$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa File: 893d635c-c7ec-4d77-8388-208a16614cd7.roa (raw, json) Hash identifier: 2iJOwJwr0lcPUrxRuJhzolqDtIhj1ncWyY+6O3kTvkI= Subject key identifier: 7A:69:87:03:10:75:9F:57:8A:DC:52:0F:59:ED:12:63:35:50:3D:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D3902F6B5F96B6818255A4AA8DCE4AE44C65152 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa Signing time: Tue 22 Jul 2025 00:20:11 +0000 ROA not before: Tue 22 Jul 2025 00:20:11 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 701 IP address blocks: 204.126.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:39:02:f6:b5:f9:6b:68:18:25:5a:4a:a8:dc:e4:ae:44:c6:51:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:20:11 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=f88043f61bea66c31f2cfa10c12ae40d6886f4ad2cff3abeb1cc06f56664da53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:a4:39:8e:24:38:17:42:fc:a2:ce:60:0c: cd:28:63:dd:ad:93:b7:c3:91:a5:9c:b2:3c:54:d9: 03:3f:d1:40:e9:64:66:0a:1d:8a:27:91:4f:fb:63: d6:36:8c:f7:eb:2b:3b:e9:4e:84:15:bd:01:b3:31: ec:a5:05:c9:6f:5d:2f:5c:d4:fc:9a:96:29:65:68: f0:e7:0d:c0:47:6a:3d:ac:e0:d6:86:d2:1d:f3:53: d6:b7:55:1d:e3:82:02:b0:b0:de:40:b4:50:b0:33: a3:07:7c:4e:22:1a:c4:6f:d5:68:06:65:44:05:16: 5d:30:a5:01:be:39:73:10:42:7c:2e:d0:da:af:96: b0:cf:3d:13:13:8b:e9:f7:6a:87:86:fa:1a:67:b0: 36:44:99:02:16:4c:da:15:23:83:71:19:c5:09:3b: d8:7a:3b:6a:93:60:6f:63:f9:a7:b9:50:38:5a:84: 67:07:36:e5:71:d0:09:19:c8:8d:3b:d3:45:80:98: d9:c4:81:b0:22:66:fa:63:1b:63:e3:11:ca:98:68: 6c:9a:a6:50:c3:c1:50:d8:fa:98:9b:a4:86:51:63: 2f:46:7c:7f:3e:cd:f6:93:9e:25:78:55:67:21:90: 83:aa:44:9d:a9:51:93:17:75:31:97:98:27:0b:f5: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:87:03:10:75:9F:57:8A:DC:52:0F:59:ED:12:63:35:50:3D:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.126.24.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:72:79:3b:34:dc:bb:70:23:b2:12:d7:ea:9a:70:7d:52:23: 1a:7c:69:5b:0a:da:50:d2:47:3d:d0:e3:83:27:f1:88:22:db: b9:b0:9d:ee:7a:6f:23:d2:ed:dc:25:81:19:cf:f5:d3:fe:27: 62:2c:f4:d0:d7:5d:28:9e:d6:49:96:e8:a5:55:2e:71:77:89: 8b:a9:0c:aa:ef:f2:3a:a6:e4:b2:56:d2:81:66:96:98:57:f0: 28:66:06:80:3e:44:66:05:b3:23:fc:33:e8:f2:05:cf:b6:fe: 64:dc:9f:ea:34:18:b5:e8:13:b7:06:a4:6f:7e:0b:ca:f2:1b: 06:fb:01:c6:55:b8:89:1e:25:ed:ac:e1:75:19:1e:51:dc:24: aa:f8:08:12:49:b1:01:d3:26:67:da:f0:a9:73:a0:9a:41:f9: 29:ba:7c:4e:64:c4:09:38:67:1e:00:4c:ba:ae:e9:a5:bb:83: 49:87:98:4b:f3:88:af:c7:f9:b1:b3:18:32:6b:e0:58:0a:4e: 08:5f:25:97:f3:fc:1e:e4:c2:a2:9f:98:9c:04:95:5c:4f:a4: 01:ca:c0:bd:c8:52:41:94:33:1d:a6:86:73:0d:ce:ac:6b:6d: 3e:ed:e0:14:29:ef:96:df:4b:4a:e2:7b:69:ab:22:ae:ab:81: 64:21:59:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPTkC9rX5a2gYJVpKqNzkrkTGUVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAyMDExWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODgwNDNmNjFiZWE2NmMzMWYyY2ZhMTBjMTJhZTQwZDY4 ODZmNGFkMmNmZjNhYmViMWNjMDZmNTY2NjRkYTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVk6Q5jiQ4F0L8os5gDM0oY92tk7fDkaWcsjxU2QM/0UDp ZGYKHYonkU/7Y9Y2jPfrKzvpToQVvQGzMeylBclvXS9c1PyalillaPDnDcBHaj2s 4NaG0h3zU9a3VR3jggKwsN5AtFCwM6MHfE4iGsRv1WgGZUQFFl0wpQG+OXMQQnwu 0NqvlrDPPRMTi+n3aoeG+hpnsDZEmQIWTNoVI4NxGcUJO9h6O2qTYG9j+ae5UDha hGcHNuVx0AkZyI0700WAmNnEgbAiZvpjG2PjEcqYaGyaplDDwVDY+pibpIZRYy9G fH8+zfaTniV4VWchkIOqRJ2pUZMXdTGXmCcL9dN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUemmHAxB1n1eK3FIPWe0SYzVQPckwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5M2Q2MzVjLWM3ZWMtNGQ3Ny04Mzg4LTIwOGExNjYxNGNkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHMfhgwDQYJKoZIhvcNAQELBQADggEBACpyeTs03LtwI7IS1+qacH1SIxp8 aVsK2lDSRz3Q44Mn8Ygi27mwne56byPS7dwlgRnP9dP+J2Is9NDXXSie1kmW6KVV LnF3iYupDKrv8jqm5LJW0oFmlphX8ChmBoA+RGYFsyP8M+jyBc+2/mTcn+o0GLXo E7cGpG9+C8ryGwb7AcZVuIkeJe2s4XUZHlHcJKr4CBJJsQHTJmfa8KlzoJpB+Sm6 fE5kxAk4Zx4ATLqu6aW7g0mHmEvziK/H+bGzGDJr4FgKTghfJZfz/B7kwqKfmJwE lVxPpAHKwL3IUkGUMx2mhnMNzqxrbT7t4BQp75bfS0rie2mrIq6rgWQhWdE= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:30 2025 by rpki-client