$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa File: 35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa (raw, json) Hash identifier: 2zGxyrujjSg+h8wuV3R39lWdPGMr+YJ3BYQv+SzhD88= Subject key identifier: BC:8D:6E:B1:C4:8B:DF:33:96:97:A9:B9:E2:1A:A5:F3:00:1B:43:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78C5AC23BBFC8AEB148AB44B37C6E7442141DCCA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa Signing time: Mon 30 Jun 2025 15:31:48 +0000 ROA not before: Mon 30 Jun 2025 15:31:48 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c5:ac:23:bb:fc:8a:eb:14:8a:b4:4b:37:c6:e7:44:21:41:dc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:31:48 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=3361817fb665a657194812284cd2c3d667e8b97583404b15d6729f5fc3fbde80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:b6:e1:11:6c:77:24:3e:fb:4e:20:6a:9d: e2:86:0e:31:49:f1:dd:c1:6a:0b:11:19:cd:db:29: 6e:c8:bf:05:64:1b:67:ce:75:1c:c1:d9:36:b4:ad: 4d:61:44:ff:0c:85:6a:d2:92:35:e5:b2:40:da:9f: ab:ad:68:db:e1:89:cd:9e:b2:f0:e8:90:f0:df:a0: 1d:1f:94:b5:f8:c5:ce:30:43:16:89:3f:68:96:a1: 30:06:84:22:b5:5d:bc:fb:4c:ed:84:43:5a:fe:74: 53:6b:39:4e:cb:aa:60:b2:a6:ee:d5:36:38:d7:b4: 9a:03:6d:58:bc:a7:b5:d3:f6:37:07:48:68:52:a2: 50:36:99:7d:84:42:3b:c8:1e:f2:bf:a6:8e:67:43: e7:f8:0e:b4:fd:e9:52:9e:ad:63:4c:ff:86:0c:0c: cd:13:8c:40:01:44:c0:86:7e:38:9f:6b:d8:36:1a: 29:a6:b8:03:bd:cd:df:97:3f:f5:6e:e2:34:9a:f1: d5:2d:5c:45:d7:b7:a2:a2:01:a3:0b:b5:e5:95:08: 0f:e5:0e:0c:cb:13:4c:ef:25:33:09:aa:b8:71:17: 4c:35:ac:5a:34:4b:c0:ea:12:e7:8b:68:ef:f0:40: 0b:2f:b7:6f:87:8c:d1:bf:0e:00:45:d8:c0:ad:ac: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8D:6E:B1:C4:8B:DF:33:96:97:A9:B9:E2:1A:A5:F3:00:1B:43:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.178.0/24 Signature Algorithm: sha256WithRSAEncryption 72:4c:f5:7e:d3:6b:f6:3d:fa:88:38:6c:76:54:d6:ee:e9:59: 6a:fb:25:1e:6b:fd:3a:57:ca:9d:82:54:52:7d:47:0a:20:d9: da:14:c1:c1:75:e9:89:e4:48:5e:e0:25:d1:51:31:52:fe:27: b6:c5:14:6d:88:43:52:f1:11:34:82:32:01:4e:40:de:99:7d: 16:5b:6b:bf:3f:1f:8e:64:3e:04:01:7a:3f:1c:24:43:e5:ae: ac:0f:33:31:93:60:51:6c:63:0a:78:cf:f0:79:37:e6:11:f0: 95:15:3a:63:c2:2c:4d:a2:2e:58:12:f1:2d:8f:e1:12:78:b9: 1b:67:29:3e:f1:b7:4e:ac:a1:95:f9:4e:c5:9c:38:5f:9d:9a: cc:28:20:e9:eb:23:11:c2:f0:1b:4d:ea:a8:ad:23:e1:9b:3a: 9d:e8:19:a0:68:f6:62:38:b3:a8:26:ed:82:ec:0b:2d:ce:12: c8:bf:09:55:30:7f:d4:70:cf:ac:78:6b:d4:16:38:9d:d4:38: 1f:2e:07:03:b3:b5:27:fa:92:31:b5:1a:68:8f:f8:2d:ad:ef: 09:59:97:b1:c2:e3:aa:79:12:84:6c:5e:e0:d2:2e:88:63:00: a7:ae:6b:d7:60:21:f2:a3:64:c3:22:39:dc:e4:b5:25:7a:65: c4:bd:39:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeMWsI7v8iusUirRLN8bnRCFB3MowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUzMTQ4WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzYxODE3ZmI2NjVhNjU3MTk0ODEyMjg0Y2QyYzNkNjY3 ZThiOTc1ODM0MDRiMTVkNjcyOWY1ZmMzZmJkZTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjt7bhEWx3JD77TiBqneKGDjFJ8d3BagsRGc3bKW7IvwVk G2fOdRzB2Ta0rU1hRP8MhWrSkjXlskDan6utaNvhic2esvDokPDfoB0flLX4xc4w QxaJP2iWoTAGhCK1Xbz7TO2EQ1r+dFNrOU7LqmCypu7VNjjXtJoDbVi8p7XT9jcH SGhSolA2mX2EQjvIHvK/po5nQ+f4DrT96VKerWNM/4YMDM0TjEABRMCGfjifa9g2 GimmuAO9zd+XP/Vu4jSa8dUtXEXXt6KiAaMLteWVCA/lDgzLE0zvJTMJqrhxF0w1 rFo0S8DqEueLaO/wQAsvt2+HjNG/DgBF2MCtrBTVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvI1uscSL3zOWl6m54hql8wAbQ8swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1ZDJkNWI5LTNlMjItNGVhMy04MzRiLTU5NDJhYTNhZjBkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7IwDQYJKoZIhvcNAQELBQADggEBAHJM9X7Ta/Y9+og4bHZU1u7pWWr7 JR5r/TpXyp2CVFJ9Rwog2doUwcF16YnkSF7gJdFRMVL+J7bFFG2IQ1LxETSCMgFO QN6ZfRZba78/H45kPgQBej8cJEPlrqwPMzGTYFFsYwp4z/B5N+YR8JUVOmPCLE2i LlgS8S2P4RJ4uRtnKT7xt06soZX5TsWcOF+dmswoIOnrIxHC8BtN6qitI+GbOp3o GaBo9mI4s6gm7YLsCy3OEsi/CVUwf9Rwz6x4a9QWOJ3UOB8uBwOztSf6kjG1GmiP +C2t7wlZl7HC46p5EoRsXuDSLohjAKeua9dgIfKjZMMiOdzktSV6ZcS9OY8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:14 2025 by rpki-client