$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa File: 235ba01b-bc16-4244-a93f-06a145b0732c.roa (raw, json) Hash identifier: Cpc3J0+vqQKUaQjhyJFeVt4aBOy20rbd+YuxROUTeqk= Subject key identifier: DA:8A:CE:11:FD:4E:63:F2:EF:1C:1C:87:61:43:A1:40:68:62:4E:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 715422E39D8ACB7D809251A132FF14754ED938F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa Signing time: Mon 07 Jul 2025 16:10:34 +0000 ROA not before: Mon 07 Jul 2025 16:10:34 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 147.106.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:22:e3:9d:8a:cb:7d:80:92:51:a1:32:ff:14:75:4e:d9:38:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:10:34 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=f5a3d8866b91a02e6c0087a331f939f651855674df484745dbece6189f970d32, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:9c:e3:8c:92:16:17:26:d6:5b:8a:a3:3f: 5e:46:80:8c:1a:85:16:64:40:c9:de:77:ec:7c:22: 59:46:f6:61:f8:30:03:7c:7a:cb:3f:14:5c:b0:d3: b0:56:76:be:4f:85:b1:c7:0d:6f:b9:38:a1:96:4f: 41:1f:a5:bf:46:d8:5a:ce:d8:fd:5a:c6:61:1e:19: fa:b3:e1:5e:72:1a:0f:08:e5:45:4e:f4:b2:43:e7: 71:9f:59:2c:53:b0:c8:0f:74:4b:97:5b:1c:67:bd: b4:0f:db:06:65:95:7d:ec:cb:b5:19:2b:6b:94:11: 98:b3:73:60:c2:6d:ee:b0:95:23:ad:c6:0e:f0:7d: f0:e2:39:34:bb:40:b7:70:6a:fc:8c:bd:12:eb:22: 7d:0b:95:b7:b4:0f:f4:66:4a:22:04:ec:77:2c:3d: 08:3c:b8:8e:47:a1:0d:81:16:76:8b:06:a8:ae:48: 97:45:c6:9a:74:d0:96:ce:0f:be:4a:fc:40:d7:14: 22:d1:02:bf:0b:1e:5e:5d:95:5e:ac:89:2b:44:db: 35:65:89:f8:bb:96:0a:56:1f:c2:76:80:57:9e:a1: 1f:32:61:a9:81:b1:40:dc:66:29:bd:24:14:82:a2: cc:6d:dd:42:19:6d:45:5b:4c:81:3d:1e:28:e7:9a: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8A:CE:11:FD:4E:63:F2:EF:1C:1C:87:61:43:A1:40:68:62:4E:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.106.128.0/18 Signature Algorithm: sha256WithRSAEncryption 09:82:ad:a8:18:ea:df:4e:81:f8:ec:9f:5c:28:8a:27:99:7a: 7c:72:95:b0:5c:2c:c3:06:8c:8e:e4:5b:84:ad:10:e7:6b:55: be:33:41:df:4c:f8:5c:84:a2:d2:03:ad:83:ab:a4:9d:23:5b: 17:31:92:3f:53:00:71:ce:89:4a:e2:d4:28:d8:ec:f5:6a:f7: 05:41:4b:f0:64:dc:2a:2b:91:db:45:68:2f:de:2c:f7:1b:30: fd:07:3c:e5:fe:b3:8b:b1:33:27:a6:4e:f6:07:e6:ca:08:25: 54:b4:67:4c:0b:bf:03:53:23:19:a4:50:28:a4:70:97:e3:5e: d9:72:2d:90:74:65:a8:a6:a4:27:44:7c:d7:c4:9d:38:30:cb: 3c:f2:21:bc:5e:3c:69:f4:a7:c8:48:ec:de:e9:1e:dc:17:40: 91:fe:ed:d7:c5:5b:33:84:24:8f:b5:24:91:05:17:7c:54:ca: 5c:79:bc:65:f1:ef:4c:66:66:ab:70:72:96:64:b4:f7:85:ef: d6:03:c6:8c:f7:04:7e:53:ce:61:38:f6:8f:0d:50:9a:b2:cf: a5:e7:d3:27:16:8f:de:8a:d3:50:f7:27:04:70:5d:84:c3:70: ff:e7:99:ac:a6:51:93:6e:87:63:80:48:48:6a:1c:be:ab:24: 37:5c:8d:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcVQi452Ky32AklGhMv8UdU7ZOPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYxMDM0WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWEzZDg4NjZiOTFhMDJlNmMwMDg3YTMzMWY5MzlmNjUx ODU1Njc0ZGY0ODQ3NDVkYmVjZTYxODlmOTcwZDMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClYZzjjJIWFybWW4qjP15GgIwahRZkQMned+x8IllG9mH4 MAN8ess/FFyw07BWdr5PhbHHDW+5OKGWT0Efpb9G2FrO2P1axmEeGfqz4V5yGg8I 5UVO9LJD53GfWSxTsMgPdEuXWxxnvbQP2wZllX3sy7UZK2uUEZizc2DCbe6wlSOt xg7wffDiOTS7QLdwavyMvRLrIn0Llbe0D/RmSiIE7HcsPQg8uI5HoQ2BFnaLBqiu SJdFxpp00JbOD75K/EDXFCLRAr8LHl5dlV6siStE2zVlifi7lgpWH8J2gFeeoR8y YamBsUDcZim9JBSCosxt3UIZbUVbTIE9Hijnmou7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2orOEf1OY/LvHByHYUOhQGhiTrUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNWJhMDFiLWJjMTYtNDI0NC1hOTNmLTA2YTE0NWIwNzMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaTaoAwDQYJKoZIhvcNAQELBQADggEBAAmCragY6t9Ogfjsn1woiieZenxy lbBcLMMGjI7kW4StEOdrVb4zQd9M+FyEotIDrYOrpJ0jWxcxkj9TAHHOiUri1CjY 7PVq9wVBS/Bk3CorkdtFaC/eLPcbMP0HPOX+s4uxMyemTvYH5soIJVS0Z0wLvwNT IxmkUCikcJfjXtlyLZB0ZaimpCdEfNfEnTgwyzzyIbxePGn0p8hI7N7pHtwXQJH+ 7dfFWzOEJI+1JJEFF3xUylx5vGXx70xmZqtwcpZktPeF79YDxoz3BH5TzmE49o8N UJqyz6Xn0ycWj96K01D3JwRwXYTDcP/nmaymUZNuh2OASEhqHL6rJDdcjUg= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:22 2025 by rpki-client