$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9be969-de18-42a6-9d12-16fc8a45d0da.roa File: bf9be969-de18-42a6-9d12-16fc8a45d0da.roa (raw, json) Hash identifier: MOgtab4SWa16Yurn04Kfo/NsxupESEYRRPOd1bD5LCQ= Subject key identifier: 82:D5:9E:D3:6D:6E:A2:B8:DF:1E:4A:58:7A:4A:F6:DD:1B:C5:F7:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6EEDE0FB5C81E225D072540CB7B7D39FD72C47C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9be969-de18-42a6-9d12-16fc8a45d0da.roa Signing time: Wed 16 Jul 2025 00:12:02 +0000 ROA not before: Wed 16 Jul 2025 00:12:02 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.26.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ed:e0:fb:5c:81:e2:25:d0:72:54:0c:b7:b7:d3:9f:d7:2c:47:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:12:02 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=a00d75c705344635d3e36c3be159948e80fcb06d9d5688716fb72ac6f8bf1406, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:d3:17:8c:38:ea:7f:bc:ec:df:f5:11:83: 39:33:35:a4:34:91:00:c9:56:6b:43:cf:12:de:72: 77:8d:6f:a9:7f:61:79:f3:45:f7:1d:07:ef:f8:41: 82:61:09:85:6d:bf:53:78:c9:f0:47:d9:a2:ce:49: 03:0a:4b:81:af:f4:5a:b2:d1:f0:66:2c:7a:3f:8c: 56:d1:44:f4:dc:3a:eb:72:31:82:d6:6e:21:4b:68: 4b:7a:d6:89:48:aa:c3:d6:ba:7d:6a:57:f4:b1:76: 92:e5:2e:76:d1:67:3c:1c:75:73:19:2d:d5:17:f3: 19:2c:a5:b6:d8:7d:13:1c:40:3c:5d:5c:47:ae:e3: a0:d0:40:54:f6:07:b1:a6:c4:42:8c:df:79:0f:df: a8:65:d1:bf:1f:f0:89:c9:c2:f7:0f:50:b1:74:b8: cb:13:a6:9a:6d:dd:47:72:fe:25:03:a9:04:8d:d4: fd:26:31:46:0b:f9:72:c8:99:0e:55:b4:a5:f3:e3: ea:0e:38:00:8a:7c:e8:ce:78:7c:1f:eb:0e:09:b3: 54:cf:e8:6a:2e:29:61:ee:cc:cc:cd:98:09:8e:b2: 38:fc:d4:90:12:d5:4b:f9:bf:e6:10:d3:5d:57:3c: 89:2f:88:32:22:ab:7f:4c:9f:c9:39:ff:00:64:9e: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D5:9E:D3:6D:6E:A2:B8:DF:1E:4A:58:7A:4A:F6:DD:1B:C5:F7:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9be969-de18-42a6-9d12-16fc8a45d0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.26.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7c:65:45:94:73:11:a8:1e:14:0d:2b:92:75:dd:7d:2e:49:00: 21:68:56:56:6a:6a:5c:1d:f4:78:1e:1b:a9:42:7a:81:3a:8a: de:a2:e5:87:1c:5a:4a:39:c4:94:17:56:7c:4c:ff:a9:bd:b2: d5:c9:59:af:ad:fa:ab:7d:a1:47:ca:8a:d3:7d:32:45:76:6c: ce:c2:9a:a8:a5:d9:6f:25:15:2f:e5:25:d6:78:90:c0:a1:2a: 9e:9a:96:40:8a:ce:10:08:67:49:fb:e8:36:14:17:e5:3a:91: 00:dd:9d:de:f7:48:ed:a6:e5:9c:e6:c1:5c:38:47:61:a6:f3: 53:e7:ab:6d:96:68:0c:9b:1e:b6:ea:e7:05:73:8d:ad:5a:8e: 13:1e:7d:61:f2:43:a6:22:9e:73:e3:bd:7b:6a:b4:80:d3:e4: 73:d6:bb:ff:ab:b5:6b:48:14:3d:b2:20:99:90:3a:37:3a:18: 53:c9:68:66:dd:61:7c:93:76:ee:5e:de:d5:e6:d8:a5:30:58: 09:69:bc:b9:14:0f:64:6d:34:ea:30:24:44:ef:66:2e:86:0a: 7a:dd:61:2c:d1:1c:f2:69:ef:e0:97:8d:f4:23:de:89:16:06: 85:a8:65:39:f7:f3:82:83:72:2e:87:86:f7:57:c0:0a:3e:0c: e7:08:14:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbu3g+1yB4iXQclQMt7fTn9csR8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAxMjAyWhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDBkNzVjNzA1MzQ0NjM1ZDNlMzZjM2JlMTU5OTQ4ZTgw ZmNiMDZkOWQ1Njg4NzE2ZmI3MmFjNmY4YmYxNDA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl+NMXjDjqf7zs3/URgzkzNaQ0kQDJVmtDzxLecneNb6l/ YXnzRfcdB+/4QYJhCYVtv1N4yfBH2aLOSQMKS4Gv9Fqy0fBmLHo/jFbRRPTcOuty MYLWbiFLaEt61olIqsPWun1qV/SxdpLlLnbRZzwcdXMZLdUX8xkspbbYfRMcQDxd XEeu46DQQFT2B7GmxEKM33kP36hl0b8f8InJwvcPULF0uMsTpppt3Udy/iUDqQSN 1P0mMUYL+XLImQ5VtKXz4+oOOACKfOjOeHwf6w4Js1TP6GouKWHuzMzNmAmOsjj8 1JAS1Uv5v+YQ011XPIkviDIiq39Mn8k5/wBknoprAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgtWe021uorjfHkpYekr23RvF9xkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmOWJlOTY5LWRlMTgtNDJhNi05ZDEyLTE2ZmM4YTQ1ZDBkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQGjANBgkqhkiG9w0BAQsFAAOCAQEAfGVFlHMRqB4UDSuSdd19LkkAIWhW VmpqXB30eB4bqUJ6gTqK3qLlhxxaSjnElBdWfEz/qb2y1clZr636q32hR8qK030y RXZszsKaqKXZbyUVL+Ul1niQwKEqnpqWQIrOEAhnSfvoNhQX5TqRAN2d3vdI7abl nObBXDhHYabzU+erbZZoDJseturnBXONrVqOEx59YfJDpiKec+O9e2q0gNPkc9a7 /6u1a0gUPbIgmZA6NzoYU8loZt1hfJN27l7e1ebYpTBYCWm8uRQPZG006jAkRO9m LoYKet1hLNEc8mnv4JeN9CPeiRYGhahlOffzgoNyLoeG91fACj4M5wgU8w== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:16 2025 by rpki-client