$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa File: abe641dd-a10f-4e91-8408-cbc741adace1.roa (raw, json) Hash identifier: t6OC1mwhg2XTxxei1mpGTXlVPwcGH5dKJxBrVMNTfxU= Subject key identifier: 80:73:06:7A:33:68:6D:91:AB:0A:AF:72:1C:78:B4:63:B0:8A:92:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3ABA4E1E848CBA73B3DD2ACD44B31B05027DEDCB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa Signing time: Fri 22 Aug 2025 00:40:21 +0000 ROA not before: Fri 22 Aug 2025 00:40:21 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 46.235.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:4e:1e:84:8c:ba:73:b3:dd:2a:cd:44:b3:1b:05:02:7d:ed:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:40:21 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=1caab2394f393b5b585500b7e00d457046207b4d32f7899febb3816e4b98f9ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:dd:46:dc:2b:16:49:05:1b:1c:94:bd:e8: a2:dd:50:91:39:78:ca:fa:aa:cd:81:04:20:b2:60: eb:f9:97:19:46:46:2c:4c:05:e3:e0:63:2c:cc:07: d4:35:85:e5:34:49:3a:83:c5:a7:e2:ba:98:fc:eb: d4:9b:38:db:4d:ef:c3:fe:2f:93:96:d0:9a:62:6e: da:8a:01:d8:29:a6:78:b6:53:f7:27:9c:e8:f3:26: 9a:34:37:f0:2f:4e:eb:a1:77:56:25:8b:9c:b3:12: c3:7f:ef:94:08:ca:46:f9:b7:ed:21:f3:4d:9b:61: f1:23:c5:da:67:3f:9b:4b:ec:7c:db:6e:90:c5:2c: fb:41:a7:b7:3f:87:4f:7f:b9:90:ff:b3:ef:a6:20: f7:1c:b6:47:aa:60:d8:c8:9d:cf:80:6b:4d:89:62: e4:b1:f6:1c:7b:63:28:ff:23:97:ff:91:f1:ff:10: 93:9e:f3:24:09:72:48:d9:04:13:0d:9c:ff:c5:95: bc:0a:51:f5:4c:39:b6:de:26:47:d1:a4:b4:f7:6f: 96:e7:31:fb:ea:9b:e3:48:eb:ea:e4:be:db:da:64: c9:05:e5:85:08:4a:c7:62:75:fc:f8:72:a5:fe:89: b7:7d:02:b6:15:96:cb:4f:13:20:17:9c:0c:fe:01: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:73:06:7A:33:68:6D:91:AB:0A:AF:72:1C:78:B4:63:B0:8A:92:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.6.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:92:1a:cf:6b:b8:a2:74:46:95:a1:ef:bc:7b:80:74:12:8e: ca:8d:41:62:d0:02:42:87:34:83:12:2e:0c:f5:11:4b:c8:4c: b8:d6:92:b4:83:4e:9b:06:23:10:56:1a:3d:b0:d8:72:13:1b: e9:40:a8:ab:25:94:3e:f8:de:c5:ec:ee:46:99:1a:f2:74:7c: 9f:fa:ac:85:a5:8a:7c:2a:f5:57:10:16:a1:da:75:96:39:d5: 3d:b1:32:f9:ca:4e:03:62:ce:34:1e:e1:3a:5d:3a:67:6f:32: bb:57:bc:33:52:b5:bd:14:c2:8b:d3:66:25:2f:de:32:97:2c: b4:da:8d:85:75:19:90:99:df:a3:a8:28:84:dc:7a:86:f5:a3: 83:c9:9b:4f:c0:99:df:b9:d6:4c:18:b3:3b:45:19:28:b9:bf: 04:49:7c:83:74:e3:95:06:40:f2:ad:40:d7:6e:57:03:5a:3a: 49:f9:33:5e:af:f2:b6:ac:83:ee:01:e8:de:8e:8b:0c:80:00: f0:7d:73:c8:3e:95:37:63:a6:06:eb:a4:0a:03:25:70:93:6a: ee:8a:3f:22:96:a6:0f:2f:40:20:b8:4b:52:da:0d:01:f5:c6: 2a:72:75:15:24:ac:b4:b7:12:09:f7:46:bf:3c:5d:e2:4a:91: 6e:b2:65:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOrpOHoSMunOz3SrNRLMbBQJ97cswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDA0MDIxWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2FhYjIzOTRmMzkzYjViNTg1NTAwYjdlMDBkNDU3MDQ2 MjA3YjRkMzJmNzg5OWZlYmIzODE2ZTRiOThmOWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNe91G3CsWSQUbHJS96KLdUJE5eMr6qs2BBCCyYOv5lxlG RixMBePgYyzMB9Q1heU0STqDxafiupj869SbONtN78P+L5OW0JpibtqKAdgppni2 U/cnnOjzJpo0N/AvTuuhd1Yli5yzEsN/75QIykb5t+0h802bYfEjxdpnP5tL7Hzb bpDFLPtBp7c/h09/uZD/s++mIPcctkeqYNjInc+Aa02JYuSx9hx7Yyj/I5f/kfH/ EJOe8yQJckjZBBMNnP/FlbwKUfVMObbeJkfRpLT3b5bnMfvqm+NI6+rkvtvaZMkF 5YUISsdidfz4cqX+ibd9ArYVlstPEyAXnAz+Ad9bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgHMGejNobZGrCq9yHHi0Y7CKksIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiZTY0MWRkLWExMGYtNGU5MS04NDA4LWNiYzc0MWFkYWNlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAu6wYwDQYJKoZIhvcNAQELBQADggEBAI6SGs9ruKJ0RpWh77x7gHQSjsqN QWLQAkKHNIMSLgz1EUvITLjWkrSDTpsGIxBWGj2w2HITG+lAqKsllD743sXs7kaZ GvJ0fJ/6rIWlinwq9VcQFqHadZY51T2xMvnKTgNizjQe4TpdOmdvMrtXvDNStb0U wovTZiUv3jKXLLTajYV1GZCZ36OoKITceob1o4PJm0/Amd+51kwYsztFGSi5vwRJ fIN045UGQPKtQNduVwNaOkn5M16v8rasg+4B6N6OiwyAAPB9c8g+lTdjpgbrpAoD JXCTau6KPyKWpg8vQCC4S1LaDQH1xipydRUkrLS3Egn3Rr88XeJKkW6yZZg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:23:24 2025 by rpki-client