$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a07602-897c-45c6-91fa-4b5fda970708.roa File: c6a07602-897c-45c6-91fa-4b5fda970708.roa (raw, json) Hash identifier: c5Tzmg2ubWqbEEH3DRvpRd+PkERc3T4q7pFjHNT1keM= Subject key identifier: F6:7E:50:42:C6:34:6A:A5:B0:EE:08:85:2B:5F:C0:D3:B6:62:F4:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AA9A6E20BE02BD65175323BED950A6CC3187605 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a07602-897c-45c6-91fa-4b5fda970708.roa Signing time: Sat 19 Jul 2025 00:40:28 +0000 ROA not before: Sat 19 Jul 2025 00:40:28 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a9:a6:e2:0b:e0:2b:d6:51:75:32:3b:ed:95:0a:6c:c3:18:76:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:40:28 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=0c2d6a79dbd0827373490b21ba27fbabf1254c68d9f6b1aa88cf4e4c553a6eca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:dd:9d:04:8d:a8:be:7e:d9:08:36:ec:81: 6b:a1:eb:fe:03:f8:d1:ec:02:c6:44:97:db:9d:6f: af:64:db:5e:5f:67:14:24:40:86:53:9f:24:ab:38: 44:32:33:dd:8a:b9:50:25:32:86:c0:d8:30:65:0f: 95:3c:b6:c9:48:8a:9b:57:6c:e3:a7:1a:54:9f:54: af:28:e6:5e:ec:68:f4:4f:b6:54:a6:ba:37:9a:be: 6f:0d:5e:f8:33:1d:a0:21:43:11:9d:b6:7d:84:d4: 5c:f0:a3:19:38:bd:39:ea:f9:81:d7:c4:15:30:4b: 58:2c:60:52:e0:e8:3a:a9:77:c5:83:7c:da:8d:bf: 8f:c1:d0:9f:04:b3:c7:38:bf:67:14:5e:77:37:ac: 26:22:d7:3b:a2:2e:31:14:8b:82:67:31:69:c8:80: 96:b8:a3:78:20:67:45:64:9a:e6:1b:11:2c:d7:8b: c3:6b:4c:e4:45:f0:a8:b3:48:31:4a:d8:66:12:c6: 6f:65:4a:e5:3d:a6:6d:d4:61:ba:a7:7c:a6:19:a7: a1:31:e1:22:5b:b8:17:55:b6:f0:64:e9:76:c6:8a: cc:8a:ef:ff:e1:4c:1d:af:f8:9e:a5:92:aa:43:ea: 8a:49:af:b2:5e:22:cf:4f:80:15:6e:8e:f8:01:32: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7E:50:42:C6:34:6A:A5:B0:EE:08:85:2B:5F:C0:D3:B6:62:F4:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a07602-897c-45c6-91fa-4b5fda970708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.84.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:42:da:15:8b:d4:73:66:0e:8c:55:84:f2:bf:f8:f9:5f:15: 63:65:14:15:bf:e8:64:a7:00:d7:1a:59:10:c1:53:e8:7f:14: f1:13:fe:71:45:96:f0:f9:d6:70:a5:0f:ad:48:33:5b:56:f3: 67:e2:65:aa:78:6a:ea:97:08:71:9a:e3:7b:9e:29:2a:f2:0f: d6:70:6b:76:24:19:83:e9:45:0b:f4:e2:34:60:05:c4:ab:6a: dd:c1:d3:4c:51:0c:72:07:8f:4d:5c:25:d9:69:1d:69:46:77: 68:fc:5b:cf:a0:32:b9:c9:1a:cb:3a:84:83:08:82:e5:99:af: 42:3f:ac:28:51:c4:3f:9f:dc:8e:c7:3c:55:28:0e:ce:cb:8b: 91:b3:31:2a:a3:28:17:ef:d0:aa:4e:10:0e:bb:6a:da:db:0c: 86:98:7a:bb:22:98:32:5e:01:b6:ab:88:0b:3a:36:4f:e0:69: c3:be:04:e5:4f:7b:cb:f7:3c:4a:88:21:7c:53:b8:8d:8f:7c: 1c:48:af:46:7d:86:f9:12:e7:ad:93:c0:25:46:1d:fe:e9:44: 2b:19:05:20:d2:7c:8c:f5:54:31:5b:9d:c5:e4:11:c3:9f:ba: 20:da:14:2d:2f:9a:2b:75:23:f1:ed:85:a6:96:9f:18:29:41: a3:9a:07:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeqmm4gvgK9ZRdTI77ZUKbMMYdgUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MDI4WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzJkNmE3OWRiZDA4MjczNzM0OTBiMjFiYTI3ZmJhYmYx MjU0YzY4ZDlmNmIxYWE4OGNmNGU0YzU1M2E2ZWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVQt2dBI2ovn7ZCDbsgWuh6/4D+NHsAsZEl9udb69k215f ZxQkQIZTnySrOEQyM92KuVAlMobA2DBlD5U8tslIiptXbOOnGlSfVK8o5l7saPRP tlSmujeavm8NXvgzHaAhQxGdtn2E1Fzwoxk4vTnq+YHXxBUwS1gsYFLg6Dqpd8WD fNqNv4/B0J8Es8c4v2cUXnc3rCYi1zuiLjEUi4JnMWnIgJa4o3ggZ0VkmuYbESzX i8NrTORF8KizSDFK2GYSxm9lSuU9pm3UYbqnfKYZp6Ex4SJbuBdVtvBk6XbGisyK 7//hTB2v+J6lkqpD6opJr7JeIs9PgBVujvgBMmhHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9n5QQsY0aqWw7giFK1/A07Zi9HAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2YTA3NjAyLTg5N2MtNDVjNi05MWZhLTRiNWZkYTk3MDcwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAFQwDQYJKoZIhvcNAQELBQADggEBAI5C2hWL1HNmDoxVhPK/+PlfFWNl FBW/6GSnANcaWRDBU+h/FPET/nFFlvD51nClD61IM1tW82fiZap4auqXCHGa43ue KSryD9Zwa3YkGYPpRQv04jRgBcSrat3B00xRDHIHj01cJdlpHWlGd2j8W8+gMrnJ Gss6hIMIguWZr0I/rChRxD+f3I7HPFUoDs7Li5GzMSqjKBfv0KpOEA67atrbDIaY ersimDJeAbariAs6Nk/gacO+BOVPe8v3PEqIIXxTuI2PfBxIr0Z9hvkS562TwCVG Hf7pRCsZBSDSfIz1VDFbncXkEcOfuiDaFC0vmit1I/HthaaWnxgpQaOaB4o= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:22 2025 by rpki-client