$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa File: 3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa (raw, json) Hash identifier: ebDd1tJFGhx+wzUrfBcSS1kmiOM35QJyU/H3W6Uiwpw= Subject key identifier: 55:76:4B:46:BC:EF:E6:13:62:57:EA:A1:81:CF:39:EF:47:82:B2:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40B239955BD07C356C20B7130187D863EEB325F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa Signing time: Tue 12 Aug 2025 00:00:33 +0000 ROA not before: Tue 12 Aug 2025 00:00:33 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.223.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b2:39:95:5b:d0:7c:35:6c:20:b7:13:01:87:d8:63:ee:b3:25:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:00:33 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=76e10dd954aaa730e97869fe15901ec98a49a41512e04b031f92427e3b2d266d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:67:60:66:1c:02:2a:e9:4f:8f:0b:4f:3c: 12:49:d1:b5:e6:29:95:a3:d1:0f:f2:54:d1:c4:e3: 7f:2e:98:51:cf:ed:77:31:4e:4f:36:27:a5:14:c2: a1:36:e0:65:fb:28:57:b9:e9:f9:51:d8:da:26:d4: e0:05:e9:86:f1:03:79:96:8a:32:78:54:e5:7e:7f: bd:d1:7b:3d:11:e6:1e:a8:02:db:da:76:35:e2:d0: 39:92:2c:56:d3:21:83:63:99:1e:b6:39:ba:8a:44: 53:99:c6:c2:fe:6d:81:4e:7b:86:ed:09:68:73:3a: d4:48:e6:a8:05:33:3d:e4:18:46:c6:9c:3c:03:b1: 95:19:43:00:e1:90:c0:46:4e:29:69:0f:33:1c:84: 9d:aa:60:ec:05:e1:17:0a:36:99:14:40:db:ab:05: cc:d2:e5:d1:ac:43:a4:df:0b:cf:14:15:38:91:70: b4:e6:7f:f9:1a:d3:4d:bf:2d:30:40:81:07:43:08: 14:26:df:9f:dd:6b:6a:53:64:bf:f9:db:45:45:87: e2:3b:5a:0e:e5:cf:4d:a5:ed:26:62:71:31:89:0c: 4c:07:5c:08:7d:d4:f7:47:69:bb:0e:86:15:37:c9: c4:d2:5a:75:72:c8:52:4e:e2:18:66:6f:79:05:24: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:4B:46:BC:EF:E6:13:62:57:EA:A1:81:CF:39:EF:47:82:B2:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption ba:62:b8:cf:93:f8:91:ef:d0:ff:9c:ee:d6:c6:fc:15:2c:3d: 42:1d:15:84:43:8d:f1:63:ae:af:3e:c6:89:39:70:67:6d:c0: de:55:0d:db:cd:f2:57:67:5e:2a:5e:9b:bd:6d:e7:11:22:64: 25:c3:95:d3:6c:9d:52:91:21:0c:f0:ef:2a:b7:dd:ad:d0:a9: 25:a3:13:89:18:b3:ed:ab:af:38:a1:3f:8d:44:a3:fe:44:e4: eb:54:22:80:16:68:58:b4:c9:77:7e:a9:84:78:7e:fc:6e:e4: 47:e5:a0:77:ec:45:70:0e:f2:92:72:22:7a:b2:23:c4:03:bc: 09:51:59:99:f8:78:3a:e8:c2:20:02:dc:d8:70:ad:ae:bb:fc: 07:67:d5:57:a1:69:37:7f:c7:32:61:f2:c4:2e:33:9d:86:0a: 5b:08:d9:6f:8c:1f:36:02:b0:0c:a8:cb:0a:3a:7d:59:d3:6b: 72:1b:6c:07:ba:eb:f2:b2:2a:fa:3a:ee:63:d3:89:cc:5b:14: a1:f7:e2:fd:15:6c:ab:8c:e8:5e:c0:3e:d1:9f:cd:08:a7:85: 69:73:7c:59:4e:50:d6:fc:c9:f6:bd:66:9e:1f:1c:51:71:57: b9:b0:ed:3c:66:5a:b7:6c:3d:48:9f:1a:55:f1:27:33:dc:16: 02:39:cb:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQLI5lVvQfDVsILcTAYfYY+6zJfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAwMDMzWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmUxMGRkOTU0YWFhNzMwZTk3ODY5ZmUxNTkwMWVjOThh NDlhNDE1MTJlMDRiMDMxZjkyNDI3ZTNiMmQyNjZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKr2dgZhwCKulPjwtPPBJJ0bXmKZWj0Q/yVNHE438umFHP 7XcxTk82J6UUwqE24GX7KFe56flR2Nom1OAF6YbxA3mWijJ4VOV+f73Rez0R5h6o AtvadjXi0DmSLFbTIYNjmR62ObqKRFOZxsL+bYFOe4btCWhzOtRI5qgFMz3kGEbG nDwDsZUZQwDhkMBGTilpDzMchJ2qYOwF4RcKNpkUQNurBczS5dGsQ6TfC88UFTiR cLTmf/ka002/LTBAgQdDCBQm35/da2pTZL/520VFh+I7Wg7lz02l7SZicTGJDEwH XAh91PdHabsOhhU3ycTSWnVyyFJO4hhmb3kFJEihAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVXZLRrzv5hNiV+qhgc8570eCsvgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZGY0NTZmLTM5YmYtNDdlYy04MmNlLWEzNTBlMzFkMGQ5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATP3+AwDQYJKoZIhvcNAQELBQADggEBALpiuM+T+JHv0P+c7tbG/BUsPUId FYRDjfFjrq8+xok5cGdtwN5VDdvN8ldnXipem71t5xEiZCXDldNsnVKRIQzw7yq3 3a3QqSWjE4kYs+2rrzihP41Eo/5E5OtUIoAWaFi0yXd+qYR4fvxu5EfloHfsRXAO 8pJyInqyI8QDvAlRWZn4eDrowiAC3Nhwra67/Adn1VehaTd/xzJh8sQuM52GClsI 2W+MHzYCsAyoywo6fVnTa3IbbAe66/KyKvo67mPTicxbFKH34v0VbKuM6F7APtGf zQinhWlzfFlOUNb8yfa9Zp4fHFFxV7mw7TxmWrdsPUifGlXxJzPcFgI5y/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:04 2025 by rpki-client