$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/158b805b-2506-47c4-a087-7b0accaf249e.roa File: 158b805b-2506-47c4-a087-7b0accaf249e.roa (raw, json) Hash identifier: Q1OXeC5zrDL7usiksUTS22xFJO9geGUmiIFSgZvPLI4= Subject key identifier: C0:F3:F8:63:4E:14:ED:22:91:DF:B3:51:E6:7F:66:27:08:52:E7:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74389E3E618AB5CE243E15206A7215CE33582948 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/158b805b-2506-47c4-a087-7b0accaf249e.roa Signing time: Tue 17 Jun 2025 16:07:09 +0000 ROA not before: Tue 17 Jun 2025 16:07:09 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.71.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:38:9e:3e:61:8a:b5:ce:24:3e:15:20:6a:72:15:ce:33:58:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 16:07:09 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=af55fc42d36131892a86a521960afcc1b55a42bbdf84e3999af2277f685253ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:af:25:44:8d:5f:f8:71:4b:e1:24:a8:cd: fc:56:6d:d1:2c:8a:c5:b4:95:69:87:e5:c8:4a:42: 36:59:d6:88:b2:5e:b2:35:d4:22:d8:3e:de:65:83: 33:6a:3a:3d:43:20:2e:36:bc:97:ef:7f:9a:77:db: ba:ad:b2:06:d5:91:69:52:8d:bb:e3:58:01:3b:6b: 7a:22:6b:86:9f:84:4a:54:ae:92:24:47:c8:fe:74: 89:33:f1:74:c7:d9:71:9d:2a:0f:d6:12:d7:66:e8: b7:f0:ab:16:c8:3a:e6:1a:74:c6:0c:7d:28:cf:79: 54:05:02:81:93:12:6d:30:10:0c:59:85:e8:c9:a6: 69:03:ae:f4:46:e3:61:69:12:0d:4c:2c:fd:26:6e: a8:2d:6f:f2:c7:a5:a4:d6:85:69:bc:f3:8a:55:10: f0:eb:42:e8:15:93:29:75:d7:a6:4a:92:de:02:b4: b0:06:03:5d:9c:db:85:09:23:7e:c5:76:1b:13:88: d9:4a:66:7b:57:67:94:07:10:80:ba:f9:b6:52:6b: 62:d4:eb:f4:05:02:32:61:d1:a3:f3:35:c5:dd:91: 28:68:c4:a9:bf:45:98:49:a9:3c:b0:2f:63:7b:13: c2:d5:1b:e9:16:b3:33:c5:3c:1e:a4:2d:87:fa:cf: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F3:F8:63:4E:14:ED:22:91:DF:B3:51:E6:7F:66:27:08:52:E7:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/158b805b-2506-47c4-a087-7b0accaf249e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.71.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:07:0c:64:c6:fd:c6:9f:30:9a:80:92:3e:1f:b0:b2:5b:1e: c9:c5:f4:30:c7:33:22:3b:59:0a:d2:29:9b:c5:6b:0f:a1:17: 4b:4a:74:12:31:6f:96:80:ce:8e:d4:6a:cd:30:d4:bb:5b:ce: 9b:9b:4d:50:9b:5c:72:42:79:9c:f2:55:06:e4:7a:f3:5b:26: 83:b0:94:ae:4c:b2:39:84:37:99:33:e6:41:7a:30:28:10:8b: e1:1d:53:8c:14:a1:39:15:64:dc:1d:c4:40:0f:c7:28:e4:e8: 06:6b:eb:de:f5:95:1f:a7:91:9d:38:8f:c0:5a:6c:4e:a0:2b: a3:92:67:b4:82:3b:72:c4:1f:30:27:9c:e6:74:4e:60:85:19: 4a:ed:04:05:37:1e:0b:13:bc:79:18:08:cd:ba:71:9b:1c:7c: a3:c0:68:99:a7:95:ce:4a:5b:47:ad:7d:6f:24:3c:21:e4:0f: be:b8:28:a4:50:f7:85:d0:bf:66:3b:de:49:c6:b8:68:93:70: 7a:5c:04:74:32:f4:a8:cd:b2:38:3b:73:69:aa:98:83:c0:73: fe:c1:08:66:ca:64:d3:14:85:f4:c5:15:0f:a3:fe:0a:64:5a: a2:e7:36:a6:22:ce:66:e3:a4:1d:48:7d:82:de:99:90:5e:61: 85:5b:72:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdDiePmGKtc4kPhUganIVzjNYKUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MTYwNzA5WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjU1ZmM0MmQzNjEzMTg5MmE4NmE1MjE5NjBhZmNjMWI1 NWE0MmJiZGY4NGUzOTk5YWYyMjc3ZjY4NTI1M2VmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW+68lRI1f+HFL4SSozfxWbdEsisW0lWmH5chKQjZZ1oiy XrI11CLYPt5lgzNqOj1DIC42vJfvf5p327qtsgbVkWlSjbvjWAE7a3oia4afhEpU rpIkR8j+dIkz8XTH2XGdKg/WEtdm6LfwqxbIOuYadMYMfSjPeVQFAoGTEm0wEAxZ hejJpmkDrvRG42FpEg1MLP0mbqgtb/LHpaTWhWm884pVEPDrQugVkyl116ZKkt4C tLAGA12c24UJI37FdhsTiNlKZntXZ5QHEIC6+bZSa2LU6/QFAjJh0aPzNcXdkSho xKm/RZhJqTywL2N7E8LVG+kWszPFPB6kLYf6z4G5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwPP4Y04U7SKR37NR5n9mJwhS5zEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1OGI4MDViLTI1MDYtNDdjNC1hMDg3LTdiMGFjY2FmMjQ5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQRyAwDQYJKoZIhvcNAQELBQADggEBAF0HDGTG/cafMJqAkj4fsLJbHsnF 9DDHMyI7WQrSKZvFaw+hF0tKdBIxb5aAzo7Uas0w1LtbzpubTVCbXHJCeZzyVQbk evNbJoOwlK5MsjmEN5kz5kF6MCgQi+EdU4wUoTkVZNwdxEAPxyjk6AZr6971lR+n kZ04j8BabE6gK6OSZ7SCO3LEHzAnnOZ0TmCFGUrtBAU3HgsTvHkYCM26cZscfKPA aJmnlc5KW0etfW8kPCHkD764KKRQ94XQv2Y73knGuGiTcHpcBHQy9KjNsjg7c2mq mIPAc/7BCGbKZNMUhfTFFQ+j/gpkWqLnNqYizmbjpB1IfYLemZBeYYVbcmQ= -----END CERTIFICATE-----Generated at Tue Jul 1 01:16:07 2025 by rpki-client