$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa File: 584aba4e-d29c-4d06-8b73-b6262d5b3870.roa (raw, json) Hash identifier: xFkkONydqNauFUV2vCb8KpRn1QxWLaEigNhL1mZ1GK4= Subject key identifier: 67:EA:BE:E4:E8:EA:E3:01:A4:DA:BF:57:AA:83:AB:31:5C:76:AF:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0300CE1D781010A7EF2325D917B38BBF471E769F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa Signing time: Fri 18 Jul 2025 00:11:53 +0000 ROA not before: Fri 18 Jul 2025 00:11:53 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.70.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:00:ce:1d:78:10:10:a7:ef:23:25:d9:17:b3:8b:bf:47:1e:76:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:11:53 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=0c51c7bbc079ad7e3e39281c84ca1df74b4a4792d4f9bff794e60dd538a533e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:56:ee:53:d7:fa:d0:18:3e:15:ec:10:76: b1:09:97:76:01:19:60:39:40:e5:91:c3:9b:47:88: aa:a5:3d:e9:a7:51:f0:fd:e6:3c:d1:1c:02:25:8d: 97:c1:67:42:69:23:22:95:b0:83:82:bb:10:ba:66: 5b:bb:cd:e2:54:d1:b6:e9:25:d9:90:5b:f7:dc:10: 78:38:4a:61:32:5f:f5:7e:df:e2:f0:62:61:6f:40: 41:c4:b1:62:6a:17:9b:3d:7a:73:e1:1e:04:c9:7b: be:8d:7f:1f:34:af:02:5a:8b:d7:72:b4:58:d6:2b: 6a:88:55:a8:70:b0:4e:fb:45:20:fc:de:a4:d9:4b: b6:24:e3:ff:1d:1a:fb:fb:7d:b2:f1:b5:f5:8b:d8: c6:df:b5:4c:89:1f:90:df:00:90:38:f4:72:1e:f4: f6:64:6c:73:e3:12:7a:20:fd:a0:e5:b1:d1:b1:c0: 36:ea:97:41:5f:d9:01:81:09:cc:02:89:66:29:f0: 4c:23:89:10:da:21:d3:4e:f0:a6:3b:ba:a3:12:08: b0:13:60:3e:11:e7:fa:6d:a4:be:02:cc:0d:8a:76: 80:93:ff:79:10:a8:30:c9:47:70:85:f8:8e:92:62: b9:ba:37:09:59:11:05:d0:bc:18:1d:ba:a8:c1:c5: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EA:BE:E4:E8:EA:E3:01:A4:DA:BF:57:AA:83:AB:31:5C:76:AF:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.70.72.0/21 Signature Algorithm: sha256WithRSAEncryption 93:c4:0e:c5:c5:34:0d:2f:73:0f:b3:46:89:8c:c5:fe:bc:a0: 2e:18:72:32:51:06:d6:c9:64:de:c4:c4:da:5a:03:ea:1e:9d: d2:83:be:98:35:ed:2f:cf:17:21:b8:49:d6:3a:08:f0:2c:95: 4c:c1:6c:54:f8:6c:9f:93:c2:3f:d7:08:fa:e5:3f:fe:7c:0f: 79:ac:c7:ae:4e:7d:1d:27:df:50:e2:49:20:c9:47:97:49:78: d4:0d:32:48:85:c5:cc:64:9f:3b:4e:11:7c:b0:e2:47:9d:e0: 2b:a7:4a:ff:9a:aa:3f:7a:af:92:74:c6:60:f5:a9:df:9a:fd: 23:89:41:5c:60:1e:6e:c2:f9:d1:d5:2f:44:e8:9b:4a:f6:28: 60:01:03:3c:15:72:d6:cf:62:52:32:a3:14:7a:ce:c8:a7:f2: 28:e8:b5:ca:da:4c:3f:09:c3:65:4f:54:7a:ad:f4:25:15:5f: 89:47:7a:3f:e5:7f:69:2f:11:70:a1:5f:48:88:c7:54:95:58: 2e:19:d7:b3:eb:e6:21:3a:29:7d:1b:76:56:b1:99:4b:3c:00: cb:91:17:82:3e:34:b5:80:08:bf:15:d2:c6:69:c9:f6:e3:ac: 0c:6c:be:60:7f:ba:90:d8:dd:f3:29:61:d2:6c:4b:51:15:bb: 9b:42:85:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAwDOHXgQEKfvIyXZF7OLv0cedp8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAxMTUzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzUxYzdiYmMwNzlhZDdlM2UzOTI4MWM4NGNhMWRmNzRi NGE0NzkyZDRmOWJmZjc5NGU2MGRkNTM4YTUzM2U3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO4VbuU9f60Bg+FewQdrEJl3YBGWA5QOWRw5tHiKqlPemn UfD95jzRHAIljZfBZ0JpIyKVsIOCuxC6Zlu7zeJU0bbpJdmQW/fcEHg4SmEyX/V+ 3+LwYmFvQEHEsWJqF5s9enPhHgTJe76Nfx80rwJai9dytFjWK2qIVahwsE77RSD8 3qTZS7Yk4/8dGvv7fbLxtfWL2MbftUyJH5DfAJA49HIe9PZkbHPjEnog/aDlsdGx wDbql0Ff2QGBCcwCiWYp8EwjiRDaIdNO8KY7uqMSCLATYD4R5/ptpL4CzA2KdoCT /3kQqDDJR3CF+I6SYrm6NwlZEQXQvBgduqjBxfKJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ+q+5Ojq4wGk2r9XqoOrMVx2rwQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4NGFiYTRlLWQyOWMtNGQwNi04YjczLWI2MjYyZDViMzg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQRkgwDQYJKoZIhvcNAQELBQADggEBAJPEDsXFNA0vcw+zRomMxf68oC4Y cjJRBtbJZN7ExNpaA+oendKDvpg17S/PFyG4SdY6CPAslUzBbFT4bJ+Twj/XCPrl P/58D3msx65OfR0n31DiSSDJR5dJeNQNMkiFxcxknztOEXyw4ked4CunSv+aqj96 r5J0xmD1qd+a/SOJQVxgHm7C+dHVL0Tom0r2KGABAzwVctbPYlIyoxR6zsin8ijo tcraTD8Jw2VPVHqt9CUVX4lHej/lf2kvEXChX0iIx1SVWC4Z17Pr5iE6KX0bdlax mUs8AMuRF4I+NLWACL8V0sZpyfbjrAxsvmB/upDY3fMpYdJsS1EVu5tChb8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:06 2025 by rpki-client