75:b3:46:0a:2c:44:6d: 2e:27:a8:fd:70:91:b3:c6:72:42:38:c9:93:09:fc:c7:60:92: bd:91:74:64:55:32:b3:f7:4b:0d:98:ba:9c:17:93:87:2c:e4: 3a:3b:d8:79:c3:d9:ac:31:c0:21:8a:90:4d:95:2d:f5:7b:c1: 67:11:7e:ab:39:e1:4c:a4:d2:90:f4:e2:d7:6a:7d:a3:63:b2: cc:e8:77:8d:c4:a4:be:7f:37:d4:2b:37:8a:60:03:d0:52:1f: 8a:c0:fc:1c:c6:75:3b:82:df:1d:12:e1:09:a4:fb:d8:8d:0a: 2b:4d:18:67:75:eb:dc:a7:49:f6:0d:f2:18:6a:25:ee:80:69: 04:0f:ea:c8:8c:66:9d:e7:ae:66:b9:b1:44:79:4e:34:3a:9d: d1:5d:30:28:ce:0d:15:15:1d:9d:46:15:50:52:fb:79:a4:34: df:84:06:76:8d:5a:c5:b2:a5:66:21:77:01:d7:a9:d8:5a:8f: 49:52:94:ee:80:b5:97:21:89:5d:60:18:72:a3:35:2b:b1:ec: dd:d3:c6:3e:85:37:c8:6d:f8:b6:89:71:ea:5c:6a:e8:5a:2a: 16:c0:f1:95:26:7a:03:0b:5c:7e:e4:55:19:72:e1:7d:8f:56: ba:36:47:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVLZC5AtdKrk99uQoauxkX1CUAdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU1MTU3WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTc5ZmM3MjUzZGI4Y2Q1MjFiMmIxOWJkNGQxZWM2N2Yz YjgyODMwNWY4Mjc4YWE5MmEzZGYyOTg0NzJhNWNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa6jGTd8pysuK0EjyToZXhVglp/EvgwZ/ga4j3Dx8Q9izj 2fOdRl66PSOOTnMCg0T1x0LUXkgqd4zSaQEXFKS8D5CuX9esPYuLX4Lio9Zra7gn F3cWahlCrBOvuw2rL8Sj0a0aanUz3H2ZJKbCMn9RhAloOJuoL+zUct0LDOB4sifB kyCgcsAtkRENi3TmoluJr4lPi5d0R5IUqRsdxtZDI6u2P0O8vgOFUkPpu5mocp+e 1hxzOEdLc7onqp4ejuTxQUcK9kGAGdUyq+V8RGiTtsjG+5I6quOMiyrNdmovnaYj BywVmjKoaJpFujj1TWLHnWUR8NRll3vQZRYe5/XnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxL9u+vMwIkCH/FgtY96lAIVKkTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5YTAyZDY2LTVmZjItNGY0Zi1hNGQ1LWY4NmY1ZWUwZjM3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4gTANBgkqhkiG9w0BAQsFAAOCAQEAqXRs6SC6jJDnqUF1s0YKLERtLieo /XCRs8ZyQjjJkwn8x2CSvZF0ZFUys/dLDZi6nBeThyzkOjvYecPZrDHAIYqQTZUt 9XvBZxF+qznhTKTSkPTi12p9o2OyzOh3jcSkvn831Cs3imAD0FIfisD8HMZ1O4Lf HRLhCaT72I0KK00YZ3Xr3KdJ9g3yGGol7oBpBA/qyIxmneeuZrmxRHlONDqd0V0w KM4NFRUdnUYVUFL7eaQ034QGdo1axbKlZiF3Adep2FqPSVKU7oC1lyGJXWAYcqM1 K7Hs3dPGPoU3yG34tolx6lxq6FoqFsDxlSZ6AwtcfuRVGXLhfY9WujZHpw== -----END CERTIFICATE-----Generated at Thu Aug 21 18:52:20 2025 by rpki-client