$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa File: 47479cc3-c3ca-442e-9bef-1e53a9b87918.roa (raw, json) Hash identifier: zvt9Sd4vlc12Ary65O/oMqx60La7hMinSr+iWvH8WWE= Subject key identifier: D2:F3:5A:58:A6:FD:C5:52:1F:CF:C8:84:EA:58:4E:7F:80:6E:C0:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06F4C4DEE4F56F53B410079BE77A04E848106F85 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa Signing time: Wed 27 Aug 2025 00:51:02 +0000 ROA not before: Wed 27 Aug 2025 00:51:02 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 162.250.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f4:c4:de:e4:f5:6f:53:b4:10:07:9b:e7:7a:04:e8:48:10:6f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:51:02 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=9e2cef62f03ac2ad54ea06009faeeda6cee52440a6111ce8b06aaa2d7c7139a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:83:34:d5:dd:27:bf:6d:73:91:70:af:09: 57:ac:87:62:b3:55:50:3b:e9:9e:b7:b3:a0:7b:62: e8:6c:b9:e1:e4:67:7c:ce:35:b9:12:9f:31:62:1d: c8:7e:d6:43:6e:96:91:9f:b8:87:7b:07:cb:e5:79: c5:06:b6:47:a4:de:ff:0a:f9:34:60:d0:2b:6a:94: 1e:14:66:59:54:7a:9a:b4:f4:a2:3b:6f:17:0b:bc: af:0f:d2:7f:7c:38:ea:ed:a3:53:2d:f4:02:a7:f3: b7:66:20:85:46:6d:66:36:74:c6:c4:f3:72:52:a9: 94:27:41:5c:26:2f:8f:4b:cb:9f:8b:fd:4c:ee:59: 00:32:e2:2f:15:64:ac:06:34:af:7f:71:a1:0c:1f: e8:5c:d4:f3:a4:1b:eb:43:89:25:8a:85:ee:9a:84: df:ac:15:ab:0d:0c:ee:36:70:75:8b:56:90:cc:60: e7:e7:07:af:fa:a0:59:b7:6e:4e:ac:6e:bd:9c:e8: 94:a7:71:f6:34:8e:d2:25:47:9f:1f:4a:70:91:4c: 33:19:cb:8e:bf:99:58:9b:fe:26:4b:6e:63:ef:61: 52:42:d2:13:d9:01:7f:eb:2f:e0:f9:84:59:a6:3c: c3:2a:49:c6:90:39:ff:5e:ae:6b:77:7b:00:71:10: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F3:5A:58:A6:FD:C5:52:1F:CF:C8:84:EA:58:4E:7F:80:6E:C0:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.238.0/23 Signature Algorithm: sha256WithRSAEncryption 52:51:55:bb:2d:84:3d:9c:7d:8b:3e:63:27:1f:3c:3d:ed:ba: bc:36:84:29:d5:77:6c:fc:ed:cd:81:e5:74:40:f2:5d:af:93: 11:51:0f:25:5e:c7:d4:b9:d3:78:fd:a9:9b:3d:94:34:17:60: 8b:6f:81:16:5d:a5:6d:0c:89:bd:81:10:0b:4a:d1:a3:5c:69: ce:f6:cc:76:c3:80:74:9e:ba:ad:73:4a:4e:6a:01:dd:e2:6b: 95:5c:fc:b7:8a:88:49:1b:3c:c9:97:a6:61:f0:d5:69:2c:8f: 4b:d1:16:55:ed:f7:fa:17:ed:52:6d:d4:a4:9e:46:6e:0a:8f: 45:10:0a:05:3c:13:5f:b2:4b:58:75:d1:7f:64:f8:be:ac:ad: f6:61:21:39:f8:00:28:e9:f7:2d:32:1a:43:84:ce:17:3e:e3: d9:23:a5:d8:26:4f:57:b7:01:68:cb:10:66:cd:03:17:cb:aa: 2b:33:d7:44:a1:c2:bd:d0:1d:f2:a5:a7:88:8f:e5:54:2d:d5: 65:9a:d0:3b:75:b1:84:69:0f:ff:0f:d7:fd:10:c7:1d:1b:38: 01:80:72:a2:7b:4c:76:91:20:a7:f8:42:cc:fe:87:2f:62:67: 9a:a9:f9:21:b4:eb:a7:7c:97:25:fd:b7:d5:32:96:4a:06:54: a6:51:98:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBvTE3uT1b1O0EAeb53oE6EgQb4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA1MTAyWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTJjZWY2MmYwM2FjMmFkNTRlYTA2MDA5ZmFlZWRhNmNl ZTUyNDQwYTYxMTFjZThiMDZhYWEyZDdjNzEzOWE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4GYM01d0nv21zkXCvCVesh2KzVVA76Z63s6B7YuhsueHk Z3zONbkSnzFiHch+1kNulpGfuId7B8vlecUGtkek3v8K+TRg0CtqlB4UZllUepq0 9KI7bxcLvK8P0n98OOrto1Mt9AKn87dmIIVGbWY2dMbE83JSqZQnQVwmL49Ly5+L /UzuWQAy4i8VZKwGNK9/caEMH+hc1POkG+tDiSWKhe6ahN+sFasNDO42cHWLVpDM YOfnB6/6oFm3bk6sbr2c6JSncfY0jtIlR58fSnCRTDMZy46/mVib/iZLbmPvYVJC 0hPZAX/rL+D5hFmmPMMqScaQOf9ermt3ewBxEPWxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0vNaWKb9xVIfz8iE6lhOf4BuwCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NDc5Y2MzLWMzY2EtNDQyZS05YmVmLTFlNTNhOWI4NzkxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGi+u4wDQYJKoZIhvcNAQELBQADggEBAFJRVbsthD2cfYs+YycfPD3turw2 hCnVd2z87c2B5XRA8l2vkxFRDyVex9S503j9qZs9lDQXYItvgRZdpW0Mib2BEAtK 0aNcac72zHbDgHSeuq1zSk5qAd3ia5Vc/LeKiEkbPMmXpmHw1Wksj0vRFlXt9/oX 7VJt1KSeRm4Kj0UQCgU8E1+yS1h10X9k+L6srfZhITn4ACjp9y0yGkOEzhc+49kj pdgmT1e3AWjLEGbNAxfLqisz10Shwr3QHfKlp4iP5VQt1WWa0Dt1sYRpD/8P1/0Q xx0bOAGAcqJ7THaRIKf4Qsz+hy9iZ5qp+SG066d8lyX9t9UylkoGVKZRmMo= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:39 2025 by rpki-client