$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfadfab2-4521-4a10-916b-c286e19d9606.roa File: cfadfab2-4521-4a10-916b-c286e19d9606.roa (raw, json) Hash identifier: B09ZfpiUPKiymTsFm/iVOBuST8aNWFtXQYMJZaUccdY= Subject key identifier: D5:7C:85:25:12:EE:4E:F6:CF:76:5A:3F:E6:B0:51:C4:1D:C4:C5:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E249AEAEB29FEBB2E0777569F81D39B34AEA5F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfadfab2-4521-4a10-916b-c286e19d9606.roa Signing time: Fri 22 Aug 2025 00:20:58 +0000 ROA not before: Fri 22 Aug 2025 00:20:58 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.64.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:24:9a:ea:eb:29:fe:bb:2e:07:77:56:9f:81:d3:9b:34:ae:a5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:20:58 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=ea8492652fd2397023401eb8baff10b08aaacb8679f622d0e0b47a95f8242b22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:3f:0f:58:a5:12:28:c2:52:8a:fc:e8:f4: 7d:3f:1a:3f:53:dd:8f:b1:29:c1:44:fe:41:e1:c3: 6c:8f:c6:41:01:5b:97:ee:58:4a:56:cd:6d:c1:9a: ce:59:6e:46:1a:93:28:a4:b5:43:53:2e:b9:0b:47: 9c:cd:d0:78:45:a9:cb:b4:f0:2c:22:e9:e6:4f:a0: 50:ae:92:04:71:1d:01:e6:03:2c:e6:6a:df:52:a1: 43:c1:78:27:14:2c:fb:e5:bf:f2:3b:2c:68:4a:37: 5a:16:cf:01:0c:47:11:65:ea:55:1b:fc:a7:f5:cb: 68:8f:10:40:ac:aa:43:a4:67:17:22:fe:c9:f0:b8: 9a:a7:f9:82:f4:b7:1c:e4:f8:8e:f0:52:54:90:fc: b6:2e:78:35:be:04:95:95:40:c5:f6:f8:89:03:98: 46:87:89:7e:f6:4e:97:da:cc:e1:f6:bc:66:37:16: 37:a8:30:a2:5d:d4:ae:98:07:98:83:aa:c8:ac:88: 08:d3:ff:d2:38:10:3b:33:76:c4:5b:a7:12:9d:d8: 4a:a7:bc:c0:98:b6:a2:35:6e:c3:17:75:54:5b:1b: cd:b9:94:90:86:60:71:60:62:85:7a:89:f9:a0:4e: 27:cd:da:14:43:96:66:1c:3a:86:3c:78:1f:e2:2e: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7C:85:25:12:EE:4E:F6:CF:76:5A:3F:E6:B0:51:C4:1D:C4:C5:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfadfab2-4521-4a10-916b-c286e19d9606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:ab:4e:fd:61:e5:eb:97:4b:c7:76:ef:5d:4e:c8:10:57:75: 48:96:a2:d4:79:99:03:66:d6:e0:2f:7e:ea:46:ac:37:44:f1: be:cf:d3:1e:35:c7:51:54:e7:2d:aa:0e:99:d8:05:76:91:65: 7d:fe:f4:51:b8:b6:20:4f:60:2c:5e:21:c3:b9:cc:8c:fe:59: 7b:75:8c:1d:f8:7f:0b:d2:80:6c:8d:6d:3a:17:fa:6a:60:26: ab:ef:70:30:d0:4a:06:ab:81:87:a7:b2:30:d1:65:72:4d:29: 6a:4c:8f:4e:5f:5b:6b:95:ff:8e:24:34:3d:cc:03:f3:bd:6f: d2:50:3a:fa:4b:6d:94:77:34:56:18:19:28:dd:64:0c:6e:bf: c7:3f:d7:ca:b4:56:36:34:63:fb:e6:ee:de:fc:b2:0a:59:2a: a1:a7:20:41:87:7b:41:52:e9:8f:f7:62:ed:5a:e4:a8:dc:12: 10:98:e8:c9:c3:5b:54:5a:e7:03:11:72:dd:1f:8d:48:ba:af: 85:35:cd:ff:98:cc:6c:ea:38:ce:c8:29:94:ef:15:58:68:aa: 93:2d:c5:f9:52:05:06:ab:9c:d0:1c:c3:2f:f3:bf:6c:59:75: f7:5b:ac:9d:ef:dc:d0:8f:8f:ed:40:07:b0:48:2c:c2:58:08: 78:f4:39:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPiSa6usp/rsuB3dWn4HTmzSupfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAyMDU4WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTg0OTI2NTJmZDIzOTcwMjM0MDFlYjhiYWZmMTBiMDhh YWFjYjg2NzlmNjIyZDBlMGI0N2E5NWY4MjQyYjIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCotz8PWKUSKMJSivzo9H0/Gj9T3Y+xKcFE/kHhw2yPxkEB W5fuWEpWzW3Bms5ZbkYakyiktUNTLrkLR5zN0HhFqcu08Cwi6eZPoFCukgRxHQHm Ayzmat9SoUPBeCcULPvlv/I7LGhKN1oWzwEMRxFl6lUb/Kf1y2iPEECsqkOkZxci /snwuJqn+YL0txzk+I7wUlSQ/LYueDW+BJWVQMX2+IkDmEaHiX72TpfazOH2vGY3 FjeoMKJd1K6YB5iDqsisiAjT/9I4EDszdsRbpxKd2EqnvMCYtqI1bsMXdVRbG825 lJCGYHFgYoV6ifmgTifN2hRDlmYcOoY8eB/iLk01AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1XyFJRLuTvbPdlo/5rBRxB3ExUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYWRmYWIyLTQ1MjEtNGExMC05MTZiLWMyODZlMTlkOTYwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQQDANBgkqhkiG9w0BAQsFAAOCAQEAOKtO/WHl65dLx3bvXU7IEFd1SJai 1HmZA2bW4C9+6kasN0Txvs/THjXHUVTnLaoOmdgFdpFlff70Ubi2IE9gLF4hw7nM jP5Ze3WMHfh/C9KAbI1tOhf6amAmq+9wMNBKBquBh6eyMNFlck0pakyPTl9ba5X/ jiQ0PcwD871v0lA6+kttlHc0VhgZKN1kDG6/xz/XyrRWNjRj++bu3vyyClkqoacg QYd7QVLpj/di7VrkqNwSEJjoycNbVFrnAxFy3R+NSLqvhTXN/5jMbOo4zsgplO8V WGiqky3F+VIFBquc0BzDL/O/bFl191usne/c0I+P7UAHsEgswlgIePQ51g== -----END CERTIFICATE-----Generated at Sat Aug 23 08:32:55 2025 by rpki-client