$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa File: cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa (raw, json) Hash identifier: Gs5i6umE2+3JrblGtZTJfERYB8RppEpeZ3k78O0cBlg= Subject key identifier: EE:CC:A2:EF:C7:43:1D:CA:1E:04:83:BF:67:21:23:8F:6F:DF:6F:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 061396DF91EE91DC601178139F0F2E667784BB4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa Signing time: Mon 30 Jun 2025 15:30:32 +0000 ROA not before: Mon 30 Jun 2025 15:30:32 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.151.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:13:96:df:91:ee:91:dc:60:11:78:13:9f:0f:2e:66:77:84:bb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:30:32 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=a28f5d4823515bf24416f12147c3f8e79741b50c303e863b87fb33826fd40ba0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:2e:2f:01:46:9e:f9:a2:73:a3:0a:cb:58: b8:0d:a8:60:a1:5a:11:fe:be:f4:82:fe:cf:6f:56: 5e:57:b1:cd:22:30:b7:f5:0a:f9:e7:52:0d:5f:38: 96:22:1c:50:5b:fa:e9:65:6c:8d:57:e3:96:62:57: b0:0a:8c:5e:3e:8f:31:1e:db:cd:82:95:13:a3:e1: 53:4f:2c:3b:1e:fb:82:44:6a:c9:6e:d3:65:23:0d: ed:e8:32:8b:6a:d2:d6:2b:63:c1:ff:03:b9:9f:e7: b1:e8:13:50:a2:9a:a7:62:58:ef:89:f3:80:2b:2e: ca:e7:57:9f:48:77:a6:10:c2:95:cc:64:50:c6:a2: bc:a8:a3:7d:a8:d9:e7:ae:7b:e4:52:b2:e2:0d:b2: 52:c8:38:fc:12:c4:6a:e8:84:04:b0:0e:8c:20:a3: c1:79:8a:f8:8e:3b:0f:7c:5e:69:7f:0c:46:01:c3: e6:6f:01:9e:e9:76:e8:ca:b1:df:05:9f:49:69:a6: cd:35:f1:53:a6:64:72:a0:28:8d:fd:b6:0a:8a:43: fb:1a:f0:7a:46:96:77:89:42:91:7d:d7:b8:01:58: b8:ee:ac:44:b3:64:41:4e:01:e0:cb:41:c6:0c:46: de:88:54:a9:b4:50:10:ff:0b:36:38:6f:57:bb:4b: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CC:A2:EF:C7:43:1D:CA:1E:04:83:BF:67:21:23:8F:6F:DF:6F:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.190.0/24 Signature Algorithm: sha256WithRSAEncryption 91:08:29:4c:0b:bf:77:d2:34:18:b3:fc:0e:9e:58:24:46:33: 30:bd:51:a8:73:79:cc:19:df:4e:da:f5:39:02:39:b7:48:85: d0:2b:16:6f:06:31:a9:8f:07:d3:70:b4:ad:2a:23:a4:23:70: fa:7a:36:66:0d:b9:a3:a1:69:bd:cf:40:88:fd:ef:bf:e6:81: 9b:9b:c8:8c:ce:cf:7d:d9:d2:ae:b6:f4:b3:e9:de:30:9e:c5: 6e:b9:de:fe:28:2a:9e:7b:88:a5:28:9f:93:2d:a8:24:25:73: 41:66:6a:88:c6:ad:1b:e4:86:0a:f3:19:50:cf:01:fa:84:af: 4b:a0:27:05:49:42:22:45:ec:d5:dc:93:cb:0e:b7:79:0f:f8: 69:f6:0d:67:28:ee:eb:42:d8:d0:fe:41:db:99:2f:05:ce:aa: 7d:2a:bb:c2:f7:0c:d7:76:f1:4b:25:48:e5:e0:5d:b8:5b:b9: ea:65:b8:66:82:5c:a6:22:b3:49:17:1b:c8:3c:46:1b:d3:a9: db:d8:14:0e:a8:ae:2e:b3:69:57:09:e2:6c:86:d4:3e:f3:68: 56:c4:58:bb:e7:9f:f2:b5:f6:cd:65:17:69:77:0d:a4:91:c2: 51:16:24:4a:91:78:d8:6d:71:e3:30:bb:6b:c0:b7:15:04:06: b4:1e:11:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBhOW35HukdxgEXgTnw8uZneEu0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUzMDMyWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjhmNWQ0ODIzNTE1YmYyNDQxNmYxMjE0N2MzZjhlNzk3 NDFiNTBjMzAzZTg2M2I4N2ZiMzM4MjZmZDQwYmEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNOS4vAUae+aJzowrLWLgNqGChWhH+vvSC/s9vVl5Xsc0i MLf1CvnnUg1fOJYiHFBb+ullbI1X45ZiV7AKjF4+jzEe282ClROj4VNPLDse+4JE aslu02UjDe3oMotq0tYrY8H/A7mf57HoE1CimqdiWO+J84ArLsrnV59Id6YQwpXM ZFDGoryoo32o2eeue+RSsuINslLIOPwSxGrohASwDowgo8F5iviOOw98Xml/DEYB w+ZvAZ7pdujKsd8Fn0lpps018VOmZHKgKI39tgqKQ/sa8HpGlneJQpF917gBWLju rESzZEFOAeDLQcYMRt6IVKm0UBD/CzY4b1e7S8MtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7syi78dDHcoeBIO/ZyEjj2/fb4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYmU4MTFjLWZmZDAtNGZhOS05OGVkLTdiOTg2ODU4MDllMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl74wDQYJKoZIhvcNAQELBQADggEBAJEIKUwLv3fSNBiz/A6eWCRGMzC9 UahzecwZ307a9TkCObdIhdArFm8GMamPB9NwtK0qI6QjcPp6NmYNuaOhab3PQIj9 77/mgZubyIzOz33Z0q629LPp3jCexW653v4oKp57iKUon5MtqCQlc0FmaojGrRvk hgrzGVDPAfqEr0ugJwVJQiJF7NXck8sOt3kP+Gn2DWco7utC2ND+QduZLwXOqn0q u8L3DNd28UslSOXgXbhbuepluGaCXKYis0kXG8g8RhvTqdvYFA6ori6zaVcJ4myG 1D7zaFbEWLvnn/K19s1lF2l3DaSRwlEWJEqReNhtceMwu2vAtxUEBrQeESg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:11 2025 by rpki-client