$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa File: ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa (raw, json) Hash identifier: IW8981agrVON2Hti/mrud+V78k/FTuJf0aVjN4NHfyM= Subject key identifier: 28:14:42:C6:1B:93:62:75:BC:CA:65:29:AB:3C:50:D6:D4:BB:38:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E1A2AE4DC12EB985E11E899E2EC808EA872FD45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa Signing time: Tue 05 Aug 2025 17:30:20 +0000 ROA not before: Tue 05 Aug 2025 17:30:20 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:2a:e4:dc:12:eb:98:5e:11:e8:99:e2:ec:80:8e:a8:72:fd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:30:20 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=7d1b55052ca7a271d88bb995a7db044ba1dee03a469f81d79e2b05da53644bc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:8a:ba:94:32:9b:1c:d8:30:62:4a:48:8a: e4:72:e6:38:f8:76:d2:8c:a5:c5:e2:83:03:0d:89: 81:f0:1e:19:bc:fb:e7:5f:86:f9:12:9a:b4:88:1b: 9e:c2:a6:16:f9:df:45:4f:6c:50:f2:71:24:be:ab: 48:cd:84:f8:4c:e5:5f:30:86:28:ab:32:ec:b2:39: 1d:21:bb:aa:82:7f:6a:68:5c:5f:4a:17:f6:ec:87: 92:05:15:67:53:80:4d:e9:d2:7a:b7:f0:6b:c8:0d: a6:0f:25:71:72:3a:a6:ee:8a:33:2d:3a:d7:09:92: ad:b4:7b:9f:e4:44:75:58:9e:4d:b1:d0:c5:d4:2c: a7:d7:42:59:92:da:c4:c7:03:7f:ed:3e:7e:d2:09: 79:a6:23:0d:bf:0a:ec:8c:40:31:3f:34:eb:2d:79: 8d:1c:88:6a:dc:03:98:09:1f:3c:25:53:e9:53:a1: d0:0e:03:3f:c9:0b:ae:00:56:03:db:3e:bc:c3:74: c4:88:b6:91:b2:99:64:5d:1e:f7:51:28:53:d1:5c: 5b:73:e3:95:17:43:fe:26:3d:20:52:8d:66:46:41: 4d:85:2d:db:7a:5d:60:f7:cb:8c:da:ed:50:59:c8: ad:35:3e:6f:4d:d0:17:72:ee:07:b6:ea:41:82:22: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:42:C6:1B:93:62:75:BC:CA:65:29:AB:3C:50:D6:D4:BB:38:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.228.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:23:81:63:30:76:bf:e8:0a:ce:a7:c4:0a:8c:c5:ac:f2:c2: 15:b9:b3:08:9e:9f:8c:a8:5d:99:36:44:fe:f0:a5:ee:31:7b: dd:4e:85:dc:15:6b:0e:0a:cc:e2:d8:be:b9:43:f1:46:36:d5: 49:08:4b:f5:88:8f:98:f6:91:65:9d:8e:16:3d:d6:cd:2a:28: d7:4d:cc:e0:45:7c:a4:15:80:77:2d:d2:09:95:b7:3d:cc:9c: 17:ae:c8:38:0b:0a:f2:2c:ed:9b:af:9f:c1:26:72:24:8f:f0: 65:c5:d0:71:70:76:0c:93:75:0b:88:5f:d7:29:78:34:f1:ea: 6f:08:de:1c:26:4b:53:7e:f8:ac:ce:8c:1a:e0:e7:fd:82:66: bc:d7:fd:c0:85:42:00:b7:07:c4:76:24:50:7c:6a:fa:23:8e: ce:dd:58:c0:ba:ef:18:18:dd:15:2a:07:e3:1d:4c:67:d7:e4: c5:68:47:8e:9e:08:06:a9:1d:c8:4f:c9:b8:7c:1e:18:85:64: cc:9d:25:4f:2b:96:3f:7d:a1:f3:af:07:c3:30:57:ef:d5:89: b3:2d:eb:fb:de:23:68:2b:ad:fd:76:72:79:bc:a2:65:e9:a1: b5:3c:c6:38:7d:28:18:72:0f:db:31:ee:f5:1c:05:ca:c6:3c: 47:bb:6c:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDhoq5NwS65heEeiZ4uyAjqhy/UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTczMDIwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDFiNTUwNTJjYTdhMjcxZDg4YmI5OTVhN2RiMDQ0YmEx ZGVlMDNhNDY5ZjgxZDc5ZTJiMDVkYTUzNjQ0YmM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeSoq6lDKbHNgwYkpIiuRy5jj4dtKMpcXigwMNiYHwHhm8 ++dfhvkSmrSIG57Cphb530VPbFDycSS+q0jNhPhM5V8whiirMuyyOR0hu6qCf2po XF9KF/bsh5IFFWdTgE3p0nq38GvIDaYPJXFyOqbuijMtOtcJkq20e5/kRHVYnk2x 0MXULKfXQlmS2sTHA3/tPn7SCXmmIw2/CuyMQDE/NOsteY0ciGrcA5gJHzwlU+lT odAOAz/JC64AVgPbPrzDdMSItpGymWRdHvdRKFPRXFtz45UXQ/4mPSBSjWZGQU2F Ldt6XWD3y4za7VBZyK01Pm9N0Bdy7ge26kGCIv0VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKBRCxhuTYnW8ymUpqzxQ1tS7OAgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VkNTUzN2Q4LTU4ZGYtNDczNy04ZTYyLTY4YzVjZjk4ZTdjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28OQwDQYJKoZIhvcNAQELBQADggEBAEojgWMwdr/oCs6nxAqMxazywhW5 swien4yoXZk2RP7wpe4xe91OhdwVaw4KzOLYvrlD8UY21UkIS/WIj5j2kWWdjhY9 1s0qKNdNzOBFfKQVgHct0gmVtz3MnBeuyDgLCvIs7Zuvn8EmciSP8GXF0HFwdgyT dQuIX9cpeDTx6m8I3hwmS1N++KzOjBrg5/2CZrzX/cCFQgC3B8R2JFB8avojjs7d WMC67xgY3RUqB+MdTGfX5MVoR46eCAapHchPybh8HhiFZMydJU8rlj99ofOvB8Mw V+/VibMt6/veI2grrf12cnm8omXpobU8xjh9KBhyD9sx7vUcBcrGPEe7bOM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:07 2025 by rpki-client