$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa File: f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa (raw, json) Hash identifier: Jh0LfY5nTqlRmsBnlTZAHCmqzeZxNnYOycXzN17fdB8= Subject key identifier: F7:00:77:7D:CC:DF:4B:83:E2:4F:3D:B6:D9:AC:5F:5C:66:F0:8B:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CCCE001C624A7C8CD16E45C317A498E8335A9FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa Signing time: Thu 18 Sep 2025 19:37:26 +0000 ROA not before: Thu 18 Sep 2025 19:37:26 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cc:e0:01:c6:24:a7:c8:cd:16:e4:5c:31:7a:49:8e:83:35:a9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 18 19:37:26 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=609ea16b12cc826281f7f90f6eb170416e4101ea4688eab7ff00ba22634a9cbb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:48:26:bf:54:c3:ff:5b:f8:6e:80:84:ed: 91:e1:df:9b:ac:71:08:84:a0:54:a4:32:6b:d4:e5: 33:53:a0:c9:23:52:34:3f:58:a5:fa:34:cd:67:c4: 57:26:0d:b2:a6:c9:60:fb:d3:53:7f:25:8c:f3:07: 32:58:ee:d3:c9:b5:b6:a8:6f:a5:b1:72:77:ce:05: 75:f2:4f:6e:6e:0c:19:59:68:1b:dc:2b:ad:7c:b8: cb:2a:98:72:6d:b4:c5:c5:96:85:d9:d0:79:cc:3c: eb:c2:34:cf:e7:d8:ad:db:34:29:1e:b3:ff:37:9e: de:6c:06:52:55:3b:bd:ec:3f:54:0e:a7:04:89:a4: bf:2b:a2:df:f3:c2:06:e3:b8:54:db:12:7a:ae:7e: cd:85:d2:16:26:ac:24:75:9d:45:96:3f:79:bf:0e: f0:91:cc:26:cb:01:48:d6:24:30:1a:0a:16:d5:09: c5:c9:18:21:3d:e7:6b:33:0c:bc:8a:8c:ea:46:b2: 7c:a0:d7:c3:ee:1f:75:73:fc:56:e8:86:b2:49:ce: f7:50:6e:5b:37:90:3c:6e:df:c1:de:1a:ff:8f:17: 0d:f4:91:88:fb:03:dd:45:1a:80:e5:86:10:78:13: 95:f4:24:67:14:b0:43:58:3e:01:64:1c:5d:e0:8b: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:00:77:7D:CC:DF:4B:83:E2:4F:3D:B6:D9:AC:5F:5C:66:F0:8B:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.29.0/24 Signature Algorithm: sha256WithRSAEncryption 64:15:56:1b:1e:9b:65:f6:c1:65:71:c2:1c:33:65:73:54:5e: 8d:60:b5:79:d3:f3:cb:16:8c:d4:62:3d:54:6f:e3:5c:e3:ce: 7c:25:e1:f9:73:3d:07:49:29:7f:9f:b6:a4:7e:3c:1f:ab:82: de:ce:0d:ce:f7:77:9f:b0:d9:ef:ca:fa:fe:3d:ac:3f:56:fc: 0a:21:8d:8d:c7:7a:32:1a:55:0b:68:f6:ee:92:db:d6:07:87: e6:cd:ea:85:53:6c:dc:e7:82:11:7d:b2:af:18:bc:eb:45:ef: 9f:e4:f5:07:2d:1f:38:e4:15:f6:3f:c4:79:6c:ff:80:b0:14: 73:1f:70:73:7c:7a:34:ea:6d:cc:b7:a1:77:6d:4c:91:36:94: 2f:5b:f7:36:e7:ec:30:a1:8d:e4:76:fc:bf:25:a8:7d:80:48: e3:43:d6:cd:1f:84:fa:58:12:38:a2:b1:03:57:62:fa:76:a0: 41:48:57:37:d4:b1:67:23:5f:c5:39:5f:3d:3a:79:d1:8d:68: 55:96:90:39:a4:5a:6a:51:fe:3f:92:11:32:db:bc:2a:84:07: e8:56:10:dc:0f:f9:b6:2e:37:fd:d0:62:2d:2a:b8:0c:be:1b: 48:05:a5:21:d6:ea:cf:46:92:16:d1:8e:8a:49:ec:7e:42:f6: c3:bc:25:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHMzgAcYkp8jNFuRcMXpJjoM1qf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTE4MTkzNzI2WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDllYTE2YjEyY2M4MjYyODFmN2Y5MGY2ZWIxNzA0MTZl NDEwMWVhNDY4OGVhYjdmZjAwYmEyMjYzNGE5Y2JiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw/0gmv1TD/1v4boCE7ZHh35uscQiEoFSkMmvU5TNToMkj UjQ/WKX6NM1nxFcmDbKmyWD701N/JYzzBzJY7tPJtbaob6WxcnfOBXXyT25uDBlZ aBvcK618uMsqmHJttMXFloXZ0HnMPOvCNM/n2K3bNCkes/83nt5sBlJVO73sP1QO pwSJpL8rot/zwgbjuFTbEnqufs2F0hYmrCR1nUWWP3m/DvCRzCbLAUjWJDAaChbV CcXJGCE952szDLyKjOpGsnyg18PuH3Vz/FbohrJJzvdQbls3kDxu38HeGv+PFw30 kYj7A91FGoDlhhB4E5X0JGcUsENYPgFkHF3gi02/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9wB3fczfS4PiTz222axfXGbwi+AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYmMwZGFiLTY2ZGMtNDc0My05Njc1LTVkODVkYWZjODlmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWx0wDQYJKoZIhvcNAQELBQADggEBAGQVVhsem2X2wWVxwhwzZXNUXo1g tXnT88sWjNRiPVRv41zjznwl4flzPQdJKX+ftqR+PB+rgt7ODc73d5+w2e/K+v49 rD9W/AohjY3HejIaVQto9u6S29YHh+bN6oVTbNznghF9sq8YvOtF75/k9QctHzjk FfY/xHls/4CwFHMfcHN8ejTqbcy3oXdtTJE2lC9b9zbn7DChjeR2/L8lqH2ASOND 1s0fhPpYEjiisQNXYvp2oEFIVzfUsWcjX8U5Xz06edGNaFWWkDmkWmpR/j+SETLb vCqEB+hWENwP+bYuN/3QYi0quAy+G0gFpSHW6s9GkhbRjopJ7H5C9sO8JSI= -----END CERTIFICATE-----Generated at Fri Sep 19 03:16:38 2025 by rpki-client