$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad44d015-c939-4717-8a12-a48a1962e56d.roa File: ad44d015-c939-4717-8a12-a48a1962e56d.roa (raw, json) Hash identifier: O5Z6nl/Ko/oDWay9BNRehj6WAJhhQkWWJATN63w8Tgw= Subject key identifier: 2E:A8:16:EB:30:3A:51:5A:77:D3:57:94:70:11:92:BA:29:84:E9:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E5012FA0F944C991CB29E2316F3BDF62DDB70B3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad44d015-c939-4717-8a12-a48a1962e56d.roa Signing time: Sat 30 Aug 2025 00:31:57 +0000 ROA not before: Sat 30 Aug 2025 00:31:57 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:50:12:fa:0f:94:4c:99:1c:b2:9e:23:16:f3:bd:f6:2d:db:70:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:31:57 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=cabf5ca082417f2f042cb10a504cff66e5801c1d35e67a26a040cf7261c62aeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:1a:16:9d:19:af:e2:91:91:38:75:32:c3: 93:76:08:a2:08:e4:99:a3:f9:cb:5d:da:be:ee:db: 51:84:87:6c:9c:bb:25:89:bc:16:71:53:40:41:6b: aa:32:d9:6c:5d:45:35:90:ee:38:12:18:64:6f:22: 66:98:0b:ea:8c:dc:67:be:af:23:fd:6f:51:74:54: bd:de:ca:be:6c:78:b0:eb:1a:d2:28:b4:c5:6b:80: bf:92:ac:8c:f6:54:7c:b4:48:0d:fd:35:a3:9a:53: 46:7d:72:45:16:73:92:52:0b:8d:14:e6:cc:e9:41: 69:17:5e:f1:ac:8d:06:cd:d9:24:2e:01:ae:17:d9: 00:2c:cc:bc:b9:d7:b5:cc:cc:74:95:a9:aa:24:b1: 8d:fe:09:8c:19:30:c9:96:0b:b5:cb:04:07:7d:f1: 85:33:d4:83:72:b8:30:32:22:b8:f8:10:b0:c5:22: 22:dc:ec:4e:7c:01:bd:36:94:2a:1c:3d:d9:96:09: a5:86:1e:98:6c:aa:6d:ea:54:9b:b1:c4:27:a7:d4: df:81:c2:e2:d0:8b:11:ea:fe:47:f1:31:1d:32:f5: 1f:d5:5d:63:d8:2a:2f:18:84:29:0d:38:6c:e3:bb: 0e:cd:c7:70:e2:0d:77:f4:ec:da:12:4f:c3:8f:90: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:16:EB:30:3A:51:5A:77:D3:57:94:70:11:92:BA:29:84:E9:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad44d015-c939-4717-8a12-a48a1962e56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2f:4d:18:17:89:13:51:8c:54:54:88:9c:6b:33:c6:31:e9:34: 07:74:1f:dc:c2:f0:90:47:cd:d5:ef:1b:6c:44:59:9a:34:b6: 83:a6:2d:75:9f:80:43:e6:db:46:52:72:90:be:45:89:00:24: 7d:90:c4:d6:be:26:0a:0a:d7:12:df:b7:44:27:6d:15:46:e5: bb:5b:38:ec:c3:74:68:99:75:71:82:3a:d2:1b:24:ec:4a:f2: bb:20:e0:de:a4:38:01:a8:25:7c:32:7d:c7:62:e8:f8:99:0e: 17:10:9c:b5:29:95:c4:cc:0d:67:fb:13:c6:70:15:73:7e:ec: 77:cb:07:5b:65:ad:0e:d0:f2:0e:92:f2:09:69:55:1c:0e:2c: 8d:da:9f:4e:70:93:16:07:6d:80:4b:25:c7:72:cb:76:93:e2: ab:72:25:c3:97:01:d9:a0:c7:72:07:80:58:30:7e:3a:39:33: 3b:16:6e:f7:64:63:dd:14:14:08:3e:7d:a1:d6:c4:7f:50:b0: b9:c6:f1:98:ae:8b:16:9f:d8:23:d4:1c:38:0e:8b:c9:a4:04: a9:a8:3d:a7:61:6f:e2:16:dc:6c:ed:73:b5:e3:f0:33:00:1b: e0:f3:d9:42:a1:85:48:07:cc:18:df:ba:30:41:7a:3f:42:ab: e4:79:18:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDlAS+g+UTJkcsp4jFvO99i3bcLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAzMTU3WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWJmNWNhMDgyNDE3ZjJmMDQyY2IxMGE1MDRjZmY2NmU1 ODAxYzFkMzVlNjdhMjZhMDQwY2Y3MjYxYzYyYWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL+hoWnRmv4pGROHUyw5N2CKII5Jmj+ctd2r7u21GEh2yc uyWJvBZxU0BBa6oy2WxdRTWQ7jgSGGRvImaYC+qM3Ge+ryP9b1F0VL3eyr5seLDr GtIotMVrgL+SrIz2VHy0SA39NaOaU0Z9ckUWc5JSC40U5szpQWkXXvGsjQbN2SQu Aa4X2QAszLy517XMzHSVqaoksY3+CYwZMMmWC7XLBAd98YUz1INyuDAyIrj4ELDF IiLc7E58Ab02lCocPdmWCaWGHphsqm3qVJuxxCen1N+BwuLQixHq/kfxMR0y9R/V XWPYKi8YhCkNOGzjuw7Nx3DiDXf07NoST8OPkJTFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULqgW6zA6UVp301eUcBGSuimE6Q8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkNDRkMDE1LWM5MzktNDcxNy04YTEyLWE0OGExOTYyZTU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4FTANBgkqhkiG9w0BAQsFAAOCAQEAL00YF4kTUYxUVIicazPGMek0B3Qf 3MLwkEfN1e8bbERZmjS2g6YtdZ+AQ+bbRlJykL5FiQAkfZDE1r4mCgrXEt+3RCdt FUblu1s47MN0aJl1cYI60hsk7EryuyDg3qQ4AaglfDJ9x2Lo+JkOFxCctSmVxMwN Z/sTxnAVc37sd8sHW2WtDtDyDpLyCWlVHA4sjdqfTnCTFgdtgEslx3LLdpPiq3Il w5cB2aDHcgeAWDB+OjkzOxZu92Rj3RQUCD59odbEf1CwucbxmK6LFp/YI9QcOA6L yaQEqag9p2Fv4hbcbO1ztePwMwAb4PPZQqGFSAfMGN+6MEF6P0Kr5HkY6Q== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:41 2025 by rpki-client