$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa File: 25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa (raw, json) Hash identifier: 9kXLUY6d4ofgdWSOkkXc6037K4h2+J94n1sTk9Rsl4o= Subject key identifier: D4:CE:05:7F:EF:6D:14:19:79:61:66:92:7F:CB:02:FB:14:B3:C0:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62640842F92121D39E7E0C55A501E35A77B550CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa Signing time: Mon 04 Aug 2025 17:31:25 +0000 ROA not before: Mon 04 Aug 2025 17:31:25 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:64:08:42:f9:21:21:d3:9e:7e:0c:55:a5:01:e3:5a:77:b5:50:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:31:25 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=b91ee9660ea0988f7687b51ca2dcd71876a9c5fb432688a0838a5e4ff7ed3eb4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:f7:3d:8c:56:0f:4e:fb:df:92:ab:2a:ae: d4:35:a8:3f:cf:b1:4f:fe:0a:80:26:3c:d7:0d:bb: 5c:4b:43:e7:ef:cd:8c:7f:64:14:2d:e7:c7:0a:14: 00:5c:d6:3e:72:20:b4:3e:17:3d:f4:db:7c:61:6e: f8:61:b6:f3:ba:ab:62:f6:9a:58:60:69:f8:ca:21: 13:92:09:31:ab:3f:d1:58:fc:43:71:35:3f:2b:1a: 77:64:08:b8:8c:81:91:38:df:08:5d:f1:41:52:df: 60:26:6d:91:c2:2d:23:af:bb:c8:22:96:f7:92:a5: 64:12:46:d0:f6:ff:b1:9a:43:2d:c0:ce:b9:9a:d0: be:fc:c0:68:d4:56:89:7a:2d:65:ea:83:9b:7f:cd: f6:30:6d:2f:60:d5:71:2e:78:d9:e1:0e:dc:07:91: 17:01:39:55:3e:b4:93:85:e9:27:96:78:bb:f5:8d: e7:88:eb:ec:03:8a:a3:7e:de:a1:3e:fa:b2:b5:13: 7e:ce:79:0c:a6:12:44:37:f8:27:51:bd:d1:bf:0d: 29:30:33:5e:e7:8a:20:76:f0:c2:3b:0f:92:b8:04: c9:b6:a9:68:00:d6:f5:42:7e:9e:85:81:43:a3:d1: cc:d9:cb:ae:7b:54:26:8a:9f:9d:bd:79:a5:e0:de: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:05:7F:EF:6D:14:19:79:61:66:92:7F:CB:02:FB:14:B3:C0:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.68.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1f:07:ae:30:ae:e7:61:e2:12:bd:08:74:b5:67:df:89:49: ae:72:cc:a1:f7:cf:27:03:90:bd:29:32:b3:bb:31:3f:d8:b4: 54:4e:3e:24:02:81:bf:e1:99:81:7b:5b:04:9b:30:43:e1:39: af:ff:6a:60:ae:04:4a:05:40:02:5e:a1:be:2f:d4:d6:9d:4d: 79:46:8e:0b:cd:c5:5b:10:bb:36:8d:b5:88:b5:85:74:90:81: 99:c7:77:e7:90:cb:b9:8c:73:a5:70:c4:96:92:67:88:47:f4: 0d:4b:ed:ce:e6:f4:fd:07:1a:c5:c4:f0:31:94:a2:cb:b1:3f: 2e:5d:9b:4d:9c:ab:56:42:93:b5:8b:97:8b:3c:a5:86:54:a9: b4:df:35:58:5c:51:2a:bd:b2:72:c6:c2:8c:d4:a4:f0:c5:f1: 3e:c7:92:91:39:f8:5c:f0:f0:69:4d:df:7f:7d:a8:b6:50:12: b8:cc:66:16:83:62:75:f8:6f:59:1e:54:b3:d7:5d:5e:5a:a2: 6f:95:ef:40:e6:8b:91:33:17:88:8e:82:94:63:3f:ff:cb:1d: 24:65:37:f4:30:e2:78:fd:21:9e:c0:c5:0f:9e:6b:b7:45:c5: c4:ed:d7:73:98:eb:d4:13:56:86:32:d2:23:eb:2d:cb:36:ad: 99:bd:8c:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYmQIQvkhIdOefgxVpQHjWne1UM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTczMTI1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTFlZTk2NjBlYTA5ODhmNzY4N2I1MWNhMmRjZDcxODc2 YTljNWZiNDMyNjg4YTA4MzhhNWU0ZmY3ZWQzZWI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyFPc9jFYPTvvfkqsqrtQ1qD/PsU/+CoAmPNcNu1xLQ+fv zYx/ZBQt58cKFABc1j5yILQ+Fz3023xhbvhhtvO6q2L2mlhgafjKIROSCTGrP9FY /ENxNT8rGndkCLiMgZE43whd8UFS32AmbZHCLSOvu8gilveSpWQSRtD2/7GaQy3A zrma0L78wGjUVol6LWXqg5t/zfYwbS9g1XEueNnhDtwHkRcBOVU+tJOF6SeWeLv1 jeeI6+wDiqN+3qE++rK1E37OeQymEkQ3+CdRvdG/DSkwM17niiB28MI7D5K4BMm2 qWgA1vVCfp6FgUOj0czZy657VCaKn529eaXg3msZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1M4Ff+9tFBl5YWaSf8sC+xSzwHowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MTU1ZjBlLTMwNmUtNGFkYi04ZTVlLThmMWVlODc3OTZlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUQwDQYJKoZIhvcNAQELBQADggEBAHEfB64wrudh4hK9CHS1Z9+JSa5y zKH3zycDkL0pMrO7MT/YtFROPiQCgb/hmYF7WwSbMEPhOa//amCuBEoFQAJeob4v 1NadTXlGjgvNxVsQuzaNtYi1hXSQgZnHd+eQy7mMc6VwxJaSZ4hH9A1L7c7m9P0H GsXE8DGUosuxPy5dm02cq1ZCk7WLl4s8pYZUqbTfNVhcUSq9snLGwozUpPDF8T7H kpE5+Fzw8GlN3399qLZQErjMZhaDYnX4b1keVLPXXV5aom+V70Dmi5EzF4iOgpRj P//LHSRlN/Qw4nj9IZ7AxQ+ea7dFxcTt13OY69QTVoYy0iPrLcs2rZm9jKQ= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:31 2025 by rpki-client