$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa File: eae82c23-ee5e-45d3-86ca-6380321381d0.roa (raw, json) Hash identifier: 9dm9jgNVuuPZMkNBH0V+wGxHy8c6hmkgMeEkrAEyo0Q= Subject key identifier: A1:1D:E3:84:B6:8B:82:AB:D8:9C:34:CB:AF:61:1C:F5:31:B4:EB:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A4053E1EDB12F382E59F84BCE26DCBBDFC32A0C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa Signing time: Tue 08 Jul 2025 00:31:49 +0000 ROA not before: Tue 08 Jul 2025 00:31:49 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.56.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:53:e1:ed:b1:2f:38:2e:59:f8:4b:ce:26:dc:bb:df:c3:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:31:49 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=0a24939476417c30fc8fe312b8fa8eda3de60f037e9d05b372bbdf6fdf14b361, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:e9:26:3d:2c:a9:74:85:23:f3:ff:2c:4a: 76:d8:bc:c9:8b:3a:d1:6c:4c:ca:92:f0:d9:d7:79: 40:84:6d:db:68:0c:74:8d:45:73:46:27:c3:60:0d: c9:01:18:87:91:12:84:cb:3a:63:01:9e:01:6f:1c: 97:2a:b6:f3:47:ed:aa:52:1a:25:7d:be:05:4b:41: c9:6c:ef:4f:bf:4f:ab:fe:98:5c:37:c8:2b:13:97: ab:08:43:7e:bb:f3:1c:13:48:56:26:98:b8:0c:ed: 53:af:b1:e7:8b:5d:11:64:0c:c0:10:22:e0:23:fa: ac:71:6f:8d:66:b5:a6:fc:94:8d:e4:24:d6:bf:94: 69:17:84:a8:9a:f0:e5:69:e1:d7:be:f5:19:60:42: c9:ab:91:7f:7c:45:34:04:e0:51:22:8b:a0:a6:77: 9b:c7:8c:ae:58:47:61:6d:ca:14:61:d8:af:36:9b: 05:cf:16:65:28:dc:a2:5f:de:bc:69:de:ec:05:e2: d3:b6:2f:4c:2b:63:e5:78:75:48:ed:eb:e9:7b:8a: 25:35:52:de:a1:98:96:b1:32:bb:67:5f:e9:6e:9a: 21:34:eb:60:1c:d8:5a:3e:d2:79:9b:74:b0:57:e0: 94:b9:14:78:16:9d:e7:13:11:f7:96:1d:07:8a:88: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:E3:84:B6:8B:82:AB:D8:9C:34:CB:AF:61:1C:F5:31:B4:EB:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.128.0/19 Signature Algorithm: sha256WithRSAEncryption 86:37:4b:25:ec:40:31:12:9b:06:11:be:d2:75:7d:db:36:5a: af:5b:77:cc:e5:36:fe:22:2c:b7:13:60:64:20:5a:bc:27:52: 20:b6:97:9e:e4:53:d0:22:bf:4c:b6:d2:54:82:3e:93:bb:31: ce:af:e6:12:33:e5:87:7d:8e:9d:e7:8d:ea:d4:3a:90:ff:40: 62:24:7f:5b:12:b6:9f:42:a1:71:17:30:9c:40:c2:36:0a:1c: e1:ef:1d:19:a8:ad:3a:50:2c:e5:b6:9e:83:ec:97:65:26:e2: ec:bb:a5:23:82:98:2c:95:cd:4e:51:85:5f:1f:4d:7c:d0:31: 20:2b:b4:cd:f7:da:8d:bd:8f:17:4c:30:47:30:a8:bf:2e:78: 60:06:a9:3c:0f:db:99:cb:22:e6:f1:c4:2e:f6:f2:2c:4a:17: 5b:16:c9:23:93:38:4e:b5:c6:dc:41:95:80:c9:f3:2f:60:e7: 47:1f:f8:94:ae:96:4c:7e:bd:1a:d3:37:dc:fd:df:8b:d6:5d: 30:9b:e4:6b:ee:57:00:a9:4d:6c:16:ee:f7:b9:b6:72:31:fe: 7e:e2:d4:af:31:1f:3c:b9:f7:c1:64:96:0d:ff:d0:2f:33:9d: 6d:ef:c4:ad:f3:aa:e0:d9:5f:c9:cb:52:e4:0e:ff:3f:f2:9c: 57:ba:a8:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSkBT4e2xLzguWfhLzibcu9/DKgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAzMTQ5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTI0OTM5NDc2NDE3YzMwZmM4ZmUzMTJiOGZhOGVkYTNk ZTYwZjAzN2U5ZDA1YjM3MmJiZGY2ZmRmMTRiMzYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcTukmPSypdIUj8/8sSnbYvMmLOtFsTMqS8NnXeUCEbdto DHSNRXNGJ8NgDckBGIeREoTLOmMBngFvHJcqtvNH7apSGiV9vgVLQcls70+/T6v+ mFw3yCsTl6sIQ3678xwTSFYmmLgM7VOvseeLXRFkDMAQIuAj+qxxb41mtab8lI3k JNa/lGkXhKia8OVp4de+9RlgQsmrkX98RTQE4FEii6Cmd5vHjK5YR2FtyhRh2K82 mwXPFmUo3KJf3rxp3uwF4tO2L0wrY+V4dUjt6+l7iiU1Ut6hmJaxMrtnX+lumiE0 62Ac2Fo+0nmbdLBX4JS5FHgWnecTEfeWHQeKiHdTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoR3jhLaLgqvYnDTLr2Ec9TG069cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhZTgyYzIzLWVlNWUtNDVkMy04NmNhLTYzODAzMjEzODFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOIAwDQYJKoZIhvcNAQELBQADggEBAIY3SyXsQDESmwYRvtJ1fds2Wq9b d8zlNv4iLLcTYGQgWrwnUiC2l57kU9Aiv0y20lSCPpO7Mc6v5hIz5Yd9jp3njerU OpD/QGIkf1sStp9CoXEXMJxAwjYKHOHvHRmorTpQLOW2noPsl2Um4uy7pSOCmCyV zU5RhV8fTXzQMSArtM332o29jxdMMEcwqL8ueGAGqTwP25nLIubxxC728ixKF1sW ySOTOE61xtxBlYDJ8y9g50cf+JSulkx+vRrTN9z934vWXTCb5GvuVwCpTWwW7ve5 tnIx/n7i1K8xHzy598Fklg3/0C8znW3vxK3zquDZX8nLUuQO/z/ynFe6qAY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:26 2025 by rpki-client