$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa File: 59637748-f9e2-4c44-86a6-89a1c02f3f23.roa (raw, json) Hash identifier: 6Xpers1SmWa3Uk5E8aXCM8m+UplTlw5jeQDB7QifBew= Subject key identifier: 9B:7C:91:E2:DD:F1:57:D3:ED:53:CF:C5:CF:BC:1E:07:2D:78:C4:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70E4B6B2CFDC40F6395DBC98D3120DB2D0183E6E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa Signing time: Tue 22 Jul 2025 00:31:18 +0000 ROA not before: Tue 22 Jul 2025 00:31:18 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.203.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e4:b6:b2:cf:dc:40:f6:39:5d:bc:98:d3:12:0d:b2:d0:18:3e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:31:18 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=416f40803ffa2b327af816aa4d122ea474e0bb075b70726a4b0c541f2f9654da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:13:0c:5c:42:24:89:44:14:7a:83:7f:52: bd:8c:a5:b2:da:88:bc:cc:76:09:9a:07:f1:12:b7: da:4e:0c:12:56:04:3f:0c:f0:8b:e1:08:93:40:0f: 17:49:27:c7:91:5a:f1:2a:cc:f8:1c:c1:dc:ac:d5: 83:55:f8:bf:f1:1d:e9:47:8c:1f:53:2e:48:d6:6b: 4c:7b:46:66:8e:a6:8b:86:60:1d:56:d3:24:38:32: e2:92:92:df:3e:8d:a0:51:c9:37:22:28:fa:98:b6: c6:5b:2c:a2:62:c1:1b:13:08:f3:a6:ae:57:55:c2: 8d:8b:4e:c4:43:c9:1d:54:9b:4c:7e:cd:e1:c3:53: 7d:7f:e9:09:b5:46:91:e0:ef:d7:18:94:de:ca:b3: 03:3d:c8:04:cd:fc:d8:57:1d:f4:4e:a4:5c:37:d5: 6d:62:80:95:69:b1:da:0f:6c:c3:f0:53:eb:56:d2: 2b:9b:5e:c3:07:b4:f5:ea:dc:5b:d2:ca:5d:18:79: 6d:a6:1c:2e:52:4e:68:ee:4c:02:e1:8e:53:e5:da: 84:ca:f1:e5:f0:56:cb:68:99:39:ad:e5:bd:f1:59: 04:69:31:02:49:a1:86:b6:b0:7a:a9:14:97:12:c4: b3:01:88:25:6f:66:d2:1b:48:b2:61:75:9e:73:42: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:91:E2:DD:F1:57:D3:ED:53:CF:C5:CF:BC:1E:07:2D:78:C4:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.203.128.0/23 Signature Algorithm: sha256WithRSAEncryption 91:ad:ba:02:56:7b:66:d8:6a:55:b0:ff:51:92:75:bb:65:91: 65:ca:67:f8:ce:d9:ae:fa:bc:df:db:d1:f9:cf:66:24:85:43: 7c:15:27:85:27:01:98:9c:3c:cf:6f:b8:4d:08:2c:d5:a3:a8: d6:e3:b3:d3:a4:2f:ba:3d:b5:70:fc:05:fa:0f:8f:29:83:22: 1c:db:f2:8d:73:8b:4e:69:13:a1:d4:f8:16:d5:88:5d:4d:04: 07:92:7b:6c:3c:1d:e9:f6:4d:57:5e:df:ea:83:6d:ad:d7:8e: a7:94:92:11:8f:70:89:27:48:00:0f:d6:29:8b:a5:d9:23:12: a2:37:00:89:33:2f:e2:b3:20:45:a1:bf:25:37:29:02:c3:64: 47:95:21:34:74:37:f8:6a:7e:c1:1f:fa:de:f1:cd:a0:b1:b3: 52:9e:5a:b8:77:b0:0d:e5:d6:35:65:98:04:b6:e3:f4:cf:b7: 50:0f:8e:0e:43:bc:5c:b3:c2:06:fa:7d:c0:62:36:1b:a9:9d: 02:a9:02:1e:e8:34:4d:1a:01:d9:37:16:41:1a:9c:78:af:87: 67:c8:ab:2b:03:44:bc:6e:fd:60:82:a6:74:c7:67:24:0c:8b: e3:61:bd:dd:c6:19:ca:e3:77:a7:97:3e:6f:de:da:4c:6e:48: fb:f3:67:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcOS2ss/cQPY5XbyY0xINstAYPm4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAzMTE4WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTZmNDA4MDNmZmEyYjMyN2FmODE2YWE0ZDEyMmVhNDc0 ZTBiYjA3NWI3MDcyNmE0YjBjNTQxZjJmOTY1NGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqtBMMXEIkiUQUeoN/Ur2MpbLaiLzMdgmaB/ESt9pODBJW BD8M8IvhCJNADxdJJ8eRWvEqzPgcwdys1YNV+L/xHelHjB9TLkjWa0x7RmaOpouG YB1W0yQ4MuKSkt8+jaBRyTciKPqYtsZbLKJiwRsTCPOmrldVwo2LTsRDyR1Um0x+ zeHDU31/6Qm1RpHg79cYlN7KswM9yATN/NhXHfROpFw31W1igJVpsdoPbMPwU+tW 0iubXsMHtPXq3FvSyl0YeW2mHC5STmjuTALhjlPl2oTK8eXwVstomTmt5b3xWQRp MQJJoYa2sHqpFJcSxLMBiCVvZtIbSLJhdZ5zQgO/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm3yR4t3xV9PtU8/Fz7weBy14xLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5NjM3NzQ4LWY5ZTItNGM0NC04NmE2LTg5YTFjMDJmM2YyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEsy4AwDQYJKoZIhvcNAQELBQADggEBAJGtugJWe2bYalWw/1GSdbtlkWXK Z/jO2a76vN/b0fnPZiSFQ3wVJ4UnAZicPM9vuE0ILNWjqNbjs9OkL7o9tXD8BfoP jymDIhzb8o1zi05pE6HU+BbViF1NBAeSe2w8Hen2TVde3+qDba3XjqeUkhGPcIkn SAAP1imLpdkjEqI3AIkzL+KzIEWhvyU3KQLDZEeVITR0N/hqfsEf+t7xzaCxs1Ke Wrh3sA3l1jVlmAS24/TPt1APjg5DvFyzwgb6fcBiNhupnQKpAh7oNE0aAdk3FkEa nHivh2fIqysDRLxu/WCCpnTHZyQMi+Nhvd3GGcrjd6eXPm/e2kxuSPvzZ3A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:18 2025 by rpki-client