$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa File: ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa (raw, json) Hash identifier: QV6duOorl2Wjokju975nGRM5KVUI6OzslzURUy53NW8= Subject key identifier: 24:FD:BE:61:DC:99:50:EC:C8:00:D8:98:A6:B1:3C:0F:7D:27:84:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12B56C64B688B14B74ADB21825454694A4DE9D86 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa Signing time: Sat 19 Jul 2025 00:00:26 +0000 ROA not before: Sat 19 Jul 2025 00:00:26 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b5:6c:64:b6:88:b1:4b:74:ad:b2:18:25:45:46:94:a4:de:9d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:00:26 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=abde3aa528983b655b37789408181d1f20c717f688d934f618789a3a016f9061, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:1d:98:6b:eb:42:fb:09:e9:11:d5:19:99: 43:a1:2d:95:3b:8b:7d:34:63:fc:ec:23:72:90:fd: a0:da:c0:4f:60:84:44:a1:2d:e5:ec:1e:e5:2d:ec: d7:1d:bb:20:8f:e3:67:b1:f4:98:e2:54:31:7b:cb: b5:ca:32:de:94:08:39:94:a2:6e:a7:88:59:b0:f5: 2b:a0:01:a2:68:f2:6e:cb:93:2b:a3:90:a9:9d:a7: 7b:6f:7f:c7:a1:1b:1e:4b:ed:72:7a:bc:c0:7c:77: b0:db:b0:00:8a:fa:61:f9:82:3c:20:e3:59:43:52: af:69:9f:3b:dc:cd:18:ae:f1:83:a5:0c:7d:3a:98: 1e:42:d7:5c:c5:ed:55:a0:dc:28:f3:a7:5e:97:9e: 92:94:fa:f1:ac:00:9f:1f:37:e4:78:73:3e:85:47: eb:53:86:b3:00:67:69:35:cd:0f:0e:b1:b6:e0:6b: 8b:12:df:59:a7:35:e6:31:e0:72:9b:bc:82:ec:67: a6:96:7f:93:9d:d7:e5:74:7d:b9:d8:dd:e7:75:62: b5:1a:3f:4d:4e:05:ad:1b:d7:cf:16:6f:85:1e:2e: 5b:5e:dc:66:55:cf:a3:f9:1e:ec:5d:f6:6c:8a:31: 29:32:72:cc:ba:4e:73:ff:11:77:a8:84:14:1a:9b: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:BE:61:DC:99:50:EC:C8:00:D8:98:A6:B1:3C:0F:7D:27:84:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:bd:aa:d4:5d:55:3c:b9:53:96:60:a9:f4:48:85:f4:35:3b: 5e:c1:35:61:4e:6d:e5:7f:d9:92:ea:b4:cc:8e:9c:99:21:78: e1:43:47:b3:6a:52:68:5e:89:e3:d2:4b:d4:47:48:57:83:5a: 6c:bf:c2:68:c9:bb:4f:64:30:96:e7:84:ef:8f:79:0a:15:95: d8:b6:37:a1:3e:46:57:3a:1c:e6:05:e7:e1:fb:09:3f:f9:d4: 66:c1:ac:d5:d3:6e:1f:22:b0:82:de:de:0d:3c:87:c1:5e:c4: 5c:4f:80:0c:e8:87:7b:b0:04:6a:da:76:03:bb:72:65:2c:3d: 6a:d6:5c:e4:e1:ba:e7:5e:2c:ed:ad:e0:40:e8:7f:38:d3:21: 4c:33:ea:da:e0:d1:10:ea:5e:08:ad:2d:bb:95:64:12:03:7f: ed:fa:8f:ea:91:83:56:e3:3b:42:92:5b:fc:18:85:ce:3a:82: fc:07:6c:c1:61:2e:28:34:2e:6e:a7:e9:58:9c:6e:b4:38:ba: d8:8d:59:82:1a:28:61:18:91:a1:29:a1:24:62:b5:af:54:04: 7f:97:85:d2:02:60:82:8a:88:67:71:bf:03:a0:a6:5c:13:89: 84:71:4f:4f:d2:5d:17:cd:f7:cf:73:d3:29:3e:76:f2:1a:07: 05:b7:25:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUErVsZLaIsUt0rbIYJUVGlKTenYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMDI2WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmRlM2FhNTI4OTgzYjY1NWIzNzc4OTQwODE4MWQxZjIw YzcxN2Y2ODhkOTM0ZjYxODc4OWEzYTAxNmY5MDYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTfB2Ya+tC+wnpEdUZmUOhLZU7i300Y/zsI3KQ/aDawE9g hEShLeXsHuUt7NcduyCP42ex9JjiVDF7y7XKMt6UCDmUom6niFmw9SugAaJo8m7L kyujkKmdp3tvf8ehGx5L7XJ6vMB8d7DbsACK+mH5gjwg41lDUq9pnzvczRiu8YOl DH06mB5C11zF7VWg3Cjzp16XnpKU+vGsAJ8fN+R4cz6FR+tThrMAZ2k1zQ8Osbbg a4sS31mnNeYx4HKbvILsZ6aWf5Od1+V0fbnY3ed1YrUaP01OBa0b188Wb4UeLlte 3GZVz6P5Huxd9myKMSkycsy6TnP/EXeohBQam3VDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJP2+YdyZUOzIANiYprE8D30nhOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkYzk2M2UyLTRiOWMtNGVkZS1iYTIzLThhYjg2ZmVmNWVkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCsDANBgkqhkiG9w0BAQsFAAOCAQEAmL2q1F1VPLlTlmCp9EiF9DU7XsE1 YU5t5X/Zkuq0zI6cmSF44UNHs2pSaF6J49JL1EdIV4NabL/CaMm7T2QwlueE7495 ChWV2LY3oT5GVzoc5gXn4fsJP/nUZsGs1dNuHyKwgt7eDTyHwV7EXE+ADOiHe7AE atp2A7tyZSw9atZc5OG6514s7a3gQOh/ONMhTDPq2uDREOpeCK0tu5VkEgN/7fqP 6pGDVuM7QpJb/BiFzjqC/AdswWEuKDQubqfpWJxutDi62I1ZghooYRiRoSmhJGK1 r1QEf5eF0gJggoqIZ3G/A6CmXBOJhHFPT9JdF833z3PTKT528hoHBbclQw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:11 2025 by rpki-client