$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa File: 468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa (raw, json) Hash identifier: e1feminjeyKTBKk9YtQANRwPCTksdGA+b4dXE570/Us= Subject key identifier: 69:31:F5:C2:94:0F:9F:FF:DB:91:5A:01:44:4C:94:8D:56:F4:37:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FAC4FC324085A25B1BE084C921DC584C79DBA08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa Signing time: Fri 11 Jul 2025 00:42:04 +0000 ROA not before: Fri 11 Jul 2025 00:42:04 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 70.232.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ac:4f:c3:24:08:5a:25:b1:be:08:4c:92:1d:c5:84:c7:9d:ba:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:42:04 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ff2f7f141b15ab82a804ed1c3806a58ca6998ac161eefe1d7e4e61326885c569, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:f0:2e:e8:77:2a:46:15:d1:c0:bb:43:eb: bc:b9:24:e7:3c:84:0b:9e:70:09:f1:44:c0:be:b0: c1:58:2d:4b:55:8c:5d:2c:5e:19:4a:11:31:d6:a5: 32:4d:02:ad:11:00:ab:5b:ef:98:49:5f:43:83:c9: 11:63:c3:99:38:4d:fa:ba:2d:7d:bd:f5:2d:e3:e8: 4f:c3:66:04:05:2c:67:5f:dd:da:33:8b:7e:9e:55: 79:d6:f5:d1:9f:2a:8d:56:fd:01:f1:33:13:af:bc: d7:6b:46:82:bc:3e:e8:a7:20:79:89:52:15:33:c8: 98:e5:95:b1:0d:ed:ef:88:1d:07:3b:2d:1c:bc:dc: fe:99:e0:ea:f0:4d:09:e7:18:93:72:dd:33:44:66: 99:4d:69:7d:59:b9:9a:36:a4:85:0a:ad:ac:d6:8c: 56:11:a8:ec:b7:8b:de:72:36:0c:46:6f:bb:d0:04: c5:c6:ec:7c:14:07:27:bd:8b:58:c5:c2:bf:f9:c7: 36:1a:72:ee:76:c2:9e:88:38:40:45:dc:f6:98:39: 86:22:52:0d:10:fd:40:88:06:54:c4:34:0e:95:e7: 35:01:14:94:8c:aa:af:9b:f9:b2:c8:b5:3a:66:cb: 3c:5b:4a:82:1b:5f:19:80:bf:8b:b7:8c:50:4e:08: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:F5:C2:94:0F:9F:FF:DB:91:5A:01:44:4C:94:8D:56:F4:37:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.92.0/22 Signature Algorithm: sha256WithRSAEncryption d0:2e:86:63:02:46:65:c9:48:1e:f5:7a:83:ab:e0:08:8a:9b: 54:a7:ef:57:b1:04:46:a5:a7:10:6c:c9:3c:9f:b7:f4:d1:29: e0:ac:de:73:dd:4f:97:67:f3:c7:16:59:56:7f:21:55:36:6a: 15:cb:f0:a3:e1:41:4e:e2:23:94:ce:63:a7:5e:4c:2b:e1:c8: 24:c3:bf:b0:a3:04:8c:51:c3:1f:3d:fd:7c:d4:a1:2a:f3:5d: db:1c:8b:79:f7:5e:91:31:90:7e:a8:3b:04:a1:69:86:b8:5b: b6:19:3b:7e:e8:4b:10:94:a8:47:b9:6f:23:e5:51:51:68:1b: 94:ad:12:11:b8:0d:ab:c5:95:5c:1b:2a:7b:27:50:78:54:cc: 12:90:5c:59:2e:3c:27:8e:06:9e:f0:c4:f3:46:b3:5d:5d:b6: 9b:a7:81:cb:97:a6:b3:e5:ad:a6:be:47:c0:3c:5f:82:89:8b: 15:a1:a8:cf:ab:15:5c:a7:28:fe:94:a8:d7:9a:b8:75:57:04: d8:b1:a6:18:c6:ac:51:20:7f:72:06:59:48:f6:c3:01:a6:4c: 50:27:c8:40:42:81:dd:d1:c7:ff:06:e2:18:51:54:8d:ac:6b: 5c:34:9f:a4:b5:aa:00:ed:d6:e6:c1:c9:c8:e7:06:20:24:66: e8:3c:6f:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP6xPwyQIWiWxvghMkh3FhMeduggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MjA0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjJmN2YxNDFiMTVhYjgyYTgwNGVkMWMzODA2YTU4Y2E2 OTk4YWMxNjFlZWZlMWQ3ZTRlNjEzMjY4ODVjNTY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtHvAu6HcqRhXRwLtD67y5JOc8hAuecAnxRMC+sMFYLUtV jF0sXhlKETHWpTJNAq0RAKtb75hJX0ODyRFjw5k4Tfq6LX299S3j6E/DZgQFLGdf 3dozi36eVXnW9dGfKo1W/QHxMxOvvNdrRoK8PuinIHmJUhUzyJjllbEN7e+IHQc7 LRy83P6Z4OrwTQnnGJNy3TNEZplNaX1ZuZo2pIUKrazWjFYRqOy3i95yNgxGb7vQ BMXG7HwUBye9i1jFwr/5xzYacu52wp6IOEBF3PaYOYYiUg0Q/UCIBlTENA6V5zUB FJSMqq+b+bLItTpmyzxbSoIbXxmAv4u3jFBOCHJ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaTH1wpQPn//bkVoBREyUjVb0N9YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2OGQxZTAzLWQ3NzktNDU3YS1hNTFlLTNlOTJiNmYyY2JlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJG6FwwDQYJKoZIhvcNAQELBQADggEBANAuhmMCRmXJSB71eoOr4AiKm1Sn 71exBEalpxBsyTyft/TRKeCs3nPdT5dn88cWWVZ/IVU2ahXL8KPhQU7iI5TOY6de TCvhyCTDv7CjBIxRwx89/XzUoSrzXdsci3n3XpExkH6oOwShaYa4W7YZO37oSxCU qEe5byPlUVFoG5StEhG4DavFlVwbKnsnUHhUzBKQXFkuPCeOBp7wxPNGs11dtpun gcuXprPlraa+R8A8X4KJixWhqM+rFVynKP6UqNeauHVXBNixphjGrFEgf3IGWUj2 wwGmTFAnyEBCgd3Rx/8G4hhRVI2sa1w0n6S1qgDt1ubBycjnBiAkZug8bwc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:06 2025 by rpki-client