$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa File: a22c470d-8074-414a-ac14-cdafb7379aed.roa (raw, json) Hash identifier: 5ZuadF0/5SlC9gbJBpykHD8PUKedsWKpAHgA2TLIDGE= Subject key identifier: 62:2B:6C:02:04:5C:62:61:28:FE:7E:FB:C6:2D:69:57:1E:D9:A1:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32E04D09D6C50F6A78B36C1F46D47D1BCEF40084 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa Signing time: Wed 13 Aug 2025 00:01:48 +0000 ROA not before: Wed 13 Aug 2025 00:01:48 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.250.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:4d:09:d6:c5:0f:6a:78:b3:6c:1f:46:d4:7d:1b:ce:f4:00:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:01:48 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=f6abc9890371703596445c7c1c989a64d125ac70299c662ff733b7cdaf30b634, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:62:b3:59:9d:59:a7:6e:5a:13:d7:f9:29: 3d:09:7c:e3:05:96:01:43:49:6d:40:1a:28:ad:70: 3c:aa:e9:78:7b:02:92:66:dc:89:75:7c:03:b3:84: dd:af:fc:fc:ae:2f:21:57:32:01:35:61:ff:d5:4d: 38:dc:40:fc:4a:37:7a:f7:d6:2e:30:33:df:fb:39: 00:32:a5:bb:92:83:80:bc:c5:cb:d8:7e:83:13:00: 34:23:ad:db:ed:f7:aa:59:f0:ab:fc:d3:31:e4:fe: ec:52:34:dd:8a:e7:b2:44:aa:85:b3:fd:de:33:76: 02:7e:c4:2c:cf:27:16:a7:16:a5:c2:72:76:e4:5b: 44:b1:22:8c:1b:1b:b7:5a:0e:c8:70:46:4a:8e:ef: bc:d7:b8:4d:af:91:6a:76:eb:99:f7:93:00:a9:7a: e0:73:a4:b0:f8:65:a0:9c:0f:76:ba:b3:d5:c1:16: 7d:0e:01:9c:9c:f8:53:b5:98:42:83:b9:bb:6a:ce: bb:87:f2:0d:e0:96:7b:45:e9:6f:42:be:44:b7:ae: 39:1b:d3:a3:3b:56:d6:da:9d:ae:28:90:7d:60:13: 8d:ed:0c:bc:20:ac:fe:26:a9:3c:b7:b8:c4:03:28: 67:ea:d0:cd:37:14:ba:6b:63:8d:12:21:b7:97:ae: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2B:6C:02:04:5C:62:61:28:FE:7E:FB:C6:2D:69:57:1E:D9:A1:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.236.0/24 Signature Algorithm: sha256WithRSAEncryption d5:1c:6a:57:36:9d:c3:b9:32:0e:30:f5:a5:8a:53:1a:d0:bb: 18:9e:99:e8:ff:08:ed:8f:f3:86:95:e1:91:bf:4e:c9:72:f5: 06:23:10:41:04:8e:01:b4:bc:e4:39:03:77:39:50:89:b7:72: de:8e:94:d7:d3:6f:25:f3:5b:20:27:5c:34:cf:3c:92:2d:8c: f5:f5:16:70:c6:2d:ef:bd:22:ea:19:ef:d3:68:0c:d7:14:34: 0f:74:c6:47:41:94:19:57:af:38:f8:0e:04:a1:0e:2e:39:14: 89:60:6b:66:da:90:e8:07:b4:32:fb:ba:0f:87:d8:00:e2:1a: 97:99:52:dc:c8:ad:5b:82:e2:92:74:a5:93:78:9d:0e:b3:d6: 90:ba:76:48:99:ba:0d:40:74:d1:42:fe:ad:a1:0a:0f:52:5b: 16:8b:2e:42:b0:6c:71:a3:e1:ba:cd:ab:e5:49:ab:de:22:36: b4:e2:f1:44:15:9a:ba:98:c7:ef:37:4e:ad:3c:70:89:c5:cf: c7:87:14:76:c7:a5:92:76:1c:94:c2:ed:1c:03:df:58:b2:ec: e7:ff:c6:2f:19:69:99:4d:8c:07:1e:aa:4e:9b:9a:1d:f6:fb: b2:fa:78:96:25:58:06:94:78:7b:6a:88:7b:2e:bc:71:3d:97: 90:73:34:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMuBNCdbFD2p4s2wfRtR9G870AIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAwMTQ4WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmFiYzk4OTAzNzE3MDM1OTY0NDVjN2MxYzk4OWE2NGQx MjVhYzcwMjk5YzY2MmZmNzMzYjdjZGFmMzBiNjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrI2KzWZ1Zp25aE9f5KT0JfOMFlgFDSW1AGiitcDyq6Xh7 ApJm3Il1fAOzhN2v/PyuLyFXMgE1Yf/VTTjcQPxKN3r31i4wM9/7OQAypbuSg4C8 xcvYfoMTADQjrdvt96pZ8Kv80zHk/uxSNN2K57JEqoWz/d4zdgJ+xCzPJxanFqXC cnbkW0SxIowbG7daDshwRkqO77zXuE2vkWp265n3kwCpeuBzpLD4ZaCcD3a6s9XB Fn0OAZyc+FO1mEKDubtqzruH8g3glntF6W9CvkS3rjkb06M7Vtbana4okH1gE43t DLwgrP4mqTy3uMQDKGfq0M03FLprY40SIbeXrsmNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYitsAgRcYmEo/n77xi1pVx7ZoQIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMmM0NzBkLTgwNzQtNDE0YS1hYzE0LWNkYWZiNzM3OWFlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBANUcalc2ncO5Mg4w9aWKUxrQuxie mej/CO2P84aV4ZG/Tsly9QYjEEEEjgG0vOQ5A3c5UIm3ct6OlNfTbyXzWyAnXDTP PJItjPX1FnDGLe+9IuoZ79NoDNcUNA90xkdBlBlXrzj4DgShDi45FIlga2bakOgH tDL7ug+H2ADiGpeZUtzIrVuC4pJ0pZN4nQ6z1pC6dkiZug1AdNFC/q2hCg9SWxaL LkKwbHGj4brNq+VJq94iNrTi8UQVmrqYx+83Tq08cInFz8eHFHbHpZJ2HJTC7RwD 31iy7Of/xi8ZaZlNjAceqk6bmh32+7L6eJYlWAaUeHtqiHsuvHE9l5BzNAo= -----END CERTIFICATE-----Generated at Sat Aug 23 08:26:51 2025 by rpki-client