$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa File: 2300825a-8820-45a1-837c-e7e6b3f0eca5.roa (raw, json) Hash identifier: 0RmeCv8rdvVsfG+0Y3ZzBFFje3o+BvrqRIsoG4pwXdI= Subject key identifier: 28:DC:ED:1D:2D:CE:3F:EA:23:68:A4:37:21:7A:33:93:F6:BB:34:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CE8A9D1EBF5D469F188D222FF76F463DC6EB7EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa Signing time: Fri 29 Aug 2025 15:20:16 +0000 ROA not before: Fri 29 Aug 2025 15:20:16 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e8:a9:d1:eb:f5:d4:69:f1:88:d2:22:ff:76:f4:63:dc:6e:b7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:20:16 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=04cd57beaea3844c9612e4a75d6ea3069472cc9be57477e693a7f7bdd2862042, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:ba:b3:0f:bb:4c:ef:b4:2b:37:0b:24:0d: bb:60:3a:4c:a6:c0:5b:2b:e1:91:0f:05:63:4a:96: 9d:94:dc:6f:d3:34:78:e6:2c:5c:ac:e5:f8:32:a0: 7c:52:d8:e6:72:8a:c5:59:2d:ca:62:57:2e:22:2c: cf:81:db:a6:ea:08:a8:32:bf:cc:a1:60:b4:70:cc: d3:7a:3f:da:d9:f0:0e:04:e4:55:b6:29:da:26:7f: c1:09:97:d3:20:e5:17:be:e2:2e:ec:4c:be:d2:98: 4a:84:e3:17:e9:de:4c:66:ea:09:f0:eb:e4:ba:30: a0:22:ac:75:52:d2:fc:c7:e8:ef:92:49:8e:28:0e: ca:60:fc:95:b2:3a:19:e9:8c:a4:c2:0b:e8:de:e8: be:40:57:65:23:0b:85:7c:b2:49:1a:c9:07:5e:09: 06:f1:f5:91:2c:c4:98:c9:79:79:02:6f:c2:6a:65: 43:07:db:eb:7b:b3:30:d6:a4:90:b1:0b:54:1f:fb: cc:b2:10:b2:92:e2:e9:0f:2c:12:93:12:c8:e7:58: 3c:e0:8b:81:fb:89:fb:4d:e9:25:28:ff:f4:03:88: 3f:a9:61:d1:59:bb:7c:8b:07:5e:19:1f:92:eb:a8: 15:fa:ac:c2:22:c5:9e:8f:14:1a:77:6d:ec:a0:77: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:ED:1D:2D:CE:3F:EA:23:68:A4:37:21:7A:33:93:F6:BB:34:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.2.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:f9:f5:67:7b:5a:3a:d0:b2:1c:d4:f5:79:6c:21:39:58:ca: a8:d4:30:1d:ef:d5:e3:cb:e6:a4:ac:12:8d:e6:cd:9e:34:87: ea:cd:3c:38:ea:72:15:88:11:c3:e7:9e:ef:ba:79:a4:14:fb: 0e:c5:b0:35:4d:32:c4:8e:22:75:cf:8f:7b:37:1c:2c:56:bb: fb:18:83:d5:1c:5e:48:26:e0:2b:7d:59:21:41:04:c2:3c:0f: 67:d9:0e:12:b0:50:bb:ff:2d:d7:06:b5:5f:0c:d5:6e:ac:a1: f8:3f:4c:cb:3a:94:ec:b7:42:23:d2:53:52:0b:48:d6:40:53: 96:17:81:20:73:2d:dc:af:1b:08:97:91:ed:d0:b8:29:ca:0a: b5:67:79:e1:05:cb:5a:af:5e:35:e3:8c:ff:c0:fc:64:68:c7: 23:4b:a6:09:ff:9b:01:e7:34:70:25:69:a0:67:9e:54:22:8f: 3c:8f:96:d5:fe:18:d2:b6:9b:57:3a:89:ee:07:6c:cb:d6:fe: 1d:19:41:5e:2d:47:15:5c:1a:ec:67:25:34:cb:e7:15:da:de: 05:f4:6e:0f:ed:64:1b:4f:6a:7e:30:76:f7:8e:74:98:88:e8: b8:28:53:ec:a2:79:a2:87:c0:61:ba:d8:9f:f3:c6:96:8f:a1: 50:c6:1f:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfOip0ev11GnxiNIi/3b0Y9xut+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUyMDE2WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGNkNTdiZWFlYTM4NDRjOTYxMmU0YTc1ZDZlYTMwNjk0 NzJjYzliZTU3NDc3ZTY5M2E3ZjdiZGQyODYyMDQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXH7qzD7tM77QrNwskDbtgOkymwFsr4ZEPBWNKlp2U3G/T NHjmLFys5fgyoHxS2OZyisVZLcpiVy4iLM+B26bqCKgyv8yhYLRwzNN6P9rZ8A4E 5FW2Kdomf8EJl9Mg5Re+4i7sTL7SmEqE4xfp3kxm6gnw6+S6MKAirHVS0vzH6O+S SY4oDspg/JWyOhnpjKTCC+je6L5AV2UjC4V8skkayQdeCQbx9ZEsxJjJeXkCb8Jq ZUMH2+t7szDWpJCxC1Qf+8yyELKS4ukPLBKTEsjnWDzgi4H7iftN6SUo//QDiD+p YdFZu3yLB14ZH5LrqBX6rMIixZ6PFBp3beygd9gZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKNztHS3OP+ojaKQ3IXozk/a7NMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDA4MjVhLTg4MjAtNDVhMS04MzdjLWU3ZTZiM2YwZWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBswIwDQYJKoZIhvcNAQELBQADggEBADr59Wd7WjrQshzU9XlsITlYyqjU MB3v1ePL5qSsEo3mzZ40h+rNPDjqchWIEcPnnu+6eaQU+w7FsDVNMsSOInXPj3s3 HCxWu/sYg9UcXkgm4Ct9WSFBBMI8D2fZDhKwULv/LdcGtV8M1W6sofg/TMs6lOy3 QiPSU1ILSNZAU5YXgSBzLdyvGwiXke3QuCnKCrVneeEFy1qvXjXjjP/A/GRoxyNL pgn/mwHnNHAlaaBnnlQijzyPltX+GNK2m1c6ie4HbMvW/h0ZQV4tRxVcGuxnJTTL 5xXa3gX0bg/tZBtPan4wdveOdJiI6LgoU+yieaKHwGG62J/zxpaPoVDGH50= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:31 2025 by rpki-client