$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa File: 05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json) Hash identifier: j3cLZpw2/Fh5xIMO7OSS/uI7xdtYriK5htEQkod3twU= Subject key identifier: 8D:AE:79:47:1C:26:4A:5D:9D:1C:20:EA:D2:C3:C3:E7:43:19:DC:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1089DCE4FE3A877DA36D3553FAC0F186721A8A42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa Signing time: Sat 09 Aug 2025 00:10:12 +0000 ROA not before: Sat 09 Aug 2025 00:10:12 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 151.148.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:89:dc:e4:fe:3a:87:7d:a3:6d:35:53:fa:c0:f1:86:72:1a:8a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 9 00:10:12 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=2a160250087c776d28b06126a49d65c873e366c28058d7686775ebb33590d210, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:e8:62:87:ae:40:e0:83:f5:fd:d5:bb:72: a1:f6:cf:ee:5b:ba:b9:48:ed:0e:5b:cc:83:9a:10: 01:a4:b7:98:8f:4d:85:9a:04:15:c2:c7:86:f0:98: b3:55:fa:bc:ce:d4:06:9d:48:e6:27:2c:ec:dd:72: bf:db:70:ac:ce:e6:d9:f9:87:01:fd:61:3f:3e:d3: b8:93:b3:10:12:11:62:46:a0:b4:f6:f7:d6:19:44: a3:aa:b2:de:06:48:2d:82:8d:2f:80:a3:b7:38:fe: 76:50:ab:df:4f:f3:54:16:47:59:2e:e4:37:94:a9: bf:22:a8:74:94:ca:08:4c:c9:18:b9:65:83:48:1b: 62:15:99:29:4b:e4:24:10:f7:6a:9f:aa:ff:da:f5: bd:8f:66:21:55:d3:c6:a3:d4:7c:d9:c0:13:0e:7a: 28:25:8c:20:67:ab:41:85:16:67:9c:2a:3c:35:49: 8a:25:ee:28:d8:bd:db:61:6c:45:75:cb:7f:63:92: b4:55:02:64:de:78:ac:17:4b:94:37:82:ea:a0:fe: 0e:09:7d:0a:a3:b1:6d:c5:df:61:2a:90:4a:b7:30: a9:65:fa:89:fd:9d:4a:db:c2:9d:52:58:bf:ab:c0: 35:20:bf:b0:83:c9:05:d3:78:9a:28:76:ec:76:45: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:79:47:1C:26:4A:5D:9D:1C:20:EA:D2:C3:C3:E7:43:19:DC:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.36.0/24 Signature Algorithm: sha256WithRSAEncryption 49:64:90:45:c5:c0:23:24:8b:02:dc:79:04:7b:f5:de:86:7d: cc:f8:4e:e7:2e:70:74:ac:b5:d6:f4:10:ce:4c:1f:85:66:bf: 9d:a3:1e:8c:f8:91:a7:38:f4:88:88:d2:50:99:e3:b3:73:78: 82:12:3e:56:5f:d2:50:23:6a:41:64:71:d7:11:f9:f7:6e:68: c8:26:82:5d:c8:83:03:14:69:2d:7d:ed:a3:46:db:ae:2e:09: e7:f3:77:42:6e:3f:e1:92:9c:79:ac:23:38:a7:b5:79:10:61: 02:a3:f7:ce:96:61:44:f4:e5:d8:b7:ae:f1:cb:b9:9d:dd:a3: 28:e8:b5:f9:6a:39:b1:0b:61:4a:90:2e:59:47:bb:dd:82:2a: 2b:44:38:ba:c8:ce:31:d6:85:11:93:a7:d6:ad:5f:8d:5d:68: 23:ec:6c:90:2d:78:09:04:4e:75:ac:1b:cf:4b:4d:36:09:65: 48:b5:fb:d0:c5:09:ab:f9:5b:f5:f8:0b:cc:bb:25:29:8f:d7: 2a:5d:17:ea:bc:08:74:1c:83:04:20:db:4a:c9:7a:83:ec:9d: 19:18:66:c8:3f:1e:e4:06:b2:af:70:ca:84:97:89:75:c3:f7: 42:96:73:9d:26:dc:5d:40:bf:ba:81:9e:75:ce:a2:40:46:e0: ba:9c:52:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEInc5P46h32jbTVT+sDxhnIaikIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAxMDEyWhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE2MDI1MDA4N2M3NzZkMjhiMDYxMjZhNDlkNjVjODcz ZTM2NmMyODA1OGQ3Njg2Nzc1ZWJiMzM1OTBkMjEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSv+hih65A4IP1/dW7cqH2z+5burlI7Q5bzIOaEAGkt5iP TYWaBBXCx4bwmLNV+rzO1AadSOYnLOzdcr/bcKzO5tn5hwH9YT8+07iTsxASEWJG oLT299YZRKOqst4GSC2CjS+Ao7c4/nZQq99P81QWR1ku5DeUqb8iqHSUyghMyRi5 ZYNIG2IVmSlL5CQQ92qfqv/a9b2PZiFV08aj1HzZwBMOeigljCBnq0GFFmecKjw1 SYol7ijYvdthbEV1y39jkrRVAmTeeKwXS5Q3guqg/g4JfQqjsW3F32EqkEq3MKll +on9nUrbwp1SWL+rwDUgv7CDyQXTeJoodux2RQfrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUja55RxwmSl2dHCDq0sPD50MZ3GQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1YWU3MDEzLTFmYmItNGQ0OC04Zjk1LWJlMTUwMjM2Y2U2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlCQwDQYJKoZIhvcNAQELBQADggEBAElkkEXFwCMkiwLceQR79d6Gfcz4 TucucHSstdb0EM5MH4Vmv52jHoz4kac49IiI0lCZ47NzeIISPlZf0lAjakFkcdcR +fduaMgmgl3IgwMUaS197aNG264uCefzd0JuP+GSnHmsIzintXkQYQKj986WYUT0 5di3rvHLuZ3doyjotflqObELYUqQLllHu92CKitEOLrIzjHWhRGTp9atX41daCPs bJAteAkETnWsG89LTTYJZUi1+9DFCav5W/X4C8y7JSmP1ypdF+q8CHQcgwQg20rJ eoPsnRkYZsg/HuQGsq9wyoSXiXXD90KWc50m3F1Av7qBnnXOokBG4LqcUrs= -----END CERTIFICATE-----Generated at Sat Aug 23 08:32:53 2025 by rpki-client