$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa File: 7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa (raw, json) Hash identifier: +p91R0qqFdEyZYf/JaUe14sBA2vNY+72d6lLUET7Jqo= Subject key identifier: 45:37:F8:A4:91:DF:29:CA:AA:E4:D7:AF:AB:D6:59:AE:2E:52:34:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 257B5D238C10BD1A1267A7B5CB8E4C3848D5FBD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa Signing time: Wed 27 Aug 2025 00:51:41 +0000 ROA not before: Wed 27 Aug 2025 00:51:41 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7b:5d:23:8c:10:bd:1a:12:67:a7:b5:cb:8e:4c:38:48:d5:fb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:51:41 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=4c91bbbc01537dd99e787a24a6be2f84c03c2d6d9a3c959db440fe611f8a629b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:d3:48:14:c7:37:4a:ba:e8:c8:04:d2:f8: ff:24:df:78:6e:2c:3d:39:43:64:64:38:56:c5:83: 1b:eb:4a:b0:a8:d1:3b:b2:f4:d3:28:e7:da:52:da: b3:60:6a:14:d4:9a:7d:64:43:54:82:0c:7f:a7:59: b3:1e:e2:62:5b:f7:90:5c:5e:3c:28:27:5a:c1:12: 3b:50:64:0a:5c:2e:50:de:b8:2a:d2:9a:8b:e9:06: 01:14:44:21:f5:bb:f4:e4:79:a0:8b:cb:30:e7:13: d4:f1:51:fe:6d:19:87:5e:bf:24:4c:52:a5:7b:95: e1:36:bc:c9:a1:c0:f0:4d:cc:c4:b3:ed:f4:da:77: 12:97:a6:d6:ba:62:a2:ee:9b:49:39:19:f6:e4:85: a5:1f:5b:a2:14:03:4f:72:ff:c2:6c:91:09:d2:99: 46:5e:67:0e:40:45:1f:14:3a:6c:e7:75:15:fb:c7: 72:dd:8f:c3:bb:3f:03:4a:bc:0e:df:3e:ca:6e:99: 3d:f2:df:39:67:7c:e9:28:eb:5e:79:66:4f:13:04: ec:55:89:1d:ee:21:18:3b:ad:38:d1:0d:0e:90:91: 93:ce:f5:c6:a4:23:d6:fd:9d:c6:3e:6b:84:b8:a2: 59:66:30:e2:55:db:af:ac:d0:51:50:89:fd:87:ca: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:F8:A4:91:DF:29:CA:AA:E4:D7:AF:AB:D6:59:AE:2E:52:34:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.218.0/23 Signature Algorithm: sha256WithRSAEncryption 67:f7:1b:7e:8c:1c:97:52:6c:b8:e6:2d:17:bd:4a:e8:0a:f3: 2a:81:61:f1:5b:e5:e3:01:57:64:2c:8f:33:74:23:c7:c2:55: 3f:54:cc:ba:94:33:09:2d:7d:1d:c9:38:d3:d1:2e:09:ab:23: 9a:00:26:e2:bd:ba:7a:7e:07:d7:21:03:69:18:1f:19:31:7b: 9b:3f:83:8a:67:12:1a:4f:a5:f2:23:d3:da:54:0e:f0:bd:69: b6:2e:c1:b5:bd:78:bf:d1:47:67:09:3e:04:26:eb:cc:72:78: 37:27:9b:97:0a:b8:ff:d4:21:8a:69:4a:c9:f0:eb:69:57:38: 54:76:43:12:3b:9d:02:e1:90:2a:6f:66:3e:6a:30:32:51:b0: d2:16:89:81:45:c3:82:08:54:c9:b4:6f:1a:12:6d:ea:c9:92: 01:9c:8a:e3:f3:9a:5e:3e:01:8e:09:92:27:cb:c4:61:39:c1: 32:95:ce:4b:3b:91:24:f8:15:8b:20:7b:9c:24:a1:b8:06:6c: ab:5c:d8:7d:41:71:10:78:f3:1b:32:c7:73:f1:05:66:5d:89: 83:42:27:1a:01:7c:e6:5a:38:2e:51:ae:9b:32:dd:7a:fc:26: ad:78:a5:fc:cd:ee:b2:dc:77:07:1f:34:a0:e0:80:15:b3:a0: fd:fa:5a:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJXtdI4wQvRoSZ6e1y45MOEjV+9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDA1MTQxWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzkxYmJiYzAxNTM3ZGQ5OWU3ODdhMjRhNmJlMmY4NGMw M2MyZDZkOWEzYzk1OWRiNDQwZmU2MTFmOGE2MjliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPlNNIFMc3SrroyATS+P8k33huLD05Q2RkOFbFgxvrSrCo 0Tuy9NMo59pS2rNgahTUmn1kQ1SCDH+nWbMe4mJb95BcXjwoJ1rBEjtQZApcLlDe uCrSmovpBgEURCH1u/TkeaCLyzDnE9TxUf5tGYdevyRMUqV7leE2vMmhwPBNzMSz 7fTadxKXpta6YqLum0k5GfbkhaUfW6IUA09y/8JskQnSmUZeZw5ARR8UOmzndRX7 x3Ldj8O7PwNKvA7fPspumT3y3zlnfOko6155Zk8TBOxViR3uIRg7rTjRDQ6QkZPO 9cakI9b9ncY+a4S4ollmMOJV26+s0FFQif2HyoF1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURTf4pJHfKcqq5Nevq9ZZri5SNLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkOThjZDIzLTFjNDctNGU5Mi05N2QzLTFjYzFiMTdiODJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM7NowDQYJKoZIhvcNAQELBQADggEBAGf3G36MHJdSbLjmLRe9SugK8yqB YfFb5eMBV2QsjzN0I8fCVT9UzLqUMwktfR3JONPRLgmrI5oAJuK9unp+B9chA2kY Hxkxe5s/g4pnEhpPpfIj09pUDvC9abYuwbW9eL/RR2cJPgQm68xyeDcnm5cKuP/U IYppSsnw62lXOFR2QxI7nQLhkCpvZj5qMDJRsNIWiYFFw4IIVMm0bxoSberJkgGc iuPzml4+AY4JkifLxGE5wTKVzks7kST4FYsge5wkobgGbKtc2H1BcRB48xsyx3Px BWZdiYNCJxoBfOZaOC5Rrpsy3Xr8Jq14pfzN7rLcdwcfNKDggBWzoP36Wvw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:00 2025 by rpki-client