$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e69cd209-913d-40b8-95f4-5a532552b383.roa File: e69cd209-913d-40b8-95f4-5a532552b383.roa (raw, json) Hash identifier: wvwcND2Nvor2vAjogeTY9AwFyOOoHoFT269YpwBmOwk= Subject key identifier: 57:1E:26:47:84:B3:C4:22:0F:FB:4A:EC:CE:86:E2:D4:6C:D6:E5:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65F27E45679619F5C704435B43FE1530BADDCA8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e69cd209-913d-40b8-95f4-5a532552b383.roa Signing time: Wed 09 Jul 2025 00:11:23 +0000 ROA not before: Wed 09 Jul 2025 00:11:23 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f2:7e:45:67:96:19:f5:c7:04:43:5b:43:fe:15:30:ba:dd:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:11:23 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=cb0bf7d30a6555e113e80a772168967e5b6ede5aa7679ea82a3042cd201f914f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:71:84:87:c8:81:15:be:6c:4a:93:7b:c5: 67:35:9e:49:fa:22:8a:47:cc:b0:cf:98:a5:39:94: 0d:d8:46:5a:d6:5d:71:c1:b7:ca:0b:76:14:f5:ba: 1f:88:77:51:3c:a6:4a:8e:61:93:96:c7:82:b6:90: c5:94:28:29:0c:d5:3a:99:6d:6d:ea:52:2f:34:68: 91:6a:c1:f9:85:3f:cb:b6:29:e8:f1:2c:20:c3:23: 63:55:5e:98:de:e9:13:48:26:80:72:6f:0e:ca:5c: 60:fc:dd:c5:1a:b2:19:75:71:34:cd:0c:d0:17:cf: 52:3b:00:5b:74:5b:68:93:c6:85:65:b2:7f:f4:27: 3b:68:40:18:0f:e2:eb:05:d7:43:68:57:88:4e:ea: cb:41:c4:68:d3:a0:4b:48:37:08:3b:37:b8:7e:ac: 3a:4c:de:c2:08:45:19:4a:45:33:ff:6e:cd:5d:0b: 60:17:db:f9:ee:cb:b7:50:74:e7:56:03:ea:d4:80: 83:6c:53:40:9c:13:4b:26:66:65:86:33:58:fc:60: ab:46:4a:94:21:d1:3e:df:4f:c0:07:c1:fe:12:d8: 10:a5:0d:17:2d:33:9a:54:d4:b3:e8:d2:10:2a:98: 55:14:0b:db:1e:b6:e3:b9:1f:43:d5:f8:54:cc:31: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:26:47:84:B3:C4:22:0F:FB:4A:EC:CE:86:E2:D4:6C:D6:E5:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e69cd209-913d-40b8-95f4-5a532552b383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.14.0/23 Signature Algorithm: sha256WithRSAEncryption 96:61:a7:37:f0:e1:b7:3a:b5:b9:ad:35:f6:55:88:c6:79:e0: 0b:30:49:d9:09:93:d5:8f:df:47:c2:6b:b0:f1:21:dd:7d:72: 3a:75:79:d5:94:46:c5:85:f7:9e:85:d9:52:aa:b6:5e:d9:d2: d9:6e:d7:c2:f2:9d:4b:1e:53:76:09:5c:6f:d5:93:ca:5b:eb: 97:a5:a6:5c:88:79:e2:d9:37:b8:14:d8:f6:12:2b:4e:7f:6e: 09:33:3a:a4:4f:0b:37:65:ef:07:f5:21:19:11:14:e8:aa:51: 7f:a7:cd:3f:9a:6c:bc:e4:e6:58:22:84:82:c6:1a:f5:39:0f: f7:32:54:01:b9:f1:be:37:80:00:e8:13:6b:4d:38:6f:9c:51: 43:9f:46:bd:03:52:1d:ff:ea:44:8c:ee:00:50:9c:e4:28:13: e7:5e:72:c0:c8:ee:ca:ac:16:8d:86:4e:25:b3:9c:72:0c:70: 47:a7:10:9c:fa:7c:40:e6:64:27:8b:f0:ca:d9:0e:da:83:d0: 94:4a:7e:b3:02:ce:71:82:34:d0:0a:23:d8:a2:25:9b:c5:42: 3a:bb:bb:9e:72:04:b4:77:7a:3e:1d:e0:23:83:d1:dd:a4:cd: 8f:60:0a:88:b3:1b:4d:62:25:9a:53:0c:71:d5:b6:f7:e9:57: dd:ba:a2:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZfJ+RWeWGfXHBENbQ/4VMLrdyo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAxMTIzWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjBiZjdkMzBhNjU1NWUxMTNlODBhNzcyMTY4OTY3ZTVi NmVkZTVhYTc2NzllYTgyYTMwNDJjZDIwMWY5MTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5lnGEh8iBFb5sSpN7xWc1nkn6IopHzLDPmKU5lA3YRlrW XXHBt8oLdhT1uh+Id1E8pkqOYZOWx4K2kMWUKCkM1TqZbW3qUi80aJFqwfmFP8u2 KejxLCDDI2NVXpje6RNIJoBybw7KXGD83cUashl1cTTNDNAXz1I7AFt0W2iTxoVl sn/0JztoQBgP4usF10NoV4hO6stBxGjToEtINwg7N7h+rDpM3sIIRRlKRTP/bs1d C2AX2/nuy7dQdOdWA+rUgINsU0CcE0smZmWGM1j8YKtGSpQh0T7fT8AHwf4S2BCl DRctM5pU1LPo0hAqmFUUC9setuO5H0PV+FTMMdLxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVx4mR4SzxCIP+0rszobi1GzW5S4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2OWNkMjA5LTkxM2QtNDBiOC05NWY0LTVhNTMyNTUyYjM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBsw4wDQYJKoZIhvcNAQELBQADggEBAJZhpzfw4bc6tbmtNfZViMZ54Asw SdkJk9WP30fCa7DxId19cjp1edWURsWF956F2VKqtl7Z0tlu18LynUseU3YJXG/V k8pb65elplyIeeLZN7gU2PYSK05/bgkzOqRPCzdl7wf1IRkRFOiqUX+nzT+abLzk 5lgihILGGvU5D/cyVAG58b43gADoE2tNOG+cUUOfRr0DUh3/6kSM7gBQnOQoE+de csDI7sqsFo2GTiWznHIMcEenEJz6fEDmZCeL8MrZDtqD0JRKfrMCznGCNNAKI9ii JZvFQjq7u55yBLR3ej4d4COD0d2kzY9gCoizG01iJZpTDHHVtvfpV926opM= -----END CERTIFICATE-----Generated at Mon Jul 21 23:33:17 2025 by rpki-client