$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa File: 4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa (raw, json) Hash identifier: 7byqDidWNQXIXkTrBatkGk0DBAHGOUz3PsrczYK9WME= Subject key identifier: 58:58:0C:0D:7F:40:E6:4F:90:31:F2:69:F3:03:A5:5F:5F:A7:A5:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DD5BD2055603CA7DDE492CA20F0D803597ADC62 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa Signing time: Fri 15 Aug 2025 00:30:22 +0000 ROA not before: Fri 15 Aug 2025 00:30:22 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d5:bd:20:55:60:3c:a7:dd:e4:92:ca:20:f0:d8:03:59:7a:dc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:30:22 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a50faa9c77017e135eb4aebe2038ce970776b7c220fd6798b5bfe14aa7793206, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:ce:eb:24:d8:43:d7:d1:f7:c2:56:e5:9e: 4a:da:bb:3b:f8:82:4e:e8:1e:8f:b1:df:a3:f5:84: 46:c9:9c:7d:ef:ae:d6:db:b1:0f:f8:90:fd:e9:72: b7:3e:e2:71:d3:3c:a7:ce:07:1b:af:0f:52:c1:16: 46:23:e3:fb:6e:55:82:ae:31:cd:ce:e0:39:9a:a3: 87:c4:83:30:2a:59:ab:35:50:35:87:e2:b6:53:72: 9f:00:e7:bb:f1:c5:2f:90:43:5e:03:51:d5:41:9f: 64:1a:97:43:86:25:e0:60:6d:91:77:f4:6b:e1:8e: f8:39:85:d7:71:77:b4:a8:a0:b7:dc:e0:53:26:c7: 6f:fc:67:77:de:a2:85:09:ea:59:f1:c8:09:19:03: 62:98:17:cd:28:5d:02:0d:87:a3:9a:47:a3:32:73: c0:99:ce:e7:af:aa:96:aa:30:d3:5d:8f:ab:30:6f: 7d:bb:e6:a9:9e:53:eb:19:e2:52:25:a5:a7:33:53: fe:56:1c:e4:01:e7:af:2b:11:e8:07:d2:b2:35:3a: e0:03:53:14:5a:40:93:03:3e:c2:16:10:18:dc:5b: 0a:31:b4:ad:6a:53:1f:36:8c:05:30:bb:f9:6e:3c: 02:02:be:c0:c7:93:b9:30:90:4f:34:3c:5a:56:39: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:58:0C:0D:7F:40:E6:4F:90:31:F2:69:F3:03:A5:5F:5F:A7:A5:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.176.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:c2:86:da:ba:89:3e:e8:26:0d:72:24:09:6b:59:1b:da:be: 00:3c:bc:f2:5c:fb:68:fe:f3:b3:9a:39:e0:6d:28:4f:ba:8d: 9d:e3:93:53:b1:5f:ec:06:b0:07:0a:7e:92:3b:85:bd:a4:b4: 36:5e:c9:4f:73:11:ce:60:da:26:dc:a9:c0:ba:8b:cb:cb:57: 4d:4c:16:64:5b:6d:69:6b:6a:cf:df:e5:a1:ca:03:8a:16:ca: 43:14:00:d1:8b:b5:c3:7e:31:ea:07:33:a3:6e:5c:0f:dd:62: e3:67:ff:31:ee:57:fe:82:cf:05:99:de:7c:27:09:d9:19:8d: 0a:08:82:ee:ce:1e:19:7f:0c:df:8a:af:13:b2:de:96:00:be: 59:5c:02:c4:bf:c9:c7:b6:ac:0a:25:3c:a9:c4:c1:ba:b1:0b: ef:df:5e:5f:c5:bd:7a:62:24:35:83:18:7b:ab:84:e6:63:a0: 6b:3f:e8:fe:e6:11:f6:7d:15:c0:95:6e:7f:a8:dd:c7:90:6e: c3:38:1f:da:68:3c:10:c7:68:fb:cb:39:50:a7:9b:26:61:3a: 86:98:44:68:cd:1d:6b:6a:fb:5f:b6:de:b8:b8:8e:68:42:35: 63:79:5d:85:d4:28:d1:e6:94:e3:6a:b9:12:90:dc:72:51:45: 5f:63:bc:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDdW9IFVgPKfd5JLKIPDYA1l63GIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDAzMDIyWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTBmYWE5Yzc3MDE3ZTEzNWViNGFlYmUyMDM4Y2U5NzA3 NzZiN2MyMjBmZDY3OThiNWJmZTE0YWE3NzkzMjA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrLs7rJNhD19H3wlblnkrauzv4gk7oHo+x36P1hEbJnH3v rtbbsQ/4kP3pcrc+4nHTPKfOBxuvD1LBFkYj4/tuVYKuMc3O4Dmao4fEgzAqWas1 UDWH4rZTcp8A57vxxS+QQ14DUdVBn2Qal0OGJeBgbZF39Gvhjvg5hddxd7SooLfc 4FMmx2/8Z3feooUJ6lnxyAkZA2KYF80oXQINh6OaR6Myc8CZzuevqpaqMNNdj6sw b3275qmeU+sZ4lIlpaczU/5WHOQB568rEegH0rI1OuADUxRaQJMDPsIWEBjcWwox tK1qUx82jAUwu/luPAICvsDHk7kwkE80PFpWOZ+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWFgMDX9A5k+QMfJp8wOlX1+npf8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmNWEyZTAyLTg2MTctNDY3Ny1hNGM4LTg0NzgwYzJkYzZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATMIbAwDQYJKoZIhvcNAQELBQADggEBAI7Chtq6iT7oJg1yJAlrWRvavgA8 vPJc+2j+87OaOeBtKE+6jZ3jk1OxX+wGsAcKfpI7hb2ktDZeyU9zEc5g2ibcqcC6 i8vLV01MFmRbbWlras/f5aHKA4oWykMUANGLtcN+MeoHM6NuXA/dYuNn/zHuV/6C zwWZ3nwnCdkZjQoIgu7OHhl/DN+KrxOy3pYAvllcAsS/yce2rAolPKnEwbqxC+/f Xl/FvXpiJDWDGHurhOZjoGs/6P7mEfZ9FcCVbn+o3ceQbsM4H9poPBDHaPvLOVCn myZhOoaYRGjNHWtq+1+23ri4jmhCNWN5XYXUKNHmlONquRKQ3HJRRV9jvCI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:23 2025 by rpki-client