$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa File: 4644ff0b-fedf-419f-93c4-1665a93ad50b.roa (raw, json) Hash identifier: nCPWTsvbn1Z/5YdmCmwinY2JCtIVhTSfpB1lWWSRm0s= Subject key identifier: 5F:46:6B:9C:51:D6:40:DE:58:53:86:38:FF:43:29:17:28:A0:45:0B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13B6717B842DE21C53CBD69693325A58F404419F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa Signing time: Mon 30 Jun 2025 15:41:46 +0000 ROA not before: Mon 30 Jun 2025 15:41:46 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b6:71:7b:84:2d:e2:1c:53:cb:d6:96:93:32:5a:58:f4:04:41:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:41:46 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=80a1e6b04f95a81ff63746781a8e04780904f74b562bd36dd34a58340f359185, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:73:cf:e4:94:d8:59:ef:42:f0:ab:fd:35: 4f:71:5e:33:eb:05:b3:33:7d:a5:d8:7e:e8:6a:d8: 27:7d:61:09:06:59:59:d4:35:b0:9a:1d:00:72:3f: b8:a4:d5:7d:78:4f:12:3e:ad:ff:c3:37:06:95:61: 91:7b:50:30:b8:eb:6f:ba:59:4f:e8:ac:e5:e1:ca: 20:c2:03:4c:a9:16:21:73:88:78:85:91:f9:54:cb: be:6a:84:e6:c7:ff:c5:c0:42:4b:ec:e3:57:4a:43: 4b:2e:f8:2c:94:6e:38:8f:09:20:26:ef:cc:46:ca: 4b:d9:1c:89:a8:20:da:3c:ee:3a:37:bf:4b:9c:59: 98:63:02:f3:d1:9c:1e:66:3e:41:d9:bb:5f:ba:e6: 3b:21:7b:29:36:2b:2b:d5:76:8c:09:70:d8:68:eb: d0:ce:65:bb:53:af:e6:eb:d6:db:d8:87:3f:8a:03: 55:06:6c:b7:94:f2:90:c9:46:49:45:44:f8:5f:3e: b7:15:c0:72:d2:bb:f3:0f:c2:ff:93:4f:f7:6e:a9: 92:24:3f:11:3a:4e:61:f6:27:d9:fc:b9:03:91:d0: b6:3b:88:dd:25:74:cc:80:33:28:a1:9a:60:db:9a: e5:d0:52:b9:82:86:c7:55:e4:99:fc:3a:6d:c6:7d: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:6B:9C:51:D6:40:DE:58:53:86:38:FF:43:29:17:28:A0:45:0B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.80.0/21 Signature Algorithm: sha256WithRSAEncryption 20:66:70:1a:ff:24:b3:d0:ba:7f:e6:0b:98:e6:9a:20:a9:66: d1:67:73:62:45:80:e0:e7:ed:55:33:fe:df:ff:51:d5:43:84: c2:8f:8d:f4:fd:e0:6f:8e:4f:77:37:72:64:1b:e5:6c:ba:01: e1:27:8a:ba:1f:b2:b3:4d:2c:03:7b:74:31:84:e6:0a:19:09: c9:ef:c7:3e:25:54:d0:57:30:f0:68:0c:83:02:b5:f0:37:7e: 96:65:45:c2:df:14:d2:f2:cc:75:0e:5f:d4:58:e3:7d:34:16: 48:c2:f3:4a:6e:de:a0:19:96:9f:89:17:40:70:2d:8a:db:74: 5a:82:9f:ef:1b:10:d8:a6:99:77:3b:cf:93:3c:a9:8f:64:8d: db:dd:39:7d:e7:15:3e:65:7b:52:33:fc:a4:cf:31:68:cb:7e: c6:23:f2:82:5c:6c:04:3b:e4:aa:ff:4c:87:59:82:4e:3e:25: 7e:5e:46:02:b2:8f:36:95:d3:39:b2:71:ac:e7:a2:e8:55:f3: 92:ea:4c:48:2f:a5:ce:49:a6:c0:fd:85:59:e4:2b:88:4f:bf: d1:00:ee:c0:a2:1b:8c:13:0c:a0:03:36:85:53:fe:ce:b2:4b: c8:34:2f:90:23:ab:98:23:91:bf:77:c2:f6:4b:e3:38:c3:48: 1e:86:7a:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE7Zxe4Qt4hxTy9aWkzJaWPQEQZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTU0MTQ2WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGExZTZiMDRmOTVhODFmZjYzNzQ2NzgxYThlMDQ3ODA5 MDRmNzRiNTYyYmQzNmRkMzRhNTgzNDBmMzU5MTg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSAXPP5JTYWe9C8Kv9NU9xXjPrBbMzfaXYfuhq2Cd9YQkG WVnUNbCaHQByP7ik1X14TxI+rf/DNwaVYZF7UDC462+6WU/orOXhyiDCA0ypFiFz iHiFkflUy75qhObH/8XAQkvs41dKQ0su+CyUbjiPCSAm78xGykvZHImoINo87jo3 v0ucWZhjAvPRnB5mPkHZu1+65jsheyk2KyvVdowJcNho69DOZbtTr+br1tvYhz+K A1UGbLeU8pDJRklFRPhfPrcVwHLSu/MPwv+TT/duqZIkPxE6TmH2J9n8uQOR0LY7 iN0ldMyAMyihmmDbmuXQUrmChsdV5Jn8Om3GfSFZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX0ZrnFHWQN5YU4Y4/0MpFyigRQswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NDRmZjBiLWZlZGYtNDE5Zi05M2M0LTE2NjVhOTNhZDUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl1AwDQYJKoZIhvcNAQELBQADggEBACBmcBr/JLPQun/mC5jmmiCpZtFn c2JFgODn7VUz/t//UdVDhMKPjfT94G+OT3c3cmQb5Wy6AeEnirofsrNNLAN7dDGE 5goZCcnvxz4lVNBXMPBoDIMCtfA3fpZlRcLfFNLyzHUOX9RY4300FkjC80pu3qAZ lp+JF0BwLYrbdFqCn+8bENimmXc7z5M8qY9kjdvdOX3nFT5le1Iz/KTPMWjLfsYj 8oJcbAQ75Kr/TIdZgk4+JX5eRgKyjzaV0zmycaznouhV85LqTEgvpc5JpsD9hVnk K4hPv9EA7sCiG4wTDKADNoVT/s6yS8g0L5Ajq5gjkb93wvZL4zjDSB6Gejc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:00 2025 by rpki-client