$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa File: d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa (raw, json) Hash identifier: MslnlfaKTp4p6e3wJP8C0dxXzUREpcp+Pj+N9PLaL30= Subject key identifier: EC:81:EC:2A:68:7C:E3:27:6D:97:AC:F6:56:3D:9B:43:C1:EB:89:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 179C37A9F88B8A6C4C05283830E5D0E46BDD09BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa Signing time: Wed 02 Jul 2025 00:42:06 +0000 ROA not before: Wed 02 Jul 2025 00:42:06 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9c:37:a9:f8:8b:8a:6c:4c:05:28:38:30:e5:d0:e4:6b:dd:09:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:42:06 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=0884619438f5ad64c4612959bf54ae3633de6c59a0aeb85ff011fd5ec7a2cca9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:4d:8f:0c:d2:3d:e2:57:05:4a:a8:0b:af: ce:8a:d0:3c:42:02:7d:b7:d3:55:ce:42:89:88:54: 6a:ef:31:13:97:18:53:ab:2b:5f:d3:dd:e2:86:96: 84:85:4f:5e:c5:5e:ca:ac:f2:86:74:8d:50:62:1f: 07:00:08:ae:85:14:15:9b:18:a0:4f:7c:a7:27:ca: cb:d2:48:4e:fb:e7:86:35:5c:7c:ca:ed:fa:82:6a: fa:05:19:9b:bc:ab:38:c5:e1:d7:8a:55:8d:47:59: 98:fe:37:67:63:f8:19:88:8d:b6:de:17:9d:53:88: e4:3c:92:6c:b9:8b:86:9b:e2:85:13:37:d0:55:46: 5e:b4:44:ab:cf:5a:25:1f:76:9d:92:0f:aa:17:83: 39:2d:d7:68:08:2f:b3:c7:4d:40:9e:4a:b4:35:b8: 34:08:2d:ef:9a:5a:b4:c0:1f:13:3b:ed:16:ad:d8: f9:59:c4:4b:03:d9:fb:d0:6a:88:31:24:95:84:32: 19:ca:8e:f4:f1:2f:fd:52:3e:3d:4d:25:35:10:a9: 8c:76:00:ca:7a:c9:45:60:61:91:ac:20:dd:00:24: 92:5a:0c:d4:b7:ff:a6:8c:d1:de:66:6a:f4:42:63: 0b:38:55:59:80:b4:a7:3a:d8:de:b2:8f:a5:08:89: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:EC:2A:68:7C:E3:27:6D:97:AC:F6:56:3D:9B:43:C1:EB:89:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:b7:61:4f:3d:3c:e9:61:69:da:fb:a3:2a:18:7c:5c:a7:8c: fc:46:0b:0e:3e:82:25:e7:fb:33:cd:8e:77:ae:42:7f:04:15: 92:36:24:fa:4d:f4:00:c8:3a:8e:99:3a:5c:f5:c5:89:b3:a3: ab:70:64:77:66:67:1f:18:f8:a8:1a:88:48:f9:dd:b9:20:af: a2:52:26:0c:b2:fd:70:80:1e:67:95:2f:48:b4:3b:c5:4b:07: 12:52:b4:03:74:96:7b:c0:6a:6c:f7:50:3b:1a:bb:d7:ad:83: 07:25:c5:d8:b1:06:d2:0d:28:bc:6d:e4:c7:f8:bb:dc:26:7d: 01:5e:e4:03:46:09:15:08:e0:4a:81:80:e9:aa:64:4f:db:9f: 65:55:ce:3c:74:10:02:b5:62:13:11:9c:9d:91:7a:0d:ca:68: d5:9f:18:fe:83:21:49:e3:39:9d:25:9e:02:5d:47:a3:22:02: 76:47:fe:b9:b9:46:c9:5a:ab:69:d0:84:9d:ae:58:cc:02:15: 4a:0f:e1:bd:03:0b:7d:9f:d7:0a:17:64:c5:98:7b:9b:69:c5: 47:17:2e:10:23:84:26:1e:21:87:4c:a1:8b:62:59:d7:49:1a: 70:8b:16:d9:3b:69:b1:c8:4a:f5:fb:6d:dc:e4:cf:d7:96:98: 90:50:84:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF5w3qfiLimxMBSg4MOXQ5GvdCbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MjA2WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODg0NjE5NDM4ZjVhZDY0YzQ2MTI5NTliZjU0YWUzNjMz ZGU2YzU5YTBhZWI4NWZmMDExZmQ1ZWM3YTJjY2E5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsrE2PDNI94lcFSqgLr86K0DxCAn2301XOQomIVGrvMROX GFOrK1/T3eKGloSFT17FXsqs8oZ0jVBiHwcACK6FFBWbGKBPfKcnysvSSE7754Y1 XHzK7fqCavoFGZu8qzjF4deKVY1HWZj+N2dj+BmIjbbeF51TiOQ8kmy5i4ab4oUT N9BVRl60RKvPWiUfdp2SD6oXgzkt12gIL7PHTUCeSrQ1uDQILe+aWrTAHxM77Rat 2PlZxEsD2fvQaogxJJWEMhnKjvTxL/1SPj1NJTUQqYx2AMp6yUVgYZGsIN0AJJJa DNS3/6aM0d5mavRCYws4VVmAtKc62N6yj6UIiXMjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7IHsKmh84ydtl6z2Vj2bQ8HriY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NzUyYWEzLTE3MzYtNDZhNi1hZjA4LTFmZjFhMTA3YzZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAvlQwDQYJKoZIhvcNAQELBQADggEBAC+3YU89POlhadr7oyoYfFynjPxG Cw4+giXn+zPNjneuQn8EFZI2JPpN9ADIOo6ZOlz1xYmzo6twZHdmZx8Y+KgaiEj5 3bkgr6JSJgyy/XCAHmeVL0i0O8VLBxJStAN0lnvAamz3UDsau9etgwclxdixBtIN KLxt5Mf4u9wmfQFe5ANGCRUI4EqBgOmqZE/bn2VVzjx0EAK1YhMRnJ2Reg3KaNWf GP6DIUnjOZ0lngJdR6MiAnZH/rm5Rslaq2nQhJ2uWMwCFUoP4b0DC32f1woXZMWY e5tpxUcXLhAjhCYeIYdMoYtiWddJGnCLFtk7abHISvX7bdzkz9eWmJBQhP0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:47 2025 by rpki-client