$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa File: 4a7e5f14-963c-416e-9fab-cfb42881503e.roa (raw, json) Hash identifier: fpWgMGzBM/FtiN3XxIVT9SIWT5bo0cPlb/D9uMuL57c= Subject key identifier: 1D:94:64:F1:E0:B5:62:2C:B6:F7:74:9E:5F:DF:30:98:FD:92:50:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B462ECB02AA828A8B027A6078A991ACFB644C32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa Signing time: Fri 11 Jul 2025 15:01:03 +0000 ROA not before: Fri 11 Jul 2025 15:01:03 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.80.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:46:2e:cb:02:aa:82:8a:8b:02:7a:60:78:a9:91:ac:fb:64:4c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 15:01:03 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=1ded8ed780aaf5db01587f9bdb7000e2909f998d2a6ecac339949a994e9a80bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:92:0c:58:b0:5a:74:59:56:8d:5b:74:bb: 14:ac:f1:f0:86:5f:0a:65:9f:3d:76:c9:e9:90:eb: c2:08:fc:64:53:c4:c8:45:6f:43:34:18:6a:76:20: 6e:ea:89:96:a4:14:ad:5f:6b:17:1d:e9:45:f2:4e: 62:a5:42:6f:42:14:95:62:f2:c5:3b:5b:ab:80:b8: bd:2f:c0:e7:6c:86:72:b5:45:d9:e2:11:d5:43:05: 32:9e:10:8b:a6:13:83:05:ff:38:58:d2:53:48:67: 26:3a:75:62:30:d3:37:f1:67:a4:23:09:45:fb:75: fe:90:03:6d:68:1e:77:2c:09:76:bb:0c:d8:f6:50: f9:86:65:73:be:ba:e6:ac:4e:7c:e7:9b:e6:3c:be: ea:6c:5b:82:b1:6a:68:bb:0f:89:d4:16:e1:6d:3e: 17:f2:d9:16:4a:85:8a:27:59:3d:e1:3a:79:1f:eb: 61:17:1f:dc:2a:f3:2c:c4:5a:8f:5f:08:77:63:c7: 75:90:93:d3:03:e2:a3:35:1b:1e:6f:aa:98:3b:eb: 20:f7:01:e7:2e:3c:44:2a:09:2e:4a:0d:49:a6:45: 05:88:26:df:75:1a:87:f3:66:11:a1:6a:55:35:d0: bd:4d:f4:62:02:43:eb:f6:b8:41:cd:20:5f:75:1b: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:94:64:F1:E0:B5:62:2C:B6:F7:74:9E:5F:DF:30:98:FD:92:50:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5b:95:28:df:91:7d:2a:bd:1c:c6:83:1e:e1:78:dc:ad:1e:b8: 2d:9d:79:20:9e:87:9c:4d:20:d7:c8:00:3f:ab:2d:8f:2b:6b: 2b:27:35:9f:11:c2:22:9c:97:90:b8:4f:e5:89:0f:32:e8:bf: ab:d0:a6:98:23:89:41:8d:92:a6:fd:5b:db:e3:98:4b:16:57: e9:dc:5e:09:cd:70:60:5f:bb:d3:04:ce:94:69:e8:6c:1a:13: 1e:5d:16:eb:b4:e0:16:8e:76:ac:b6:bf:c3:fa:97:f8:a2:45: b1:14:ff:d5:bc:bf:a5:15:20:29:17:19:db:84:2f:ae:f9:8b: 40:30:46:b7:e4:d2:4a:30:7b:06:d9:8e:8d:c7:36:0f:3b:93: ea:5a:05:6d:e3:f5:ee:2d:6a:93:c8:6b:e9:22:ce:c1:d7:bd: 34:2c:87:44:f7:63:6e:14:ee:d9:4f:f6:0e:4b:e9:e0:2b:6c: da:71:c5:50:20:f5:d1:64:39:1c:ab:64:59:46:63:db:35:3e: 7d:cb:bc:f2:77:3b:76:f3:5c:0f:8a:76:56:56:16:70:59:72: e7:8f:27:7e:a4:2c:bf:7f:f8:e8:b0:cd:1d:16:98:85:60:ec: ae:cf:6a:38:39:ce:68:9c:98:73:06:8b:a4:76:92:c2:4c:50: e3:f6:9c:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK0YuywKqgoqLAnpgeKmRrPtkTDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMTUwMTAzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGVkOGVkNzgwYWFmNWRiMDE1ODdmOWJkYjcwMDBlMjkw OWY5OThkMmE2ZWNhYzMzOTk0OWE5OTRlOWE4MGJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClkpIMWLBadFlWjVt0uxSs8fCGXwplnz12yemQ68II/GRT xMhFb0M0GGp2IG7qiZakFK1faxcd6UXyTmKlQm9CFJVi8sU7W6uAuL0vwOdshnK1 RdniEdVDBTKeEIumE4MF/zhY0lNIZyY6dWIw0zfxZ6QjCUX7df6QA21oHncsCXa7 DNj2UPmGZXO+uuasTnznm+Y8vupsW4Kxami7D4nUFuFtPhfy2RZKhYonWT3hOnkf 62EXH9wq8yzEWo9fCHdjx3WQk9MD4qM1Gx5vqpg76yD3AecuPEQqCS5KDUmmRQWI Jt91GofzZhGhalU10L1N9GICQ+v2uEHNIF91G1rNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHZRk8eC1Yiy293SeX98wmP2SUEswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhN2U1ZjE0LTk2M2MtNDE2ZS05ZmFiLWNmYjQyODgxNTAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFjUDANBgkqhkiG9w0BAQsFAAOCAQEAW5Uo35F9Kr0cxoMe4XjcrR64LZ15 IJ6HnE0g18gAP6stjytrKyc1nxHCIpyXkLhP5YkPMui/q9CmmCOJQY2Spv1b2+OY SxZX6dxeCc1wYF+70wTOlGnobBoTHl0W67TgFo52rLa/w/qX+KJFsRT/1by/pRUg KRcZ24QvrvmLQDBGt+TSSjB7BtmOjcc2DzuT6loFbeP17i1qk8hr6SLOwde9NCyH RPdjbhTu2U/2Dkvp4Cts2nHFUCD10WQ5HKtkWUZj2zU+fcu88nc7dvNcD4p2VlYW cFly548nfqQsv3/46LDNHRaYhWDsrs9qODnOaJyYcwaLpHaSwkxQ4/acSg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:26 2025 by rpki-client