$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa File: 03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa (raw, json) Hash identifier: 2ovZ32OMhRJlcikMgENWn8YNy1ALDR/15icsm6W2Ma8= Subject key identifier: 67:7A:9C:D5:52:4B:20:5A:4E:7F:05:0D:2A:CC:D2:71:4F:EE:4F:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26678C4CD30253803FB5146A02C641CF673AE88D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa Signing time: Fri 05 Sep 2025 00:10:12 +0000 ROA not before: Fri 05 Sep 2025 00:10:12 +0000 ROA not after: Fri 10 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:67:8c:4c:d3:02:53:80:3f:b5:14:6a:02:c6:41:cf:67:3a:e8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 5 00:10:12 2025 GMT Not After : Oct 10 23:59:59 2025 GMT Subject: serialNumber=f523dd7ed58e17e75877bc4d01bbf6ef96256ca8e42110bac30275df5c17a1c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:37:7a:e1:ab:fa:78:54:04:d0:fc:32:c9: 90:26:34:e2:0e:e8:f8:a1:70:e5:4f:fe:f4:7b:17: f5:cd:cc:72:f2:d1:f1:8e:09:33:28:77:87:56:43: 14:d1:99:b3:af:bf:34:f0:97:ed:25:6e:28:59:e3: b7:cb:a2:0c:de:ff:29:c5:80:5c:f5:3e:b4:23:9f: 90:54:af:67:1c:79:fb:4b:08:9e:48:2a:cd:68:3a: bc:04:9b:80:cb:90:f0:ac:29:71:90:16:3a:87:94: b4:88:da:76:44:af:98:b0:43:61:96:b3:22:06:d9: 4c:ab:60:39:90:1c:7d:1f:40:32:9a:18:dc:3b:93: 72:41:aa:bd:95:b8:5d:e5:38:5a:ec:82:06:2a:47: 6d:17:be:c5:ce:fc:92:65:2d:d7:5f:b0:18:d8:c7: 4a:7e:aa:8c:d3:4a:a8:50:1e:fd:4a:de:f2:4c:1e: 4f:30:eb:03:24:59:08:f1:6a:2f:aa:a1:e1:fb:32: 9d:f6:2a:e5:10:cf:fb:03:71:5f:2d:67:2e:4d:b2: bc:da:c7:1a:9a:db:ca:20:fe:76:f2:08:fe:f5:29: e8:6c:2e:c6:d9:8f:e4:d7:f1:b3:33:44:b0:ab:10: 1f:ce:99:bc:ae:a1:28:2c:5d:bd:21:7a:10:e8:f4: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:9C:D5:52:4B:20:5A:4E:7F:05:0D:2A:CC:D2:71:4F:EE:4F:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 63:66:20:21:70:30:6c:1a:87:99:d5:4b:a0:ab:d3:ed:94:40: 78:9c:43:16:ec:d5:b3:18:de:e9:1b:b4:58:d8:1b:7f:88:bf: b5:40:bc:b7:57:dd:84:61:77:45:5f:e0:c8:b3:24:f8:5e:81: ab:e3:0c:ba:ec:ec:da:38:25:4d:ae:3b:d0:0e:ed:44:02:d7: 0b:3c:d8:f4:3a:a8:03:1f:56:a1:18:47:50:3a:4a:8c:9a:88: 65:18:6b:30:64:9f:e0:1f:55:47:d2:4c:65:d0:8f:a2:73:88: 45:3a:9d:98:9e:2b:4e:65:c5:f8:d0:4d:9a:ee:d2:4c:9b:00: e6:e6:c1:04:ba:5f:04:19:57:1f:21:4b:41:ee:44:e1:90:d4: 19:1e:c8:ab:99:f4:e6:a4:3d:5c:f7:e4:b9:88:b3:16:c1:95: 36:cf:15:1b:ed:5a:38:f3:f1:34:83:70:b0:22:b4:57:07:be: a0:8a:de:38:aa:0b:91:02:8b:3e:8f:47:70:f3:8b:d0:b4:a0: 8e:25:6f:c5:0d:0b:59:47:a5:a7:61:b4:be:b7:78:d3:f8:55: 3d:b3:d3:1e:30:40:42:b5:3b:47:c8:35:68:b1:d2:fd:19:4b: 9d:20:86:d8:c7:43:ab:57:89:c6:74:fd:91:cc:32:5c:83:b9: 1b:d9:80:8c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJmeMTNMCU4A/tRRqAsZBz2c66I0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAxMDEyWhcNMjUxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTIzZGQ3ZWQ1OGUxN2U3NTg3N2JjNGQwMWJiZjZlZjk2 MjU2Y2E4ZTQyMTEwYmFjMzAyNzVkZjVjMTdhMWMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvUDd64av6eFQE0PwyyZAmNOIO6PihcOVP/vR7F/XNzHLy 0fGOCTMod4dWQxTRmbOvvzTwl+0lbihZ47fLogze/ynFgFz1PrQjn5BUr2cceftL CJ5IKs1oOrwEm4DLkPCsKXGQFjqHlLSI2nZEr5iwQ2GWsyIG2UyrYDmQHH0fQDKa GNw7k3JBqr2VuF3lOFrsggYqR20XvsXO/JJlLddfsBjYx0p+qozTSqhQHv1K3vJM Hk8w6wMkWQjxai+qoeH7Mp32KuUQz/sDcV8tZy5Nsrzaxxqa28og/nbyCP71Kehs LsbZj+TX8bMzRLCrEB/OmbyuoSgsXb0hehDo9GsxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZ3qc1VJLIFpOfwUNKszScU/uT1wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZjI3NGU3LTIxZjUtNGFlZi1hYmQzLTVmOWY4MDUwYjM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQ1jANBgkqhkiG9w0BAQsFAAOCAQEAY2YgIXAwbBqHmdVLoKvT7ZRAeJxD FuzVsxje6Ru0WNgbf4i/tUC8t1fdhGF3RV/gyLMk+F6Bq+MMuuzs2jglTa470A7t RALXCzzY9DqoAx9WoRhHUDpKjJqIZRhrMGSf4B9VR9JMZdCPonOIRTqdmJ4rTmXF +NBNmu7STJsA5ubBBLpfBBlXHyFLQe5E4ZDUGR7Iq5n05qQ9XPfkuYizFsGVNs8V G+1aOPPxNINwsCK0Vwe+oIreOKoLkQKLPo9HcPOL0LSgjiVvxQ0LWUelp2G0vrd4 0/hVPbPTHjBAQrU7R8g1aLHS/RlLnSCG2MdDq1eJxnT9kcwyXIO5G9mAjA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:14 2025 by rpki-client