$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa File: 531fe09f-1047-43db-91cb-8b46c0209270.roa (raw, json) Hash identifier: Bqa5G432/sGhO6GTNHVXrTpovmpphACXVraOfS/hDxc= Subject key identifier: EB:5D:45:A5:A3:60:9C:22:A7:B4:A8:58:F1:0D:CA:74:B8:50:63:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2956E2D382A4586137BC96EC7C054A16616F4BEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa Signing time: Mon 01 Sep 2025 15:42:03 +0000 ROA not before: Mon 01 Sep 2025 15:42:03 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:56:e2:d3:82:a4:58:61:37:bc:96:ec:7c:05:4a:16:61:6f:4b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:42:03 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=0363390f58825aa1e109dd0068656b89c5b4cc36d04dd8cacc35e56a0ba52167, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:4c:fd:c2:ee:c1:de:6d:b4:89:48:a5:bb: 0b:19:82:2f:3f:6a:31:a6:81:94:93:bc:48:e9:fe: 2d:ae:b5:99:7d:16:33:ae:a0:71:82:c8:6f:a4:4f: 24:a5:f4:bf:23:74:a0:81:13:3a:1e:9c:7d:4f:e0: 81:66:53:42:7a:96:c5:bd:fb:03:19:ab:e9:9f:d2: f0:69:b6:19:87:1c:a0:16:13:51:e5:27:70:10:7d: 2c:e5:f5:d1:55:06:7e:39:89:ed:fe:da:f1:6e:5e: f4:c8:c3:6e:4a:cc:85:3f:06:d2:ac:fa:6a:37:5d: 18:11:c1:68:c5:cf:d2:ba:01:69:5a:24:05:0b:23: 14:a2:9b:8b:8d:f5:55:a4:44:b3:e1:ed:cd:b0:43: f8:b0:ed:a3:35:15:3b:c2:64:c4:02:a4:7e:de:65: b9:54:e8:86:1f:c8:e0:c4:9a:94:bd:ff:fc:90:cb: 5d:c0:03:c9:5f:8f:9d:20:f2:02:17:e6:60:14:c9: 5a:79:c3:5a:06:cc:ce:fa:0f:68:aa:d6:2d:e1:04: 52:71:f4:0e:77:3c:06:19:48:95:68:71:b2:1c:4d: dd:c9:3a:65:0d:d6:e7:56:10:32:6e:e1:4d:9e:ef: bd:e7:90:69:26:56:25:61:dd:c1:e5:a8:90:d7:62: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5D:45:A5:A3:60:9C:22:A7:B4:A8:58:F1:0D:CA:74:B8:50:63:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531fe09f-1047-43db-91cb-8b46c0209270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.160.0/23 Signature Algorithm: sha256WithRSAEncryption a1:b0:77:65:95:2e:2c:36:66:b9:13:04:54:86:fc:ce:52:7b: 12:c4:68:70:39:7c:0e:5e:40:14:b9:0d:50:24:90:64:bc:3a: 47:cb:2d:b7:76:53:06:11:a9:ce:59:42:e9:8f:b8:42:4b:51: be:60:88:a5:d0:9c:c4:e6:44:d8:2b:32:cf:90:f1:09:da:a4: d0:e0:1d:6b:bb:ca:94:8f:76:1a:47:2b:b3:86:bc:79:24:fe: e0:0e:f7:b2:44:60:2d:a5:b0:34:dd:21:18:07:25:83:fb:63: 1f:58:d8:a7:e7:ed:08:7c:74:8d:cd:be:d7:dd:2f:30:0e:1a: c1:42:ea:d0:1e:1b:07:74:0a:82:37:d9:78:3c:9c:ba:77:28: c3:f4:b5:54:e1:b4:06:bc:4a:61:24:89:8a:07:67:3b:7d:3d: bc:43:69:e8:db:40:f3:32:70:44:08:89:d2:6b:e3:2b:93:b0: c6:7c:d9:d6:e1:ea:e7:bd:b1:78:c7:d9:2d:f0:eb:0a:cb:d4: 45:ae:5d:3b:4e:2d:87:ef:45:fd:a9:eb:d4:9b:31:69:95:15: 16:dd:3c:28:12:af:d8:d5:ae:51:b6:9d:bf:49:16:28:64:73: 52:38:ee:4e:8c:3c:ae:bd:6d:cb:6f:ac:90:69:69:6b:0e:25: b4:e2:ac:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVbi04KkWGE3vJbsfAVKFmFvS+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MjAzWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzYzMzkwZjU4ODI1YWExZTEwOWRkMDA2ODY1NmI4OWM1 YjRjYzM2ZDA0ZGQ4Y2FjYzM1ZTU2YTBiYTUyMTY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxb0z9wu7B3m20iUiluwsZgi8/ajGmgZSTvEjp/i2utZl9 FjOuoHGCyG+kTySl9L8jdKCBEzoenH1P4IFmU0J6lsW9+wMZq+mf0vBpthmHHKAW E1HlJ3AQfSzl9dFVBn45ie3+2vFuXvTIw25KzIU/BtKs+mo3XRgRwWjFz9K6AWla JAULIxSim4uN9VWkRLPh7c2wQ/iw7aM1FTvCZMQCpH7eZblU6IYfyODEmpS9//yQ y13AA8lfj50g8gIX5mAUyVp5w1oGzM76D2iq1i3hBFJx9A53PAYZSJVocbIcTd3J OmUN1udWEDJu4U2e773nkGkmViVh3cHlqJDXYsoJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU611FpaNgnCKntKhY8Q3KdLhQY6YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMWZlMDlmLTEwNDctNDNkYi05MWNiLThiNDZjMDIwOTI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUqAwDQYJKoZIhvcNAQELBQADggEBAKGwd2WVLiw2ZrkTBFSG/M5SexLE aHA5fA5eQBS5DVAkkGS8OkfLLbd2UwYRqc5ZQumPuEJLUb5giKXQnMTmRNgrMs+Q 8QnapNDgHWu7ypSPdhpHK7OGvHkk/uAO97JEYC2lsDTdIRgHJYP7Yx9Y2Kfn7Qh8 dI3NvtfdLzAOGsFC6tAeGwd0CoI32Xg8nLp3KMP0tVThtAa8SmEkiYoHZzt9PbxD aejbQPMycEQIidJr4yuTsMZ82dbh6ue9sXjH2S3w6wrL1EWuXTtOLYfvRf2p69Sb MWmVFRbdPCgSr9jVrlG2nb9JFihkc1I47k6MPK69bctvrJBpaWsOJbTirBE= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:32 2025 by rpki-client