$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed87e62-0f65-4b7b-a176-a1522c6e3d19.roa File: aed87e62-0f65-4b7b-a176-a1522c6e3d19.roa (raw, json) Hash identifier: gDPpJG2+yMB/2v9JRRBUdLd3VUYBcDzTlDfpZigJNCg= Subject key identifier: 22:1F:5B:1C:95:07:D5:46:2B:49:88:CE:8B:5C:15:DE:D5:B8:72:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12AEFB87097A5EC0EA94E52271BBEEC65A187773 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed87e62-0f65-4b7b-a176-a1522c6e3d19.roa Signing time: Fri 11 Jul 2025 00:10:20 +0000 ROA not before: Fri 11 Jul 2025 00:10:20 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 20.142.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ae:fb:87:09:7a:5e:c0:ea:94:e5:22:71:bb:ee:c6:5a:18:77:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:10:20 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=3b6823bb5f8794310c3d442b6756a0a62e5acdc11b8c4605604b12b145c5ab01, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:2b:e5:3a:0e:1d:6c:a6:9b:6e:db:08:4e: 81:a9:24:5e:97:81:d0:8a:39:51:e6:56:16:87:14: b6:b9:20:ac:ea:b6:66:df:6c:ac:2a:1b:f0:cd:7a: 40:22:61:0d:db:b6:0d:ef:47:4f:77:55:35:71:26: 20:51:2b:09:19:37:37:37:e9:0b:83:1a:31:af:5f: 44:75:6f:d2:89:6a:56:f5:f8:87:92:a4:84:13:60: 1e:d7:59:e6:46:2d:03:da:dc:19:c1:36:67:80:ad: 55:9d:e9:eb:4b:65:41:86:56:ff:5e:f3:9d:ac:93: 28:75:a4:62:12:28:a4:dc:29:4a:e0:f5:e5:5b:5b: f7:6e:d6:23:e8:88:1a:00:ce:04:b9:cd:70:48:75: e8:6f:4f:2c:f6:7e:c8:fa:da:29:97:6d:15:37:63: c4:45:fd:7e:22:46:ba:55:89:a8:24:09:20:df:ae: 00:b8:83:2e:62:f2:07:11:71:34:9a:bc:61:ee:a3: ae:1b:f3:35:f3:b9:9e:33:38:4b:28:1b:1e:dc:02: d5:94:a1:39:d6:99:9b:97:50:18:a6:1d:16:d0:95: 3f:2d:5d:ec:a8:39:fa:a4:16:51:39:99:31:3d:79: 44:c4:81:e1:2d:f0:61:a0:13:60:27:fe:10:96:81: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:5B:1C:95:07:D5:46:2B:49:88:CE:8B:5C:15:DE:D5:B8:72:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed87e62-0f65-4b7b-a176-a1522c6e3d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 20.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:f2:e4:da:c3:d1:d4:4f:3d:2f:00:4a:9d:0d:9b:a2:9c:db: 38:ff:23:d2:3e:2c:47:13:12:cc:97:8e:3a:a1:d0:d5:0c:be: ca:dc:01:bd:bc:47:2a:ef:b7:5a:03:62:f6:fb:5f:29:f1:3d: 35:39:ef:3c:f8:38:cc:fc:a9:dd:37:f1:00:d8:2e:70:5f:80: 88:23:3f:ee:b2:e1:02:55:90:de:5f:ef:80:f7:8e:7c:f2:01: 32:21:93:e3:24:44:60:79:7a:db:ef:fc:b3:8e:52:ca:68:4a: ef:53:36:76:f2:27:4c:ce:c2:da:9a:bd:cc:9d:c3:91:c7:0a: ac:3f:9f:16:5c:ca:6f:62:d9:a9:eb:da:7c:7a:49:d5:c4:01: 0a:bd:a8:8f:1e:22:9e:b1:b5:db:38:a6:55:53:98:f7:ae:55: b0:ad:bc:50:12:c8:9f:1b:f0:5a:3f:11:b2:9a:75:8b:f8:61: 8f:75:00:56:dd:35:ff:58:27:07:9e:47:a5:45:23:ee:42:55: d5:35:fe:db:b6:45:dc:b2:d9:fa:72:db:0a:92:d7:01:1c:0b: 96:36:92:28:f4:30:af:5d:2a:77:84:57:68:e5:2a:d0:ea:34: 98:e3:b5:f8:c5:22:5c:e8:42:71:a4:e2:62:f1:0e:95:1c:26: ec:a3:2c:72 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEq77hwl6XsDqlOUicbvuxloYd3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMDIwWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjY4MjNiYjVmODc5NDMxMGMzZDQ0MmI2NzU2YTBhNjJl NWFjZGMxMWI4YzQ2MDU2MDRiMTJiMTQ1YzVhYjAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaKCvlOg4dbKabbtsIToGpJF6XgdCKOVHmVhaHFLa5IKzq tmbfbKwqG/DNekAiYQ3btg3vR093VTVxJiBRKwkZNzc36QuDGjGvX0R1b9KJalb1 +IeSpIQTYB7XWeZGLQPa3BnBNmeArVWd6etLZUGGVv9e852skyh1pGISKKTcKUrg 9eVbW/du1iPoiBoAzgS5zXBIdehvTyz2fsj62imXbRU3Y8RF/X4iRrpViagkCSDf rgC4gy5i8gcRcTSavGHuo64b8zXzuZ4zOEsoGx7cAtWUoTnWmZuXUBimHRbQlT8t XeyoOfqkFlE5mTE9eUTEgeEt8GGgE2An/hCWgQmtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIh9bHJUH1UYrSYjOi1wV3tW4ct8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZDg3ZTYyLTBmNjUtNGI3Yi1hMTc2LWExNTIyYzZlM2QxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAUjjANBgkqhkiG9w0BAQsFAAOCAQEACfLk2sPR1E89LwBKnQ2bopzbOP8j 0j4sRxMSzJeOOqHQ1Qy+ytwBvbxHKu+3WgNi9vtfKfE9NTnvPPg4zPyp3TfxANgu cF+AiCM/7rLhAlWQ3l/vgPeOfPIBMiGT4yREYHl62+/8s45SymhK71M2dvInTM7C 2pq9zJ3DkccKrD+fFlzKb2LZqevafHpJ1cQBCr2ojx4inrG12zimVVOY965VsK28 UBLInxvwWj8Rspp1i/hhj3UAVt01/1gnB55HpUUj7kJV1TX+27ZF3LLZ+nLbCpLX ARwLljaSKPQwr10qd4RXaOUq0Oo0mOO1+MUiXOhCcaTiYvEOlRwm7KMscg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:26 2025 by rpki-client