$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af7152-9c61-4490-9bd7-7c152e022fdc.roa File: d1af7152-9c61-4490-9bd7-7c152e022fdc.roa (raw, json) Hash identifier: 6E54W8gu4WJf5NoG6mOMh0XPlyoGuTsQjhk+5ILKKpo= Subject key identifier: 2B:29:CC:4C:88:3E:9D:B3:30:C6:82:D3:58:E2:78:BF:C3:E2:00:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 786133C0EC29C2B397B3AE17DB34D51A27A3D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af7152-9c61-4490-9bd7-7c152e022fdc.roa Signing time: Wed 09 Jul 2025 00:10:27 +0000 ROA not before: Wed 09 Jul 2025 00:10:27 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.91.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:33:c0:ec:29:c2:b3:97:b3:ae:17:db:34:d5:1a:27:a3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:10:27 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=d1951aa882e8bc9f53897b0bc453731d3b1f9df661433a30114f89925726424c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:84:6d:35:0e:4f:ef:50:dd:f9:12:ad:79: 7b:df:de:e8:83:4a:76:73:65:95:77:43:24:72:9e: 58:0d:63:f0:b0:62:55:55:0c:ab:e0:85:5b:c3:ad: 5a:e7:c4:35:94:11:91:4d:e9:a6:e4:73:51:9f:17: b2:82:67:70:e1:c9:ed:97:e9:70:62:b1:3c:a9:1d: a3:c1:96:7f:fa:9d:a0:66:84:e7:83:e9:13:14:64: bb:8a:be:58:ad:5f:b4:3e:f7:0a:26:09:87:f2:bc: 24:d7:6f:63:39:6c:f4:dd:18:4b:53:02:a6:cf:de: 17:a8:c4:bb:59:ab:51:95:4f:33:1c:34:66:ff:da: 57:96:3a:82:20:1b:b5:5e:fd:84:bd:9c:d6:f4:8b: 3a:c5:fe:05:e3:a8:e3:2c:aa:7a:d7:2e:64:f6:00: 6f:f9:e3:9b:8f:dc:d1:30:61:46:14:40:bb:7f:57: 86:b0:4b:12:f6:1c:da:a9:23:9a:fc:60:92:fb:dc: e4:b3:8f:64:af:60:51:de:69:b5:5f:86:23:63:13: 9e:34:05:d0:d5:33:4e:00:22:1a:b2:08:36:3a:3e: 18:37:42:ab:e8:f1:45:c6:72:d0:a0:60:9f:a0:12: 55:ca:9b:98:30:b8:f8:55:8a:ca:fc:f6:67:6f:ca: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:29:CC:4C:88:3E:9D:B3:30:C6:82:D3:58:E2:78:BF:C3:E2:00:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af7152-9c61-4490-9bd7-7c152e022fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.91.100.0/22 Signature Algorithm: sha256WithRSAEncryption a2:8e:c3:f5:1e:6e:8c:03:63:37:63:b8:54:24:99:72:b7:42: 91:06:d8:4b:73:dc:2f:9d:6c:79:20:51:bf:38:9c:45:55:fa: 99:30:ee:8c:47:19:c3:57:80:3f:44:b4:9b:2d:4d:c6:3b:14: cb:b7:bd:0e:72:e5:e1:66:04:9f:e4:77:77:52:d8:93:68:de: 2e:05:1e:1d:96:23:e9:42:ee:65:f9:e8:18:45:48:c9:1d:76: d1:5b:1c:c6:ff:95:6a:83:cb:c9:df:f3:a6:2f:12:71:6e:23: f6:1f:35:38:63:a0:5c:c3:32:ea:84:8d:67:52:39:3b:a3:19: f7:4e:42:15:6b:c1:f8:d6:f3:62:c7:6b:5b:4f:d1:bd:9f:be: e3:1e:ef:b5:20:99:83:e0:93:1e:e4:ac:56:8e:5f:05:84:f1: 13:19:60:48:38:4a:26:da:ff:47:34:a6:86:5e:59:ca:5c:cf: ae:34:5b:81:07:e4:4f:92:c4:94:b7:8e:a7:d3:1c:d5:ee:2b: 36:c8:06:bb:98:ca:be:3d:1d:e6:57:29:3c:ca:0a:16:df:77: d8:f1:83:e3:a6:fc:59:05:23:f7:c2:8b:ec:43:b8:7e:cc:31: 4a:f3:76:15:c9:80:36:64:7d:f1:30:25:b2:9e:af:fc:33:52: c9:ec:41:86 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITeGEzwOwpwrOXs64X2zTVGiej1DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA3MDkwMDEwMjdaFw0yNTA4MTMyMzU5NTla MHoxSTBHBgNVBAUTQGQxOTUxYWE4ODJlOGJjOWY1Mzg5N2IwYmM0NTM3MzFkM2Ix ZjlkZjY2MTQzM2EzMDExNGY4OTkyNTcyNjQyNGMxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMdfhG01Dk/vUN35Eq15e9/e6INKdnNllXdDJHKeWA1j8LBi VVUMq+CFW8OtWufENZQRkU3ppuRzUZ8XsoJncOHJ7ZfpcGKxPKkdo8GWf/qdoGaE 54PpExRku4q+WK1ftD73CiYJh/K8JNdvYzls9N0YS1MCps/eF6jEu1mrUZVPMxw0 Zv/aV5Y6giAbtV79hL2c1vSLOsX+BeOo4yyqetcuZPYAb/njm4/c0TBhRhRAu39X hrBLEvYc2qkjmvxgkvvc5LOPZK9gUd5ptV+GI2MTnjQF0NUzTgAiGrIINjo+GDdC q+jxRcZy0KBgn6ASVcqbmDC4+FWKyvz2Z2/K3v8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQrKcxMiD6dszDGgtNY4ni/w+IAgDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZDFhZjcxNTItOWM2MS00NDkwLTliZDctN2MxNTJlMDIyZmRjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnlbZDANBgkqhkiG9w0BAQsFAAOCAQEAoo7D9R5ujANjN2O4VCSZcrdCkQbY S3PcL51seSBRvzicRVX6mTDujEcZw1eAP0S0my1NxjsUy7e9DnLl4WYEn+R3d1LY k2jeLgUeHZYj6ULuZfnoGEVIyR120Vscxv+VaoPLyd/zpi8ScW4j9h81OGOgXMMy 6oSNZ1I5O6MZ905CFWvB+NbzYsdrW0/RvZ++4x7vtSCZg+CTHuSsVo5fBYTxExlg SDhKJtr/RzSmhl5ZylzPrjRbgQfkT5LElLeOp9Mc1e4rNsgGu5jKvj0d5lcpPMoK Ft932PGD46b8WQUj98KL7EO4fswxSvN2FcmANmR98TAlsp6v/DNSyexBhg== -----END CERTIFICATE-----Generated at Tue Jul 22 04:52:37 2025 by rpki-client