$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa File: a07397dc-3051-482a-957d-ed3a4c2859b6.roa (raw, json) Hash identifier: O+qd3OP4ZjMdmeJ6w7/FmIjqFwf7xZ8XLb9z4lTnsN0= Subject key identifier: 99:81:9E:C8:9F:C1:2B:D2:B2:D7:88:05:45:DD:0E:69:70:EE:50:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3515C28D6E34878779115DC084BFDAF7E075BAB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa Signing time: Fri 11 Jul 2025 15:00:16 +0000 ROA not before: Fri 11 Jul 2025 15:00:16 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.80.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:15:c2:8d:6e:34:87:87:79:11:5d:c0:84:bf:da:f7:e0:75:ba:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 15:00:16 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=dfc7032bb33397250f724c3de789d0e5a27fa522d3d8ead0e8fe3725465e5c71, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:d4:b8:de:7d:b4:fc:d6:7d:a7:f4:bc:dd: ac:3b:c1:8d:9e:ad:8f:da:be:ac:8a:5b:84:18:24: ef:4e:c1:e1:0e:dd:99:0a:71:97:4f:21:fa:9e:10: 6c:14:54:01:01:ca:85:d2:83:d4:77:c0:9a:93:ed: 52:86:b0:34:bd:d8:9d:72:35:7b:b7:9e:94:f8:a9: 72:6b:fa:25:cc:28:72:b4:3d:54:6d:c1:86:b9:8d: 31:81:72:3e:fb:ce:0a:ca:2d:26:a7:fb:13:8b:42: 7e:c8:65:2c:c9:c7:fa:f9:7b:d1:99:00:82:8e:cd: cf:c6:6a:96:bb:b3:fa:4e:b9:1f:a3:8a:9f:ea:57: 1e:37:62:c9:0a:cd:c1:8b:51:ad:d4:fb:a1:f1:b3: fd:80:dd:9e:a7:7f:f9:cd:88:1e:f4:23:5a:d9:69: 01:b7:3e:52:dd:83:08:49:21:6b:9c:2a:3f:b1:80: cb:1d:a3:ea:c5:27:de:11:2b:ae:97:7f:73:55:07: 00:5c:a0:65:78:0d:45:86:08:f5:3f:9a:89:3c:6d: 18:d7:94:79:6b:e2:ad:b8:07:7b:d9:ff:80:e8:35: b1:e7:b3:c5:78:8a:a4:81:d6:8f:a8:de:08:0a:8c: b3:22:78:bb:53:a9:29:a8:f9:10:cb:86:96:1a:93: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:81:9E:C8:9F:C1:2B:D2:B2:D7:88:05:45:DD:0E:69:70:EE:50:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.80.0.0/13 Signature Algorithm: sha256WithRSAEncryption 86:25:7a:3d:86:8a:f7:7d:64:a5:f6:1d:2c:46:99:bd:ea:f4: 9d:d5:5b:88:a8:14:32:39:a2:c3:b8:75:61:a8:03:c3:52:ff: d5:60:5f:a2:8b:00:22:17:6e:81:66:bc:32:7b:ee:93:b3:a7: aa:4c:65:5b:63:66:52:2c:50:d6:27:c6:25:2d:eb:5f:f2:fa: 7a:9f:11:c3:be:2b:54:14:c1:ae:af:b6:6d:57:b8:d7:01:a5: e3:f0:b4:12:4d:cf:9b:f5:b0:f9:61:50:c2:89:9e:99:d4:18: 83:64:12:8d:93:4b:b6:67:52:b8:e2:af:da:ef:35:f3:44:70: da:07:11:4a:7e:2e:63:0e:ea:bc:0d:e3:76:9a:86:36:79:f6: d1:e1:7a:1e:44:5e:52:37:ef:21:80:4f:3f:a1:20:b0:ef:c5: 63:93:68:7e:1b:f6:19:49:e8:67:54:8b:c7:fb:ae:34:4f:a7: ba:a8:0c:ba:b9:45:43:21:35:65:d0:96:ea:14:1b:8d:59:6e: 0e:40:e2:d6:f1:9c:20:cb:0b:35:67:4a:c7:cd:62:0e:02:e8: ed:89:e6:18:8a:c8:ef:58:da:1b:d2:e0:38:c0:a9:28:67:91: 92:36:b0:be:c1:dd:48:5e:aa:25:86:01:26:db:02:1c:68:02: da:b8:b5:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNRXCjW40h4d5EV3AhL/a9+B1urUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMTUwMDE2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmM3MDMyYmIzMzM5NzI1MGY3MjRjM2RlNzg5ZDBlNWEy N2ZhNTIyZDNkOGVhZDBlOGZlMzcyNTQ2NWU1YzcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBvdS43n20/NZ9p/S83aw7wY2erY/avqyKW4QYJO9OweEO 3ZkKcZdPIfqeEGwUVAEByoXSg9R3wJqT7VKGsDS92J1yNXu3npT4qXJr+iXMKHK0 PVRtwYa5jTGBcj77zgrKLSan+xOLQn7IZSzJx/r5e9GZAIKOzc/Gapa7s/pOuR+j ip/qVx43YskKzcGLUa3U+6Hxs/2A3Z6nf/nNiB70I1rZaQG3PlLdgwhJIWucKj+x gMsdo+rFJ94RK66Xf3NVBwBcoGV4DUWGCPU/mok8bRjXlHlr4q24B3vZ/4DoNbHn s8V4iqSB1o+o3ggKjLMieLtTqSmo+RDLhpYak54rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmYGeyJ/BK9Ky14gFRd0OaXDuUN4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNzM5N2RjLTMwNTEtNDgyYS05NTdkLWVkM2E0YzI4NTliNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNiUDANBgkqhkiG9w0BAQsFAAOCAQEAhiV6PYaK931kpfYdLEaZver0ndVb iKgUMjmiw7h1YagDw1L/1WBfoosAIhdugWa8Mnvuk7OnqkxlW2NmUixQ1ifGJS3r X/L6ep8Rw74rVBTBrq+2bVe41wGl4/C0Ek3Pm/Ww+WFQwomemdQYg2QSjZNLtmdS uOKv2u8180Rw2gcRSn4uYw7qvA3jdpqGNnn20eF6HkReUjfvIYBPP6EgsO/FY5No fhv2GUnoZ1SLx/uuNE+nuqgMurlFQyE1ZdCW6hQbjVluDkDi1vGcIMsLNWdKx81i DgLo7YnmGIrI71jaG9LgOMCpKGeRkjawvsHdSF6qJYYBJtsCHGgC2ri1pg== -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:21 2025 by rpki-client