$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e7c3721-b1a3-4a25-bf48-db620d09215a.roa File: 3e7c3721-b1a3-4a25-bf48-db620d09215a.roa (raw, json) Hash identifier: YYnPVVVLfswDH3jTcefhsSvH1y0qeuJVPu50e1rncwM= Subject key identifier: E6:7D:EC:49:7B:03:93:6D:46:CD:4F:90:14:4D:06:C7:07:BE:6B:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DFD268F4EBB12C14C155198F343BA438A3A695F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e7c3721-b1a3-4a25-bf48-db620d09215a.roa Signing time: Fri 08 Aug 2025 00:01:13 +0000 ROA not before: Fri 08 Aug 2025 00:01:13 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fd:26:8f:4e:bb:12:c1:4c:15:51:98:f3:43:ba:43:8a:3a:69:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:13 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=4e65d5e0c5848d45859288a2c42ac4dc2c0c242653faf25edc83e0f97ffe87e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:2f:64:5d:e3:42:6f:b1:6a:d6:93:78:54: 50:d9:6f:98:25:71:b5:f7:96:df:ed:f5:2b:e6:63: 38:44:e1:2d:09:e6:b5:be:b9:c1:a2:85:96:1a:de: fc:6f:cc:70:8a:bc:ba:be:eb:9f:c8:f1:22:24:08: 4b:e9:1a:dc:c0:09:f4:f9:3b:a7:db:d6:5c:20:f3: 34:16:5c:7c:97:ea:b7:35:04:31:b2:22:ae:46:06: f3:f7:53:87:a7:50:4a:d8:74:0f:d7:86:5d:7e:af: 99:c7:92:16:be:3b:89:00:96:6c:f6:50:65:38:35: 6b:99:1c:30:ad:84:28:02:5b:24:f8:d4:8f:c5:8a: 34:28:50:61:9d:47:9c:9e:4e:57:62:f0:4e:05:53: 5e:77:54:70:b1:2c:66:73:6b:38:b1:ee:ba:e8:b9: af:c1:18:11:6c:bb:a3:bf:14:63:7f:4a:2d:31:87: 75:96:73:0b:9e:08:26:cd:0e:28:0e:ff:83:25:ac: 1d:ca:78:78:f6:6b:b8:ec:ad:44:4d:9d:95:a2:20: ef:e4:82:8f:27:9b:63:86:e1:b4:c8:98:20:53:c8: 34:69:c3:f3:a7:71:5c:21:8b:f3:5e:dd:fc:29:97: 70:b8:82:9f:83:f7:fe:25:8c:05:36:6b:41:b3:93: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7D:EC:49:7B:03:93:6D:46:CD:4F:90:14:4D:06:C7:07:BE:6B:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e7c3721-b1a3-4a25-bf48-db620d09215a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.119.12.0/24 Signature Algorithm: sha256WithRSAEncryption 63:44:9c:f2:6a:35:3b:4a:8b:cf:86:51:d6:29:d2:0e:64:32: a0:7c:8e:05:4f:aa:25:ac:70:48:72:10:58:21:77:ef:98:ca: 65:d5:f6:57:f3:1d:14:6d:3f:52:16:08:a2:3f:65:f0:95:99: 52:aa:6f:72:fe:c3:ba:f0:66:25:2b:a3:28:cc:48:73:a6:a3: 58:1f:ae:09:20:c8:6a:57:ef:f0:d3:6f:13:83:af:06:0d:e5: e0:6e:40:a1:9a:5a:84:c5:52:a0:5a:c1:0a:52:60:22:a6:4a: f3:11:4d:d1:31:e7:a8:60:33:83:a1:8e:1f:89:1a:11:8e:6d: a8:64:4c:c0:05:e1:09:a6:f4:d1:b4:37:c6:c3:4d:4c:20:2d: 92:4e:02:68:28:36:c7:01:97:a3:fd:8b:29:cb:6d:45:53:b4: 90:b6:75:a5:c2:86:15:6c:7f:76:2f:6f:9b:8b:d3:a6:98:cb: 6e:89:7e:45:22:21:ed:e8:90:2e:d5:76:7c:af:5b:28:7b:a5: 78:b3:c2:3f:9f:75:31:b0:80:b7:93:39:19:aa:3e:5d:ae:5b: f9:36:8f:6b:5d:d1:df:04:30:17:c0:53:51:4b:33:06:d9:61: ca:2c:8f:da:c5:a7:2c:57:e4:19:27:69:f0:6a:d9:49:b3:ae: e0:df:7a:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDf0mj067EsFMFVGY80O6Q4o6aV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMTEzWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTY1ZDVlMGM1ODQ4ZDQ1ODU5Mjg4YTJjNDJhYzRkYzJj MGMyNDI2NTNmYWYyNWVkYzgzZTBmOTdmZmU4N2UwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC51S9kXeNCb7Fq1pN4VFDZb5glcbX3lt/t9SvmYzhE4S0J 5rW+ucGihZYa3vxvzHCKvLq+65/I8SIkCEvpGtzACfT5O6fb1lwg8zQWXHyX6rc1 BDGyIq5GBvP3U4enUErYdA/Xhl1+r5nHkha+O4kAlmz2UGU4NWuZHDCthCgCWyT4 1I/FijQoUGGdR5yeTldi8E4FU153VHCxLGZzazix7rroua/BGBFsu6O/FGN/Si0x h3WWcwueCCbNDigO/4MlrB3KeHj2a7jsrURNnZWiIO/kgo8nm2OG4bTImCBTyDRp w/OncVwhi/Ne3fwpl3C4gp+D9/4ljAU2a0GzkwbJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5n3sSXsDk21GzU+QFE0Gxwe+a0AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlN2MzNzIxLWIxYTMtNGEyNS1iZjQ4LWRiNjIwZDA5MjE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLdwwwDQYJKoZIhvcNAQELBQADggEBAGNEnPJqNTtKi8+GUdYp0g5kMqB8 jgVPqiWscEhyEFghd++YymXV9lfzHRRtP1IWCKI/ZfCVmVKqb3L+w7rwZiUroyjM SHOmo1gfrgkgyGpX7/DTbxODrwYN5eBuQKGaWoTFUqBawQpSYCKmSvMRTdEx56hg M4Ohjh+JGhGObahkTMAF4Qmm9NG0N8bDTUwgLZJOAmgoNscBl6P9iynLbUVTtJC2 daXChhVsf3Yvb5uL06aYy26JfkUiIe3okC7VdnyvWyh7pXizwj+fdTGwgLeTORmq Pl2uW/k2j2td0d8EMBfAU1FLMwbZYcosj9rFpyxX5BknafBq2UmzruDfevM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:13 2025 by rpki-client