$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa File: 9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa (raw, json) Hash identifier: 8xIRbKLAXUn5K877apTrRUuIvhvEdIkqGDNoBORm/b4= Subject key identifier: 5B:AC:F7:51:FD:A5:B6:F2:C1:AA:4A:5A:3E:49:67:1F:B6:B0:51:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51ECB5E899EC23F868649342E89899468DE801CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa Signing time: Fri 11 Jul 2025 00:51:14 +0000 ROA not before: Fri 11 Jul 2025 00:51:14 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.101.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:b5:e8:99:ec:23:f8:68:64:93:42:e8:98:99:46:8d:e8:01:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:51:14 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=681ee9aa6c6522b06bb12d57863b5248aad2b87b5d7daafecbff93b1a03315de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:12:b1:6c:8a:f5:6a:3c:09:cc:fa:98:98: dd:e3:99:3a:a4:b9:98:c4:04:f8:7a:d8:25:eb:11: eb:9b:34:1e:17:d0:ec:63:47:1e:ad:29:6b:44:0e: d9:9d:d2:6d:3b:b3:77:f5:f0:2b:9c:2c:67:24:e6: 7b:00:99:ee:88:97:df:15:1d:bd:e0:69:7b:64:c1: ed:d0:d9:3c:41:10:86:85:25:1d:bd:6e:34:75:ce: ba:fd:9c:7e:9a:da:5a:57:0b:5a:e0:92:35:58:7b: 5a:a6:a3:64:72:65:27:b1:dd:e1:c6:4b:f2:c5:42: eb:94:74:de:a4:bc:ef:2e:9e:b0:82:7e:cd:c3:8f: 7f:1a:9c:18:29:17:01:bc:c8:49:60:44:ff:44:dd: e8:07:48:08:b4:37:54:f7:68:0f:13:b8:2d:23:02: c6:dc:b0:be:50:a2:0a:fa:89:58:99:dc:62:e3:ef: d4:3e:d8:e1:39:22:33:35:5d:74:bb:df:52:64:d6: 39:e4:71:51:ba:76:a5:bf:32:60:3d:11:1e:79:45: a7:ef:5d:14:bb:20:fc:74:82:81:4a:42:36:82:98: 82:0c:19:83:72:47:ca:aa:da:23:3b:e5:de:f8:d7: dc:41:47:bc:8f:39:79:d0:5f:81:45:30:3f:59:38: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:F7:51:FD:A5:B6:F2:C1:AA:4A:5A:3E:49:67:1F:B6:B0:51:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.101.176.0/20 Signature Algorithm: sha256WithRSAEncryption 00:ce:ba:30:3f:73:14:fa:a7:99:bf:02:5b:09:ee:51:da:9c: cb:94:ef:9d:36:d9:42:8b:79:10:8f:69:83:60:c5:ae:f1:26: 24:f4:87:a1:3a:88:53:7c:23:49:29:77:e4:b5:bd:09:a9:64: 13:19:fd:56:7f:6d:6d:ed:37:ba:14:29:8e:8c:2c:a2:95:78: f7:56:5c:b8:35:14:2d:67:a0:8c:4e:c0:43:5b:fa:4b:3c:8b: 5a:2f:c2:b4:b5:5a:44:20:27:89:11:62:38:a1:8e:9f:bf:a0: a1:21:e9:aa:ef:cb:27:c8:71:c4:53:be:53:00:03:b4:fa:eb: 62:44:3a:be:52:28:80:31:99:e8:de:90:f1:63:db:73:18:cb: 91:58:07:2c:cd:20:4f:ff:aa:b2:ae:36:7e:d1:84:f5:dc:60: dc:42:60:6b:52:da:1c:3a:11:04:2a:de:57:c5:68:2a:da:79: 3b:0c:ec:01:b8:4b:d9:2e:32:57:17:b1:f6:94:ee:be:98:6d: e3:98:35:9c:bc:96:1f:dd:10:8a:c3:51:be:d2:e5:c1:fb:72: 90:c0:f3:9a:72:ae:b5:f1:75:6f:28:25:58:57:f1:0c:f1:e2: cb:d1:03:75:23:2e:97:c0:eb:19:56:55:5e:23:87:27:4f:ae: e3:92:13:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUey16JnsI/hoZJNC6JiZRo3oAcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA1MTE0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODFlZTlhYTZjNjUyMmIwNmJiMTJkNTc4NjNiNTI0OGFh ZDJiODdiNWQ3ZGFhZmVjYmZmOTNiMWEwMzMxNWRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMvRKxbIr1ajwJzPqYmN3jmTqkuZjEBPh62CXrEeubNB4X 0OxjRx6tKWtEDtmd0m07s3f18CucLGck5nsAme6Il98VHb3gaXtkwe3Q2TxBEIaF JR29bjR1zrr9nH6a2lpXC1rgkjVYe1qmo2RyZSex3eHGS/LFQuuUdN6kvO8unrCC fs3Dj38anBgpFwG8yElgRP9E3egHSAi0N1T3aA8TuC0jAsbcsL5Qogr6iViZ3GLj 79Q+2OE5IjM1XXS731Jk1jnkcVG6dqW/MmA9ER55RafvXRS7IPx0goFKQjaCmIIM GYNyR8qq2iM75d7419xBR7yPOXnQX4FFMD9ZOOPBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW6z3Uf2ltvLBqkpaPklnH7awUWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkOGUyNjhhLTk2MTctNGE1MC1iMWYyLTRjMzVkNjMyMmU0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARLZbAwDQYJKoZIhvcNAQELBQADggEBAADOujA/cxT6p5m/AlsJ7lHanMuU 75022UKLeRCPaYNgxa7xJiT0h6E6iFN8I0kpd+S1vQmpZBMZ/VZ/bW3tN7oUKY6M LKKVePdWXLg1FC1noIxOwENb+ks8i1ovwrS1WkQgJ4kRYjihjp+/oKEh6arvyyfI ccRTvlMAA7T662JEOr5SKIAxmejekPFj23MYy5FYByzNIE//qrKuNn7RhPXcYNxC YGtS2hw6EQQq3lfFaCraeTsM7AG4S9kuMlcXsfaU7r6YbeOYNZy8lh/dEIrDUb7S 5cH7cpDA85pyrrXxdW8oJVhX8Qzx4svRA3UjLpfA6xlWVV4jhydPruOSE2k= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:21 2025 by rpki-client