$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa File: 039a5967-2b5f-4316-9dd1-35af5965b5a7.roa (raw, json) Hash identifier: rUR5XEDGQ1SQlcfomai1GthidwBOniGhVmPp2V21r1c= Subject key identifier: 99:FF:C4:E7:0A:91:97:22:45:71:37:A3:56:30:9D:65:84:81:BF:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6197BC7F89A265E077A54474D636C0C682E10883 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa Signing time: Sat 16 Aug 2025 00:22:10 +0000 ROA not before: Sat 16 Aug 2025 00:22:10 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.157.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:97:bc:7f:89:a2:65:e0:77:a5:44:74:d6:36:c0:c6:82:e1:08:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:22:10 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=9c63f9d7536dd5f14c732dacd8f0cca10e73cd545436709b80a3ec156633d501, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:70:c7:ce:02:96:a5:d6:61:be:c9:00:5f: a5:81:93:0d:18:0e:15:24:d0:48:7d:2b:e8:d6:48: c0:0f:b0:20:a2:3d:34:35:c8:7f:f9:0b:df:90:40: c6:0b:96:ec:9f:6a:bb:f0:ea:1c:74:74:e3:45:18: 8d:fd:bb:e1:6a:1f:23:63:3a:8e:fa:cb:2b:4f:07: 58:68:45:3c:6d:7e:76:3f:44:1d:9f:bb:91:20:86: 75:4b:80:10:27:4a:06:32:a3:00:ce:aa:c6:ec:9e: 09:61:60:9b:1b:ac:90:29:eb:81:8d:6d:1b:3e:1e: 57:4b:8f:29:80:5a:61:46:e6:70:25:8c:cd:1b:75: fd:74:c2:cc:fa:e6:44:af:38:d4:3c:fc:5b:86:91: ee:7f:d0:fb:c1:dc:d6:33:a5:08:7e:0d:17:b1:d6: 84:dd:d4:c0:5a:ac:f6:72:cf:a3:ae:31:0f:a1:41: b2:77:b3:c4:c6:25:a6:87:12:6f:5d:67:91:b8:58: 3b:4c:bc:99:f9:e2:86:dc:f8:07:29:d9:73:7c:31: 35:7e:f5:90:40:6a:01:7a:65:96:6e:07:02:7c:33: 67:98:7c:d8:98:a7:5a:35:cf:c3:c1:cb:4b:9d:cd: 86:20:19:76:1c:ee:18:e9:84:d9:a4:c9:c8:a1:23: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:C4:E7:0A:91:97:22:45:71:37:A3:56:30:9D:65:84:81:BF:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.157.32.0/22 Signature Algorithm: sha256WithRSAEncryption cd:4f:3a:e4:dc:44:ea:c2:27:4e:3a:a4:89:31:dd:2f:53:a3: cf:f6:6d:99:a1:60:58:d8:ef:40:dd:e0:04:41:47:c3:71:67: f6:e7:bd:62:e9:60:10:58:8d:ad:24:3f:ca:4d:f5:26:67:d9: ef:c2:07:e8:eb:97:87:82:11:68:3a:cb:93:71:a9:54:fc:b9: f9:c7:a4:7d:5f:2e:41:b3:97:f6:f0:23:27:54:be:8c:b0:27: ea:a1:3f:af:b2:70:46:dc:43:3a:68:4a:22:05:1e:59:4a:32: 10:83:c5:b1:9f:46:ee:d8:14:8a:7c:ba:ef:7a:48:cb:6b:cb: 1b:c7:0f:bf:89:a5:6e:7b:6e:05:52:30:56:9d:ea:4f:b6:9f: 1a:11:56:af:4e:65:cb:c6:a9:f9:e2:2a:ec:0a:53:17:7a:71: 56:92:40:4d:7a:d1:35:26:32:2e:1b:bf:c4:13:f4:71:9e:d1: 9e:75:be:49:3f:7b:cb:15:be:52:4b:27:5e:48:f7:5f:a4:5f: 0c:ab:37:2e:60:f2:2b:1c:0a:20:0e:3e:79:55:59:a4:dc:3e: d1:ea:2e:3f:12:6f:3b:e8:25:84:76:a9:7f:f8:d1:3f:04:12: 09:cc:21:22:fb:c4:22:53:2b:93:dc:a0:19:71:26:0a:90:2c: 41:3c:8e:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYZe8f4miZeB3pUR01jbAxoLhCIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAyMjEwWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzYzZjlkNzUzNmRkNWYxNGM3MzJkYWNkOGYwY2NhMTBl NzNjZDU0NTQzNjcwOWI4MGEzZWMxNTY2MzNkNTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMnnDHzgKWpdZhvskAX6WBkw0YDhUk0Eh9K+jWSMAPsCCi PTQ1yH/5C9+QQMYLluyfarvw6hx0dONFGI39u+FqHyNjOo76yytPB1hoRTxtfnY/ RB2fu5EghnVLgBAnSgYyowDOqsbsnglhYJsbrJAp64GNbRs+HldLjymAWmFG5nAl jM0bdf10wsz65kSvONQ8/FuGke5/0PvB3NYzpQh+DRex1oTd1MBarPZyz6OuMQ+h QbJ3s8TGJaaHEm9dZ5G4WDtMvJn54obc+Acp2XN8MTV+9ZBAagF6ZZZuBwJ8M2eY fNiYp1o1z8PBy0udzYYgGXYc7hjphNmkycihI+6/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmf/E5wqRlyJFcTejVjCdZYSBv44wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzOWE1OTY3LTJiNWYtNDMxNi05ZGQxLTM1YWY1OTY1YjVhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALAnSAwDQYJKoZIhvcNAQELBQADggEBAM1POuTcROrCJ046pIkx3S9To8/2 bZmhYFjY70Dd4ARBR8NxZ/bnvWLpYBBYja0kP8pN9SZn2e/CB+jrl4eCEWg6y5Nx qVT8ufnHpH1fLkGzl/bwIydUvoywJ+qhP6+ycEbcQzpoSiIFHllKMhCDxbGfRu7Y FIp8uu96SMtryxvHD7+JpW57bgVSMFad6k+2nxoRVq9OZcvGqfniKuwKUxd6cVaS QE160TUmMi4bv8QT9HGe0Z51vkk/e8sVvlJLJ15I91+kXwyrNy5g8iscCiAOPnlV WaTcPtHqLj8SbzvoJYR2qX/40T8EEgnMISL7xCJTK5PcoBlxJgqQLEE8jqY= -----END CERTIFICATE-----Generated at Sat Aug 23 06:47:59 2025 by rpki-client