$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa File: 235ba01b-bc16-4244-a93f-06a145b0732c.roa (raw, json) Hash identifier: Ck5hCGfsiUFj8o6oxVvLSOyT/kPV2Sx6wxpvrEpPMpM= Subject key identifier: 47:D6:FD:3F:B8:E6:3C:A4:7A:45:3C:B9:CC:A2:D0:4E:60:B3:62:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B614653D1F447E2DABCF419E216E49F2D34704B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa Signing time: Tue 26 Aug 2025 15:00:36 +0000 ROA not before: Tue 26 Aug 2025 15:00:36 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 147.106.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:61:46:53:d1:f4:47:e2:da:bc:f4:19:e2:16:e4:9f:2d:34:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:00:36 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=36e09ed7d576d81c5964669d9f2384b8750142e7c69847453deb81ed191ed6a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:99:4f:51:30:d3:51:7c:cc:5e:74:17:45: 07:5e:dc:58:cf:b5:6f:7c:48:57:48:e7:62:25:6c: 07:9f:d0:1e:cb:98:38:93:61:b9:42:7b:27:4d:04: 26:55:c7:91:30:2f:1e:61:1a:56:35:22:93:b1:ac: d8:f5:43:cf:46:1c:d2:12:0a:92:5a:83:ca:35:5d: 99:7c:ff:ad:c0:65:e3:79:42:0f:a6:32:81:a1:5a: 1c:ea:4f:25:76:56:72:2e:88:1d:7e:4b:21:91:bc: 15:51:dc:32:2d:63:b8:de:c4:29:82:8b:31:46:70: ce:16:f7:01:43:2b:37:0d:e9:9a:cf:26:e7:56:ac: 15:0a:df:ae:c7:c5:7f:c4:6b:d1:75:18:18:d9:97: d2:e2:21:f1:91:dc:05:dd:1c:df:c1:1d:c3:18:6a: 22:b0:a8:d0:62:ed:fa:2c:78:88:77:ec:c4:9a:1e: 2e:80:ba:32:e2:fc:2a:c9:f9:f5:dd:c4:2a:a0:6a: ef:56:d3:6e:85:e9:a4:a6:9f:c8:df:90:81:48:7e: 5f:21:b8:28:79:29:65:90:d6:ac:57:c2:c1:7f:d8: 3e:c4:44:c1:4a:e9:b5:89:3c:12:31:00:a1:b2:a8: c4:77:03:cf:8a:26:a5:99:e2:b7:b1:89:dd:ff:57: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D6:FD:3F:B8:E6:3C:A4:7A:45:3C:B9:CC:A2:D0:4E:60:B3:62:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.106.128.0/18 Signature Algorithm: sha256WithRSAEncryption 97:ef:ed:4c:2b:0e:b4:4c:52:78:c6:43:c2:23:d9:90:c8:39: 00:5e:84:f3:6c:40:8d:e7:dd:0e:b1:ab:e7:4f:1d:f5:77:57: c9:24:13:2f:35:e9:3d:73:b0:33:ae:43:69:54:4a:bd:25:e2: 26:ef:08:2f:90:b1:6d:85:44:d1:2e:5e:e8:1a:2f:72:65:92: 7f:e1:73:7d:12:b5:68:27:fc:99:8f:bf:20:20:b4:40:f4:b4: 5e:63:8a:d5:b8:74:61:39:3f:f0:33:a4:4a:7e:08:74:62:d2: 34:46:33:23:b1:e3:d4:c1:f5:7a:3f:9b:cf:34:b4:0e:01:86: da:ff:d0:40:aa:89:52:a9:db:1e:86:24:6b:c7:b4:1c:c5:59: b4:43:1a:dd:c7:3a:ee:6f:db:40:6e:55:8a:31:be:08:21:f2: 30:4a:01:42:88:8e:0b:08:d9:b9:46:43:ec:9a:71:15:5d:77: b7:a7:fe:a1:83:fa:7b:44:b6:38:d1:bd:e1:b8:62:13:b8:ed: 97:20:de:0e:81:58:c5:f6:81:7a:02:96:a6:97:0c:3e:ff:ba: 89:17:dc:4b:cd:16:cc:4d:72:1b:af:aa:79:ef:67:8a:40:aa: d4:93:cc:79:7f:eb:ec:e0:8a:79:31:9f:19:e9:d4:13:7b:91: e6:72:f4:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO2FGU9H0R+LavPQZ4hbkny00cEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMDM2WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmUwOWVkN2Q1NzZkODFjNTk2NDY2OWQ5ZjIzODRiODc1 MDE0MmU3YzY5ODQ3NDUzZGViODFlZDE5MWVkNmEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClFZlPUTDTUXzMXnQXRQde3FjPtW98SFdI52IlbAef0B7L mDiTYblCeydNBCZVx5EwLx5hGlY1IpOxrNj1Q89GHNISCpJag8o1XZl8/63AZeN5 Qg+mMoGhWhzqTyV2VnIuiB1+SyGRvBVR3DItY7jexCmCizFGcM4W9wFDKzcN6ZrP JudWrBUK367HxX/Ea9F1GBjZl9LiIfGR3AXdHN/BHcMYaiKwqNBi7foseIh37MSa Hi6AujLi/CrJ+fXdxCqgau9W026F6aSmn8jfkIFIfl8huCh5KWWQ1qxXwsF/2D7E RMFK6bWJPBIxAKGyqMR3A8+KJqWZ4rexid3/V4UPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR9b9P7jmPKR6RTy5zKLQTmCzYgkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNWJhMDFiLWJjMTYtNDI0NC1hOTNmLTA2YTE0NWIwNzMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaTaoAwDQYJKoZIhvcNAQELBQADggEBAJfv7UwrDrRMUnjGQ8Ij2ZDIOQBe hPNsQI3n3Q6xq+dPHfV3V8kkEy816T1zsDOuQ2lUSr0l4ibvCC+QsW2FRNEuXuga L3Jlkn/hc30StWgn/JmPvyAgtED0tF5jitW4dGE5P/AzpEp+CHRi0jRGMyOx49TB 9Xo/m880tA4Bhtr/0ECqiVKp2x6GJGvHtBzFWbRDGt3HOu5v20BuVYoxvggh8jBK AUKIjgsI2blGQ+yacRVdd7en/qGD+ntEtjjRveG4YhO47Zcg3g6BWMX2gXoClqaX DD7/uokX3EvNFsxNchuvqnnvZ4pAqtSTzHl/6+zginkxnxnp1BN7keZy9LM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:48 2025 by rpki-client