$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dae0253e-b4d8-4623-b4ce-9451a6087b11.roa File: dae0253e-b4d8-4623-b4ce-9451a6087b11.roa (raw, json) Hash identifier: iekMbt7SPxYZB5CnCmtaMlcqF6Y4X5HN/IOVcolyi8M= Subject key identifier: F8:E9:2C:40:B3:57:13:65:83:5C:81:58:84:01:18:08:DC:95:DC:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 016D54FFF3F5FC81670843810D836F3BC75DB8AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dae0253e-b4d8-4623-b4ce-9451a6087b11.roa Signing time: Mon 28 Jul 2025 15:30:33 +0000 ROA not before: Mon 28 Jul 2025 15:30:33 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6d:54:ff:f3:f5:fc:81:67:08:43:81:0d:83:6f:3b:c7:5d:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 15:30:33 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=1627364991e873a002f09d53bac5ef6b189320a08c7d0beb7267835b189e30a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:34:41:e0:60:57:89:7d:8a:ba:d0:16:2c: f7:44:f4:69:b5:33:74:04:ad:de:e5:3b:dc:7e:e4: ff:39:00:9a:5d:2a:0a:55:4c:f3:29:80:97:51:53: e9:9d:7c:2e:8a:f0:e6:ae:c0:38:fa:0b:e7:2f:71: cc:dd:f5:cd:b7:95:a8:1e:05:bf:f7:d9:76:f4:9e: 65:83:a4:bf:00:48:09:7d:8b:c3:04:5f:fc:b7:8e: f5:8e:fc:ef:ef:4b:2e:f4:b3:fb:3d:58:c6:51:87: 62:42:ac:07:bd:be:18:a7:53:b9:01:3c:c3:a9:2f: c7:a6:2c:3d:31:b7:68:1d:ac:d3:cc:d8:7a:f2:d9: d5:65:e5:63:1b:d3:74:3a:c4:7d:cf:59:b5:23:e8: 3c:1e:54:30:2f:b9:64:d6:72:73:9b:60:02:15:df: df:f4:17:e6:54:a4:e3:0f:fb:d9:3d:c1:4d:7c:0d: f2:68:bf:c8:0f:74:c1:15:b8:d8:2c:12:17:23:a6: 7e:61:91:b1:47:4e:1a:b5:b5:61:d7:4c:d7:b3:cd: 33:78:42:2b:8b:11:1c:38:bc:4b:e5:6d:e3:c2:cc: ab:ed:85:90:44:bc:31:cd:18:bf:a7:40:9e:cb:63: 05:1c:29:ac:29:6c:1b:49:f7:02:d1:74:76:e4:da: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:2C:40:B3:57:13:65:83:5C:81:58:84:01:18:08:DC:95:DC:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dae0253e-b4d8-4623-b4ce-9451a6087b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:fb:5e:e8:db:6e:f8:22:9b:96:81:46:74:83:90:d5:cf:a0: 66:02:5f:1e:57:df:b3:a3:e8:90:54:22:1f:3e:f3:64:ae:82: f0:cf:d1:b2:93:d7:e2:fa:44:a1:cb:13:a1:9e:37:fc:47:9c: 3f:3c:52:26:40:10:6f:28:6a:6e:d8:05:c0:68:b4:19:c9:44: 0d:1d:94:02:c1:61:bc:17:ea:86:d7:71:9a:07:6a:19:f1:7d: 88:b1:b2:59:bb:9f:08:f8:36:3b:74:d4:da:fc:41:c2:d3:5a: a1:3d:00:d3:89:35:8a:a3:02:19:e3:66:8a:e1:bb:2f:52:fb: 43:d9:fd:8f:b5:c2:65:2c:29:76:71:74:37:16:fc:d6:93:c3: b0:6c:9d:89:80:e6:50:7d:ba:1a:03:82:1e:49:ad:c7:85:7d: 11:b9:ea:bf:1a:c0:d7:25:1f:2c:58:ef:7d:61:84:e0:03:65: e9:62:5b:ba:2c:81:90:80:2e:0e:a3:91:97:66:43:d7:b1:ab: e6:fe:7f:ab:5d:3f:aa:6f:72:77:40:c4:82:89:42:b0:32:a7: 52:77:f0:54:95:c7:23:1e:44:af:92:69:c4:64:f8:96:c4:9e: 4b:33:dc:1f:22:06:9b:39:6f:1e:a1:f0:50:9f:cd:cc:be:6d: 2e:17:bb:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAW1U//P1/IFnCEOBDYNvO8dduKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI4MTUzMDMzWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjI3MzY0OTkxZTg3M2EwMDJmMDlkNTNiYWM1ZWY2YjE4 OTMyMGEwOGM3ZDBiZWI3MjY3ODM1YjE4OWUzMGEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfqDRB4GBXiX2KutAWLPdE9Gm1M3QErd7lO9x+5P85AJpd KgpVTPMpgJdRU+mdfC6K8OauwDj6C+cvcczd9c23lageBb/32Xb0nmWDpL8ASAl9 i8MEX/y3jvWO/O/vSy70s/s9WMZRh2JCrAe9vhinU7kBPMOpL8emLD0xt2gdrNPM 2Hry2dVl5WMb03Q6xH3PWbUj6DweVDAvuWTWcnObYAIV39/0F+ZUpOMP+9k9wU18 DfJov8gPdMEVuNgsEhcjpn5hkbFHThq1tWHXTNezzTN4QiuLERw4vEvlbePCzKvt hZBEvDHNGL+nQJ7LYwUcKawpbBtJ9wLRdHbk2pq1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+OksQLNXE2WDXIFYhAEYCNyV3JcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhZTAyNTNlLWI0ZDgtNDYyMy1iNGNlLTk0NTFhNjA4N2IxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALYnQQwDQYJKoZIhvcNAQELBQADggEBAC/7Xujbbvgim5aBRnSDkNXPoGYC Xx5X37Oj6JBUIh8+82SugvDP0bKT1+L6RKHLE6GeN/xHnD88UiZAEG8oam7YBcBo tBnJRA0dlALBYbwX6obXcZoHahnxfYixslm7nwj4Njt01Nr8QcLTWqE9ANOJNYqj AhnjZorhuy9S+0PZ/Y+1wmUsKXZxdDcW/NaTw7BsnYmA5lB9uhoDgh5JrceFfRG5 6r8awNclHyxY731hhOADZeliW7osgZCALg6jkZdmQ9exq+b+f6tdP6pvcndAxIKJ QrAyp1J38FSVxyMeRK+SacRk+JbEnksz3B8iBps5bx6h8FCfzcy+bS4Xuwk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:15 2025 by rpki-client