$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/292064bd-ead2-4bf2-a375-50f37c4c3521.roa File: 292064bd-ead2-4bf2-a375-50f37c4c3521.roa (raw, json) Hash identifier: BEgjqsDuz6QO7hSY1rAFh31kQCYJCDbSg1VrUw1XABk= Subject key identifier: 0F:AC:0C:1F:93:7C:0F:DA:53:71:93:A8:9D:F0:74:73:05:72:44:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04B89D741A0DE188BED712DE949A87CA223D6201 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/292064bd-ead2-4bf2-a375-50f37c4c3521.roa Signing time: Tue 05 Aug 2025 00:42:09 +0000 ROA not before: Tue 05 Aug 2025 00:42:09 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.232.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b8:9d:74:1a:0d:e1:88:be:d7:12:de:94:9a:87:ca:22:3d:62:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:42:09 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=d0dab0d2fdb04566cc30f78ea886d3d5b5b5fb3288680e957b554bd6fe1a22b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:c0:ed:e4:f8:2d:98:90:5a:ef:59:05:a4: 76:d3:32:d1:fc:63:7d:5f:d9:4e:d9:a1:e5:bf:f8: 97:f6:df:ae:c5:55:2b:69:23:a1:83:34:f9:e5:7d: 28:a3:59:36:ac:c7:b3:3f:08:b3:1c:b6:cb:ad:e9: a3:54:26:d9:32:a2:1c:5d:4f:8e:e3:84:a3:04:83: 55:68:b6:61:10:87:a9:1d:4f:b5:7d:c5:4c:35:cd: c2:0c:5f:a4:d3:d3:23:10:c0:d8:48:c7:c9:25:a1: 14:a6:1e:80:ad:ea:08:d5:da:a4:33:2b:02:90:21: d8:41:14:52:5e:fc:63:e1:8f:a4:30:7f:98:21:6f: b3:0c:f5:33:43:b9:e4:fb:de:09:ca:8b:3b:ba:0d: 57:ac:65:c5:25:84:e8:58:88:2a:79:c6:d2:2a:dd: 1a:e3:9c:19:77:b9:7f:04:26:21:f2:d6:ed:42:25: 75:38:b2:5f:a2:56:57:d0:01:f5:58:cd:ac:a4:dd: a6:fe:d4:ab:ba:c0:f4:c1:4a:26:22:94:a7:ab:3d: ed:75:a1:79:d7:57:df:cd:f9:3a:d6:05:93:00:43: 9a:0e:0c:da:1e:eb:a6:1e:18:b3:b7:38:3f:19:ca: 5c:05:af:9a:e6:80:16:85:01:28:d1:5a:0c:9e:cc: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AC:0C:1F:93:7C:0F:DA:53:71:93:A8:9D:F0:74:73:05:72:44:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/292064bd-ead2-4bf2-a375-50f37c4c3521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.92.0/22 Signature Algorithm: sha256WithRSAEncryption 05:83:b9:3c:c2:08:54:07:5b:d1:77:1b:ca:d5:3d:72:0b:3e: 28:43:9b:e0:ac:29:5f:29:86:d7:c3:06:2b:f1:86:d4:b3:70: 6d:8f:9f:d5:72:ce:02:b0:d3:8a:c1:02:f9:35:d2:99:8a:b4: 72:cb:16:0e:26:76:e6:85:eb:80:04:04:c6:67:c3:2b:8e:e9: 3b:98:8c:02:35:b1:5a:5d:8a:6e:ca:45:ce:9a:7d:a7:7f:90: 82:f3:a9:8c:f7:89:51:cb:a5:e7:f0:79:27:fe:78:e1:df:f3: 3f:c9:c7:8a:12:53:60:7b:11:f4:7f:bc:6c:54:e2:fe:e5:8f: ac:0d:b6:47:a8:9e:50:e1:16:2c:05:69:cb:1a:e5:be:bd:86: b9:f2:a2:f1:cd:81:bd:f7:a5:f2:50:a5:c0:ad:ec:e7:a1:64: 6b:18:ab:52:6a:dc:dc:dc:c3:d8:c4:d4:a7:52:42:11:02:b4: 0d:71:9d:e2:dc:56:75:47:c4:90:d2:f0:45:c6:dc:de:56:4f: 5c:35:c2:c1:ef:e5:7b:2a:bf:bb:64:8b:55:29:e1:f3:83:9a: a9:81:a0:7c:e4:c6:bd:77:84:72:98:cf:eb:83:c2:ac:4e:5f: 92:9b:ad:6d:c1:64:fc:66:4c:68:2e:d1:8f:fd:e5:66:21:22: 76:b3:48:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBLiddBoN4Yi+1xLelJqHyiI9YgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDA0MjA5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGRhYjBkMmZkYjA0NTY2Y2MzMGY3OGVhODg2ZDNkNWI1 YjVmYjMyODg2ODBlOTU3YjU1NGJkNmZlMWEyMmI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxGMDt5PgtmJBa71kFpHbTMtH8Y31f2U7ZoeW/+Jf2367F VStpI6GDNPnlfSijWTasx7M/CLMctsut6aNUJtkyohxdT47jhKMEg1VotmEQh6kd T7V9xUw1zcIMX6TT0yMQwNhIx8kloRSmHoCt6gjV2qQzKwKQIdhBFFJe/GPhj6Qw f5ghb7MM9TNDueT73gnKizu6DVesZcUlhOhYiCp5xtIq3RrjnBl3uX8EJiHy1u1C JXU4sl+iVlfQAfVYzayk3ab+1Ku6wPTBSiYilKerPe11oXnXV9/N+TrWBZMAQ5oO DNoe66YeGLO3OD8ZylwFr5rmgBaFASjRWgyezM/RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD6wMH5N8D9pTcZOonfB0cwVyRPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5MjA2NGJkLWVhZDItNGJmMi1hMzc1LTUwZjM3YzRjMzUyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJG6FwwDQYJKoZIhvcNAQELBQADggEBAAWDuTzCCFQHW9F3G8rVPXILPihD m+CsKV8phtfDBivxhtSzcG2Pn9VyzgKw04rBAvk10pmKtHLLFg4mduaF64AEBMZn wyuO6TuYjAI1sVpdim7KRc6afad/kILzqYz3iVHLpefweSf+eOHf8z/Jx4oSU2B7 EfR/vGxU4v7lj6wNtkeonlDhFiwFacsa5b69hrnyovHNgb33pfJQpcCt7OehZGsY q1Jq3Nzcw9jE1KdSQhECtA1xneLcVnVHxJDS8EXG3N5WT1w1wsHv5Xsqv7tki1Up 4fODmqmBoHzkxr13hHKYz+uDwqxOX5KbrW3BZPxmTGgu0Y/95WYhInazSMk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:34 2025 by rpki-client