$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa File: bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa (raw, json) Hash identifier: +8E6mo3TvEHu8KlKuBwxY/UdXRcpG0a9lQN9CkN/TBo= Subject key identifier: 64:D6:5F:EA:A9:38:BA:66:CC:99:64:B0:97:57:2A:7E:CC:87:C9:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F43F4BA9B6A2FDBEB27ADDD699BEB2B338A3793 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa Signing time: Sat 30 Aug 2025 00:50:59 +0000 ROA not before: Sat 30 Aug 2025 00:50:59 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:f4:ba:9b:6a:2f:db:eb:27:ad:dd:69:9b:eb:2b:33:8a:37:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:50:59 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=bc796ed712980af791354cb854a6d7671650c8c431780e190f8f89484a4be03a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:98:74:4d:db:57:bb:57:85:d4:9a:fe:e8: 97:72:f9:f2:cd:75:2a:ed:fb:a2:45:c8:c2:ce:22: 81:39:8f:0c:03:3d:a1:0d:1a:12:3c:ce:6b:9a:07: 05:15:df:6b:e8:15:a5:3a:c9:6c:a3:c1:49:5c:01: a6:c2:a7:fc:27:bb:b9:ed:31:f7:4f:d3:34:0b:2b: 1b:a0:4e:f6:38:f5:90:56:47:c3:07:0e:a8:e8:7d: ea:4a:49:3a:5a:de:53:87:a9:e8:e8:eb:68:e0:e1: d7:f3:39:33:cc:ba:4b:1c:03:05:96:da:73:59:6e: 0f:62:6d:f6:d4:e8:8b:91:74:de:5c:11:ac:64:f5: de:2d:57:9f:a4:cc:81:db:43:79:a3:cb:ec:f0:6c: a3:ba:94:67:1b:6a:58:80:fe:25:71:ce:94:42:fc: 6c:90:6d:03:41:54:f8:6e:78:05:5c:08:a5:76:ee: 5b:b0:37:07:72:9b:28:1d:ba:b8:d9:7a:00:34:05: dd:c5:d9:1f:49:b6:14:4b:74:6b:4d:29:1c:a9:eb: 5f:5d:fb:84:6c:2b:0e:34:e3:53:19:84:e8:f4:b0: 6a:c3:12:0b:34:86:ae:89:36:fa:d7:de:78:05:44: 03:ad:cb:b4:f9:9e:04:d0:a7:ba:57:94:3e:bc:12: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D6:5F:EA:A9:38:BA:66:CC:99:64:B0:97:57:2A:7E:CC:87:C9:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.224.0/19 Signature Algorithm: sha256WithRSAEncryption 88:a2:ab:41:61:77:84:a5:8b:a3:e2:61:86:66:fc:0a:f0:11: 0d:a7:3d:48:49:8c:1d:d7:4c:59:47:b4:bc:ac:e6:de:4b:2f: f9:1f:b7:10:fd:0c:1a:e5:18:75:56:fc:ea:d0:6e:e7:62:48: e7:d2:63:13:00:8e:d8:a1:8b:1c:2d:d7:12:29:02:49:60:07: b5:09:7e:61:a9:08:82:a6:1c:66:90:fc:21:f2:c6:90:4e:f5: 1e:ec:10:06:c0:40:31:d8:18:7f:44:d2:a6:c9:51:b4:6e:2d: 41:65:97:b5:22:6d:33:de:c9:f6:4a:19:40:6d:bf:be:c0:03: be:7f:5e:0d:55:4d:61:ba:c2:b5:8e:f2:88:7f:f7:ad:41:8b: 3a:7c:f3:c6:66:f3:ad:98:d8:39:72:9c:c5:4d:c1:6d:e4:92: b3:13:f8:e5:5e:b4:14:a5:9e:dd:61:8a:f7:a7:dd:ee:86:e7: 3a:2a:61:a2:da:c0:e5:3a:d4:48:02:a7:b9:bf:ea:f5:b8:dc: e8:7c:87:86:c6:80:f1:3b:99:d4:fd:3c:67:11:86:56:c8:51: 39:39:f3:8d:fd:31:d7:2f:6e:ad:c2:c4:ab:bb:40:04:93:b5: a4:0b:2e:65:4f:de:04:c8:47:60:3e:a1:3e:f8:cd:b8:13:83: 64:ea:e9:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb0P0uptqL9vrJ63daZvrKzOKN5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA1MDU5WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzc5NmVkNzEyOTgwYWY3OTEzNTRjYjg1NGE2ZDc2NzE2 NTBjOGM0MzE3ODBlMTkwZjhmODk0ODRhNGJlMDNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTwJh0TdtXu1eF1Jr+6Jdy+fLNdSrt+6JFyMLOIoE5jwwD PaENGhI8zmuaBwUV32voFaU6yWyjwUlcAabCp/wnu7ntMfdP0zQLKxugTvY49ZBW R8MHDqjofepKSTpa3lOHqejo62jg4dfzOTPMukscAwWW2nNZbg9ibfbU6IuRdN5c Eaxk9d4tV5+kzIHbQ3mjy+zwbKO6lGcbaliA/iVxzpRC/GyQbQNBVPhueAVcCKV2 7luwNwdymygdurjZegA0Bd3F2R9JthRLdGtNKRyp619d+4RsKw4041MZhOj0sGrD Egs0hq6JNvrX3ngFRAOty7T5ngTQp7pXlD68EqAHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZNZf6qk4umbMmWSwl1cqfsyHyYowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNjUzZTk2LTBkOTUtNGVlZi1hM2M4LThlNDYyYmRlOTllNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVG4OAwDQYJKoZIhvcNAQELBQADggEBAIiiq0Fhd4Sli6PiYYZm/ArwEQ2n PUhJjB3XTFlHtLys5t5LL/kftxD9DBrlGHVW/OrQbudiSOfSYxMAjtihixwt1xIp AklgB7UJfmGpCIKmHGaQ/CHyxpBO9R7sEAbAQDHYGH9E0qbJUbRuLUFll7UibTPe yfZKGUBtv77AA75/Xg1VTWG6wrWO8oh/961Bizp888Zm862Y2DlynMVNwW3kkrMT +OVetBSlnt1hiven3e6G5zoqYaLawOU61EgCp7m/6vW43Oh8h4bGgPE7mdT9PGcR hlbIUTk58439Mdcvbq3CxKu7QASTtaQLLmVP3gTIR2A+oT74zbgTg2Tq6WY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:54 2025 by rpki-client