$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa File: b8b00ce6-94f4-49aa-9139-7d3156871f35.roa (raw, json) Hash identifier: gAsjIhAyCIfpWHL1Y7hpvvj9sONa3m8HTgQGA8/eduE= Subject key identifier: 80:AC:ED:57:E0:F5:EB:32:28:8E:A4:05:E6:40:E2:01:2E:D9:FC:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BEEFF4F57286A10AF367D308BAC8050A86BC11A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa Signing time: Fri 29 Aug 2025 16:40:28 +0000 ROA not before: Fri 29 Aug 2025 16:40:28 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ee:ff:4f:57:28:6a:10:af:36:7d:30:8b:ac:80:50:a8:6b:c1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:40:28 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=900005067d214044b56b4334565b71e2e5789f039960c0df7e67bafd2a8242a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:6a:f0:14:63:a5:52:53:57:0c:d2:7d:6a: 37:8d:7e:c6:89:c4:0c:ff:76:10:60:85:f1:76:46: 95:66:56:7a:0d:68:5f:a2:d2:c0:14:82:c4:f0:fe: c3:b2:bf:71:91:94:3c:d9:12:c0:d5:08:9b:88:72: 2d:90:74:14:fb:e6:c5:ee:e1:3c:fa:60:d2:f9:e6: 6e:45:2a:1a:b6:20:1b:c5:5d:42:0f:8d:4a:b5:4d: fa:50:ac:7c:7e:52:03:8b:d4:07:17:79:23:95:a9: cb:63:3e:84:fa:64:c5:a3:ed:9e:53:f3:77:5a:38: fe:a6:df:88:d0:30:6d:e2:fa:ae:19:20:4c:db:b1: 45:68:c6:38:93:9f:64:1e:96:48:54:d8:6a:02:e5: 20:d8:21:27:e9:ec:7b:35:da:0e:27:76:0c:21:f0: 61:d4:b7:b5:bd:a6:91:ab:4c:9b:0c:5e:c2:94:e1: 7d:66:03:87:d6:63:ba:5e:06:4e:ad:8c:d3:fb:c6: 31:20:67:6f:e8:e7:e4:6c:e0:6c:41:f0:e9:4f:6b: 04:e6:9b:9a:eb:6a:66:ec:72:c3:ce:01:e0:e0:03: e2:e4:bf:07:8c:fd:e0:97:59:6d:b8:6d:5c:26:7e: ce:e1:e4:7d:6a:cb:15:7e:30:4c:b1:77:e2:3b:af: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AC:ED:57:E0:F5:EB:32:28:8E:A4:05:E6:40:E2:01:2E:D9:FC:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.15.0/24 Signature Algorithm: sha256WithRSAEncryption a1:7c:3b:37:64:a9:9a:b4:46:f6:04:1c:7d:4a:80:69:d3:93: 94:d1:02:3e:64:51:f2:0d:39:6a:af:d9:86:c1:d3:94:98:97: ff:ae:34:8c:a8:b0:be:e6:62:c9:4a:ff:26:d4:e0:b6:99:7c: 06:06:8b:00:37:b0:a7:0f:b1:1a:4f:89:e4:5a:83:6f:7b:1a: fd:4b:8a:58:7c:a2:95:2b:e0:04:e3:08:12:da:ad:30:96:1a: 72:84:03:57:17:56:04:90:ab:de:5b:b8:a7:97:74:d0:96:de: a5:e5:21:05:73:37:a5:0a:89:59:61:cb:38:70:09:37:24:5c: 6b:fa:73:e2:6b:f2:f7:8b:a0:c2:e7:20:96:54:89:ff:e8:39: 8d:50:13:17:f7:01:e3:0c:7e:38:21:e2:6f:6a:8e:3b:71:52: f3:8b:b9:92:3d:9a:29:b2:52:c9:d6:8e:a0:ea:97:ef:76:41: d6:aa:d4:db:39:0e:e7:c9:82:46:51:c6:c6:3a:db:f9:f6:f5: 6a:75:04:c4:55:d1:1c:5a:53:d9:10:3d:8e:dc:e4:4a:44:10: ef:4f:8e:09:5a:0e:ea:f6:c3:36:69:db:ab:d7:0c:64:e2:88: 31:ae:e7:da:24:ce:f6:16:5d:31:c0:4e:c4:67:5c:4b:2e:32: 2d:e7:b2:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG+7/T1coahCvNn0wi6yAUKhrwRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTY0MDI4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDAwMDUwNjdkMjE0MDQ0YjU2YjQzMzQ1NjViNzFlMmU1 Nzg5ZjAzOTk2MGMwZGY3ZTY3YmFmZDJhODI0MmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA72rwFGOlUlNXDNJ9ajeNfsaJxAz/dhBghfF2RpVmVnoN aF+i0sAUgsTw/sOyv3GRlDzZEsDVCJuIci2QdBT75sXu4Tz6YNL55m5FKhq2IBvF XUIPjUq1TfpQrHx+UgOL1AcXeSOVqctjPoT6ZMWj7Z5T83daOP6m34jQMG3i+q4Z IEzbsUVoxjiTn2QelkhU2GoC5SDYISfp7Hs12g4ndgwh8GHUt7W9ppGrTJsMXsKU 4X1mA4fWY7peBk6tjNP7xjEgZ2/o5+Rs4GxB8OlPawTmm5rrambscsPOAeDgA+Lk vweM/eCXWW24bVwmfs7h5H1qyxV+MEyxd+I7rwq3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgKztV+D16zIojqQF5kDiAS7Z/C0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YjAwY2U2LTk0ZjQtNDlhYS05MTM5LTdkMzE1Njg3MWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAKF8OzdkqZq0RvYEHH1KgGnTk5TR Aj5kUfINOWqv2YbB05SYl/+uNIyosL7mYslK/ybU4LaZfAYGiwA3sKcPsRpPieRa g297Gv1Lilh8opUr4ATjCBLarTCWGnKEA1cXVgSQq95buKeXdNCW3qXlIQVzN6UK iVlhyzhwCTckXGv6c+Jr8veLoMLnIJZUif/oOY1QExf3AeMMfjgh4m9qjjtxUvOL uZI9mimyUsnWjqDql+92Qdaq1Ns5DufJgkZRxsY62/n29Wp1BMRV0RxaU9kQPY7c 5EpEEO9PjglaDur2wzZp26vXDGTiiDGu59okzvYWXTHATsRnXEsuMi3nsqE= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:27 2025 by rpki-client