$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e7e048-17ef-4bc7-a201-80d9e52f87a4.roa File: 21e7e048-17ef-4bc7-a201-80d9e52f87a4.roa (raw, json) Hash identifier: aUyYPTOQfobGhP1W8Ov5FrgrAKfuT3nDtdeCyM7hppE= Subject key identifier: A3:3A:FD:7D:65:6D:1A:8A:90:BB:E1:28:A5:43:41:10:A4:F5:B7:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60FAAEFCAAC4460D059F124C9455A3F9BDFBF3C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e7e048-17ef-4bc7-a201-80d9e52f87a4.roa Signing time: Wed 27 Aug 2025 00:40:13 +0000 ROA not before: Wed 27 Aug 2025 00:40:13 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.176.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fa:ae:fc:aa:c4:46:0d:05:9f:12:4c:94:55:a3:f9:bd:fb:f3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:40:13 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=8ed2cb22874d381be9297e4da0994bd9df4a81af8787c2009fe90572a07d60c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:e6:9b:22:ff:f3:ef:33:1f:9e:79:20:e5: 72:52:68:03:43:b4:1a:e8:59:5d:51:bd:40:a2:cd: 6e:7b:03:10:f6:97:da:34:17:7f:47:6b:a6:bc:72: 84:23:85:33:3b:ad:b9:81:92:9b:7a:3c:56:40:95: 73:67:be:75:0f:7e:06:51:be:07:33:09:74:4c:05: 48:69:b4:97:30:f3:71:f4:16:49:f4:47:f3:18:a7: bb:a3:f9:29:30:c5:de:ee:ce:88:a1:0b:e0:73:4c: e5:5e:35:e7:2a:82:43:f3:40:7a:16:84:75:9d:72: c4:71:03:b0:53:87:fc:9e:2c:83:93:73:9b:6e:f9: 59:57:26:70:a9:f6:d5:67:42:35:a1:20:22:d4:a2: 09:92:24:5f:10:fa:b2:f0:9b:3a:ca:c9:94:14:b3: f0:ee:86:60:53:8e:d5:51:12:4e:f2:8a:b9:84:ab: b8:37:fe:8a:96:bc:f7:d9:4d:57:8c:c0:a2:7c:e9: 8b:8a:10:9d:94:45:f5:d4:92:61:8c:79:02:09:90: ba:a1:1f:10:41:b0:ef:cc:c2:51:16:23:3e:0e:1a: d5:9d:e2:04:c1:95:8a:53:be:3d:cb:d3:10:58:1a: 4d:68:96:a9:8c:be:e4:09:9d:e4:ba:72:ce:27:cf: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:FD:7D:65:6D:1A:8A:90:BB:E1:28:A5:43:41:10:A4:F5:B7:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e7e048-17ef-4bc7-a201-80d9e52f87a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:d5:f0:3a:5f:74:39:25:18:21:08:53:fb:c4:67:68:dd:76: d1:b5:0d:4e:96:05:42:bb:63:cc:b9:39:1d:50:a7:1a:a1:33: 8c:d3:c5:43:e5:0c:0a:b6:d8:fc:f3:ba:3e:0a:84:a5:5f:bb: dd:3a:bb:1c:8e:5b:f1:8a:d5:89:3d:de:40:87:1f:37:5a:4f: 37:49:07:1f:ad:8a:3a:62:ee:50:ef:f1:12:0f:5f:39:b3:e1: 34:d6:6e:f4:eb:8d:52:4a:07:9f:52:08:2a:36:0b:53:c7:91: c8:71:d5:d3:ec:73:aa:98:3c:20:e7:e1:63:76:8b:d9:15:25: 2b:9e:57:19:cb:1b:80:4a:dc:4c:dc:de:c5:8c:ae:cd:da:58: 42:75:ce:1e:2b:ff:49:74:aa:ba:8e:85:3c:c8:c9:a9:29:d1: 00:d3:5e:97:b0:ef:bd:ad:8d:9d:62:08:7f:72:a5:74:30:20: 46:b4:1e:46:53:2e:e5:38:49:07:1b:e7:71:3e:1a:ea:3f:26: 11:81:4b:93:a7:8b:ec:cf:54:b1:0d:de:85:1c:f0:0a:f2:1a: 21:c1:68:50:b1:1f:07:10:d9:c7:4d:0f:df:5d:22:63:a8:bf: 9c:2f:55:24:8e:6f:0d:8c:e1:0f:fd:6a:83:4f:61:48:4a:ea: 33:0f:ff:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYPqu/KrERg0FnxJMlFWj+b3788YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA0MDEzWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWQyY2IyMjg3NGQzODFiZTkyOTdlNGRhMDk5NGJkOWRm NGE4MWFmODc4N2MyMDA5ZmU5MDU3MmEwN2Q2MGMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy4eabIv/z7zMfnnkg5XJSaANDtBroWV1RvUCizW57AxD2 l9o0F39Ha6a8coQjhTM7rbmBkpt6PFZAlXNnvnUPfgZRvgczCXRMBUhptJcw83H0 Fkn0R/MYp7uj+Skwxd7uzoihC+BzTOVeNecqgkPzQHoWhHWdcsRxA7BTh/yeLIOT c5tu+VlXJnCp9tVnQjWhICLUogmSJF8Q+rLwmzrKyZQUs/DuhmBTjtVREk7yirmE q7g3/oqWvPfZTVeMwKJ86YuKEJ2URfXUkmGMeQIJkLqhHxBBsO/MwlEWIz4OGtWd 4gTBlYpTvj3L0xBYGk1olqmMvuQJneS6cs4nz+bvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUozr9fWVtGoqQu+EopUNBEKT1t4cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxZTdlMDQ4LTE3ZWYtNGJjNy1hMjAxLTgwZDllNTJmODdhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQsDANBgkqhkiG9w0BAQsFAAOCAQEAOdXwOl90OSUYIQhT+8RnaN120bUN TpYFQrtjzLk5HVCnGqEzjNPFQ+UMCrbY/PO6PgqEpV+73Tq7HI5b8YrViT3eQIcf N1pPN0kHH62KOmLuUO/xEg9fObPhNNZu9OuNUkoHn1IIKjYLU8eRyHHV0+xzqpg8 IOfhY3aL2RUlK55XGcsbgErcTNzexYyuzdpYQnXOHiv/SXSquo6FPMjJqSnRANNe l7Dvva2NnWIIf3KldDAgRrQeRlMu5ThJBxvncT4a6j8mEYFLk6eL7M9UsQ3ehRzw CvIaIcFoULEfBxDZx00P310iY6i/nC9VJI5vDYzhD/1qg09hSErqMw//4w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:36 2025 by rpki-client