$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa File: 4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa (raw, json) Hash identifier: VgEiqh3uIzMc2gT1047KzSWLrthNXH4uUxFr214sSWQ= Subject key identifier: 0D:7C:7A:30:7A:34:00:C4:01:7E:89:61:F8:B5:46:BE:71:2B:2F:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54C4514992CD41E4C7818ED84557EAD8823CA92B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa Signing time: Tue 08 Jul 2025 00:41:24 +0000 ROA not before: Tue 08 Jul 2025 00:41:24 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 174.129.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c4:51:49:92:cd:41:e4:c7:81:8e:d8:45:57:ea:d8:82:3c:a9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:41:24 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d06e332c8b0e42f215deb450b7193a91362928151500879421f6c530d725684c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:6a:e4:11:b0:f2:c0:11:6c:27:67:59:6d: 81:dd:4a:bc:e5:69:fb:06:c0:1e:12:36:21:5d:be: 83:77:de:49:f5:22:0a:86:d5:fd:68:9a:fb:cf:02: e0:61:27:a9:c3:9b:ac:d8:a1:37:68:53:6a:16:32: 68:67:0e:95:89:14:43:37:a0:0b:50:d1:b8:40:c7: 6e:21:d0:d8:95:85:8a:37:3d:79:fa:25:3e:83:c2: 47:42:60:cc:5c:7c:48:5d:28:83:60:32:8e:71:19: 43:34:2b:2e:b8:f2:c6:b6:ae:2a:1a:88:e7:29:2b: 45:3f:b5:da:86:86:b2:c1:20:64:c8:19:a2:b3:b6: 8a:38:cd:ae:27:05:12:91:f9:84:b4:b5:7e:57:b2: 9c:43:f5:e0:ff:16:04:08:3a:4f:53:f6:5b:b1:71: e3:ae:d1:19:b1:09:60:10:a6:c3:ae:fd:f6:98:cb: 4a:b3:e1:f4:dc:39:60:51:17:9d:76:99:98:f1:a2: 07:d8:c6:0a:07:ce:f1:25:e4:6f:b2:54:ce:c1:17: d5:4f:4f:fb:e8:97:87:f5:55:3e:e0:9e:ca:dc:0f: 5a:89:35:2d:d0:33:7c:4c:61:cd:62:d9:5c:9b:d5: db:a7:d9:ba:15:ff:c2:b5:29:b2:a1:c0:db:ed:e1: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:7A:30:7A:34:00:C4:01:7E:89:61:F8:B5:46:BE:71:2B:2F:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.128.0/18 Signature Algorithm: sha256WithRSAEncryption 14:0d:0c:ef:63:9b:3b:31:78:0a:c8:30:45:ae:f6:49:7f:40: 68:77:53:22:dc:4c:01:82:12:4e:84:91:ab:4f:dc:6d:bd:7b: 81:44:30:0f:eb:d2:1b:18:19:d6:09:f1:ad:16:05:02:b9:fa: 9e:9a:55:e8:3f:a4:17:ec:4a:7a:4e:25:4f:c6:26:e6:c3:5e: 99:84:7c:98:92:44:be:98:2d:8a:cf:a4:e2:71:76:a6:b2:85: d9:29:36:54:a7:c7:ab:65:e4:16:c5:12:16:81:ff:a5:a8:a1: 0c:b3:5c:18:75:15:b0:fc:1f:5a:bb:8d:d1:52:90:e8:6e:bf: a6:f1:38:c2:2f:f8:a7:07:3c:db:68:31:1d:14:70:c4:41:1e: 99:92:23:2e:1f:eb:00:53:8c:74:10:8c:ef:e8:1b:c2:25:d5: e6:65:9c:ae:d3:a9:ef:83:fb:f6:94:c2:ca:29:14:1f:3d:92: be:20:ad:c7:bf:04:24:80:21:4a:16:3a:5f:1d:29:44:97:e3: 69:d5:b2:9e:e0:37:2e:69:f2:ec:d9:56:38:6d:16:9e:8f:76: 24:e8:6f:fd:52:f7:65:cf:48:e9:34:c4:cb:06:c8:1c:8a:b4: f2:a2:c1:0e:e8:18:94:b5:53:90:33:bf:07:d6:46:d9:78:af: 27:e2:56:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVMRRSZLNQeTHgY7YRVfq2II8qSswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDA0MTI0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDZlMzMyYzhiMGU0MmYyMTVkZWI0NTBiNzE5M2E5MTM2 MjkyODE1MTUwMDg3OTQyMWY2YzUzMGQ3MjU2ODRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVlGrkEbDywBFsJ2dZbYHdSrzlafsGwB4SNiFdvoN33kn1 IgqG1f1omvvPAuBhJ6nDm6zYoTdoU2oWMmhnDpWJFEM3oAtQ0bhAx24h0NiVhYo3 PXn6JT6DwkdCYMxcfEhdKINgMo5xGUM0Ky648sa2rioaiOcpK0U/tdqGhrLBIGTI GaKztoo4za4nBRKR+YS0tX5XspxD9eD/FgQIOk9T9luxceOu0RmxCWAQpsOu/faY y0qz4fTcOWBRF512mZjxogfYxgoHzvEl5G+yVM7BF9VPT/vol4f1VT7gnsrcD1qJ NS3QM3xMYc1i2Vyb1dun2boV/8K1KbKhwNvt4er/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDXx6MHo0AMQBfolh+LVGvnErLwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhOTM3NGI2LWE5OWMtNDdmZC04ZjQ3LTk3MmMxNDhmM2U4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaugYAwDQYJKoZIhvcNAQELBQADggEBABQNDO9jmzsxeArIMEWu9kl/QGh3 UyLcTAGCEk6EkatP3G29e4FEMA/r0hsYGdYJ8a0WBQK5+p6aVeg/pBfsSnpOJU/G JubDXpmEfJiSRL6YLYrPpOJxdqayhdkpNlSnx6tl5BbFEhaB/6WooQyzXBh1FbD8 H1q7jdFSkOhuv6bxOMIv+KcHPNtoMR0UcMRBHpmSIy4f6wBTjHQQjO/oG8Il1eZl nK7Tqe+D+/aUwsopFB89kr4grce/BCSAIUoWOl8dKUSX42nVsp7gNy5p8uzZVjht Fp6PdiTob/1S92XPSOk0xMsGyByKtPKiwQ7oGJS1U5AzvwfWRtl4ryfiVv8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:37:47 2025 by rpki-client