$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa518aa-6564-426d-96b0-6a8cafb51670.roa File: 3aa518aa-6564-426d-96b0-6a8cafb51670.roa (raw, json) Hash identifier: v6DR8su0h8o0AkfeURHEsHGDmSIN4mJbrshQ1UQTJkE= Subject key identifier: 0F:BF:9C:AB:77:7E:43:9B:FF:6D:0D:4B:8E:B8:E6:05:52:78:34:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F261B81D65375243411AA82AED9C63BE283F510 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa518aa-6564-426d-96b0-6a8cafb51670.roa Signing time: Mon 07 Jul 2025 16:00:49 +0000 ROA not before: Mon 07 Jul 2025 16:00:49 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:1b:81:d6:53:75:24:34:11:aa:82:ae:d9:c6:3b:e2:83:f5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:00:49 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=cf48ba940cf6ab4365edf88147e902ecd18b4192007a3f2e6a6f2e2ab43d6a14, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:8c:d8:5e:b1:00:e6:cb:30:4a:6e:72:36: 65:14:a7:ac:52:1b:d3:00:dc:5f:46:7b:4c:54:48: c8:96:cc:6e:6f:20:67:1d:9c:ba:42:45:38:d0:f8: f1:9c:90:19:99:18:44:63:bc:5f:a8:3b:2b:90:cd: 62:a4:76:35:e5:38:52:a8:64:11:d2:c2:72:cd:60: 15:6d:ee:a0:fd:0a:c8:99:a5:4d:3f:02:29:20:34: b7:e4:00:15:8a:f2:de:99:6c:16:d0:cb:52:1f:fc: e7:91:25:0e:42:2c:20:df:ca:9c:77:c8:af:c8:df: f8:a7:7b:54:d9:eb:78:0e:97:aa:57:40:3b:58:a2: 40:ba:4f:0b:82:2f:37:0c:19:77:13:69:0f:5c:55: 78:d2:b1:3e:a8:1a:77:27:30:98:21:53:80:7e:48: 26:ae:d4:05:22:95:08:10:db:8a:9c:74:be:8b:79: 14:47:f7:66:20:bc:15:39:6f:ff:14:5f:41:d3:8b: 9a:97:1d:d7:4d:d3:93:f8:80:13:14:3c:2a:29:3b: 68:c4:73:b9:17:6f:aa:19:14:06:a3:dd:1c:c1:84: b4:87:dd:86:8e:f3:6d:b5:4b:58:d8:97:f3:bc:de: db:f2:42:e9:9c:dc:d8:37:2f:26:45:32:d7:eb:9f: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:9C:AB:77:7E:43:9B:FF:6D:0D:4B:8E:B8:E6:05:52:78:34:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa518aa-6564-426d-96b0-6a8cafb51670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:28:dc:71:9c:e2:23:af:68:25:63:79:95:17:ac:20:50:d9: e8:1e:ab:b6:a6:de:9e:c4:65:55:fe:ee:65:6a:af:f4:6f:27: 98:dd:de:49:e0:25:10:b7:b6:68:20:e6:1e:c7:5f:f8:15:63: 67:49:56:b4:54:3d:0b:8c:2b:e4:78:9b:42:70:a0:32:9f:f3: 3a:b5:81:d2:6e:60:1b:80:e2:6c:46:23:d0:d2:fc:34:06:5c: 74:a7:1b:2a:37:77:07:c5:9b:d2:8d:d0:ab:1a:52:fe:bf:0e: e8:8e:d5:f0:28:36:c8:6e:41:c9:0e:44:ee:77:92:f0:50:a9: 78:98:96:a4:3a:24:db:bf:d9:d0:fc:86:b1:43:3d:09:b3:41: 07:d5:83:d5:ac:7e:d8:41:c7:2f:ba:59:87:bd:18:c9:74:b9: 0f:9c:a4:21:e2:5f:3c:42:61:ba:2e:0b:29:61:a2:d5:1b:ea: 21:cc:12:78:97:cf:7c:a9:b8:98:07:1d:78:3e:a3:d4:53:76: bd:4a:97:b3:30:7f:4d:b2:58:84:59:43:76:43:ef:cb:b2:4e: 21:42:aa:49:d1:64:b4:67:e5:67:89:4b:24:cf:e7:80:a0:42: 2e:35:61:0b:ff:d7:15:d2:13:2c:ce:3a:1f:74:db:27:bf:41: c6:23:93:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXyYbgdZTdSQ0EaqCrtnGO+KD9RAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMDQ5WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjQ4YmE5NDBjZjZhYjQzNjVlZGY4ODE0N2U5MDJlY2Qx OGI0MTkyMDA3YTNmMmU2YTZmMmUyYWI0M2Q2YTE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5FYzYXrEA5sswSm5yNmUUp6xSG9MA3F9Ge0xUSMiWzG5v IGcdnLpCRTjQ+PGckBmZGERjvF+oOyuQzWKkdjXlOFKoZBHSwnLNYBVt7qD9CsiZ pU0/AikgNLfkABWK8t6ZbBbQy1If/OeRJQ5CLCDfypx3yK/I3/ine1TZ63gOl6pX QDtYokC6TwuCLzcMGXcTaQ9cVXjSsT6oGncnMJghU4B+SCau1AUilQgQ24qcdL6L eRRH92YgvBU5b/8UX0HTi5qXHddN05P4gBMUPCopO2jEc7kXb6oZFAaj3RzBhLSH 3YaO8221S1jYl/O83tvyQumc3Ng3LyZFMtfrn5WHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUD7+cq3d+Q5v/bQ1LjrjmBVJ4NMcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhYTUxOGFhLTY1NjQtNDI2ZC05NmIwLTZhOGNhZmI1MTY3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANwTANBgkqhkiG9w0BAQsFAAOCAQEAjyjccZziI69oJWN5lResIFDZ6B6r tqbensRlVf7uZWqv9G8nmN3eSeAlELe2aCDmHsdf+BVjZ0lWtFQ9C4wr5HibQnCg Mp/zOrWB0m5gG4DibEYj0NL8NAZcdKcbKjd3B8Wb0o3QqxpS/r8O6I7V8Cg2yG5B yQ5E7neS8FCpeJiWpDok27/Z0PyGsUM9CbNBB9WD1ax+2EHHL7pZh70YyXS5D5yk IeJfPEJhui4LKWGi1RvqIcwSeJfPfKm4mAcdeD6j1FN2vUqXszB/TbJYhFlDdkPv y7JOIUKqSdFktGflZ4lLJM/ngKBCLjVhC//XFdITLM46H3TbJ79BxiOTBg== -----END CERTIFICATE-----Generated at Wed Jul 23 02:18:21 2025 by rpki-client