$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa File: 893d635c-c7ec-4d77-8388-208a16614cd7.roa (raw, json) Hash identifier: YJdYM/KwOCEZgSdSg5Tfz23/E+24OLetkzl7O+mvAvc= Subject key identifier: 3E:5C:02:84:D7:1E:45:C7:B2:DD:CB:9C:EE:80:47:F6:B5:1E:71:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D6D2A359D3CDD5AD7684D234845D6C36CD2A34B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa Signing time: Sat 16 Aug 2025 00:22:12 +0000 ROA not before: Sat 16 Aug 2025 00:22:12 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 701 IP address blocks: 204.126.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6d:2a:35:9d:3c:dd:5a:d7:68:4d:23:48:45:d6:c3:6c:d2:a3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:22:12 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=0329eff91ba117f87deee4d187df5715dd104f5fa37e014ed5e0dd2d575fe65a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:89:a6:92:89:d3:15:60:32:9d:5c:a4:74: 67:d6:3c:20:24:52:77:73:96:2c:ad:66:e4:b7:79: bd:f6:f9:01:83:35:8e:0c:46:de:1d:88:82:69:79: 74:f6:96:4d:85:2e:32:1b:5e:47:61:de:12:5b:98: 9f:af:3c:33:79:b5:87:cc:2d:a9:83:9b:7e:98:35: a4:50:27:c9:f2:a4:fd:1c:f1:be:e2:76:b7:7b:a9: 3f:cf:25:00:d6:53:c9:04:b9:ee:d0:25:b0:07:99: dc:57:14:f2:29:14:4f:ad:2e:76:8b:c1:ce:51:1b: 58:c2:46:92:49:a8:0b:f5:3a:78:c8:5a:8b:59:e1: 24:71:cb:9e:92:38:7a:a9:d5:01:8a:a5:e2:40:55: d7:f2:e9:0a:d4:96:87:68:93:22:ee:81:7f:38:17: 81:e5:a9:0d:df:5c:e8:53:a6:3d:16:06:31:65:7e: 9f:56:12:8f:2a:2d:ea:7e:1d:d9:58:c1:d7:39:47: 80:ab:af:5a:40:d8:95:28:e6:94:77:7c:e6:db:ec: fd:70:13:bb:00:ad:59:4f:44:53:50:19:24:29:17: 48:24:df:53:4d:e3:2b:78:d2:c2:92:bf:a4:54:1c: 27:66:2f:bc:28:af:34:d5:ba:14:39:56:13:94:64: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:02:84:D7:1E:45:C7:B2:DD:CB:9C:EE:80:47:F6:B5:1E:71:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/893d635c-c7ec-4d77-8388-208a16614cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.126.24.0/23 Signature Algorithm: sha256WithRSAEncryption 17:ea:d8:96:46:95:4e:20:13:18:3a:74:00:57:06:68:9a:da: 94:13:55:bb:bf:e7:4a:5a:6c:b5:c1:47:be:1e:7b:90:4f:bd: be:00:90:39:b5:05:55:fc:d0:a3:a0:bd:82:b6:af:37:61:a2: f8:52:87:c9:eb:6f:f9:3c:cf:04:a0:9c:5d:89:24:fd:72:57: 44:f4:c6:ba:6a:d9:4c:2a:2b:cc:79:96:94:91:59:8b:73:50: 4b:8b:d1:f9:b5:5e:4b:a8:66:24:9c:22:a9:e8:41:db:5f:17: 8c:16:ad:fd:ea:5e:9e:82:ac:38:fc:1e:8e:57:0a:2d:51:9a: a6:89:23:d3:3c:2a:12:6c:31:d1:ad:7f:22:b5:ee:c5:f0:62: c8:a5:0a:da:94:15:5f:36:de:cc:2e:99:84:59:38:1f:2c:f8: bc:e7:a5:75:a9:2d:d6:8b:f0:95:d9:e3:d7:a6:d5:38:60:30: c8:ce:10:3c:83:e2:6d:cb:d8:15:a1:c9:0b:db:04:e1:05:34: 1f:c2:88:8e:b8:58:8e:ea:aa:f3:11:90:b5:bd:f6:87:d0:41: 2e:e7:ca:91:53:47:f8:8f:cc:fd:19:fe:f3:ea:57:c5:43:e0: 2b:70:60:23:59:64:f0:7d:42:9c:58:5b:f2:8b:01:e3:9a:8a: b6:ef:00:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbW0qNZ083VrXaE0jSEXWw2zSo0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAyMjEyWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzI5ZWZmOTFiYTExN2Y4N2RlZWU0ZDE4N2RmNTcxNWRk MTA0ZjVmYTM3ZTAxNGVkNWUwZGQyZDU3NWZlNjVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZYYmmkonTFWAynVykdGfWPCAkUndzliytZuS3eb32+QGD NY4MRt4diIJpeXT2lk2FLjIbXkdh3hJbmJ+vPDN5tYfMLamDm36YNaRQJ8nypP0c 8b7idrd7qT/PJQDWU8kEue7QJbAHmdxXFPIpFE+tLnaLwc5RG1jCRpJJqAv1OnjI WotZ4SRxy56SOHqp1QGKpeJAVdfy6QrUlodokyLugX84F4HlqQ3fXOhTpj0WBjFl fp9WEo8qLep+HdlYwdc5R4Crr1pA2JUo5pR3fObb7P1wE7sArVlPRFNQGSQpF0gk 31NN4yt40sKSv6RUHCdmL7worzTVuhQ5VhOUZN9LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPlwChNceRcey3cuc7oBH9rUeceowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5M2Q2MzVjLWM3ZWMtNGQ3Ny04Mzg4LTIwOGExNjYxNGNkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHMfhgwDQYJKoZIhvcNAQELBQADggEBABfq2JZGlU4gExg6dABXBmia2pQT Vbu/50pabLXBR74ee5BPvb4AkDm1BVX80KOgvYK2rzdhovhSh8nrb/k8zwSgnF2J JP1yV0T0xrpq2UwqK8x5lpSRWYtzUEuL0fm1XkuoZiScIqnoQdtfF4wWrf3qXp6C rDj8Ho5XCi1RmqaJI9M8KhJsMdGtfyK17sXwYsilCtqUFV823swumYRZOB8s+Lzn pXWpLdaL8JXZ49em1ThgMMjOEDyD4m3L2BWhyQvbBOEFNB/CiI64WI7qqvMRkLW9 9ofQQS7nypFTR/iPzP0Z/vPqV8VD4CtwYCNZZPB9QpxYW/KLAeOairbvACo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:03 2025 by rpki-client