$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa File: 477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa (raw, json) Hash identifier: a9jZNYsb9Z5tVgyvQS+LljNZMnRP5rfJrrUtQLccPLY= Subject key identifier: 44:73:DE:53:A7:C8:24:C1:A1:FF:A2:D7:6E:62:FE:93:99:0C:B8:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3474510DF1DBA3EAD934D8ADA6BAFBBCCA3556D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa Signing time: Fri 18 Jul 2025 00:01:22 +0000 ROA not before: Fri 18 Jul 2025 00:01:22 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:74:51:0d:f1:db:a3:ea:d9:34:d8:ad:a6:ba:fb:bc:ca:35:56:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:01:22 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=4be9f38d6d16803f1e391877702b14576e184d896240e6f92fca8d07972270b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:26:18:c2:c5:55:24:fe:fb:22:f7:f0:b9: 97:1f:76:0d:e0:fd:fb:55:e0:b8:16:a0:01:c8:3e: f6:ff:99:27:30:40:d9:bf:28:4e:fa:26:e8:4f:4a: fb:0f:13:b7:9b:8a:ac:9f:e5:8c:2b:22:83:11:25: 6f:2c:b2:9d:f4:9f:43:74:bc:1c:a3:47:75:c2:8f: b9:74:7b:79:e2:b1:9e:7b:77:f4:87:9d:12:76:11: 94:3a:9b:2f:30:7c:58:02:20:83:f3:b8:5e:d0:2b: ca:29:47:cb:18:91:7b:ce:a1:84:d6:1d:89:0d:9e: 76:ef:fa:f1:a9:cf:bc:89:c0:84:e0:25:62:43:51: b4:96:34:0d:8f:22:e0:a6:95:f0:48:8f:54:12:03: 52:fe:07:d1:cc:f9:3f:4d:9d:6d:27:45:33:7d:85: e9:67:97:7c:ee:b0:05:7b:f7:26:0e:46:b0:a8:82: ae:51:a5:73:9e:26:5c:7e:37:1d:22:be:7c:81:32: 10:e6:6f:12:4d:51:ea:a8:1c:b3:d0:50:9c:b0:3a: b7:56:b8:b6:49:c6:f6:92:f1:c6:08:48:65:d0:a2: e0:19:31:a5:43:ae:78:2c:8f:2e:95:44:d7:92:fe: 67:48:31:66:2a:83:72:e2:3d:0a:43:3d:80:d9:c1: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:73:DE:53:A7:C8:24:C1:A1:FF:A2:D7:6E:62:FE:93:99:0C:B8:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:70:00:fb:cc:d9:59:a7:e5:be:de:b7:38:2f:57:d7:ee:08: a6:9b:71:a3:a3:ce:89:71:77:02:e0:12:1f:32:68:7f:69:20: e0:61:0e:7f:ec:65:46:06:07:45:85:4f:22:0e:9c:ff:87:b3: ff:02:4d:c5:21:22:55:dd:3e:2e:d4:1e:29:46:9a:25:ed:f3: d0:e9:36:70:a9:5d:60:66:a1:fa:3e:4c:2f:00:60:8c:6b:e4: 63:2f:bd:7b:e5:52:25:15:5c:3c:17:13:80:c9:fe:50:5a:d0: 15:27:cb:bc:36:7a:30:20:74:94:59:75:26:ac:27:99:e9:cd: 08:b0:c5:26:cc:2d:bc:14:be:9a:db:fa:d7:e2:b7:f9:ed:9d: 13:99:67:0e:80:23:30:33:be:32:92:c8:64:7c:3c:58:02:b4: 70:44:d0:75:21:2c:3f:36:92:cc:da:d4:11:4d:51:d6:8f:c1: 5b:5d:ad:26:91:eb:f0:91:21:32:11:44:bf:9f:31:a5:72:4d: 58:d6:46:4b:0f:9f:93:0b:60:03:29:19:e1:47:4d:ba:d4:69: 95:5d:89:73:77:47:39:26:62:e7:63:9f:ce:fc:9b:64:53:fb: bd:7b:a3:22:67:ac:c6:34:1b:79:c5:b9:49:b2:ea:3c:6c:66: 58:1c:68:09 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNHRRDfHbo+rZNNitprr7vMo1VtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAwMTIyWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmU5ZjM4ZDZkMTY4MDNmMWUzOTE4Nzc3MDJiMTQ1NzZl MTg0ZDg5NjI0MGU2ZjkyZmNhOGQwNzk3MjI3MGI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtPiYYwsVVJP77IvfwuZcfdg3g/ftV4LgWoAHIPvb/mScw QNm/KE76JuhPSvsPE7ebiqyf5YwrIoMRJW8ssp30n0N0vByjR3XCj7l0e3nisZ57 d/SHnRJ2EZQ6my8wfFgCIIPzuF7QK8opR8sYkXvOoYTWHYkNnnbv+vGpz7yJwITg JWJDUbSWNA2PIuCmlfBIj1QSA1L+B9HM+T9NnW0nRTN9helnl3zusAV79yYORrCo gq5RpXOeJlx+Nx0ivnyBMhDmbxJNUeqoHLPQUJywOrdWuLZJxvaS8cYISGXQouAZ MaVDrngsjy6VRNeS/mdIMWYqg3LiPQpDPYDZwRdBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURHPeU6fIJMGh/6LXbmL+k5kMuH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3Nzc3M2ZhLWYzZTctNDI3Mi05YjY0LWVlMGQzYmFjYWI2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBo4zANBgkqhkiG9w0BAQsFAAOCAQEAfHAA+8zZWaflvt63OC9X1+4Ipptx o6POiXF3AuASHzJof2kg4GEOf+xlRgYHRYVPIg6c/4ez/wJNxSEiVd0+LtQeKUaa Je3z0Ok2cKldYGah+j5MLwBgjGvkYy+9e+VSJRVcPBcTgMn+UFrQFSfLvDZ6MCB0 lFl1JqwnmenNCLDFJswtvBS+mtv61+K3+e2dE5lnDoAjMDO+MpLIZHw8WAK0cETQ dSEsPzaSzNrUEU1R1o/BW12tJpHr8JEhMhFEv58xpXJNWNZGSw+fkwtgAykZ4UdN utRplV2Jc3dHOSZi52OfzvybZFP7vXujImesxjQbecW5SbLqPGxmWBxoCQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:00 2025 by rpki-client