$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa File: be176b94-da1d-4662-89c3-9c11623079c8.roa (raw, json) Hash identifier: N9aN7huoEhcUmbq6Ne4TOWXYQdM+WwL1Fj3OmB/pLqE= Subject key identifier: 7B:90:13:C7:8C:59:9B:B7:D2:2F:95:5A:63:D2:5A:EC:2C:F7:3B:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 333FF17B39D67739C7672F160B7D51E8829B25FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa Signing time: Tue 08 Jul 2025 15:40:24 +0000 ROA not before: Tue 08 Jul 2025 15:40:24 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3f:f1:7b:39:d6:77:39:c7:67:2f:16:0b:7d:51:e8:82:9b:25:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:40:24 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d9f905bce4a6c4788c089bc0beda3d8aeeab6b91ee493fac8bf2466868cdb88a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:6f:14:46:0f:e3:f2:75:56:f6:28:9c:e6: 67:97:3b:20:14:b2:24:97:7d:9d:6e:e3:f0:1b:39: 2a:a8:1e:18:d9:a5:2b:26:d2:c1:5c:cd:a3:d4:74: dc:4e:c5:74:10:c0:ef:df:98:5e:66:e8:18:f4:08: 86:93:fa:c9:06:61:22:b1:8d:78:84:65:83:31:3d: e2:f8:48:44:d2:5c:a2:c8:ac:33:cf:a5:78:85:54: 79:14:e4:a5:17:54:e6:0f:50:b0:f0:df:f4:62:1a: 56:a6:d2:1b:55:79:a0:56:f4:dd:e3:61:4b:96:d8: fe:1b:7f:fd:02:e3:e6:68:0e:b2:fe:f6:9a:59:c6: d3:7c:5f:b1:7a:24:df:3a:61:83:64:e4:f1:4a:69: ed:7d:5f:ca:36:87:06:8f:3e:a3:7b:73:98:5a:b5: aa:97:f1:a1:19:35:1d:24:6f:6e:0b:9e:36:ba:db: ff:13:81:11:ec:b0:ea:0f:05:dd:dd:e6:ed:87:75: 93:68:b5:06:8f:5b:c9:62:ee:d1:3e:df:bc:fb:6f: 68:7c:ec:50:ea:a2:74:be:4e:94:4c:5a:5b:c4:81: 8e:f7:7b:8a:cf:07:f0:c2:a0:18:04:67:9f:e8:97: f6:bc:bd:a0:a9:94:78:19:0b:c7:ee:88:26:2d:0c: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:90:13:C7:8C:59:9B:B7:D2:2F:95:5A:63:D2:5A:EC:2C:F7:3B:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.208.0/21 Signature Algorithm: sha256WithRSAEncryption 43:f5:c1:b1:db:09:ee:f4:1a:a4:97:07:0e:72:07:1e:0e:ff: 5b:d4:c3:50:a4:5e:43:ce:0e:21:1e:7f:27:44:05:f5:fe:0d: 71:44:db:ac:9c:ba:9f:6b:20:38:5e:94:fb:81:fd:40:71:30: 65:15:d3:1e:b9:e1:6b:ab:bc:c7:77:6f:0d:a8:6b:f3:2c:ae: 65:cc:21:2a:d4:1f:54:2d:5a:84:9f:16:5f:bd:89:7a:ae:7d: 82:fd:2e:40:8c:32:68:83:f0:3f:05:63:9f:13:c4:4c:1f:74: 44:ae:dc:4b:3d:33:6b:10:a6:c2:87:2d:c6:42:1d:7f:7b:d0: 65:0d:04:4f:c2:bc:ea:4c:16:c1:7e:18:a1:d7:c0:e8:8a:bc: dd:6a:00:c8:0e:2d:eb:22:ee:3f:3f:9b:c3:c4:d3:fe:f7:3d: 01:eb:af:fb:4d:ff:7f:9f:1c:8f:13:02:ed:e8:41:8c:ca:c8: a2:c7:b9:4c:8e:16:5b:7c:dc:93:a1:8d:29:64:b5:68:e1:21: ed:ba:8a:5c:68:70:02:be:d0:95:70:a0:c2:64:67:ee:ff:2f: 81:6b:c6:3a:68:1b:e6:f9:34:13:7b:9a:af:23:f8:a7:8f:82: ae:f8:de:dd:33:65:e2:a5:08:f9:ac:ba:ea:f5:1f:d6:96:95: d5:0d:55:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMz/xeznWdznHZy8WC31R6IKbJfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU0MDI0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWY5MDViY2U0YTZjNDc4OGMwODliYzBiZWRhM2Q4YWVl YWI2YjkxZWU0OTNmYWM4YmYyNDY2ODY4Y2RiODhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZiG8URg/j8nVW9iic5meXOyAUsiSXfZ1u4/AbOSqoHhjZ pSsm0sFczaPUdNxOxXQQwO/fmF5m6Bj0CIaT+skGYSKxjXiEZYMxPeL4SETSXKLI rDPPpXiFVHkU5KUXVOYPULDw3/RiGlam0htVeaBW9N3jYUuW2P4bf/0C4+ZoDrL+ 9ppZxtN8X7F6JN86YYNk5PFKae19X8o2hwaPPqN7c5hataqX8aEZNR0kb24Lnja6 2/8TgRHssOoPBd3d5u2HdZNotQaPW8li7tE+37z7b2h87FDqonS+TpRMWlvEgY73 e4rPB/DCoBgEZ5/ol/a8vaCplHgZC8fuiCYtDP7ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe5ATx4xZm7fSL5VaY9Ja7Cz3O3MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlMTc2Yjk0LWRhMWQtNDY2Mi04OWMzLTljMTE2MjMwNzljOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPM7NAwDQYJKoZIhvcNAQELBQADggEBAEP1wbHbCe70GqSXBw5yBx4O/1vU w1CkXkPODiEefydEBfX+DXFE26ycup9rIDhelPuB/UBxMGUV0x654WurvMd3bw2o a/MsrmXMISrUH1QtWoSfFl+9iXqufYL9LkCMMmiD8D8FY58TxEwfdESu3Es9M2sQ psKHLcZCHX970GUNBE/CvOpMFsF+GKHXwOiKvN1qAMgOLesi7j8/m8PE0/73PQHr r/tN/3+fHI8TAu3oQYzKyKLHuUyOFlt83JOhjSlktWjhIe26ilxocAK+0JVwoMJk Z+7/L4FrxjpoG+b5NBN7mq8j+KePgq743t0zZeKlCPmsuur1H9aWldUNVaI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:56:43 2025 by rpki-client