$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beb134fc-82d3-46f9-97bc-e10f43de1b42.roa File: beb134fc-82d3-46f9-97bc-e10f43de1b42.roa (raw, json) Hash identifier: dpHpawnWghXB8SYzjqEr4l0CSHa7z8vOTMo1HTPu0Yw= Subject key identifier: 16:64:B4:B6:CB:90:38:A1:1F:12:81:D2:F1:76:00:CE:01:56:02:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A4750F15BF5FA2C2648FC7D9B47C2607127F999 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beb134fc-82d3-46f9-97bc-e10f43de1b42.roa Signing time: Fri 11 Jul 2025 00:11:37 +0000 ROA not before: Fri 11 Jul 2025 00:11:37 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:47:50:f1:5b:f5:fa:2c:26:48:fc:7d:9b:47:c2:60:71:27:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:11:37 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=53f9f38eafa1cdc89bc2e81d9e1fd863187714d58cd8a1863e702f7aa711a74c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:37:02:cc:0d:13:1e:05:6f:cf:68:fc:4a:52: 73:32:da:09:82:c9:26:3b:42:72:8a:e4:44:b3:a0: 03:9d:c4:ca:53:93:7b:af:c7:17:7b:02:06:c7:70: 90:ba:87:94:99:2d:d9:4e:97:bc:19:77:c3:7c:b5: 80:59:2e:88:30:f5:30:fe:26:ef:10:74:88:67:d4: 5c:ba:cb:fb:88:33:e5:6f:69:f5:0e:08:41:fc:fa: 88:36:1f:d8:25:76:a7:bd:54:f3:ac:02:9f:6d:7e: a0:96:7b:37:59:a9:fb:e5:8f:dd:e8:47:f4:d9:3d: e2:3b:ca:c2:1f:f0:cf:54:fc:a6:8b:c1:a8:23:82: 62:ff:22:28:16:e9:76:d5:3d:b7:91:3b:50:4b:27: 48:02:68:38:8a:5f:cb:1f:75:a1:0d:ab:c1:a6:e8: 33:e3:3a:16:08:5a:51:f4:68:fd:16:1f:54:18:ed: f5:74:31:a5:5d:db:f8:7a:a4:39:52:e3:9b:06:cd: f1:4b:aa:95:6a:50:a5:6f:51:a0:98:14:51:87:3d: b9:2e:ee:2b:f1:69:80:84:f2:17:45:7a:94:d9:f6: 68:5d:3f:2c:7f:7f:77:6f:86:67:bc:71:8f:95:92: df:ae:4c:3b:42:6f:ff:dc:5b:9c:9c:36:67:c4:41: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:B4:B6:CB:90:38:A1:1F:12:81:D2:F1:76:00:CE:01:56:02:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beb134fc-82d3-46f9-97bc-e10f43de1b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.22.0/24 Signature Algorithm: sha256WithRSAEncryption b4:e0:61:d4:ca:e1:1e:01:c5:d3:02:9e:f7:ac:d1:2b:6b:a0: 2a:bb:5c:a7:42:66:ff:94:7c:f6:55:07:f8:c7:ef:7c:60:fa: 0d:f3:95:d5:6c:15:62:8f:4e:54:39:b3:d8:f5:56:7f:21:64: f4:29:b5:eb:33:41:e8:14:5d:af:85:7d:72:fc:b4:ba:84:83: 68:12:6e:5b:79:c6:9e:02:93:c4:cf:cb:e4:7f:c7:7d:87:2c: da:b0:4c:8b:45:77:a1:e8:4c:7c:56:de:c9:03:ef:76:1c:83: 35:14:5c:14:6e:4e:e4:1f:bf:30:18:41:c3:1b:7b:fe:8d:87: ce:00:3c:2c:ef:e6:3a:13:e5:f1:09:a9:a4:a1:ac:a7:04:55: 9e:0e:2a:e4:fa:c5:c8:53:74:09:e4:ab:04:0a:48:0b:29:ee: 24:01:cb:86:6e:f5:76:d8:0d:87:3d:3d:9f:b7:0c:27:96:13: 32:eb:94:c4:ee:38:30:33:c1:47:88:f3:dc:aa:21:ce:42:25: 4c:c6:33:7c:32:76:ad:2e:22:a0:9c:8d:32:b5:4e:fd:94:9b: c6:c0:0c:d2:ae:00:0d:6c:af:57:77:02:62:38:a3:12:00:55: 30:4c:7c:3b:85:f6:52:5a:98:c5:d6:dd:ef:c7:92:5c:5f:1b: 60:c6:34:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCkdQ8Vv1+iwmSPx9m0fCYHEn+ZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMTM3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2Y5ZjM4ZWFmYTFjZGM4OWJjMmU4MWQ5ZTFmZDg2MzE4 NzcxNGQ1OGNkOGExODYzZTcwMmY3YWE3MTFhNzRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcNwLMDRMeBW/PaPxKUnMy2gmCySY7QnKK5ESzoAOdxMpT k3uvxxd7AgbHcJC6h5SZLdlOl7wZd8N8tYBZLogw9TD+Ju8QdIhn1Fy6y/uIM+Vv afUOCEH8+og2H9gldqe9VPOsAp9tfqCWezdZqfvlj93oR/TZPeI7ysIf8M9U/KaL wagjgmL/IigW6XbVPbeRO1BLJ0gCaDiKX8sfdaENq8Gm6DPjOhYIWlH0aP0WH1QY 7fV0MaVd2/h6pDlS45sGzfFLqpVqUKVvUaCYFFGHPbku7ivxaYCE8hdFepTZ9mhd Pyx/f3dvhme8cY+Vkt+uTDtCb//cW5ycNmfEQVpdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFmS0tsuQOKEfEoHS8XYAzgFWAoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlYjEzNGZjLTgyZDMtNDZmOS05N2JjLWUxMGY0M2RlMWI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYnRYwDQYJKoZIhvcNAQELBQADggEBALTgYdTK4R4BxdMCnves0StroCq7 XKdCZv+UfPZVB/jH73xg+g3zldVsFWKPTlQ5s9j1Vn8hZPQpteszQegUXa+FfXL8 tLqEg2gSblt5xp4Ck8TPy+R/x32HLNqwTItFd6HoTHxW3skD73YcgzUUXBRuTuQf vzAYQcMbe/6Nh84APCzv5joT5fEJqaShrKcEVZ4OKuT6xchTdAnkqwQKSAsp7iQB y4Zu9XbYDYc9PZ+3DCeWEzLrlMTuODAzwUeI89yqIc5CJUzGM3wydq0uIqCcjTK1 Tv2Um8bADNKuAA1sr1d3AmI4oxIAVTBMfDuF9lJamMXW3e/HklxfG2DGNLE= -----END CERTIFICATE-----Generated at Mon Jul 21 13:06:01 2025 by rpki-client