$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa File: bab8791a-2a38-491e-93b8-620d86339e11.roa (raw, json) Hash identifier: 8OIDq6DmYUMOnLrfWW5mVCUnZuL4UpKErxioGtDQAkE= Subject key identifier: BA:FE:5E:B5:49:51:55:FF:08:6D:8C:4A:1E:51:68:31:CD:C0:B4:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D64776B26B94A22A06138CD78A8A2B2AD311370 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa Signing time: Sat 16 Aug 2025 00:10:17 +0000 ROA not before: Sat 16 Aug 2025 00:10:17 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:77:6b:26:b9:4a:22:a0:61:38:cd:78:a8:a2:b2:ad:31:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:10:17 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=abd17bd14cfcf7410652541219338e0500dc68385ebe26442aa978b50657317b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:21:f3:0c:63:ea:35:e5:b0:e0:35:46:74:c0: f0:02:23:8e:5e:e3:d5:1c:45:8f:4e:7d:2f:f4:e2: 95:a4:39:e5:18:90:43:6c:4f:e7:0d:20:b0:24:5d: cf:70:7f:e0:63:f6:12:6f:bd:c8:92:2f:46:32:61: c2:d9:24:69:92:02:be:58:e4:8d:45:63:00:d8:a7: 18:40:85:37:3e:8c:ef:da:fb:cb:75:10:7b:61:73: dc:a6:d4:00:aa:a6:89:3c:b8:a4:ac:f8:55:70:12: e3:9d:ed:89:82:e5:eb:73:4c:45:5c:a6:2d:33:05: b3:de:37:81:fe:89:bb:f6:f6:3d:57:79:4f:83:a3: 55:a8:96:da:4b:97:e6:44:e8:27:67:9e:7f:3a:60: 01:4b:ca:94:57:a9:16:0d:19:d3:09:70:51:5e:69: c4:a8:76:d2:cb:96:e5:7d:cd:e0:0c:3a:63:c5:f2: ec:a6:5c:a3:38:de:08:38:81:e3:38:69:db:f2:20: a2:56:01:5f:ec:37:79:ed:56:3e:52:2a:49:24:e7: d8:b0:fc:82:f0:d2:6c:5c:61:47:27:cb:9b:08:34: fa:25:fc:b0:b1:9c:ae:f0:8f:48:ce:23:e1:45:cc: b5:a1:58:89:11:c3:c6:3a:a7:29:df:0e:e7:4c:dd: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:5E:B5:49:51:55:FF:08:6D:8C:4A:1E:51:68:31:CD:C0:B4:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:31:25:8e:c6:11:d1:ef:83:b8:63:a7:dc:c4:22:1f:d9:0a: a6:6d:98:8e:64:98:8d:9e:84:70:5a:31:a3:9d:39:d6:18:35: ff:5a:a6:e7:c3:eb:19:e3:d8:22:90:47:19:8d:49:8d:1b:a9: 45:35:af:53:eb:25:71:93:c5:08:76:86:a6:8a:91:bc:a3:e5: 45:d2:de:e7:41:54:4b:2f:2a:45:f2:20:db:2a:85:fd:e7:fc: 01:19:53:7f:99:26:53:29:e8:f2:96:3a:9d:c7:a0:2b:d9:61: 29:1e:d9:70:e4:42:6a:18:30:d4:d4:f5:ae:ba:85:15:19:0b: 2a:0d:2c:e8:6c:e8:d3:f4:71:a7:17:24:bc:b5:2f:21:49:d6: b0:97:0d:c7:7c:0f:75:60:69:62:9f:2e:38:00:25:34:3c:bd: f9:40:45:44:30:e8:5c:c0:40:f1:cb:eb:ff:69:2b:0e:56:6a: 55:b1:52:e6:7e:f0:a0:b0:6d:6a:22:52:73:ac:1d:ab:c0:d3: 40:4b:b5:67:a0:39:76:84:d0:71:d7:a5:3f:60:fb:0f:60:77: 6e:1f:49:8f:8f:1d:6d:7a:a5:8a:2a:af:ea:de:f0:45:ed:34: e4:40:11:79:72:5e:f6:de:c9:f0:bb:61:39:a5:ce:97:da:0d: fe:ba:cb:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfWR3aya5SiKgYTjNeKiisq0xE3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAxMDE3WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmQxN2JkMTRjZmNmNzQxMDY1MjU0MTIxOTMzOGUwNTAw ZGM2ODM4NWViZTI2NDQyYWE5NzhiNTA2NTczMTdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmIfMMY+o15bDgNUZ0wPACI45e49UcRY9OfS/04pWkOeUY kENsT+cNILAkXc9wf+Bj9hJvvciSL0YyYcLZJGmSAr5Y5I1FYwDYpxhAhTc+jO/a +8t1EHthc9ym1ACqpok8uKSs+FVwEuOd7YmC5etzTEVcpi0zBbPeN4H+ibv29j1X eU+Do1WoltpLl+ZE6Cdnnn86YAFLypRXqRYNGdMJcFFeacSodtLLluV9zeAMOmPF 8uymXKM43gg4geM4advyIKJWAV/sN3ntVj5SKkkk59iw/ILw0mxcYUcny5sINPol /LCxnK7wj0jOI+FFzLWhWIkRw8Y6pynfDudM3Xq5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuv5etUlRVf8IbYxKHlFoMc3AtH0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhYjg3OTFhLTJhMzgtNDkxZS05M2I4LTYyMGQ4NjMzOWUxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANkDANBgkqhkiG9w0BAQsFAAOCAQEAMzEljsYR0e+DuGOn3MQiH9kKpm2Y jmSYjZ6EcFoxo5051hg1/1qm58PrGePYIpBHGY1JjRupRTWvU+slcZPFCHaGpoqR vKPlRdLe50FUSy8qRfIg2yqF/ef8ARlTf5kmUyno8pY6ncegK9lhKR7ZcORCahgw 1NT1rrqFFRkLKg0s6Gzo0/RxpxckvLUvIUnWsJcNx3wPdWBpYp8uOAAlNDy9+UBF RDDoXMBA8cvr/2krDlZqVbFS5n7woLBtaiJSc6wdq8DTQEu1Z6A5doTQcdelP2D7 D2B3bh9Jj48dbXqliiqv6t7wRe005EAReXJe9t7J8LthOaXOl9oN/rrL7A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:35 2025 by rpki-client