$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa File: c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa (raw, json) Hash identifier: 6qZEvj5HHLSvEvQ3ON9vjCh8QsWix8WlKuZNMIOrN5g= Subject key identifier: E9:B4:22:AC:A4:5D:F6:2F:03:D3:45:65:BC:B0:90:CA:91:93:41:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 415D2D33BB7F2A4BD741B8B7AF11789A9DC9D103 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa Signing time: Sat 16 Aug 2025 00:31:53 +0000 ROA not before: Sat 16 Aug 2025 00:31:53 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.203.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:2d:33:bb:7f:2a:4b:d7:41:b8:b7:af:11:78:9a:9d:c9:d1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:31:53 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=c1fcfc2cca304f07d699ab4665d6179108e92f212a753b611bbe53406d19a839, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:02:c0:96:71:cc:b7:89:52:b1:a5:ef:66: 6f:6c:9f:d0:f1:01:17:73:7d:77:0d:e9:66:a0:fa: 5d:81:9f:e9:36:43:35:01:8a:49:7d:3b:6a:c9:4b: c2:cf:9b:00:61:cf:16:81:ba:4f:ea:ae:68:9f:98: 45:64:ee:56:ba:62:e4:83:1b:57:83:2a:67:76:a5: 51:d8:13:72:86:92:93:21:7a:4d:75:79:a0:bd:40: c7:b2:61:1e:f4:13:19:c1:c1:e5:75:b1:f7:91:6d: 77:53:d4:5d:a4:97:48:1c:a8:ec:f3:8c:06:8f:86: 17:62:c6:85:27:1a:55:71:85:d1:8f:e3:b3:7f:9a: ae:ee:85:df:1d:ec:f7:57:e7:2c:99:49:32:5d:67: ba:e1:2b:96:c6:86:09:2c:62:24:f5:e1:5a:89:26: d9:fe:71:5e:94:54:7c:fc:32:85:51:43:14:ca:fb: 7f:b5:37:f8:65:8f:1f:3c:51:e8:3d:9b:ae:34:6b: b5:ee:51:d1:4d:7d:eb:91:65:63:8d:b6:cc:26:32: 58:2e:c9:1c:30:55:b0:20:66:49:26:ee:46:c4:f2: 89:4e:c6:7b:8d:6d:9f:98:b7:df:55:7a:5c:48:e0: eb:92:97:3e:7f:80:4a:1d:fc:5d:5e:ed:10:d7:1a: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B4:22:AC:A4:5D:F6:2F:03:D3:45:65:BC:B0:90:CA:91:93:41:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.203.128.0/23 Signature Algorithm: sha256WithRSAEncryption 30:01:1e:8d:9e:b0:4a:5e:d5:c7:eb:1a:87:9e:c9:fb:21:7f: f5:ee:a5:21:9f:37:fc:23:92:a9:55:85:29:f7:a0:99:4d:e7: 8e:d3:a3:ee:d4:ef:c1:f5:42:fd:e6:31:83:08:a9:2e:8d:34: 15:19:0a:3a:50:b5:c1:e8:29:d5:06:32:c3:85:b5:8b:2e:8d: 57:20:11:e0:c7:a6:68:3d:d6:40:0b:15:bb:b6:a5:d1:1e:52: e3:e7:a7:ac:1c:66:b5:db:7e:c8:51:39:ff:a6:a6:a8:de:dc: 1c:11:02:98:e2:4d:eb:18:63:6e:9f:4a:0b:bd:e2:9b:ac:c5: e1:b1:48:51:90:21:05:43:92:4a:a5:b1:e2:0c:52:03:8b:39: e3:48:80:a4:90:b1:51:85:61:c3:9c:1f:54:7e:ab:93:0d:ec: 04:da:46:03:af:22:83:fe:78:99:12:6b:a2:5f:19:84:33:f7: df:9f:1d:64:5e:ae:7b:d4:d5:8b:44:a4:b0:d9:4b:3e:b3:0c: 5c:b1:ad:4d:bb:3a:30:f8:c1:04:69:7e:f5:58:32:3b:6f:58: c1:20:e3:e5:db:db:29:8e:8e:8d:ab:61:80:0f:0d:7b:2f:5d: 58:86:69:f2:99:03:f2:5b:41:47:97:09:d7:4b:85:10:33:c5: 91:85:65:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQV0tM7t/KkvXQbi3rxF4mp3J0QMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMTUzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWZjZmMyY2NhMzA0ZjA3ZDY5OWFiNDY2NWQ2MTc5MTA4 ZTkyZjIxMmE3NTNiNjExYmJlNTM0MDZkMTlhODM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDObwLAlnHMt4lSsaXvZm9sn9DxARdzfXcN6Wag+l2Bn+k2 QzUBikl9O2rJS8LPmwBhzxaBuk/qrmifmEVk7la6YuSDG1eDKmd2pVHYE3KGkpMh ek11eaC9QMeyYR70ExnBweV1sfeRbXdT1F2kl0gcqOzzjAaPhhdixoUnGlVxhdGP 47N/mq7uhd8d7PdX5yyZSTJdZ7rhK5bGhgksYiT14VqJJtn+cV6UVHz8MoVRQxTK +3+1N/hljx88Ueg9m640a7XuUdFNfeuRZWONtswmMlguyRwwVbAgZkkm7kbE8olO xnuNbZ+Yt99VelxI4OuSlz5/gEod/F1e7RDXGtG7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6bQirKRd9i8D00VlvLCQypGTQR8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3M2I5YjA3LTZjMzItNDdlZi04NDI0LTM1ZjcxMjZhNWZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEsy4AwDQYJKoZIhvcNAQELBQADggEBADABHo2esEpe1cfrGoeeyfshf/Xu pSGfN/wjkqlVhSn3oJlN547To+7U78H1Qv3mMYMIqS6NNBUZCjpQtcHoKdUGMsOF tYsujVcgEeDHpmg91kALFbu2pdEeUuPnp6wcZrXbfshROf+mpqje3BwRApjiTesY Y26fSgu94pusxeGxSFGQIQVDkkqlseIMUgOLOeNIgKSQsVGFYcOcH1R+q5MN7ATa RgOvIoP+eJkSa6JfGYQz99+fHWRernvU1YtEpLDZSz6zDFyxrU27OjD4wQRpfvVY MjtvWMEg4+Xb2ymOjo2rYYAPDXsvXViGafKZA/JbQUeXCddLhRAzxZGFZbw= -----END CERTIFICATE-----Generated at Sat Aug 23 09:06:16 2025 by rpki-client