$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa File: ba95c612-340c-484f-bd1b-02425457802a.roa (raw, json) Hash identifier: 2wLrZe7k4Uo5Lqp2K2rNOzoS0Z6zmI4cGoAvBUZ7nBM= Subject key identifier: F6:3C:2D:C9:F2:7B:B1:D5:BB:EC:06:43:B8:A0:1E:0C:0B:28:D5:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 748385D4F880B4F0F75062D98E7F462893FADA91 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa Signing time: Sat 09 Aug 2025 00:10:53 +0000 ROA not before: Sat 09 Aug 2025 00:10:53 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:83:85:d4:f8:80:b4:f0:f7:50:62:d9:8e:7f:46:28:93:fa:da:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 9 00:10:53 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=afcb78e6d243e8af117478a3a78df937dc59e53a1d46c2bd6f19eb02f96de3e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:48:67:49:57:70:48:10:29:ba:e3:82:c2: 10:ff:24:94:36:65:61:a7:3f:ed:3a:0f:b0:8b:05: bf:e5:12:58:dc:8f:a0:41:7e:db:5b:a7:07:07:80: b4:4a:44:b1:4c:ed:98:8c:64:7c:fa:c3:c8:2f:1c: f8:b4:2b:2f:62:40:28:bc:63:5c:6f:e8:89:78:7b: 08:da:02:a9:ee:f5:d0:5e:28:dc:18:67:fc:48:55: 28:c0:5c:ef:f6:6e:88:6f:1f:e3:97:64:57:95:b4: b4:f0:c5:6c:fd:56:4a:fb:10:bb:c0:e9:94:b6:53: ec:58:82:b5:f3:c5:0f:16:7b:df:7f:62:1b:79:90: bf:53:7c:cb:48:7e:fa:25:32:42:df:c8:f8:6b:35: 13:c1:70:4c:61:b7:5a:6d:b4:c1:4a:b7:0a:58:01: dd:cc:90:2a:7b:60:10:38:2a:20:66:ba:f6:f6:82: 78:d2:88:99:0c:b9:a7:b8:f3:d6:cb:ce:d2:a3:68: 4d:0e:1d:df:be:40:fe:ac:12:fa:3e:59:c9:dc:48: 2c:fa:7f:e1:0b:22:4b:f6:bb:92:f7:91:4f:73:63: b3:75:3b:45:8d:3d:ea:e4:f2:2b:08:42:66:41:14: 5f:cb:ff:04:e0:1e:f7:f4:81:f5:85:3d:e8:b1:ff: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:2D:C9:F2:7B:B1:D5:BB:EC:06:43:B8:A0:1E:0C:0B:28:D5:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 0a:49:dd:f2:34:b8:27:32:c1:4b:64:af:70:bb:1a:58:7b:f9: 5c:6f:5f:d7:29:b9:a2:38:a6:03:1d:3a:a4:1b:38:82:dd:ce: d9:66:3e:5c:d2:44:7c:7a:d9:36:cb:82:58:94:c7:a4:98:f4: d7:c3:c6:cc:1b:2c:6b:53:28:9f:6b:5a:36:c5:73:fc:24:3c: 66:4d:cc:29:80:97:9d:6a:17:c7:02:c0:92:ae:ad:1e:cc:09: 1a:cc:0e:d8:1c:18:d1:55:d7:11:dd:d6:c4:58:20:b2:d7:e1: a4:fb:e4:5a:d4:4d:9b:c1:e6:88:79:e5:aa:91:f4:a8:78:c5: f3:fa:34:a4:f9:ce:85:8e:cd:66:13:f3:b3:7f:cf:78:24:68: 0f:46:8f:ff:b1:ff:57:a0:88:e9:6a:bd:a4:1a:d7:81:be:02: 5a:f8:3a:ab:32:8e:18:62:93:ca:ff:0f:1f:39:73:bf:5c:56: 5c:b7:8a:80:ba:23:1f:43:9b:d9:b6:03:2c:3d:1e:54:11:2a: 75:29:ad:f6:15:fd:3d:76:9b:41:92:9a:c8:fa:04:70:0e:ce: 74:57:d4:50:33:81:0e:ee:d3:f5:7c:be:b3:d1:d8:86:5d:7f: 4a:bf:3c:77:a7:d1:c5:38:fa:4f:62:63:06:d8:06:bd:73:9f: a3:ba:5e:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdIOF1PiAtPD3UGLZjn9GKJP62pEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAxMDUzWhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmNiNzhlNmQyNDNlOGFmMTE3NDc4YTNhNzhkZjkzN2Rj NTllNTNhMWQ0NmMyYmQ2ZjE5ZWIwMmY5NmRlM2UyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrQkhnSVdwSBApuuOCwhD/JJQ2ZWGnP+06D7CLBb/lEljc j6BBfttbpwcHgLRKRLFM7ZiMZHz6w8gvHPi0Ky9iQCi8Y1xv6Il4ewjaAqnu9dBe KNwYZ/xIVSjAXO/2bohvH+OXZFeVtLTwxWz9Vkr7ELvA6ZS2U+xYgrXzxQ8We99/ Yht5kL9TfMtIfvolMkLfyPhrNRPBcExht1pttMFKtwpYAd3MkCp7YBA4KiBmuvb2 gnjSiJkMuae489bLztKjaE0OHd++QP6sEvo+WcncSCz6f+ELIkv2u5L3kU9zY7N1 O0WNPerk8isIQmZBFF/L/wTgHvf0gfWFPeix/3S5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9jwtyfJ7sdW77AZDuKAeDAso1V4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhOTVjNjEyLTM0MGMtNDg0Zi1iZDFiLTAyNDI1NDU3ODAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNjyDANBgkqhkiG9w0BAQsFAAOCAQEACknd8jS4JzLBS2SvcLsaWHv5XG9f 1ym5ojimAx06pBs4gt3O2WY+XNJEfHrZNsuCWJTHpJj018PGzBssa1Mon2taNsVz /CQ8Zk3MKYCXnWoXxwLAkq6tHswJGswO2BwY0VXXEd3WxFggstfhpPvkWtRNm8Hm iHnlqpH0qHjF8/o0pPnOhY7NZhPzs3/PeCRoD0aP/7H/V6CI6Wq9pBrXgb4CWvg6 qzKOGGKTyv8PHzlzv1xWXLeKgLojH0Ob2bYDLD0eVBEqdSmt9hX9PXabQZKayPoE cA7OdFfUUDOBDu7T9Xy+s9HYhl1/Sr88d6fRxTj6T2JjBtgGvXOfo7peYA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:41 2025 by rpki-client