$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95add0c9-7527-4fb6-90a3-ac5d9312df04.roa File: 95add0c9-7527-4fb6-90a3-ac5d9312df04.roa (raw, json) Hash identifier: 72F9iW/ADQ1uut6KHoYV5R/yNzAUcNoCwQlKIFOH2QM= Subject key identifier: 4B:FF:CA:70:BB:27:F9:21:48:FA:1B:E7:E5:D2:27:04:2C:82:45:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19D8419D361BDDE5DCA28599DEE20F9CCC2C8B27 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95add0c9-7527-4fb6-90a3-ac5d9312df04.roa Signing time: Wed 02 Jul 2025 00:20:57 +0000 ROA not before: Wed 02 Jul 2025 00:20:57 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 16.64.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d8:41:9d:36:1b:dd:e5:dc:a2:85:99:de:e2:0f:9c:cc:2c:8b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:20:57 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=6d11dffb7ceba136c05a3e03f19ceffb8da63305f80a97a07085f0ddf6ff1dbb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:2f:31:40:d7:05:64:ee:de:62:4f:9d:24: a5:34:18:14:ac:b9:07:23:e9:8a:7f:d2:f7:89:7b: 86:ee:59:f2:ea:d9:65:1b:18:81:aa:55:fb:b5:fc: 21:1e:c8:d7:6e:a3:64:ad:cd:01:a5:b3:0e:3e:6e: 6c:ef:30:b2:64:41:a0:5c:c5:be:cf:11:5a:42:f1: 79:eb:aa:24:8f:b8:07:94:1e:65:0e:9e:f8:5a:73: 29:97:35:5e:bc:df:e8:fa:d7:7c:fe:20:12:73:56: 5f:05:a6:31:db:45:f0:7f:ec:ca:7d:a9:12:6e:b6: 08:f3:24:32:ca:c2:cf:fe:d2:ff:21:92:42:bf:82: ae:00:a6:11:e1:f0:25:b5:a9:11:21:c9:a6:a8:dd: 0d:02:07:be:cd:28:04:81:3e:6f:b5:88:b9:b3:a2: 9d:92:98:90:c2:8b:aa:41:12:19:0b:1d:2a:9a:26: 09:e1:67:c0:f6:4a:27:77:e4:c1:c8:3e:a7:15:1f: 97:b4:90:b3:11:76:ce:47:51:3a:22:3d:0b:25:3f: 74:6c:74:a7:13:2c:b9:eb:5f:38:2f:42:ae:f7:54: 9d:53:80:cd:30:22:3a:9a:b3:29:c4:b0:f2:72:08: e9:b9:fa:45:af:ae:40:9c:fd:69:a9:e7:33:9e:07: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:CA:70:BB:27:F9:21:48:FA:1B:E7:E5:D2:27:04:2C:82:45:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95add0c9-7527-4fb6-90a3-ac5d9312df04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.64.36.0/23 Signature Algorithm: sha256WithRSAEncryption ce:6e:32:7f:0d:f3:87:4c:58:1f:cc:fd:ee:41:ab:2b:03:40: 2c:e2:e9:e4:b1:b1:65:f5:7e:68:3e:bf:28:73:36:32:19:e3: 88:5e:0a:9e:64:62:26:34:3c:43:ea:3b:b0:42:61:61:48:d0: 13:73:cf:00:92:bc:bf:2e:f9:62:e8:4d:7d:ba:75:b4:31:a8: 2a:11:ab:69:39:e5:13:59:ec:4d:87:26:ee:54:5d:4f:1a:cc: c9:08:16:a3:79:72:6e:b4:d1:87:b8:aa:86:e7:42:b1:f1:4e: bd:fd:ba:18:32:6f:86:f4:0c:72:d8:85:c6:ce:ae:e9:f3:cf: 39:b8:db:54:05:b4:c7:c9:a8:1d:e6:9b:42:00:ad:29:84:b6: 1c:4c:b7:d9:b6:5c:16:bf:c8:df:5e:3f:b4:b7:86:10:28:ae: 79:73:1d:fb:4a:65:0c:27:84:3c:88:3b:33:8d:56:19:62:a3: 0d:38:cf:1d:d7:57:a6:fe:28:0f:8a:8d:06:b3:16:5c:4b:90: 76:92:37:c5:3b:77:06:2c:5e:f5:a7:0d:49:e8:71:d4:06:fe: 96:4f:ed:c7:44:a4:28:85:c6:d9:ec:f8:45:df:e6:16:c1:a2: e4:b2:4d:c5:b9:4e:9f:c9:ae:5e:95:23:8a:f1:68:5b:dd:4d: 67:a2:cb:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGdhBnTYb3eXcooWZ3uIPnMwsiycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAyMDU3WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDExZGZmYjdjZWJhMTM2YzA1YTNlMDNmMTljZWZmYjhk YTYzMzA1ZjgwYTk3YTA3MDg1ZjBkZGY2ZmYxZGJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKby8xQNcFZO7eYk+dJKU0GBSsuQcj6Yp/0veJe4buWfLq 2WUbGIGqVfu1/CEeyNduo2StzQGlsw4+bmzvMLJkQaBcxb7PEVpC8XnrqiSPuAeU HmUOnvhacymXNV683+j613z+IBJzVl8FpjHbRfB/7Mp9qRJutgjzJDLKws/+0v8h kkK/gq4AphHh8CW1qREhyaao3Q0CB77NKASBPm+1iLmzop2SmJDCi6pBEhkLHSqa JgnhZ8D2Sid35MHIPqcVH5e0kLMRds5HUToiPQslP3RsdKcTLLnrXzgvQq73VJ1T gM0wIjqasynEsPJyCOm5+kWvrkCc/Wmp5zOeB5oXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS//KcLsn+SFI+hvn5dInBCyCRfgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1YWRkMGM5LTc1MjctNGZiNi05MGEzLWFjNWQ5MzEyZGYwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQQCQwDQYJKoZIhvcNAQELBQADggEBAM5uMn8N84dMWB/M/e5BqysDQCzi 6eSxsWX1fmg+vyhzNjIZ44heCp5kYiY0PEPqO7BCYWFI0BNzzwCSvL8u+WLoTX26 dbQxqCoRq2k55RNZ7E2HJu5UXU8azMkIFqN5cm600Ye4qobnQrHxTr39uhgyb4b0 DHLYhcbOrunzzzm421QFtMfJqB3mm0IArSmEthxMt9m2XBa/yN9eP7S3hhAornlz HftKZQwnhDyIOzONVhliow04zx3XV6b+KA+KjQazFlxLkHaSN8U7dwYsXvWnDUno cdQG/pZP7cdEpCiFxtns+EXf5hbBouSyTcW5Tp/Jrl6VI4rxaFvdTWeiyx8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:52:32 2025 by rpki-client