$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa File: 22f4d3b0-2537-48ed-bf15-840b585b2b11.roa (raw, json) Hash identifier: 0DTkJqwdDU0HA7QY0MN9vFSTJdwmwakJLXIMOknHuQw= Subject key identifier: C3:6A:91:27:11:BF:6F:55:55:B5:80:7B:75:E1:DE:6F:97:34:94:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60EB314B5DD3C6A37557756F47FE8529DBA0556E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa Signing time: Sat 16 Aug 2025 00:21:34 +0000 ROA not before: Sat 16 Aug 2025 00:21:34 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:eb:31:4b:5d:d3:c6:a3:75:57:75:6f:47:fe:85:29:db:a0:55:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:21:34 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=d379c75ed221a5ed2abff20f78756723ba90782f793b1990276cb558a28e452e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:d1:52:26:dd:17:52:30:3c:83:dc:e4:58: 7f:04:63:c9:ce:7e:20:ad:7e:a3:27:01:5f:77:e7: c2:ee:6b:c7:a0:95:cd:ec:d9:13:97:50:fa:58:c3: fb:8f:cb:ce:ab:6b:58:11:e3:93:1c:42:4e:83:ea: 40:f8:34:c7:5c:0b:af:93:b5:1b:9d:26:48:e5:c9: 40:9d:dc:8e:db:44:32:49:f1:74:9e:6c:fa:16:1f: 55:e7:d4:57:4c:41:9a:6d:ce:cc:2b:5c:96:17:e7: ce:c9:df:d5:04:3c:69:7d:5f:7b:be:d7:9c:31:db: b0:7a:09:43:83:d0:ba:2d:26:5f:cf:6b:3f:0e:81: 50:09:d8:d0:5b:a0:19:21:07:35:34:a5:80:f9:98: c9:26:70:76:70:0a:d3:bb:cf:66:9a:6f:ba:0f:f2: a6:79:69:5d:f0:fc:43:b0:45:d6:bf:2f:c4:8a:8d: 90:ba:d3:13:c0:4c:34:73:e6:75:c3:82:14:95:95: e8:32:19:c2:f7:7c:d1:f7:5f:aa:5b:d8:0c:50:90: 08:93:b0:60:9a:53:64:0d:ee:34:21:f6:ca:26:b3: 0a:ba:11:f2:e1:60:da:61:cb:3d:da:ed:5f:67:ea: b1:ce:ec:d2:f2:45:4c:21:73:2b:fc:0c:65:6b:5d: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6A:91:27:11:BF:6F:55:55:B5:80:7B:75:E1:DE:6F:97:34:94:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.235.0/24 Signature Algorithm: sha256WithRSAEncryption 99:cc:0d:80:ac:e0:d5:41:5f:bd:e5:bd:1c:8f:c1:55:2f:42: f6:2e:99:e0:00:2a:81:99:95:c1:3e:2c:4e:5f:a0:47:3c:99: 5b:1b:fa:66:b2:a7:e3:2e:50:37:01:c3:d9:ac:08:81:52:0a: 2f:88:1c:7e:a9:0f:3d:f2:14:1f:c0:5c:a0:2e:f0:d6:cb:49: 2b:40:56:da:f9:36:b0:5d:67:da:21:41:6a:d0:e0:6d:85:02: 63:88:58:9d:ca:59:50:52:02:d7:c9:41:78:a8:f6:61:86:66: 83:16:6a:34:72:dd:ad:72:74:1f:c8:42:d7:2a:61:47:e6:be: 2c:c4:40:c3:3d:46:b8:cc:12:7f:61:52:b7:c1:0c:c0:24:f1: 54:87:7c:d3:0b:9c:4c:0d:21:4d:c5:86:b8:19:23:b8:46:0d: 90:54:fe:be:7d:9a:36:f0:2f:2a:7f:5f:5e:8f:a5:4b:b2:16: aa:ba:c4:6b:53:c2:84:e1:59:73:ac:96:07:19:dc:bc:c8:44: 43:24:7b:2f:6a:71:ae:4a:8d:ba:03:b1:67:eb:30:41:c4:9f: 81:8d:ff:6a:a8:e1:cd:f4:40:39:d4:74:63:2f:ab:ef:37:ba: b5:f8:1f:9c:46:44:74:13:be:43:8e:d1:d9:15:4a:04:ba:37: 13:46:80:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYOsxS13TxqN1V3VvR/6FKdugVW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAyMTM0WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzc5Yzc1ZWQyMjFhNWVkMmFiZmYyMGY3ODc1NjcyM2Jh OTA3ODJmNzkzYjE5OTAyNzZjYjU1OGEyOGU0NTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/INFSJt0XUjA8g9zkWH8EY8nOfiCtfqMnAV9358Lua8eg lc3s2ROXUPpYw/uPy86ra1gR45McQk6D6kD4NMdcC6+TtRudJkjlyUCd3I7bRDJJ 8XSebPoWH1Xn1FdMQZptzswrXJYX587J39UEPGl9X3u+15wx27B6CUOD0LotJl/P az8OgVAJ2NBboBkhBzU0pYD5mMkmcHZwCtO7z2aab7oP8qZ5aV3w/EOwRda/L8SK jZC60xPATDRz5nXDghSVlegyGcL3fNH3X6pb2AxQkAiTsGCaU2QN7jQh9somswq6 EfLhYNphyz3a7V9n6rHO7NLyRUwhcyv8DGVrXT4xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw2qRJxG/b1VVtYB7deHeb5c0lPEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyZjRkM2IwLTI1MzctNDhlZC1iZjE1LTg0MGI1ODViMmIxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3OswDQYJKoZIhvcNAQELBQADggEBAJnMDYCs4NVBX73lvRyPwVUvQvYu meAAKoGZlcE+LE5foEc8mVsb+mayp+MuUDcBw9msCIFSCi+IHH6pDz3yFB/AXKAu 8NbLSStAVtr5NrBdZ9ohQWrQ4G2FAmOIWJ3KWVBSAtfJQXio9mGGZoMWajRy3a1y dB/IQtcqYUfmvizEQMM9RrjMEn9hUrfBDMAk8VSHfNMLnEwNIU3FhrgZI7hGDZBU /r59mjbwLyp/X16PpUuyFqq6xGtTwoThWXOslgcZ3LzIREMkey9qca5KjboDsWfr MEHEn4GN/2qo4c30QDnUdGMvq+83urX4H5xGRHQTvkOO0dkVSgS6NxNGgNU= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:35 2025 by rpki-client