$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa File: dfeccc68-b535-451a-9cc7-983817c87adf.roa (raw, json) Hash identifier: kc01T0dsnu3UWy0FeAyqTqYNfiseeEn9wrZuZ1B3IyY= Subject key identifier: 29:DB:73:9A:18:40:2C:C0:4D:5A:E8:35:28:3D:D8:04:7D:36:BF:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72FBDB2FF0C04F6A98CE51F049A94D960E2A8E65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa Signing time: Wed 09 Jul 2025 00:42:15 +0000 ROA not before: Wed 09 Jul 2025 00:42:15 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.174.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fb:db:2f:f0:c0:4f:6a:98:ce:51:f0:49:a9:4d:96:0e:2a:8e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:42:15 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=cee9695f2246e43cb8a890dbc26de4136fd2548918a3e3305169e56f6b33f890, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:95:c2:79:99:4b:fa:c2:f0:39:a7:5e:2f: 4c:8c:9a:1f:03:f0:4b:39:b8:95:c8:45:b5:14:cb: 15:5c:5a:59:4e:d9:25:86:e3:4b:8b:65:36:1c:bf: 1d:ad:09:5d:ff:79:de:e3:c6:9f:5d:92:c4:c4:66: 55:57:25:20:67:44:c4:83:2c:4c:a3:14:7e:d4:12: 53:32:30:87:1f:fe:48:fe:1f:90:f1:38:3a:4a:4e: 50:95:75:0a:5e:f5:6a:ec:f7:c3:2c:35:8c:0b:92: 4a:f2:df:a9:b6:dc:a2:a9:9c:5f:32:af:8f:fd:2e: 1f:07:22:90:71:96:f8:48:c2:36:13:4b:2a:b4:30: 3f:82:8f:63:b4:c7:7a:b9:db:52:62:8e:b1:15:9d: b4:d4:e0:10:e5:28:04:f6:ca:32:4d:2d:e9:d7:cb: ed:e7:43:93:38:c1:15:ec:3b:41:1d:9b:53:b7:6b: 0c:60:d2:c9:a3:7a:7e:f1:b1:69:73:49:4c:84:45: 35:10:0d:be:ec:d4:9d:96:96:ca:b6:b7:51:c4:a9: c5:2e:d1:52:53:cb:b4:ad:ec:0c:54:89:e0:4b:41: 3a:97:b7:77:47:61:b2:4f:d0:7c:10:9a:28:ca:e2: 01:b8:8a:ea:cc:ba:f3:9c:0b:77:b6:9e:b6:0d:fb: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:73:9A:18:40:2C:C0:4D:5A:E8:35:28:3D:D8:04:7D:36:BF:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfeccc68-b535-451a-9cc7-983817c87adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.174.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1b:ee:b8:20:7e:3d:56:b5:25:33:06:97:04:14:60:fb:ab:e1: 6e:88:da:5d:56:88:6a:9b:58:b7:be:71:d6:b5:ac:4f:ac:0d: f2:c9:1a:a5:2c:81:fb:7d:29:d8:ef:46:27:a4:d5:2e:38:81: 8e:0a:97:05:5b:9a:a3:a8:1f:3d:8d:fb:1c:a6:10:bf:79:61: a9:b5:54:47:91:d1:db:ed:c6:bc:bf:c5:7f:95:91:d1:da:be: 80:8b:c7:b4:26:a9:ca:6d:40:aa:fd:a5:3f:a3:11:3e:9f:17: 96:e8:dd:47:57:32:b6:ca:57:09:10:cd:fd:3a:7f:f1:64:b7: c1:03:23:1d:ff:20:99:b7:79:04:4f:a4:ad:4b:42:7c:d8:da: 80:41:af:07:33:9f:01:35:08:26:6d:c5:2c:3a:ac:76:9d:3f: dc:f8:8d:a2:71:4f:6c:cc:3c:2b:96:9f:ce:83:90:6a:50:36: c7:42:b5:53:af:d0:4b:b1:4a:6e:57:a4:22:a7:5f:82:f0:3d: e7:6b:48:2d:8d:9d:5b:a6:b8:e2:1f:a7:e2:4f:f9:09:9c:90: 28:df:60:c5:e1:b3:fb:bb:c4:bf:52:9d:9a:93:f7:ee:c4:b1: ae:8d:15:3c:e6:26:4c:f7:af:bb:de:8c:97:a8:3e:61:86:ef: 02:6a:8a:64 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcvvbL/DAT2qYzlHwSalNlg4qjmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA0MjE1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWU5Njk1ZjIyNDZlNDNjYjhhODkwZGJjMjZkZTQxMzZm ZDI1NDg5MThhM2UzMzA1MTY5ZTU2ZjZiMzNmODkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmj5XCeZlL+sLwOadeL0yMmh8D8Es5uJXIRbUUyxVcWllO 2SWG40uLZTYcvx2tCV3/ed7jxp9dksTEZlVXJSBnRMSDLEyjFH7UElMyMIcf/kj+ H5DxODpKTlCVdQpe9Wrs98MsNYwLkkry36m23KKpnF8yr4/9Lh8HIpBxlvhIwjYT Syq0MD+Cj2O0x3q521JijrEVnbTU4BDlKAT2yjJNLenXy+3nQ5M4wRXsO0Edm1O3 awxg0smjen7xsWlzSUyERTUQDb7s1J2Wlsq2t1HEqcUu0VJTy7St7AxUieBLQTqX t3dHYbJP0HwQmijK4gG4iurMuvOcC3e2nrYN++2dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKdtzmhhALMBNWug1KD3YBH02v20wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZWNjYzY4LWI1MzUtNDUxYS05Y2M3LTk4MzgxN2M4N2FkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEorjANBgkqhkiG9w0BAQsFAAOCAQEAG+64IH49VrUlMwaXBBRg+6vhboja XVaIaptYt75x1rWsT6wN8skapSyB+30p2O9GJ6TVLjiBjgqXBVuao6gfPY37HKYQ v3lhqbVUR5HR2+3GvL/Ff5WR0dq+gIvHtCapym1Aqv2lP6MRPp8XlujdR1cytspX CRDN/Tp/8WS3wQMjHf8gmbd5BE+krUtCfNjagEGvBzOfATUIJm3FLDqsdp0/3PiN onFPbMw8K5afzoOQalA2x0K1U6/QS7FKblekIqdfgvA952tILY2dW6a44h+n4k/5 CZyQKN9gxeGz+7vEv1KdmpP37sSxro0VPOYmTPevu96Ml6g+YYbvAmqKZA== -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:56 2025 by rpki-client