$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa File: b3f31560-1f77-4723-98ea-9af688a74f3f.roa (raw, json) Hash identifier: KJhKbd0Y0/HXOAVJ/RDWmZyE7EFFX4I85s+O4ksbyyo= Subject key identifier: 12:87:C1:70:B9:AF:A1:AD:9D:87:DA:98:87:CE:E5:6A:A7:9E:EA:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31E08BCCC3D61FE9B5832CFAFBB46052660208F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa Signing time: Fri 08 Aug 2025 00:20:30 +0000 ROA not before: Fri 08 Aug 2025 00:20:30 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e0:8b:cc:c3:d6:1f:e9:b5:83:2c:fa:fb:b4:60:52:66:02:08:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:20:30 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=8cd7e5a2627316824ac890d9a4b0ba98c6d5b17a5cd4774cdfc518d809c072f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:e0:f7:69:80:e4:1a:83:b4:ce:6e:c6:db: 22:1c:34:55:29:49:16:6a:6a:27:d8:99:f2:6f:6a: a4:ba:a3:e1:64:b9:9b:fc:ed:e1:0d:41:c7:de:21: 2f:8e:24:db:9c:99:81:1a:51:55:4a:af:ca:14:cf: 0c:cf:ea:7b:e1:1d:04:9b:54:65:a2:e8:54:32:3d: 5d:e3:d9:cd:b4:a4:76:ff:f3:f1:8e:54:07:ca:f2: 5c:af:e7:e8:f9:b9:7c:31:17:e3:01:56:e1:95:2f: 0b:84:fb:57:a3:b2:40:69:48:4d:81:da:bc:e8:00: 38:d8:d1:8c:0f:02:a6:42:fb:69:61:ae:1d:3b:50: c9:79:e0:9a:93:e5:f0:3c:aa:b0:af:5b:c0:05:b5: 64:3c:bf:bc:c0:31:d6:11:b6:e3:46:fd:13:e6:1d: db:8e:21:0d:53:b7:6a:d4:1c:8b:8d:7f:f5:03:bd: 87:b1:77:65:83:14:55:30:95:ef:55:3a:6a:8c:4b: 99:84:09:33:3f:cc:d8:77:97:63:71:fa:f7:d2:f4: 6f:a4:6d:3c:ff:7d:9c:11:7e:c5:80:f7:a9:9b:e4: c0:82:38:03:6b:da:c2:27:59:bd:d7:bb:94:bd:fe: 70:51:33:e5:70:f9:48:31:32:50:30:dc:f0:39:cf: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:C1:70:B9:AF:A1:AD:9D:87:DA:98:87:CE:E5:6A:A7:9E:EA:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.100.0/23 Signature Algorithm: sha256WithRSAEncryption 51:ee:35:75:bd:aa:5a:9a:08:d7:aa:1b:3d:d6:0a:07:4f:23: cf:72:87:d4:fd:ce:2d:d0:7f:b7:eb:fd:1d:ad:f6:8a:a1:93: bc:ac:8f:0a:a9:f3:88:19:cb:96:72:07:d7:7d:f3:ff:5d:96: 9d:82:2c:27:28:16:83:a7:82:03:f4:1f:64:38:f2:81:3e:1d: e6:97:31:77:9d:fb:48:51:ba:c0:cd:fa:42:21:36:9c:9d:4b: 10:a9:d4:27:5c:ec:37:b3:e0:43:7d:cf:74:b0:28:a7:25:67: 12:be:80:d8:26:d5:c8:ef:e7:c4:0b:aa:51:bd:28:f2:00:df: d2:2c:d5:39:1e:33:c4:a0:f7:52:c6:d0:aa:87:a5:90:03:78: f5:df:8f:71:36:13:73:1a:6f:e5:6e:56:06:f8:03:9a:29:27: 62:dc:69:3b:b6:5f:6f:08:58:86:60:c2:db:58:29:1a:0f:ba: 80:35:e3:b4:c4:3b:02:bb:e9:19:15:12:aa:3d:da:62:c2:29: 81:e5:f3:ac:dc:9e:a6:77:a1:a1:87:62:10:71:0f:cb:32:f8: 69:58:2d:25:d8:7b:d2:05:03:ed:d3:df:56:e1:fc:ad:64:63: 0a:6d:09:31:1b:e1:6b:05:1b:ad:b7:5f:f7:0b:5c:2a:e8:00: 9f:4a:52:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMeCLzMPWH+m1gyz6+7RgUmYCCPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAyMDMwWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2Q3ZTVhMjYyNzMxNjgyNGFjODkwZDlhNGIwYmE5OGM2 ZDViMTdhNWNkNDc3NGNkZmM1MThkODA5YzA3MmYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx1eD3aYDkGoO0zm7G2yIcNFUpSRZqaifYmfJvaqS6o+Fk uZv87eENQcfeIS+OJNucmYEaUVVKr8oUzwzP6nvhHQSbVGWi6FQyPV3j2c20pHb/ 8/GOVAfK8lyv5+j5uXwxF+MBVuGVLwuE+1ejskBpSE2B2rzoADjY0YwPAqZC+2lh rh07UMl54JqT5fA8qrCvW8AFtWQ8v7zAMdYRtuNG/RPmHduOIQ1Tt2rUHIuNf/UD vYexd2WDFFUwle9VOmqMS5mECTM/zNh3l2Nx+vfS9G+kbTz/fZwRfsWA96mb5MCC OANr2sInWb3Xu5S9/nBRM+Vw+UgxMlAw3PA5z26FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEofBcLmvoa2dh9qYh87laqee6vMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzZjMxNTYwLTFmNzctNDcyMy05OGVhLTlhZjY4OGE3NGYzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAGQwDQYJKoZIhvcNAQELBQADggEBAFHuNXW9qlqaCNeqGz3WCgdPI89y h9T9zi3Qf7fr/R2t9oqhk7ysjwqp84gZy5ZyB9d98/9dlp2CLCcoFoOnggP0H2Q4 8oE+HeaXMXed+0hRusDN+kIhNpydSxCp1Cdc7Dez4EN9z3SwKKclZxK+gNgm1cjv 58QLqlG9KPIA39Is1TkeM8Sg91LG0KqHpZADePXfj3E2E3Mab+VuVgb4A5opJ2Lc aTu2X28IWIZgwttYKRoPuoA147TEOwK76RkVEqo92mLCKYHl86zcnqZ3oaGHYhBx D8sy+GlYLSXYe9IFA+3T31bh/K1kYwptCTEb4WsFG623X/cLXCroAJ9KUkA= -----END CERTIFICATE-----Generated at Fri Aug 8 19:29:47 2025 by rpki-client