$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa File: 5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa (raw, json) Hash identifier: rsx8bk12n7A+6Q15qbFCJ1GgaDeohE9sMlmKIY6gkqU= Subject key identifier: 52:41:37:CE:77:48:31:54:21:C4:0E:36:A3:36:09:C5:BD:38:0D:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6187CC196420EA41DF8E44937AA7B63DD812FD41 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa Signing time: Tue 08 Jul 2025 17:40:25 +0000 ROA not before: Tue 08 Jul 2025 17:40:25 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:87:cc:19:64:20:ea:41:df:8e:44:93:7a:a7:b6:3d:d8:12:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:40:25 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=497da43ec50d9654c2f92f479c7be9e81ff3b4f18bf2e4655b3be3a167d65e53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:b1:a5:43:b1:1c:0a:ba:c5:7f:98:27:ec: cf:64:9b:b8:06:31:c6:3b:18:4c:0e:6c:54:a7:0b: b4:41:61:c4:10:f5:42:6e:77:02:4e:dc:41:62:1a: 08:ab:6c:f0:0d:09:fa:4b:08:1a:12:e7:69:d9:1b: 12:d1:d8:16:e5:a6:7a:e1:0a:03:ba:3b:71:50:b9: 74:d5:68:98:7f:3f:04:6f:36:4d:41:39:47:60:4b: 4a:14:94:a2:b5:5a:ca:48:6b:19:be:b1:9f:d0:b2: bc:de:b1:a0:fd:40:36:d2:a3:03:61:ef:28:3e:64: 1c:12:8f:b0:3b:91:b2:73:98:27:9e:14:37:f7:93: 8f:45:86:f5:1f:7f:99:0e:c4:b8:8a:ea:c5:04:83: da:47:f1:c2:da:dd:91:24:2a:ae:c3:a0:f0:b1:fa: 4f:f8:f5:ea:12:0e:34:1d:53:0c:ad:47:ae:a8:fa: 44:68:b9:d2:13:29:a2:0c:5c:ea:2d:78:c9:51:6a: aa:87:c1:6a:21:cf:aa:83:6c:91:7d:a9:71:6d:8a: b2:81:88:5a:ff:79:b6:29:11:72:0a:32:52:26:1f: 00:da:ef:53:8d:85:bc:a2:70:81:95:20:de:da:9d: c9:ad:e9:b6:c7:21:aa:f3:54:9d:eb:5d:ad:2e:0d: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:37:CE:77:48:31:54:21:C4:0E:36:A3:36:09:C5:BD:38:0D:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.104.0/21 Signature Algorithm: sha256WithRSAEncryption a4:2e:24:eb:9c:08:f1:65:0d:2c:3d:d0:d0:1f:0b:b1:20:81: ed:00:91:4a:d0:b1:54:0e:bb:91:f2:bb:3c:12:04:17:d9:c1: ac:41:91:d3:f5:0a:f5:59:70:77:4a:3e:0a:84:37:9a:95:9a: 1d:da:39:5b:0c:52:30:0f:1a:0b:f8:a3:12:0a:e6:e4:37:84: 3a:c6:3d:6a:dd:4b:53:f8:22:69:b7:72:0d:05:84:ab:2c:5a: 31:ab:a2:14:a3:36:a9:ac:9f:d7:78:30:63:a0:97:01:4e:d8: 78:96:88:cb:3f:1c:ad:91:f7:30:41:96:4c:bd:cc:81:86:ee: 53:64:17:25:18:9c:23:56:e2:6d:40:79:8e:f9:d4:5b:b8:ad: 16:ec:0b:11:74:32:2f:77:3c:75:e5:5a:c0:87:9e:e0:96:03: 81:33:1d:89:73:47:7b:d3:27:cc:c1:68:26:3a:b4:fd:c6:33: c9:2d:b8:6e:95:d2:00:7d:4f:80:ad:ed:80:d7:05:20:0c:3e: 46:b6:f9:ef:a9:52:8b:30:0a:eb:75:08:3f:11:90:8b:0f:40: bb:11:65:38:86:28:46:3c:29:68:99:f4:a3:e7:be:d4:02:ac: 0f:69:ea:c7:b1:98:dc:11:b5:13:5c:cb:64:03:21:61:ab:fc: aa:4d:6c:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYYfMGWQg6kHfjkSTeqe2PdgS/UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTc0MDI1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTdkYTQzZWM1MGQ5NjU0YzJmOTJmNDc5YzdiZTllODFm ZjNiNGYxOGJmMmU0NjU1YjNiZTNhMTY3ZDY1ZTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCktbGlQ7EcCrrFf5gn7M9km7gGMcY7GEwObFSnC7RBYcQQ 9UJudwJO3EFiGgirbPANCfpLCBoS52nZGxLR2BblpnrhCgO6O3FQuXTVaJh/PwRv Nk1BOUdgS0oUlKK1WspIaxm+sZ/QsrzesaD9QDbSowNh7yg+ZBwSj7A7kbJzmCee FDf3k49FhvUff5kOxLiK6sUEg9pH8cLa3ZEkKq7DoPCx+k/49eoSDjQdUwytR66o +kRoudITKaIMXOoteMlRaqqHwWohz6qDbJF9qXFtirKBiFr/ebYpEXIKMlImHwDa 71ONhbyicIGVIN7ancmt6bbHIarzVJ3rXa0uDSJdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUkE3zndIMVQhxA42ozYJxb04DWUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlZTNmOTY5LTc3NWYtNDU3MS1iODM0LTNmZmIzZTFkZDVmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2gwDQYJKoZIhvcNAQELBQADggEBAKQuJOucCPFlDSw90NAfC7Egge0A kUrQsVQOu5HyuzwSBBfZwaxBkdP1CvVZcHdKPgqEN5qVmh3aOVsMUjAPGgv4oxIK 5uQ3hDrGPWrdS1P4Imm3cg0FhKssWjGrohSjNqmsn9d4MGOglwFO2HiWiMs/HK2R 9zBBlky9zIGG7lNkFyUYnCNW4m1AeY751Fu4rRbsCxF0Mi93PHXlWsCHnuCWA4Ez HYlzR3vTJ8zBaCY6tP3GM8ktuG6V0gB9T4Ct7YDXBSAMPka2+e+pUoswCut1CD8R kIsPQLsRZTiGKEY8KWiZ9KPnvtQCrA9p6sexmNwRtRNcy2QDIWGr/KpNbFw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:57:06 2025 by rpki-client