$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa File: c1633ee8-98fb-487d-86d0-2766783f0d7c.roa (raw, json) Hash identifier: lvWOvxWC4MlO8N1F/JALeakZCTVPBwnRgzJQrrb14GY= Subject key identifier: 27:3B:7C:88:68:2A:7E:5E:EA:B6:74:06:F7:EB:43:BD:C5:16:5B:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A9CA1E7BE9A1920A8B0798775B275A47A2175D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa Signing time: Mon 01 Sep 2025 15:42:02 +0000 ROA not before: Mon 01 Sep 2025 15:42:02 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9c:a1:e7:be:9a:19:20:a8:b0:79:87:75:b2:75:a4:7a:21:75:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:42:02 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=713965784f51fc5788bbbd073edfa3970d87936795d147fd4f76bf9feffe446e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a8:cb:81:33:7b:52:02:a0:c6:04:09:1e:c6: 5d:11:56:e3:37:4b:d9:36:27:64:8d:6a:b8:ed:31: e9:ed:b5:35:fb:f7:0e:db:f4:a1:58:56:0c:40:d5: d1:bc:44:ff:20:f3:28:a0:8a:7e:31:11:18:37:48: 97:e1:14:99:a4:e6:b6:8d:6c:d9:ce:b3:95:4d:87: bd:0b:5f:37:c6:73:c2:c3:bd:a6:dd:ba:db:0b:5f: 68:85:6b:ac:56:46:72:84:c3:53:1f:ab:5e:22:9c: c2:d3:22:62:bc:60:18:2b:be:d5:48:8a:db:3a:67: 6c:23:94:ac:1e:d2:00:76:d7:f3:a0:3b:9a:97:0b: 11:42:64:06:bf:36:2c:65:d2:dc:5f:ff:e5:24:a8: b8:0a:5e:ea:99:75:ce:9b:59:72:d0:af:76:73:19: 70:7c:6f:58:28:21:1a:d8:a6:09:a3:36:3f:42:cc: a1:10:50:47:77:0d:31:ce:81:96:24:05:b4:06:a6: 3e:e0:42:4b:de:bc:21:4c:06:59:f4:64:76:c0:84: bb:87:ab:3a:92:03:98:99:8a:93:d9:d1:f2:9a:ab: e6:eb:24:19:d5:00:a0:80:c9:8f:78:9c:f1:07:f0: db:c8:a7:38:6d:56:64:0b:dd:6d:02:84:a7:ab:2c: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3B:7C:88:68:2A:7E:5E:EA:B6:74:06:F7:EB:43:BD:C5:16:5B:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.160.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:80:1a:73:0e:5f:9d:4c:1e:93:90:98:a5:cb:b2:78:17:49: 02:29:d5:35:b4:6e:37:39:b7:6d:e2:96:f9:b5:27:ac:8b:d4: 46:ff:8f:c7:c9:00:18:3e:c0:38:d7:be:8f:21:cd:8f:0b:84: e8:1d:00:ad:36:06:ef:cd:fe:be:58:6c:86:df:ac:fc:51:ed: 9c:fd:9f:24:65:5a:ae:3c:ff:32:ce:61:01:d9:f1:6a:a7:41: a1:52:75:00:50:57:d1:40:23:3e:87:a9:b3:e2:e6:51:2a:63: b7:26:fd:9c:58:03:a8:7a:98:3a:06:83:84:11:12:cb:98:18: 05:d2:58:68:b0:50:28:23:c3:92:5a:c0:fa:10:33:c6:f3:46: 6a:01:ce:91:05:a4:4a:a3:c1:bd:64:87:2c:47:6a:8c:4c:7b: 63:97:c9:53:e6:2d:94:27:46:9b:c1:09:4c:0a:e4:5c:27:ee: 78:a8:e1:84:0d:67:2b:a2:fc:82:51:af:f2:f7:8a:90:9d:e3: 59:bc:66:69:ef:8c:cd:d1:f4:d1:de:18:15:25:e5:af:3f:4f: 0d:df:c0:dc:d3:2a:27:9f:fc:67:22:bf:e6:48:b1:44:67:f9: cb:34:9c:ed:c9:a0:e7:fe:09:c0:94:52:68:3a:4f:70:59:dd: 0f:7f:2c:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKpyh576aGSCosHmHdbJ1pHohddkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTU0MjAyWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTM5NjU3ODRmNTFmYzU3ODhiYmJkMDczZWRmYTM5NzBk ODc5MzY3OTVkMTQ3ZmQ0Zjc2YmY5ZmVmZmU0NDZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5qMuBM3tSAqDGBAkexl0RVuM3S9k2J2SNarjtMenttTX7 9w7b9KFYVgxA1dG8RP8g8yigin4xERg3SJfhFJmk5raNbNnOs5VNh70LXzfGc8LD vabdutsLX2iFa6xWRnKEw1Mfq14inMLTImK8YBgrvtVIits6Z2wjlKwe0gB21/Og O5qXCxFCZAa/Nixl0txf/+UkqLgKXuqZdc6bWXLQr3ZzGXB8b1goIRrYpgmjNj9C zKEQUEd3DTHOgZYkBbQGpj7gQkvevCFMBln0ZHbAhLuHqzqSA5iZipPZ0fKaq+br JBnVAKCAyY94nPEH8NvIpzhtVmQL3W0ChKerLMsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJzt8iGgqfl7qtnQG9+tDvcUWW0MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNjMzZWU4LTk4ZmItNDg3ZC04NmQwLTI3NjY3ODNmMGQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUqAwDQYJKoZIhvcNAQELBQADggEBAD+AGnMOX51MHpOQmKXLsngXSQIp 1TW0bjc5t23ilvm1J6yL1Eb/j8fJABg+wDjXvo8hzY8LhOgdAK02Bu/N/r5YbIbf rPxR7Zz9nyRlWq48/zLOYQHZ8WqnQaFSdQBQV9FAIz6HqbPi5lEqY7cm/ZxYA6h6 mDoGg4QREsuYGAXSWGiwUCgjw5JawPoQM8bzRmoBzpEFpEqjwb1khyxHaoxMe2OX yVPmLZQnRpvBCUwK5Fwn7nio4YQNZyui/IJRr/L3ipCd41m8ZmnvjM3R9NHeGBUl 5a8/Tw3fwNzTKief/Gciv+ZIsURn+cs0nO3JoOf+CcCUUmg6T3BZ3Q9/LN4= -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:53 2025 by rpki-client