$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa File: 4509cfff-2756-4090-9163-f198714b099d.roa (raw, json) Hash identifier: h0QGOET2XQQC7X08+lDB9UjCOu8S2W8kNszWr0teh1w= Subject key identifier: C4:EC:2B:BA:02:FE:C0:2E:A2:94:4B:0D:6A:78:3C:65:FE:62:82:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38C7FBB37E915978A10038A77A6219F221CA5A32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa Signing time: Tue 08 Jul 2025 15:12:20 +0000 ROA not before: Tue 08 Jul 2025 15:12:20 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.51.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c7:fb:b3:7e:91:59:78:a1:00:38:a7:7a:62:19:f2:21:ca:5a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:12:20 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=3e8dd3313d15c568e31c3ca8448243a85bb4b6c3a8f5f40359e4baff29d201a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:68:cd:19:ef:34:78:be:56:15:ff:3b:49: 75:18:b5:6b:bc:35:8c:83:33:15:59:ec:ad:1d:22: 36:90:e7:8e:5a:be:de:ac:09:7d:33:15:e2:40:52: 71:a9:fa:3d:9f:7b:5e:19:5b:89:24:40:94:7e:ac: 10:df:ce:ed:d2:49:55:8b:e9:da:cd:78:22:f1:05: ea:3a:f8:c2:f0:8c:ca:30:5a:9f:9f:4e:63:5c:35: 45:ce:91:78:79:31:d7:3f:fa:4f:17:60:f8:e1:47: 5e:79:c0:86:22:2e:dc:bd:54:a2:22:b7:e1:23:55: 00:31:cb:0a:81:95:72:43:2a:71:98:be:c8:d2:df: 88:4f:dc:5b:04:76:d7:2d:09:ca:bc:e9:33:51:a3: 24:4b:f8:a5:70:4e:75:e5:6a:cf:ce:6d:30:cf:07: af:ea:02:ca:b6:4e:76:4b:93:fa:1f:fe:c8:78:2c: 73:28:5a:49:4d:f7:56:d9:2b:59:ad:f6:1d:2d:83: be:8c:4a:42:48:b6:fc:72:ac:12:30:30:09:56:05: 4b:85:36:00:f5:11:20:21:a4:7b:cb:01:ec:31:63: be:9b:33:84:29:74:f8:7f:4f:46:26:a5:9e:eb:7b: 87:dd:01:fa:83:f5:4b:99:99:e0:64:a5:ab:88:05: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:2B:BA:02:FE:C0:2E:A2:94:4B:0D:6A:78:3C:65:FE:62:82:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.51.30.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:8d:f9:a3:b1:2b:64:d7:9b:f6:30:ec:7b:1a:81:16:a4:a4: ad:b7:15:ed:a9:4f:2e:e7:1e:45:f4:99:68:2e:68:ed:59:3f: 05:52:ff:8d:ad:82:dc:dd:aa:32:69:6f:48:dd:fc:61:28:60: 1b:84:5c:11:ae:30:51:b1:78:ed:fe:e6:93:c8:45:c7:50:9e: 12:13:f9:65:e4:13:72:a3:bf:6e:52:2a:74:77:93:80:c3:77: 10:c9:a2:3f:af:0a:96:32:af:82:5f:7c:93:1f:c3:6a:d0:59: 16:27:3e:9e:ae:8d:df:e3:65:d2:03:3e:5e:11:03:48:d8:09: b2:56:24:46:7a:ae:92:d3:d0:59:e8:ea:93:ba:f1:ab:26:27: ef:70:0a:72:35:0b:4e:48:40:25:8b:a6:33:f4:fa:54:d3:06: d3:3e:8b:66:96:ab:0a:19:2c:db:23:01:cb:58:4a:26:f0:56: f0:ee:e3:df:bb:80:e6:2d:ef:78:01:07:39:87:a7:2c:80:98: 17:77:ea:0a:31:a5:9c:fc:94:98:43:d6:02:9a:c9:cc:b6:b2: 1d:5a:5c:9c:73:33:e5:ae:34:61:b2:69:f0:c1:bd:95:5b:7e: 0c:6c:b2:85:fa:74:d2:92:f1:81:bd:2d:da:8c:bc:97:53:df: 82:41:86:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOMf7s36RWXihADinemIZ8iHKWjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUxMjIwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZThkZDMzMTNkMTVjNTY4ZTMxYzNjYTg0NDgyNDNhODVi YjRiNmMzYThmNWY0MDM1OWU0YmFmZjI5ZDIwMWEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC80WjNGe80eL5WFf87SXUYtWu8NYyDMxVZ7K0dIjaQ545a vt6sCX0zFeJAUnGp+j2fe14ZW4kkQJR+rBDfzu3SSVWL6drNeCLxBeo6+MLwjMow Wp+fTmNcNUXOkXh5Mdc/+k8XYPjhR155wIYiLty9VKIit+EjVQAxywqBlXJDKnGY vsjS34hP3FsEdtctCcq86TNRoyRL+KVwTnXlas/ObTDPB6/qAsq2TnZLk/of/sh4 LHMoWklN91bZK1mt9h0tg76MSkJItvxyrBIwMAlWBUuFNgD1ESAhpHvLAewxY76b M4QpdPh/T0YmpZ7re4fdAfqD9UuZmeBkpauIBdnhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxOwrugL+wC6ilEsNang8Zf5igtowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MDljZmZmLTI3NTYtNDA5MC05MTYzLWYxOTg3MTRiMDk5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQMx4wDQYJKoZIhvcNAQELBQADggEBAFuN+aOxK2TXm/Yw7HsagRakpK23 Fe2pTy7nHkX0mWguaO1ZPwVS/42tgtzdqjJpb0jd/GEoYBuEXBGuMFGxeO3+5pPI RcdQnhIT+WXkE3Kjv25SKnR3k4DDdxDJoj+vCpYyr4JffJMfw2rQWRYnPp6ujd/j ZdIDPl4RA0jYCbJWJEZ6rpLT0Fno6pO68asmJ+9wCnI1C05IQCWLpjP0+lTTBtM+ i2aWqwoZLNsjActYSibwVvDu49+7gOYt73gBBzmHpyyAmBd36goxpZz8lJhD1gKa ycy2sh1aXJxzM+WuNGGyafDBvZVbfgxssoX6dNKS8YG9LdqMvJdT34JBhiU= -----END CERTIFICATE-----Generated at Thu Jul 24 12:19:06 2025 by rpki-client