$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa File: b3c97cba-7083-48f3-8280-ad90bc3bee59.roa (raw, json) Hash identifier: 9avJYRvONLTv+qEndhvq1qZT3W6hTBdIaOrFuAJLJy0= Subject key identifier: 5A:2C:A1:07:96:82:E2:F3:7E:41:78:5B:13:5F:DD:7B:33:13:DA:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3ECAE064682CFEDB378E08F9B6E28475394F7798 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa Signing time: Sat 19 Jul 2025 00:01:07 +0000 ROA not before: Sat 19 Jul 2025 00:01:07 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.10.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ca:e0:64:68:2c:fe:db:37:8e:08:f9:b6:e2:84:75:39:4f:77:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:07 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=cc4bce049ae3e5198c27438fbc5a39a9be1b0e5795298de7ab55b220f8a05a65, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:c9:31:4e:4d:7e:a9:97:16:be:e6:6d:71: 76:67:54:33:4a:d0:89:06:0e:a6:9b:47:e0:df:61: 75:31:db:ec:08:36:d9:8a:03:56:fc:b7:1a:9b:33: f9:7f:dd:78:41:7f:19:47:53:c7:b2:08:73:6c:bd: 10:44:d8:bb:b4:ac:1d:7c:07:99:99:66:be:be:ae: e0:74:31:ed:ec:39:16:51:b9:23:09:14:7f:4e:7e: 9e:1d:3b:54:94:0e:cc:02:3c:9a:6d:39:13:5a:41: 62:11:f5:5f:f2:00:c9:f6:a1:8f:e6:b8:f2:df:3d: 5d:9a:cf:a7:2b:0d:4a:e3:1d:e6:c8:c2:62:08:12: e6:e6:fe:97:72:a5:62:a8:fb:97:52:0c:d9:3c:a0: 89:13:eb:36:25:ee:95:9f:a4:bc:34:4c:ac:9f:27: 7c:44:7e:c8:c2:11:93:4e:75:d5:93:ac:74:97:fa: f6:41:82:ec:e5:88:f3:65:87:37:0d:63:4a:e3:09: 9a:67:b4:6b:b6:24:1a:c1:c7:e9:37:fb:ad:76:f6: c1:33:99:4b:6b:6a:18:ce:c3:6f:13:78:93:88:5b: 55:9b:5d:94:0c:fd:40:52:08:93:79:b7:51:f3:2b: 9e:d3:31:d0:21:bc:50:60:19:5e:1a:36:c6:d6:28: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2C:A1:07:96:82:E2:F3:7E:41:78:5B:13:5F:DD:7B:33:13:DA:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.10.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:a2:ff:d9:0a:25:83:29:13:40:47:22:c9:6b:c2:09:d9:cb: 95:20:ea:d4:80:75:99:27:5c:1b:24:78:85:e3:02:8c:90:fb: f4:04:f4:96:56:52:7b:1c:ab:96:3a:39:9b:d4:3a:11:f8:d0: a0:94:21:8a:4c:15:99:15:79:25:f6:a4:19:79:23:4a:c8:58: 90:e5:ad:c1:fc:a6:c1:a1:a1:6e:35:11:3f:6e:9c:0b:c9:b7: 52:00:54:38:ea:b5:7b:9d:53:a3:53:29:ce:c1:5c:ea:1f:fe: f5:38:3d:7c:07:4a:04:20:83:41:31:df:9c:da:31:32:4f:be: 00:f7:fc:d7:de:07:d5:9e:08:b4:70:13:8f:e7:04:83:38:95: 4b:ac:eb:68:cd:fe:0b:0e:ba:75:b2:2d:94:87:57:a3:40:45: 68:a2:cb:a5:21:27:5e:5e:7e:44:eb:91:9c:2d:41:7d:b4:57: bd:22:b1:d1:db:af:96:05:2c:ad:03:86:e3:5f:99:38:ec:d3: 67:9f:e3:6b:76:b0:e1:52:6d:34:9d:65:00:d1:cc:6d:f0:12: d7:57:25:d2:b6:9d:6e:7e:b4:20:6c:d2:f1:db:58:a0:f0:72: 8f:a0:d8:2d:16:4d:54:80:df:60:9e:81:9f:22:9a:44:35:89: ac:ae:d6:03 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPsrgZGgs/ts3jgj5tuKEdTlPd5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTA3WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzRiY2UwNDlhZTNlNTE5OGMyNzQzOGZiYzVhMzlhOWJl MWIwZTU3OTUyOThkZTdhYjU1YjIyMGY4YTA1YTY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiJ8kxTk1+qZcWvuZtcXZnVDNK0IkGDqabR+DfYXUx2+wI NtmKA1b8txqbM/l/3XhBfxlHU8eyCHNsvRBE2Lu0rB18B5mZZr6+ruB0Me3sORZR uSMJFH9Ofp4dO1SUDswCPJptORNaQWIR9V/yAMn2oY/muPLfPV2az6crDUrjHebI wmIIEubm/pdypWKo+5dSDNk8oIkT6zYl7pWfpLw0TKyfJ3xEfsjCEZNOddWTrHSX +vZBguzliPNlhzcNY0rjCZpntGu2JBrBx+k3+6129sEzmUtrahjOw28TeJOIW1Wb XZQM/UBSCJN5t1HzK57TMdAhvFBgGV4aNsbWKEA/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWiyhB5aC4vN+QXhbE1/dezMT2lwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzYzk3Y2JhLTcwODMtNDhmMy04MjgwLWFkOTBiYzNiZWU1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDACjANBgkqhkiG9w0BAQsFAAOCAQEAEaL/2QolgykTQEciyWvCCdnLlSDq 1IB1mSdcGyR4heMCjJD79AT0llZSexyrljo5m9Q6EfjQoJQhikwVmRV5JfakGXkj SshYkOWtwfymwaGhbjURP26cC8m3UgBUOOq1e51To1MpzsFc6h/+9Tg9fAdKBCCD QTHfnNoxMk++APf8194H1Z4ItHATj+cEgziVS6zraM3+Cw66dbItlIdXo0BFaKLL pSEnXl5+ROuRnC1BfbRXvSKx0duvlgUsrQOG41+ZOOzTZ5/ja3aw4VJtNJ1lANHM bfAS11cl0radbn60IGzS8dtYoPByj6DYLRZNVIDfYJ6BnyKaRDWJrK7WAw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:24 2025 by rpki-client