$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa File: 33c001ad-e3cd-4c29-8dde-4c620faee346.roa (raw, json) Hash identifier: eAneKhqEGGGaIe9uTNcfa/hrtFF0s9XK6vgjp4ozhQg= Subject key identifier: 37:96:90:9A:09:2F:C9:BA:CB:C9:93:B0:CB:9B:86:AC:44:C8:0E:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EE9EC4AB7BF4DF020A20A9C5E60DDB927929F31 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa Signing time: Tue 22 Jul 2025 00:31:56 +0000 ROA not before: Tue 22 Jul 2025 00:31:56 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e9:ec:4a:b7:bf:4d:f0:20:a2:0a:9c:5e:60:dd:b9:27:92:9f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:31:56 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=cfa720f82fcd32c05198cd215eae4e1e4e90a302c2647723e2e4d3d0223107c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:58:33:73:5c:6d:96:95:d2:9e:99:ea:45: f2:23:8c:07:5e:30:b2:95:75:d3:e2:bd:a6:24:98: 1a:bb:2e:95:4d:ed:d8:e8:23:51:e3:f8:dc:07:e5: df:a2:4d:c1:25:8a:34:b6:9e:5a:2d:91:cf:95:a4: 19:9a:e9:f3:ba:10:7b:f7:f8:07:ef:f3:68:b9:e4: d3:de:57:03:e8:09:9f:f4:85:03:2c:a1:99:bd:0f: 6b:ca:72:65:3b:13:c5:e8:76:9f:0d:b5:4f:75:f0: a8:a7:34:ce:4b:ef:b8:f5:93:42:12:c5:fa:67:2f: 92:a4:9c:7e:ee:f9:33:66:87:db:48:94:3f:59:f7: 8f:70:44:35:87:23:10:45:0c:23:cd:04:61:96:09: 57:f7:c6:e0:d7:f1:fe:5c:85:6d:27:56:dd:b6:5f: 66:19:e8:98:e9:3b:02:9e:79:24:34:02:f4:f4:0a: 57:66:46:d8:07:16:2e:a8:44:6d:33:64:c2:c6:58: 61:29:a9:dc:ef:ce:69:65:b3:32:96:6e:cc:c6:20: 8c:3f:f1:04:c3:cf:54:b3:22:91:0a:0b:b9:39:b6: 13:c9:8c:57:14:66:eb:a9:9d:11:17:ee:c3:85:88: d5:69:d6:48:33:b0:52:2e:4b:07:32:59:27:d4:8c: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:96:90:9A:09:2F:C9:BA:CB:C9:93:B0:CB:9B:86:AC:44:C8:0E:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.160.0/21 Signature Algorithm: sha256WithRSAEncryption 72:27:d1:ea:d8:5f:cc:f3:80:4b:8a:a7:5b:a3:d1:82:ce:c0: 25:02:cd:f5:b3:43:ce:af:25:1f:25:22:64:c7:97:ed:ff:6a: 3f:09:6a:34:29:6e:4f:45:d9:aa:84:d2:64:47:63:53:94:ad: 82:78:79:ab:66:78:0e:69:72:2a:50:f0:c6:fa:3f:99:06:1d: 57:53:d6:28:1c:55:87:b0:d3:fa:5c:ad:62:93:b1:59:93:8a: e6:16:04:f1:82:e3:e1:8c:4f:9a:3c:1c:a1:d4:5f:5e:0a:d1: 3f:30:68:6a:9d:66:0b:cb:f2:08:12:9a:6e:1c:ca:66:59:c6: d8:e9:c7:67:96:78:63:a3:53:15:89:d6:e6:27:e8:72:0c:78: e7:4a:22:10:bb:e5:0a:25:27:0c:13:78:6b:fe:f8:19:96:5c: ab:91:94:e7:1a:ef:6c:26:93:e8:a2:fe:e0:0b:b3:bf:60:e7: dd:0d:1c:b1:b0:d6:4c:41:16:52:1c:4b:95:ec:93:c9:b6:16: 20:85:de:de:8c:32:66:52:ed:05:3d:24:c7:2c:bf:e3:b3:67: 1f:97:0c:25:50:5c:93:23:2c:55:cb:25:b4:51:58:04:9b:c6: b5:43:98:5a:d0:c3:14:0e:4a:29:89:44:2e:ae:56:a6:6c:49: 02:22:fc:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDunsSre/TfAgogqcXmDduSeSnzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAzMTU2WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmE3MjBmODJmY2QzMmMwNTE5OGNkMjE1ZWFlNGUxZTRl OTBhMzAyYzI2NDc3MjNlMmU0ZDNkMDIyMzEwN2M2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKklgzc1xtlpXSnpnqRfIjjAdeMLKVddPivaYkmBq7LpVN 7djoI1Hj+NwH5d+iTcElijS2nlotkc+VpBma6fO6EHv3+Afv82i55NPeVwPoCZ/0 hQMsoZm9D2vKcmU7E8Xodp8NtU918KinNM5L77j1k0ISxfpnL5KknH7u+TNmh9tI lD9Z949wRDWHIxBFDCPNBGGWCVf3xuDX8f5chW0nVt22X2YZ6JjpOwKeeSQ0AvT0 CldmRtgHFi6oRG0zZMLGWGEpqdzvzmllszKWbszGIIw/8QTDz1SzIpEKC7k5thPJ jFcUZuupnREX7sOFiNVp1kgzsFIuSwcyWSfUjI1PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN5aQmgkvybrLyZOwy5uGrETIDvgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYzAwMWFkLWUzY2QtNGMyOS04ZGRlLTRjNjIwZmFlZTM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMFrqAwDQYJKoZIhvcNAQELBQADggEBAHIn0erYX8zzgEuKp1uj0YLOwCUC zfWzQ86vJR8lImTHl+3/aj8JajQpbk9F2aqE0mRHY1OUrYJ4eatmeA5pcipQ8Mb6 P5kGHVdT1igcVYew0/pcrWKTsVmTiuYWBPGC4+GMT5o8HKHUX14K0T8waGqdZgvL 8ggSmm4cymZZxtjpx2eWeGOjUxWJ1uYn6HIMeOdKIhC75QolJwwTeGv++BmWXKuR lOca72wmk+ii/uALs79g590NHLGw1kxBFlIcS5Xsk8m2FiCF3t6MMmZS7QU9JMcs v+OzZx+XDCVQXJMjLFXLJbRRWASbxrVDmFrQwxQOSimJRC6uVqZsSQIi/DA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:54:33 2025 by rpki-client