$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa File: 15bb3a95-996e-4ced-b889-69ac9faeacfa.roa (raw, json) Hash identifier: /ZiqD1jftCoZMM8uMdEdcwKerzjQkDrN0yrf5go9Ixw= Subject key identifier: D4:38:8B:7A:A9:06:B3:14:3C:41:9F:19:6F:AE:A6:61:5A:E8:DC:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F91D6D4C447087F7AFEC29168CC50507984E3AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa Signing time: Tue 19 Aug 2025 00:10:51 +0000 ROA not before: Tue 19 Aug 2025 00:10:51 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.49.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:91:d6:d4:c4:47:08:7f:7a:fe:c2:91:68:cc:50:50:79:84:e3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:10:51 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=02c93f6a61ca7db7339d542c35a651afcc2d211a96638971b3f0fd5501a85f4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:b1:36:6d:21:5d:85:65:71:1b:6e:3e:d8: 04:8e:5d:60:98:69:67:8b:c4:90:d0:42:0e:0d:d0: ca:2a:0c:06:9a:13:a8:0e:fd:a5:8e:7f:2e:51:3c: 75:26:0d:56:7d:87:c5:bd:20:7c:7e:33:6c:3b:eb: da:01:c3:57:a6:7f:54:91:60:e7:bf:2c:b2:52:35: 20:8a:e4:d6:7f:49:0d:f7:98:cc:6a:8d:be:96:b5: e5:93:67:d0:22:e2:db:40:c2:3b:17:b6:5a:3b:83: 13:e2:31:11:9c:1a:c2:cb:20:5b:98:e1:49:e7:31: 45:75:e9:37:88:67:df:c8:dd:78:02:e9:80:23:b0: 99:36:e4:69:76:cc:88:92:fa:bf:50:85:3f:06:88: 7b:1c:14:1d:bf:18:f6:50:d8:38:da:fe:7c:58:73: 35:08:20:3e:34:e4:a2:45:68:59:a3:47:f4:71:f6: 1f:c3:0a:e3:2c:37:08:5f:9b:87:7d:43:b1:b2:b6: 3a:0e:ac:91:7a:0c:14:53:cb:64:f3:3c:67:6f:c2: 61:c7:32:bb:e7:a9:da:57:53:aa:03:8d:72:71:92: e2:6b:ce:55:5c:f5:d1:92:b8:fb:61:b0:74:df:6c: da:2a:2c:cc:b0:ad:4b:6b:72:ce:ef:83:5b:ca:58: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:38:8B:7A:A9:06:B3:14:3C:41:9F:19:6F:AE:A6:61:5A:E8:DC:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.49.64.0/20 Signature Algorithm: sha256WithRSAEncryption 72:02:0f:7a:b4:9e:ca:7c:db:21:dc:c0:cc:a7:dd:76:4f:0a: fa:69:4a:45:73:25:0b:15:84:b7:91:56:2c:6e:ff:b1:b9:18: 35:cd:d7:0d:c4:b9:70:16:e8:15:32:c3:81:a7:9e:62:f2:65: 25:c5:1c:df:a7:30:80:02:fc:0a:86:0b:9f:f5:cb:0a:25:5f: d7:72:c3:e8:70:6a:d0:36:4c:51:f7:2e:78:4b:eb:ef:d9:22: 53:76:db:ff:fa:f6:f8:10:b1:b8:9f:5a:5d:67:50:10:ca:da: 3d:2a:cf:58:e3:07:84:51:b0:83:81:de:86:c9:b6:f8:96:24: 68:37:18:3d:d5:8a:ad:09:f8:18:54:00:b1:e2:12:53:e8:4f: 3b:ae:43:41:14:90:b5:38:a3:b8:1e:1a:78:ff:d9:a7:44:47: 54:f3:de:2a:f5:80:99:a5:93:67:ba:22:fc:0f:2e:42:18:0a: d0:c0:cf:d9:2b:18:70:33:73:a0:1c:c4:ff:98:84:92:8c:00: fe:14:bf:63:28:c8:98:02:d0:07:1f:eb:d8:1f:4c:91:27:68: 7d:53:75:50:ed:4b:63:9c:a5:da:27:48:bc:96:c4:cc:f5:e3: d5:d1:46:f1:6b:44:4d:07:3d:8e:e0:da:d4:e2:f6:ac:16:72: 02:1e:69:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT5HW1MRHCH96/sKRaMxQUHmE46owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMDUxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmM5M2Y2YTYxY2E3ZGI3MzM5ZDU0MmMzNWE2NTFhZmNj MmQyMTFhOTY2Mzg5NzFiM2YwZmQ1NTAxYTg1ZjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsNbE2bSFdhWVxG24+2ASOXWCYaWeLxJDQQg4N0MoqDAaa E6gO/aWOfy5RPHUmDVZ9h8W9IHx+M2w769oBw1emf1SRYOe/LLJSNSCK5NZ/SQ33 mMxqjb6WteWTZ9Ai4ttAwjsXtlo7gxPiMRGcGsLLIFuY4UnnMUV16TeIZ9/I3XgC 6YAjsJk25Gl2zIiS+r9QhT8GiHscFB2/GPZQ2Dja/nxYczUIID405KJFaFmjR/Rx 9h/DCuMsNwhfm4d9Q7GytjoOrJF6DBRTy2TzPGdvwmHHMrvnqdpXU6oDjXJxkuJr zlVc9dGSuPthsHTfbNoqLMywrUtrcs7vg1vKWJLDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1DiLeqkGsxQ8QZ8Zb66mYVro3OEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1YmIzYTk1LTk5NmUtNGNlZC1iODg5LTY5YWM5ZmFlYWNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATYMUAwDQYJKoZIhvcNAQELBQADggEBAHICD3q0nsp82yHcwMyn3XZPCvpp SkVzJQsVhLeRVixu/7G5GDXN1w3EuXAW6BUyw4GnnmLyZSXFHN+nMIAC/AqGC5/1 ywolX9dyw+hwatA2TFH3LnhL6+/ZIlN22//69vgQsbifWl1nUBDK2j0qz1jjB4RR sIOB3obJtviWJGg3GD3Viq0J+BhUALHiElPoTzuuQ0EUkLU4o7geGnj/2adER1Tz 3ir1gJmlk2e6IvwPLkIYCtDAz9krGHAzc6AcxP+YhJKMAP4Uv2MoyJgC0Acf69gf TJEnaH1TdVDtS2OcpdonSLyWxMz149XRRvFrRE0HPY7g2tTi9qwWcgIeabE= -----END CERTIFICATE-----Generated at Sat Aug 23 07:03:56 2025 by rpki-client