$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa File: 55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa (raw, json) Hash identifier: NByPlRpIJOYNmgMttRPIlbk8i6jCSR0gy34Z4HzEI0k= Subject key identifier: BA:84:7F:47:3C:D6:B8:1B:71:77:D6:D5:68:BA:77:3D:D6:BC:7D:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F31A861D63F76D258ED6CB0BA8319ED2437490D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa Signing time: Mon 01 Sep 2025 15:40:19 +0000 ROA not before: Mon 01 Sep 2025 15:40:19 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.197.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:31:a8:61:d6:3f:76:d2:58:ed:6c:b0:ba:83:19:ed:24:37:49:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:40:19 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=f395d9dcb24e49a08c2c633271d2a438cfcb0a206c8ba43d095fbca9f9a7eddd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:69:b5:a0:fc:5f:d3:1f:45:82:70:ea:5f: ab:8b:ee:bd:87:a9:69:bb:ea:1b:ab:9e:23:a1:3c: 23:c3:fd:44:08:f4:91:d5:49:19:80:f6:b2:e5:d4: 91:09:fc:a3:32:0a:55:e6:4e:fd:5a:32:e4:31:2e: c1:a0:53:76:82:8f:78:f6:9b:1e:dc:e6:78:83:e3: fc:a4:0a:76:86:73:4a:40:ca:e4:bf:6e:5b:36:f5: 23:33:8a:7f:ea:35:8d:6f:2f:97:d9:76:f1:89:9e: c1:6c:a8:8f:2b:bd:4b:fc:93:c0:e7:4c:c1:94:43: ee:82:e0:ee:bd:f7:db:3d:6b:8d:4b:28:d7:c7:dd: 4b:a4:69:96:d0:b9:30:86:2c:2c:8c:6c:c0:dc:51: 79:82:cb:ca:aa:d4:9c:e4:55:f9:af:e7:e0:b7:e1: ff:a7:f6:95:75:d8:c4:49:3f:7a:26:84:63:5d:5b: f3:3c:5f:a8:88:2c:a2:69:69:8d:1c:a5:64:87:c4: c3:d2:3f:cf:59:f7:13:4d:bc:f7:ff:f6:a6:df:e1: 38:5d:70:12:14:1a:84:29:d1:37:b9:d6:b2:d8:43: cc:f6:96:da:d7:2e:ab:35:b5:42:ae:71:a3:59:e8: 81:13:d2:79:3d:d5:86:4a:70:af:88:75:02:99:5b: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:84:7F:47:3C:D6:B8:1B:71:77:D6:D5:68:BA:77:3D:D6:BC:7D:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.197.128.0/18 Signature Algorithm: sha256WithRSAEncryption 33:0c:54:17:47:d2:b4:f5:ce:17:69:bd:c1:cc:0f:19:d2:22: fc:03:cb:26:02:8d:88:17:ff:cd:a8:15:9b:70:ff:eb:68:21: bb:5e:8b:4e:2f:6f:2d:44:5f:49:d1:8d:a8:f3:75:09:2b:8e: df:da:79:ff:7e:e5:3f:14:4c:02:d7:a0:08:53:c3:ae:86:d1: 6f:29:75:fb:12:9f:f4:fe:9b:6a:79:91:d7:c9:6e:f1:aa:58: e9:ef:87:dd:9a:d8:97:d2:b0:d6:d9:31:89:ee:c7:17:0f:ad: 50:fa:81:32:d8:18:0c:29:b4:c7:5d:23:7f:d2:9f:c9:3b:e6: 5f:ed:34:de:d2:b4:61:4a:3f:ee:9c:7f:14:1a:c7:e9:e1:a2: 1c:95:27:d3:ce:ec:ed:f7:7f:33:d9:95:5c:a3:60:76:06:b0: 17:88:50:d4:05:e0:f6:42:84:5a:c8:4b:e5:a2:c8:43:bd:6d: 00:ae:91:db:3e:76:79:62:12:ab:36:45:dc:1d:44:f2:cc:9b: a8:30:d2:61:d1:06:c6:4c:4b:97:ba:0f:5f:5f:04:81:08:57: d3:51:71:74:0b:63:c9:fa:2c:d3:35:98:10:c1:b7:3d:2c:de: 85:a4:91:89:60:5e:3c:cb:8a:d1:f6:47:15:eb:f2:62:0d:27: f9:ac:46:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDzGoYdY/dtJY7WywuoMZ7SQ3SQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MDE5WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzk1ZDlkY2IyNGU0OWEwOGMyYzYzMzI3MWQyYTQzOGNm Y2IwYTIwNmM4YmE0M2QwOTVmYmNhOWY5YTdlZGRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSw2m1oPxf0x9FgnDqX6uL7r2HqWm76hurniOhPCPD/UQI 9JHVSRmA9rLl1JEJ/KMyClXmTv1aMuQxLsGgU3aCj3j2mx7c5niD4/ykCnaGc0pA yuS/bls29SMzin/qNY1vL5fZdvGJnsFsqI8rvUv8k8DnTMGUQ+6C4O6999s9a41L KNfH3UukaZbQuTCGLCyMbMDcUXmCy8qq1JzkVfmv5+C34f+n9pV12MRJP3omhGNd W/M8X6iILKJpaY0cpWSHxMPSP89Z9xNNvPf/9qbf4ThdcBIUGoQp0Te51rLYQ8z2 ltrXLqs1tUKucaNZ6IET0nk91YZKcK+IdQKZWySrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuoR/RzzWuBtxd9bVaLp3Pda8fVcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1YTFiMzljLTczY2YtNGEwMy1hNTRiLTU4ZThlZTc3ZTJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZMxYAwDQYJKoZIhvcNAQELBQADggEBADMMVBdH0rT1zhdpvcHMDxnSIvwD yyYCjYgX/82oFZtw/+toIbtei04vby1EX0nRjajzdQkrjt/aef9+5T8UTALXoAhT w66G0W8pdfsSn/T+m2p5kdfJbvGqWOnvh92a2JfSsNbZMYnuxxcPrVD6gTLYGAwp tMddI3/Sn8k75l/tNN7StGFKP+6cfxQax+nhohyVJ9PO7O33fzPZlVyjYHYGsBeI UNQF4PZChFrIS+WiyEO9bQCukds+dnliEqs2RdwdRPLMm6gw0mHRBsZMS5e6D19f BIEIV9NRcXQLY8n6LNM1mBDBtz0s3oWkkYlgXjzLitH2RxXr8mINJ/msRv0= -----END CERTIFICATE-----Generated at Tue Sep 16 20:49:51 2025 by rpki-client