$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa File: 202fa196-7fc4-42d7-9eda-ead645c20087.roa (raw, json) Hash identifier: XnWUOxKB/TnJTuMa2rGN6v58z1lLob0HzegZboG/3mU= Subject key identifier: 9A:7E:9A:D2:EB:46:9A:50:B2:21:70:CA:71:A1:74:5D:17:1B:A0:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72C7EBA220FB9E56F7BAE9A35DC76D29C5EC1178 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa Signing time: Fri 18 Jul 2025 00:52:03 +0000 ROA not before: Fri 18 Jul 2025 00:52:03 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:eb:a2:20:fb:9e:56:f7:ba:e9:a3:5d:c7:6d:29:c5:ec:11:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:52:03 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=cbebc456563c8a1b7a1901490fa16e9e65435088fbc11e92c4716431dc16d832, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:74:46:b2:43:93:f1:b4:18:a9:bf:40:79: bb:cd:05:7a:f7:88:82:a5:5e:e2:15:bc:f0:ad:bb: 1b:3e:08:29:bd:17:09:f9:2d:3d:b7:c7:cc:aa:d6: 7a:b6:38:31:0f:a2:ed:81:8d:2c:35:04:bd:f9:0f: ef:66:ad:4c:a3:a2:ad:a1:5f:c1:19:f5:3d:44:17: 5e:ec:13:86:8a:f4:12:8c:9f:3c:82:30:0e:55:13: 59:f2:4b:db:95:b8:c6:e3:d8:48:fe:fe:90:f2:8c: f6:80:42:63:4c:24:ea:7c:36:7b:c3:5d:f5:65:e7: a8:84:3c:7d:90:ab:1d:65:66:ae:dd:d6:cd:48:03: 2f:4a:af:5b:ce:89:f6:f9:c5:0e:38:ab:3f:32:ee: 52:9e:6d:12:bf:1f:32:f9:4f:f2:51:cf:30:ff:0d: 7c:1d:39:eb:60:5f:c1:15:00:cb:f9:d6:83:26:50: 17:f9:28:3a:e4:46:d8:21:14:af:c4:85:69:91:eb: 8a:e2:15:ce:c0:38:4a:45:b3:b4:cd:7b:2a:da:2d: 44:01:ec:66:ca:a2:93:ec:57:3f:a7:a6:38:3b:da: 46:8d:73:00:83:02:19:9b:53:be:c2:cf:c5:5d:6d: 9c:23:56:2f:a3:f4:c3:95:3e:8b:a1:78:9c:3a:17: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7E:9A:D2:EB:46:9A:50:B2:21:70:CA:71:A1:74:5D:17:1B:A0:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.160.0/24 Signature Algorithm: sha256WithRSAEncryption 84:04:08:a9:ef:0d:d8:50:b2:ce:d6:5c:b6:95:0f:1f:5e:64: 06:80:8b:91:bf:71:90:a1:a6:3a:f5:eb:91:17:f0:fa:63:5f: 6a:c4:8d:94:e4:91:7d:e1:bc:5b:99:49:da:c2:30:dd:a7:7a: aa:3b:ce:2d:fb:ec:87:2d:f9:60:70:7f:8c:3e:ff:a4:40:5c: 8e:ba:7c:d8:e9:94:b7:27:74:93:cf:66:32:6e:08:7b:5a:34: 3b:89:7f:00:7e:06:8c:13:82:86:09:07:03:c9:19:54:8d:8f: 82:c3:25:77:c8:cb:18:52:2b:33:c3:bc:be:f9:ce:0c:43:34: 50:f6:8d:2e:e9:e3:0b:83:9f:9b:30:e7:21:a7:54:6a:26:51: 1f:09:6e:bb:39:31:bd:e8:dd:9f:d5:8e:09:2d:e3:b5:c7:c0: fa:fd:c4:aa:28:cf:ea:c8:b6:ec:f5:72:77:cd:c2:ae:86:aa: 9e:ac:e7:32:38:81:92:4b:66:bc:dc:59:b6:c1:13:e4:74:46: ae:71:a2:ef:79:0f:eb:a1:ac:e2:3d:94:14:b3:4b:6a:11:65: b3:33:c9:95:26:1a:80:25:ec:9c:0d:89:58:bd:14:ba:1b:f4: 45:6a:91:de:37:83:70:d5:7a:a4:5b:ee:ae:05:16:d9:df:97: ee:ef:5d:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcsfroiD7nlb3uumjXcdtKcXsEXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDA1MjAzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmViYzQ1NjU2M2M4YTFiN2ExOTAxNDkwZmExNmU5ZTY1 NDM1MDg4ZmJjMTFlOTJjNDcxNjQzMWRjMTZkODMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCud3RGskOT8bQYqb9AebvNBXr3iIKlXuIVvPCtuxs+CCm9 Fwn5LT23x8yq1nq2ODEPou2BjSw1BL35D+9mrUyjoq2hX8EZ9T1EF17sE4aK9BKM nzyCMA5VE1nyS9uVuMbj2Ej+/pDyjPaAQmNMJOp8NnvDXfVl56iEPH2Qqx1lZq7d 1s1IAy9Kr1vOifb5xQ44qz8y7lKebRK/HzL5T/JRzzD/DXwdOetgX8EVAMv51oMm UBf5KDrkRtghFK/EhWmR64riFc7AOEpFs7TNeyraLUQB7GbKopPsVz+npjg72kaN cwCDAhmbU77Cz8VdbZwjVi+j9MOVPouheJw6F7gFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmn6a0utGmlCyIXDKcaF0XRcboL4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwMmZhMTk2LTdmYzQtNDJkNy05ZWRhLWVhZDY0NWMyMDA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM36AwDQYJKoZIhvcNAQELBQADggEBAIQECKnvDdhQss7WXLaVDx9eZAaA i5G/cZChpjr165EX8PpjX2rEjZTkkX3hvFuZSdrCMN2neqo7zi377Ict+WBwf4w+ /6RAXI66fNjplLcndJPPZjJuCHtaNDuJfwB+BowTgoYJBwPJGVSNj4LDJXfIyxhS KzPDvL75zgxDNFD2jS7p4wuDn5sw5yGnVGomUR8Jbrs5Mb3o3Z/Vjgkt47XHwPr9 xKooz+rItuz1cnfNwq6Gqp6s5zI4gZJLZrzcWbbBE+R0Rq5xou95D+uhrOI9lBSz S2oRZbMzyZUmGoAl7JwNiVi9FLob9EVqkd43g3DVeqRb7q4FFtnfl+7vXTM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:59 2025 by rpki-client