$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa File: 3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa (raw, json) Hash identifier: SE+BVlWtsO3g0lKMI7YQqavXe3QgxnNm4gX2V8SjZtc= Subject key identifier: DB:EB:36:1B:10:EE:BE:F3:14:E4:82:56:4E:42:12:80:91:DA:8A:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2298449E66C6750ECA61F5027A977D9B0897DC37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa Signing time: Tue 02 Sep 2025 00:21:39 +0000 ROA not before: Tue 02 Sep 2025 00:21:39 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 63.246.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:98:44:9e:66:c6:75:0e:ca:61:f5:02:7a:97:7d:9b:08:97:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:21:39 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=6a7c44f59c235ab18fefa30c7a955b2c57b50e552c28c95aa278dd8c74b6fb87, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:d2:d5:2a:68:7b:6c:7d:89:9e:25:de:58: 0b:3d:4e:a4:78:78:b9:f4:be:a8:5b:d6:3a:48:0f: 4a:d1:59:aa:ab:ab:4f:06:64:08:cf:3c:ab:cf:bd: 71:ff:90:09:39:bb:b7:0d:6a:70:b3:bd:6a:fc:dc: 04:d0:b8:ab:0c:26:3f:32:74:5f:17:86:2a:89:9e: b7:77:df:1c:b7:20:3c:df:fe:72:31:65:1b:46:3a: 27:8c:a0:70:cd:b8:50:d4:91:b0:f0:19:ad:76:9c: 59:eb:b1:2c:bf:8b:0f:6c:17:3c:d4:87:31:9c:e8: f8:c7:58:2a:6b:0e:7b:3a:8b:c3:dc:b6:26:ed:cc: c2:6c:5d:20:db:16:a5:4b:5e:90:47:00:b6:81:4d: 74:f9:a8:66:b2:91:17:2f:47:86:68:e9:9b:c8:f3: 8b:de:20:67:ab:12:ec:a9:1a:33:1b:05:60:99:b6: bb:ec:8c:aa:bc:4e:83:0b:37:58:1d:52:0d:6a:b7: a0:29:d4:27:0d:5a:bf:7c:f4:26:5b:1a:84:59:ff: 19:22:0b:6c:07:2d:ce:31:89:52:8b:12:14:5e:ca: 91:8d:2a:ac:9b:e0:ef:80:38:06:cb:92:ce:6e:78: 79:7a:f2:ec:ea:55:29:1f:f9:0a:ff:ee:7a:9f:3c: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:36:1B:10:EE:BE:F3:14:E4:82:56:4E:42:12:80:91:DA:8A:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.116.0/24 Signature Algorithm: sha256WithRSAEncryption d3:0d:d3:24:8d:6f:10:23:46:6a:ce:61:3d:a7:8d:ff:69:a8: 53:75:8e:61:1f:6a:ae:4f:d7:a8:b2:a5:4e:5e:37:74:d4:f6: 7b:7f:8e:d6:56:52:70:41:48:ee:bd:1f:cb:4e:35:f1:2f:9c: b4:64:07:81:6c:45:e7:3c:78:56:97:c8:04:b7:4c:30:c1:c2: be:56:40:80:57:bc:20:3f:89:29:d9:70:18:13:c7:ff:30:40: 23:8a:25:40:da:3d:78:78:a0:41:77:7d:8d:e2:0f:9e:98:07: 1e:f8:aa:31:31:31:46:e4:47:95:94:70:d8:a8:50:9f:34:a6: d4:d1:58:54:f1:6b:67:30:3a:39:a2:f7:29:5c:bd:54:90:f4: 63:ed:0f:94:90:1b:b6:71:96:ae:0c:b1:aa:e1:cf:86:29:3e: fa:42:6c:fb:a2:cb:46:7c:66:84:72:9c:2e:c9:ae:2a:a0:7e: 54:db:06:f0:8a:d8:e2:fa:cb:a7:a5:88:49:d7:d2:d1:0b:80: b0:78:b5:84:c4:38:ff:43:a8:0f:4b:35:41:eb:48:43:31:b6: c7:94:24:d6:6d:1b:21:e2:f8:62:40:28:47:2e:72:3a:1d:76: b3:fa:02:1a:ab:e7:87:ac:5d:d6:9f:67:f7:ca:50:4c:f5:10: 3e:b9:e5:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIphEnmbGdQ7KYfUCepd9mwiX3DcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAyMTM5WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTdjNDRmNTljMjM1YWIxOGZlZmEzMGM3YTk1NWIyYzU3 YjUwZTU1MmMyOGM5NWFhMjc4ZGQ4Yzc0YjZmYjg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSntLVKmh7bH2JniXeWAs9TqR4eLn0vqhb1jpID0rRWaqr q08GZAjPPKvPvXH/kAk5u7cNanCzvWr83ATQuKsMJj8ydF8XhiqJnrd33xy3IDzf /nIxZRtGOieMoHDNuFDUkbDwGa12nFnrsSy/iw9sFzzUhzGc6PjHWCprDns6i8Pc tibtzMJsXSDbFqVLXpBHALaBTXT5qGaykRcvR4Zo6ZvI84veIGerEuypGjMbBWCZ trvsjKq8ToMLN1gdUg1qt6Ap1CcNWr989CZbGoRZ/xkiC2wHLc4xiVKLEhReypGN Kqyb4O+AOAbLks5ueHl68uzqVSkf+Qr/7nqfPGcNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2+s2GxDuvvMU5IJWTkISgJHaiv4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwNzZjZjFlLTgzZjctNDQ1ZC1iMjVjLWRmYjdiNTU4YzdkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/9nQwDQYJKoZIhvcNAQELBQADggEBANMN0ySNbxAjRmrOYT2njf9pqFN1 jmEfaq5P16iypU5eN3TU9nt/jtZWUnBBSO69H8tONfEvnLRkB4FsRec8eFaXyAS3 TDDBwr5WQIBXvCA/iSnZcBgTx/8wQCOKJUDaPXh4oEF3fY3iD56YBx74qjExMUbk R5WUcNioUJ80ptTRWFTxa2cwOjmi9ylcvVSQ9GPtD5SQG7Zxlq4Msarhz4YpPvpC bPuiy0Z8ZoRynC7JriqgflTbBvCK2OL6y6eliEnX0tELgLB4tYTEOP9DqA9LNUHr SEMxtseUJNZtGyHi+GJAKEcucjoddrP6Ahqr54esXdafZ/fKUEz1ED655eY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:14 2025 by rpki-client