$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/becbe12a-746d-470a-abea-6d16e45cda22.roa File: becbe12a-746d-470a-abea-6d16e45cda22.roa (raw, json) Hash identifier: YAV5Q05g5zs0o/B+aEyOqsmFqhFGe1CrItp6lsgzewk= Subject key identifier: 77:3E:8E:80:0E:1F:2A:56:24:D0:A6:71:B0:DE:7D:AC:50:31:6D:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 566FD3370101756863AA1E8F95F62BCA72B31AED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/becbe12a-746d-470a-abea-6d16e45cda22.roa Signing time: Wed 27 Aug 2025 00:31:49 +0000 ROA not before: Wed 27 Aug 2025 00:31:49 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:d3:37:01:01:75:68:63:aa:1e:8f:95:f6:2b:ca:72:b3:1a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:31:49 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=69252dd16daec38b3ae7dd0da5895a43e1f1db0f38aef40f36296847384e0383, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:96:4e:e8:9a:8f:c2:f8:27:83:27:0c:53: 0e:4c:46:07:60:0f:a6:71:50:4a:ca:27:8a:e9:1f: 95:b8:dc:9a:10:cf:b5:0a:e8:96:c4:3c:b6:ba:ea: d4:e6:08:f0:80:b2:96:d0:73:00:84:6c:1e:ef:ac: ed:4b:29:6c:76:b9:32:b7:03:b5:9b:6a:0f:f3:44: 59:94:03:f1:fd:8f:56:4a:8d:05:5a:c5:65:ee:55: b7:50:17:52:d8:03:01:0a:eb:8b:6b:53:d3:a2:79: 93:70:27:d0:c5:17:1a:0a:32:62:38:30:f7:93:c7: 3f:2d:95:c4:87:70:0b:16:0a:f0:b6:87:2d:f6:dc: 71:ef:27:6b:cf:b0:ac:6e:70:23:22:57:53:63:52: 6f:9d:c5:d8:7c:a0:f1:f1:0a:5e:6e:e6:ab:8d:98: 21:ea:9a:95:18:1b:e5:cd:25:45:37:2e:d4:a3:0d: 34:ef:d4:48:0f:9f:6c:2e:42:b6:54:9a:ef:cb:52: 59:d2:d5:37:b0:cf:8c:01:60:01:13:21:b4:64:21: 2d:67:9a:09:bc:09:53:c1:b6:ff:09:3d:62:dd:a4: 2f:46:04:ff:33:97:88:e8:d8:8a:0f:f2:09:34:68: a4:da:ed:cc:03:7a:55:4e:c2:2f:f1:e0:b3:98:7c: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:8E:80:0E:1F:2A:56:24:D0:A6:71:B0:DE:7D:AC:50:31:6D:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/becbe12a-746d-470a-abea-6d16e45cda22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.151.0/24 Signature Algorithm: sha256WithRSAEncryption 17:35:03:31:31:44:c0:87:e7:b1:18:ce:fd:65:2f:5f:c2:2a: 60:30:ba:b5:2b:d0:cf:c3:4b:78:e6:12:a4:07:08:0f:7d:32: 49:05:fa:5f:a0:06:aa:bc:32:30:5a:38:fc:1f:57:4c:d2:ab: 40:1a:a6:d2:eb:53:8f:e6:50:1e:05:35:a7:46:83:c2:6e:c0: ca:89:52:3b:28:ce:f8:15:d8:9e:ae:54:c7:50:ee:5d:46:79: 8c:41:41:a3:b6:db:85:12:d9:35:77:ea:2a:98:c8:1e:e2:e0: 57:be:57:cd:00:b0:3d:3a:8d:6c:74:a3:c8:54:41:83:99:2e: ce:6c:de:ec:b5:4b:ed:ff:1e:52:3a:3a:44:a6:db:88:83:df: 7b:61:f7:5d:65:f9:da:d1:9b:f9:c0:64:21:78:d9:c8:79:98: c7:3c:da:d2:c5:57:a4:26:1f:d7:e0:bf:a2:02:58:dc:25:e4: ee:b3:6e:a6:d6:38:92:14:a4:ff:2f:fa:8d:a5:78:08:59:41: 18:af:cd:ea:75:c7:97:56:bb:a2:c9:d4:11:2d:25:eb:a6:03: 89:e6:b9:db:47:46:ca:16:ae:20:66:9a:c4:ac:e1:79:96:26: 63:d2:ad:80:3a:5e:3d:71:f6:7f:74:d0:cb:b6:8f:b9:8f:c4: 0e:31:be:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVm/TNwEBdWhjqh6PlfYrynKzGu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDAzMTQ5WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTI1MmRkMTZkYWVjMzhiM2FlN2RkMGRhNTg5NWE0M2Ux ZjFkYjBmMzhhZWY0MGYzNjI5Njg0NzM4NGUwMzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7kJZO6JqPwvgngycMUw5MRgdgD6ZxUErKJ4rpH5W43JoQ z7UK6JbEPLa66tTmCPCAspbQcwCEbB7vrO1LKWx2uTK3A7Wbag/zRFmUA/H9j1ZK jQVaxWXuVbdQF1LYAwEK64trU9OieZNwJ9DFFxoKMmI4MPeTxz8tlcSHcAsWCvC2 hy323HHvJ2vPsKxucCMiV1NjUm+dxdh8oPHxCl5u5quNmCHqmpUYG+XNJUU3LtSj DTTv1EgPn2wuQrZUmu/LUlnS1Tewz4wBYAETIbRkIS1nmgm8CVPBtv8JPWLdpC9G BP8zl4jo2IoP8gk0aKTa7cwDelVOwi/x4LOYfKybAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdz6OgA4fKlYk0KZxsN59rFAxbeYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlY2JlMTJhLTc0NmQtNDcwYS1hYmVhLTZkMTZlNDVjZGEyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABsiJcwDQYJKoZIhvcNAQELBQADggEBABc1AzExRMCH57EYzv1lL1/CKmAw urUr0M/DS3jmEqQHCA99MkkF+l+gBqq8MjBaOPwfV0zSq0AaptLrU4/mUB4FNadG g8JuwMqJUjsozvgV2J6uVMdQ7l1GeYxBQaO224US2TV36iqYyB7i4Fe+V80AsD06 jWx0o8hUQYOZLs5s3uy1S+3/HlI6OkSm24iD33th911l+drRm/nAZCF42ch5mMc8 2tLFV6QmH9fgv6ICWNwl5O6zbqbWOJIUpP8v+o2leAhZQRivzep1x5dWu6LJ1BEt JeumA4nmudtHRsoWriBmmsSs4XmWJmPSrYA6Xj1x9n900Mu2j7mPxA4xvhU= -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:47 2025 by rpki-client