$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa File: bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa (raw, json) Hash identifier: pflO1EkCjrpqX1UHymHHoxmDP2OOwRzrZddtFlOyHu0= Subject key identifier: 03:4C:90:91:29:BA:84:69:40:5F:70:F1:64:2C:2A:C1:18:C1:B3:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07ABC6D249675BF6FA2FC935912DA3C9D4B141C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa Signing time: Sat 30 Aug 2025 00:10:28 +0000 ROA not before: Sat 30 Aug 2025 00:10:28 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:c6:d2:49:67:5b:f6:fa:2f:c9:35:91:2d:a3:c9:d4:b1:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:10:28 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=4c30f0b16ff784fb98e912db897929b2f070695c3456541c120de57529462109, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:09:11:d5:6a:97:f1:8d:24:54:2e:13:ba: 1f:9b:29:d3:fb:d6:2f:e8:52:a6:0e:7d:51:38:51: 90:fe:9b:d0:96:b3:45:c3:d5:a4:7e:68:2f:80:88: 33:b2:85:42:bd:70:0a:3e:14:3f:74:68:50:4a:f3: 33:72:68:ce:50:ef:ba:25:41:e5:1d:f5:e2:a7:71: a5:17:53:55:72:82:6a:f1:bf:9b:a6:f6:d9:cf:b7: 7f:80:25:ae:76:0c:96:48:4c:4d:af:b5:89:0c:64: 02:f8:df:ba:16:98:d3:e2:85:93:63:3a:32:36:ee: e8:91:96:17:aa:a9:99:fa:e5:69:43:11:b9:29:cd: f4:5c:17:9b:29:72:2a:94:b0:ae:1f:c0:e6:15:48: 92:50:71:7f:8e:13:51:aa:eb:65:b4:8b:63:a9:4f: fc:23:03:83:79:51:4d:43:fa:ff:eb:40:b4:9d:01: 39:31:33:53:5d:61:2a:81:74:43:a2:78:8d:0d:c7: 82:4a:03:e8:12:fc:57:4a:04:15:e1:86:e7:5d:50: a7:4b:fe:55:91:1e:ef:5d:fe:9b:75:88:e0:76:90: 3a:d6:82:67:93:d5:a8:70:89:33:97:9e:34:21:4d: 0f:dc:25:d5:14:1d:b2:c0:f1:e4:8a:8e:70:11:de: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:90:91:29:BA:84:69:40:5F:70:F1:64:2C:2A:C1:18:C1:B3:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.12.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:54:fd:c9:5c:e1:0d:d0:cb:b5:d6:c3:09:9b:8b:65:07:09: 68:06:49:f2:58:c0:52:0d:ad:60:38:45:dc:c7:3d:c1:b7:d1: 2e:81:2b:c8:f0:ba:f9:b0:ac:c2:bb:ba:a1:aa:49:9f:b5:3e: 19:fd:30:3f:88:21:d9:8f:a0:71:75:8e:a6:72:cd:ff:c9:21: bc:c8:d3:bd:cb:a5:e0:f0:ac:5f:79:07:38:18:09:31:ea:2d: 21:62:89:fa:0d:9c:50:24:7e:33:7a:b4:e4:c2:a9:02:50:2b: c4:36:f7:06:f4:0a:69:be:4b:1e:e7:e5:b2:1f:37:5f:d6:71: fb:7a:74:1c:e9:df:26:cf:89:7b:09:70:40:ba:8b:75:1f:3c: 2d:f3:26:54:3f:1a:67:fd:a3:b4:91:ee:9b:b8:28:9b:c9:0e: 89:d1:e9:53:15:e0:32:e1:24:ad:63:01:44:50:5d:68:df:dc: e4:49:72:71:09:12:13:43:80:c0:b3:60:4f:a6:07:c8:a7:1c: 0c:e0:bd:55:34:46:f2:8f:43:41:a8:c1:91:90:d8:82:61:42: 31:bc:1d:48:b8:10:5c:3e:14:7e:68:f3:1e:ee:32:81:4b:98: 2a:f0:18:06:e6:53:d0:63:c5:39:90:76:49:f9:49:b3:b1:aa: 3a:7d:ce:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB6vG0klnW/b6L8k1kS2jydSxQckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAxMDI4WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzMwZjBiMTZmZjc4NGZiOThlOTEyZGI4OTc5MjliMmYw NzA2OTVjMzQ1NjU0MWMxMjBkZTU3NTI5NDYyMTA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChHQkR1WqX8Y0kVC4Tuh+bKdP71i/oUqYOfVE4UZD+m9CW s0XD1aR+aC+AiDOyhUK9cAo+FD90aFBK8zNyaM5Q77olQeUd9eKncaUXU1Vygmrx v5um9tnPt3+AJa52DJZITE2vtYkMZAL437oWmNPihZNjOjI27uiRlheqqZn65WlD EbkpzfRcF5spciqUsK4fwOYVSJJQcX+OE1Gq62W0i2OpT/wjA4N5UU1D+v/rQLSd ATkxM1NdYSqBdEOieI0Nx4JKA+gS/FdKBBXhhuddUKdL/lWRHu9d/pt1iOB2kDrW gmeT1ahwiTOXnjQhTQ/cJdUUHbLA8eSKjnAR3iofAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA0yQkSm6hGlAX3DxZCwqwRjBs+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQ3MDkxLWYxMDAtNGFmZi05NDk0LWM3YjdhNGJiOWNiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX/gwwDQYJKoZIhvcNAQELBQADggEBAA9U/clc4Q3Qy7XWwwmbi2UHCWgG SfJYwFINrWA4RdzHPcG30S6BK8jwuvmwrMK7uqGqSZ+1Phn9MD+IIdmPoHF1jqZy zf/JIbzI073LpeDwrF95BzgYCTHqLSFiifoNnFAkfjN6tOTCqQJQK8Q29wb0Cmm+ Sx7n5bIfN1/Wcft6dBzp3ybPiXsJcEC6i3UfPC3zJlQ/Gmf9o7SR7pu4KJvJDonR 6VMV4DLhJK1jAURQXWjf3ORJcnEJEhNDgMCzYE+mB8inHAzgvVU0RvKPQ0GowZGQ 2IJhQjG8HUi4EFw+FH5o8x7uMoFLmCrwGAbmU9BjxTmQdkn5SbOxqjp9zto= -----END CERTIFICATE-----Generated at Sat Sep 6 16:49:55 2025 by rpki-client