$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba301a9-839a-4d56-b8d7-def092c4877c.roa File: dba301a9-839a-4d56-b8d7-def092c4877c.roa (raw, json) Hash identifier: izdfDHhS3d3tdItyc/UMJxd/zyX6+Da388w79lRA/9g= Subject key identifier: 3B:85:69:F4:42:18:D9:45:0D:13:8A:AD:29:19:F3:B3:93:E4:45:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F14EB1CA10383671D1C6A35C1708DD7908C069E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba301a9-839a-4d56-b8d7-def092c4877c.roa Signing time: Sat 16 Aug 2025 00:30:23 +0000 ROA not before: Sat 16 Aug 2025 00:30:23 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.215.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:14:eb:1c:a1:03:83:67:1d:1c:6a:35:c1:70:8d:d7:90:8c:06:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:30:23 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=a21a34322595f7c274b6f32f2064d66e61b54a93543e9523c78e55baf629124a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:23:e9:f6:5b:7c:6b:10:21:0d:e6:da:b1: 3d:43:df:8a:96:4d:f8:f5:60:d9:64:cf:15:80:11: d7:7a:9a:eb:b9:0c:35:65:64:0c:e6:3f:f0:68:42: f5:a8:98:c6:eb:03:87:4b:51:93:84:df:62:a9:54: 84:05:c9:69:ba:7b:c1:0a:d0:1b:78:a4:02:0d:48: 27:47:a9:a0:e8:7e:69:0e:31:4d:97:19:db:29:32: 9f:ea:16:0f:85:25:b8:0c:2b:8a:73:56:54:2c:de: 6b:f6:f3:0e:27:34:da:48:68:f4:eb:c6:fc:bb:22: 87:c7:46:c7:4a:96:ac:a1:36:29:24:56:1e:df:b8: 64:8f:91:cd:45:ca:3e:15:38:44:92:93:54:4f:73: ea:8e:35:8d:3a:06:cc:9c:82:28:0b:7d:d0:48:82: 5a:f9:86:4c:28:9f:da:75:d3:e2:b3:27:17:25:a5: 3d:70:1b:ad:5c:21:8e:ad:1d:bb:f0:ad:ac:b8:dc: 21:17:78:a9:79:57:5f:68:6d:18:ca:19:25:c1:6b: e8:db:59:26:48:81:6c:6a:70:2f:95:00:65:71:a8: 40:56:79:d5:ab:52:94:2f:18:14:16:17:83:bf:56: 55:c7:3c:eb:82:f3:15:e6:f4:38:11:ac:4e:e2:f1: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:85:69:F4:42:18:D9:45:0D:13:8A:AD:29:19:F3:B3:93:E4:45:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba301a9-839a-4d56-b8d7-def092c4877c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.140.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:21:cb:ea:40:8d:ba:43:a4:23:be:49:66:70:b6:95:86:e5: 64:28:53:83:01:29:bf:ef:1e:ea:b9:1c:2c:b5:41:fa:77:2b: 55:12:6b:1f:16:83:3f:a0:9e:20:0b:a5:ab:2e:0e:18:61:0e: 8a:57:5f:1a:47:ac:59:82:e8:4d:59:09:fa:49:69:e3:a9:24: f0:4e:33:61:ac:d8:fd:fa:15:b9:e5:b0:df:18:38:9a:c0:83: 21:21:52:e4:07:15:80:7d:ce:e8:b0:dc:7d:01:8b:3b:cb:16: e7:f4:0c:50:ae:82:7d:8e:91:61:94:80:e4:7f:8a:0d:5e:4c: 75:e1:66:e5:ad:ce:ca:3e:cd:fb:5b:6b:c2:53:61:db:5b:66: 3b:20:0a:11:bf:c2:27:f1:cc:17:fa:1a:00:d8:3d:da:32:b9: 48:74:62:9b:aa:2b:3d:35:fc:95:32:6d:a6:8a:65:ea:80:2b: 22:eb:cf:94:13:b1:6b:c6:b1:6f:a2:00:04:df:29:db:8f:5c: b0:04:05:d7:b2:6a:79:2b:56:1d:cf:09:b6:76:0f:5c:5b:e2: b5:eb:85:4d:f6:8b:fd:fe:b6:90:04:a4:d8:49:83:44:96:62: 90:50:cb:14:d4:37:08:7b:56:fb:c1:82:cd:dc:13:75:dd:47: 57:db:33:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTxTrHKEDg2cdHGo1wXCN15CMBp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAzMDIzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjFhMzQzMjI1OTVmN2MyNzRiNmYzMmYyMDY0ZDY2ZTYx YjU0YTkzNTQzZTk1MjNjNzhlNTViYWY2MjkxMjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLeiPp9lt8axAhDebasT1D34qWTfj1YNlkzxWAEdd6muu5 DDVlZAzmP/BoQvWomMbrA4dLUZOE32KpVIQFyWm6e8EK0Bt4pAINSCdHqaDofmkO MU2XGdspMp/qFg+FJbgMK4pzVlQs3mv28w4nNNpIaPTrxvy7IofHRsdKlqyhNikk Vh7fuGSPkc1Fyj4VOESSk1RPc+qONY06BsycgigLfdBIglr5hkwon9p10+KzJxcl pT1wG61cIY6tHbvwray43CEXeKl5V19obRjKGSXBa+jbWSZIgWxqcC+VAGVxqEBW edWrUpQvGBQWF4O/VlXHPOuC8xXm9DgRrE7i8TZ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO4Vp9EIY2UUNE4qtKRnzs5PkRbIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiYTMwMWE5LTgzOWEtNGQ1Ni1iOGQ3LWRlZjA5MmM0ODc3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14wwDQYJKoZIhvcNAQELBQADggEBADohy+pAjbpDpCO+SWZwtpWG5WQo U4MBKb/vHuq5HCy1Qfp3K1USax8Wgz+gniALpasuDhhhDopXXxpHrFmC6E1ZCfpJ aeOpJPBOM2Gs2P36FbnlsN8YOJrAgyEhUuQHFYB9zuiw3H0BizvLFuf0DFCugn2O kWGUgOR/ig1eTHXhZuWtzso+zftba8JTYdtbZjsgChG/wifxzBf6GgDYPdoyuUh0 YpuqKz01/JUybaaKZeqAKyLrz5QTsWvGsW+iAATfKduPXLAEBdeyankrVh3PCbZ2 D1xb4rXrhU32i/3+tpAEpNhJg0SWYpBQyxTUNwh7VvvBgs3cE3XdR1fbMwE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:58 2025 by rpki-client