$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa File: cf53c219-4499-438d-b19e-5579548a9fbd.roa (raw, json) Hash identifier: YkFXCsez2lrvMvFC+MYxDQcDjrPQUmKpdDqZ/KXVOGg= Subject key identifier: 29:28:70:DA:AA:28:88:BC:FE:8A:3A:AB:98:93:27:79:AF:A9:87:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FDB1F7CE8C1D97B3FC908DEEC75D7FA5CFCB74C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa Signing time: Sat 02 Aug 2025 00:41:13 +0000 ROA not before: Sat 02 Aug 2025 00:41:13 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.213.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:db:1f:7c:e8:c1:d9:7b:3f:c9:08:de:ec:75:d7:fa:5c:fc:b7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:41:13 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=b0982c474e2bfd94c7d7d0a0ac574979f993112645438de31135a343a06af1e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:99:25:0f:d0:04:90:7b:ac:39:89:ce:da: 15:75:5f:49:1a:14:60:62:59:0b:34:94:5e:b5:42: 5c:43:3b:bd:1a:86:33:5a:0c:e3:d2:ab:87:b3:c9: 37:5f:88:a4:bf:81:ee:6d:e2:0c:77:f4:f0:61:11: 59:bb:18:f9:61:85:7c:31:d0:11:4c:82:fe:d9:5f: 41:59:d0:57:56:a8:ad:b3:4e:b2:1a:9e:d6:3f:22: 28:d4:40:f0:71:c4:61:50:3d:25:58:ea:f4:c4:07: 9f:c8:3f:1c:be:03:ba:03:32:4a:86:11:f4:86:84: f9:f9:c2:13:b3:eb:76:aa:38:e9:9f:4b:4f:a9:17: f6:92:d9:c8:2e:76:ae:5f:d0:49:a9:0d:f1:24:0a: 00:33:f9:51:79:50:01:f0:ed:3d:8d:40:b5:c2:bc: 37:fe:07:ba:f2:d3:2a:31:65:b7:6c:58:16:79:c4: 52:82:e8:3f:19:ff:a1:46:a7:12:92:c8:6a:74:76: 5c:91:ae:d3:7f:04:f1:e9:f3:d8:7e:fa:7e:6d:2c: a5:74:f5:44:93:ae:ba:9f:04:43:07:98:2a:b7:a3: f4:fc:c5:e4:e4:cb:4b:55:b3:d7:f3:f7:a9:d3:78: 55:d8:57:aa:b9:82:91:c7:91:b1:4d:db:be:41:64: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:70:DA:AA:28:88:BC:FE:8A:3A:AB:98:93:27:79:AF:A9:87:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.213.232.0/22 Signature Algorithm: sha256WithRSAEncryption 12:95:29:ce:73:e7:e3:f6:02:7b:97:b8:dc:a6:a3:bc:eb:73: 2e:52:26:f8:73:e4:4d:2b:7d:e6:0f:fc:aa:dc:5e:41:54:3f: e2:99:5f:20:3e:fb:5c:7e:96:aa:95:14:ac:b5:35:53:79:54: c8:e2:68:df:c3:6a:a9:81:49:20:58:f0:d2:86:82:3c:95:b2: de:1c:04:a4:7d:a4:f5:d7:a8:b4:1c:cf:c2:b9:36:e7:2d:13: e1:9d:95:c9:f5:57:95:75:89:53:30:d1:0f:b2:18:0b:4b:08: de:12:11:25:bc:57:69:79:2f:6d:2f:1c:d5:ba:ee:ad:f2:e0: 19:d9:6c:7a:8d:17:5f:b2:90:7a:22:6c:f4:99:86:70:d4:65: 23:d3:fb:de:25:76:95:e4:c6:e2:97:46:12:c8:0e:ad:92:be: 0e:9f:e3:63:ab:46:fd:8d:26:3e:31:ab:b0:77:a0:92:1a:46: 4e:49:2d:54:06:65:5a:d2:a1:92:38:63:39:c5:40:5b:33:ed: 07:e1:b8:42:5c:93:8c:17:a0:b1:5a:49:b2:5d:65:8d:9e:3f: 23:9b:2f:12:4a:d6:2d:bf:ac:4f:1c:9e:11:9e:71:dc:14:61: 51:e2:7d:88:68:42:b7:50:97:65:e3:97:2e:ac:44:35:0c:9a: 5c:f1:42:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL9sffOjB2Xs/yQje7HXX+lz8t0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA0MTEzWhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDk4MmM0NzRlMmJmZDk0YzdkN2QwYTBhYzU3NDk3OWY5 OTMxMTI2NDU0MzhkZTMxMTM1YTM0M2EwNmFmMWUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSXJklD9AEkHusOYnO2hV1X0kaFGBiWQs0lF61QlxDO70a hjNaDOPSq4ezyTdfiKS/ge5t4gx39PBhEVm7GPlhhXwx0BFMgv7ZX0FZ0FdWqK2z TrIantY/IijUQPBxxGFQPSVY6vTEB5/IPxy+A7oDMkqGEfSGhPn5whOz63aqOOmf S0+pF/aS2cgudq5f0EmpDfEkCgAz+VF5UAHw7T2NQLXCvDf+B7ry0yoxZbdsWBZ5 xFKC6D8Z/6FGpxKSyGp0dlyRrtN/BPHp89h++n5tLKV09USTrrqfBEMHmCq3o/T8 xeTky0tVs9fz96nTeFXYV6q5gpHHkbFN275BZAHTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKShw2qooiLz+ijqrmJMnea+ph54wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNTNjMjE5LTQ0OTktNDM4ZC1iMTllLTU1Nzk1NDhhOWZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKi1egwDQYJKoZIhvcNAQELBQADggEBABKVKc5z5+P2AnuXuNymo7zrcy5S Jvhz5E0rfeYP/KrcXkFUP+KZXyA++1x+lqqVFKy1NVN5VMjiaN/DaqmBSSBY8NKG gjyVst4cBKR9pPXXqLQcz8K5NuctE+Gdlcn1V5V1iVMw0Q+yGAtLCN4SESW8V2l5 L20vHNW67q3y4BnZbHqNF1+ykHoibPSZhnDUZSPT+94ldpXkxuKXRhLIDq2Svg6f 42OrRv2NJj4xq7B3oJIaRk5JLVQGZVrSoZI4YznFQFsz7QfhuEJck4wXoLFaSbJd ZY2ePyObLxJK1i2/rE8cnhGecdwUYVHifYhoQrdQl2Xjly6sRDUMmlzxQi4= -----END CERTIFICATE-----Generated at Fri Aug 8 13:09:35 2025 by rpki-client