$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa File: dba7885d-04f4-44b6-8fa7-310271019cc6.roa (raw, json) Hash identifier: ps8Y4epKgrBcKZQ3j37g/nfyayxnwLWll4/AawT5dfs= Subject key identifier: 71:9A:F6:C7:F0:AB:5F:94:61:D2:28:8C:37:28:A9:6A:68:2C:AC:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 369370B7B4FC8667C4FA19E58E7020D20F505A4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa Signing time: Tue 08 Jul 2025 16:01:14 +0000 ROA not before: Tue 08 Jul 2025 16:01:14 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 158.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:93:70:b7:b4:fc:86:67:c4:fa:19:e5:8e:70:20:d2:0f:50:5a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:01:14 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d03dfc5d6bdf36b40f41e8e76327c544be244775b6a2fa6babfa17172890be36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:fc:08:8b:ac:71:69:92:19:6f:15:7f:2e: 92:f1:b3:12:45:90:db:ba:d9:ef:92:37:c8:f1:25: dc:01:96:22:b2:6c:c8:77:91:e8:fc:db:59:a2:2b: db:e1:12:87:e2:43:54:3f:4a:2b:a8:c7:a0:a6:27: 3f:18:28:b4:45:95:84:7f:90:a4:b9:77:d7:3b:fb: 0a:18:f9:c0:cc:07:e0:6d:3c:51:fe:d6:c1:80:37: 96:ef:b4:88:5f:82:be:b5:d7:e2:51:94:67:e7:57: e4:79:5c:f9:73:49:3b:18:ff:cd:f4:e6:c5:e1:30: 92:6e:df:df:66:44:96:3c:31:1f:20:f9:11:2b:21: bd:76:d0:06:24:a8:27:dc:5a:46:ff:ba:f0:6d:a6: 8a:47:a5:63:ae:d6:33:5a:1e:d6:42:51:e1:a5:18: e1:ac:ac:6c:09:69:90:65:69:d4:f5:ce:5c:d9:a7: 5d:90:87:52:d1:e6:5a:f0:f3:b2:59:82:53:77:a8: 81:85:04:1b:7b:e3:4c:1b:78:0e:8a:47:36:26:d7: 8a:f3:c5:a1:86:d1:54:03:f5:bd:7c:fa:3c:76:f5: f4:7e:9e:56:b7:42:49:f7:28:0e:f8:87:60:b6:8d: a2:6f:32:c1:31:f1:b4:c1:9f:55:5c:86:9f:fd:6d: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9A:F6:C7:F0:AB:5F:94:61:D2:28:8C:37:28:A9:6A:68:2C:AC:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:f4:fa:96:8d:10:7c:e7:58:97:7c:85:4d:ae:3a:52:30:ce: ce:30:ef:03:be:16:90:31:f0:ee:82:6f:33:d0:6a:32:cb:f6: d0:11:a5:13:77:57:b0:a4:01:0d:3f:32:6d:34:5d:f1:71:17: ac:20:81:45:35:da:fb:b4:2a:3c:65:63:e2:3b:e4:38:82:09: bf:8b:1b:f4:c4:27:76:f3:aa:c7:1f:ae:c5:7d:d4:65:7d:4d: 89:70:57:ac:ca:c8:f1:3b:95:f0:57:3b:55:b5:d9:22:3c:00: 78:4c:e5:ec:22:66:8d:0b:06:72:93:81:a6:f0:0f:72:62:37: 03:7c:80:56:dc:3d:13:36:52:41:fd:68:20:d3:c9:a9:d0:b9: 51:7a:0a:72:bc:15:04:19:27:59:6c:29:e1:8f:0e:53:c7:25: 59:72:db:96:8a:52:03:59:57:e4:ad:2a:1a:21:02:23:ee:4c: d9:23:bc:18:98:b0:c3:8d:ab:e3:35:8b:58:47:2c:4f:4c:0d: 43:a0:65:83:2d:06:9a:92:6c:88:ff:ae:9c:73:76:95:c8:3e: 8f:95:c2:0b:e5:fb:64:43:b0:87:14:90:09:2c:08:16:b4:9e: a2:17:47:63:29:d2:3c:ac:e3:26:78:62:05:49:4f:26:1c:92: 23:02:65:01 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNpNwt7T8hmfE+hnljnAg0g9QWkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYwMTE0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDNkZmM1ZDZiZGYzNmI0MGY0MWU4ZTc2MzI3YzU0NGJl MjQ0Nzc1YjZhMmZhNmJhYmZhMTcxNzI4OTBiZTM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT0vwIi6xxaZIZbxV/LpLxsxJFkNu62e+SN8jxJdwBliKy bMh3kej821miK9vhEofiQ1Q/Siuox6CmJz8YKLRFlYR/kKS5d9c7+woY+cDMB+Bt PFH+1sGAN5bvtIhfgr611+JRlGfnV+R5XPlzSTsY/8305sXhMJJu399mRJY8MR8g +RErIb120AYkqCfcWkb/uvBtpopHpWOu1jNaHtZCUeGlGOGsrGwJaZBladT1zlzZ p12Qh1LR5lrw87JZglN3qIGFBBt740wbeA6KRzYm14rzxaGG0VQD9b18+jx29fR+ nla3Qkn3KA74h2C2jaJvMsEx8bTBn1Vchp/9bfQJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcZr2x/CrX5Rh0iiMNyipamgsrFcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiYTc4ODVkLTA0ZjQtNDRiNi04ZmE3LTMxMDI3MTAxOWNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCelzANBgkqhkiG9w0BAQsFAAOCAQEAi/T6lo0QfOdYl3yFTa46UjDOzjDv A74WkDHw7oJvM9BqMsv20BGlE3dXsKQBDT8ybTRd8XEXrCCBRTXa+7QqPGVj4jvk OIIJv4sb9MQndvOqxx+uxX3UZX1NiXBXrMrI8TuV8Fc7VbXZIjwAeEzl7CJmjQsG cpOBpvAPcmI3A3yAVtw9EzZSQf1oINPJqdC5UXoKcrwVBBknWWwp4Y8OU8clWXLb lopSA1lX5K0qGiECI+5M2SO8GJiww42r4zWLWEcsT0wNQ6Blgy0GmpJsiP+unHN2 lcg+j5XCC+X7ZEOwhxSQCSwIFrSeohdHYynSPKzjJnhiBUlPJhySIwJlAQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:28 2025 by rpki-client