$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2614b3de-e416-451f-887d-9630fb334aa7.roa File: 2614b3de-e416-451f-887d-9630fb334aa7.roa (raw, json) Hash identifier: q62786nVnLlK9/fXETQLOV2rLzJnTiT/BJCXitzg7s8= Subject key identifier: FB:78:4F:2F:AF:70:DD:9D:43:34:C9:40:46:96:48:31:79:67:F3:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19710F7E4B075DFBCE30049F55E2A15FB89A5751 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2614b3de-e416-451f-887d-9630fb334aa7.roa Signing time: Fri 25 Jul 2025 00:11:19 +0000 ROA not before: Fri 25 Jul 2025 00:11:19 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.69.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:71:0f:7e:4b:07:5d:fb:ce:30:04:9f:55:e2:a1:5f:b8:9a:57:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:11:19 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=80b6a5ee1c778db22ca650610a0acc7120c21d2bb2092363e28c903d72e6051b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:da:47:c5:d7:78:36:f4:0c:73:03:91:3d: 05:39:7a:94:13:91:bc:60:26:5f:fa:62:3e:21:f7: 54:e0:50:19:db:65:54:98:19:b0:11:53:e3:da:30: 3e:bb:28:e3:96:b9:b7:6b:8a:54:b0:01:a0:08:07: 9b:b2:18:89:46:42:03:65:8a:eb:41:cb:a3:b8:c3: 4a:c2:44:69:99:00:5a:21:e2:11:cd:e6:70:b7:2e: 9f:b7:04:79:8a:58:b3:d8:ad:59:e6:40:f2:2b:60: 8f:b5:e0:6b:7a:94:68:39:af:b5:de:3d:81:39:13: b7:e7:8e:15:f1:89:6e:ab:f8:d1:0a:b8:d4:1c:a6: 23:bf:e1:a7:fe:82:39:a5:23:7a:aa:4a:f5:10:7e: 65:bb:98:df:80:ec:6e:e7:c3:b7:ca:82:56:80:96: 68:72:72:98:ef:8f:9f:9f:0d:2b:33:d5:b5:b7:a1: 70:90:7a:27:22:da:4c:78:95:2d:2f:c2:e0:b7:93: 71:11:e9:d1:a0:20:7c:16:61:3d:74:78:62:f6:2d: 26:b1:0d:ed:8e:80:48:a8:1b:9f:b1:46:ff:3d:9f: 10:b5:e4:df:90:94:79:c9:0d:64:87:19:14:22:a6: 5b:fc:e8:2b:d5:18:79:05:d0:f2:21:90:c5:ac:87: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:4F:2F:AF:70:DD:9D:43:34:C9:40:46:96:48:31:79:67:F3:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2614b3de-e416-451f-887d-9630fb334aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:ef:7e:5e:1e:6a:6e:ba:c0:54:5b:23:7e:ed:ac:3e:6d:60: 74:0d:09:79:67:75:7a:76:4c:34:81:51:cc:cc:66:c2:90:f4: ce:4e:be:40:9d:fd:8e:fc:6f:fb:90:b2:89:5a:9e:58:5f:fa: 6c:4f:a2:02:e2:5e:21:cb:1a:85:d3:8b:10:da:c0:c3:5d:3c: 41:7d:95:3c:7c:15:96:73:ed:c9:d4:c8:aa:61:99:0d:bc:03: 5f:cb:d5:19:fe:ea:8f:43:74:48:39:58:1d:95:7d:7f:0c:af: 9b:2c:84:2d:34:85:a8:61:93:a4:27:09:71:d3:6b:39:59:35: 79:b5:24:b5:e5:02:64:33:68:b6:d8:ea:eb:bb:64:92:65:aa: 4f:93:06:62:6a:51:d0:cc:99:df:6d:9a:f7:53:5e:d8:4a:ec: 7a:36:df:e2:3e:bd:c7:cb:95:7e:a4:99:e6:bd:75:7b:e0:c7: 2c:fb:50:ac:98:f6:15:bd:10:35:46:45:97:65:1e:29:e2:70: ee:fd:c2:47:46:29:cf:91:83:ea:4c:98:e8:c5:a1:e7:20:45: e7:5c:54:64:27:9d:da:7e:1f:be:68:86:72:a2:b3:c2:38:e1: ce:b9:a1:ac:cd:a8:d5:13:12:7c:ee:3e:7c:e6:c8:9c:9e:bc: 34:86:61:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGXEPfksHXfvOMASfVeKhX7iaV1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAxMTE5WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGI2YTVlZTFjNzc4ZGIyMmNhNjUwNjEwYTBhY2M3MTIw YzIxZDJiYjIwOTIzNjNlMjhjOTAzZDcyZTYwNTFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCasNpHxdd4NvQMcwORPQU5epQTkbxgJl/6Yj4h91TgUBnb ZVSYGbARU+PaMD67KOOWubdrilSwAaAIB5uyGIlGQgNliutBy6O4w0rCRGmZAFoh 4hHN5nC3Lp+3BHmKWLPYrVnmQPIrYI+14Gt6lGg5r7XePYE5E7fnjhXxiW6r+NEK uNQcpiO/4af+gjmlI3qqSvUQfmW7mN+A7G7nw7fKglaAlmhycpjvj5+fDSsz1bW3 oXCQeici2kx4lS0vwuC3k3ER6dGgIHwWYT10eGL2LSaxDe2OgEioG5+xRv89nxC1 5N+QlHnJDWSHGRQiplv86CvVGHkF0PIhkMWsh8xTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+3hPL69w3Z1DNMlARpZIMXln87wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2MTRiM2RlLWU0MTYtNDUxZi04ODdkLTk2MzBmYjMzNGFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4RTANBgkqhkiG9w0BAQsFAAOCAQEAn+9+Xh5qbrrAVFsjfu2sPm1gdA0J eWd1enZMNIFRzMxmwpD0zk6+QJ39jvxv+5CyiVqeWF/6bE+iAuJeIcsahdOLENrA w108QX2VPHwVlnPtydTIqmGZDbwDX8vVGf7qj0N0SDlYHZV9fwyvmyyELTSFqGGT pCcJcdNrOVk1ebUkteUCZDNottjq67tkkmWqT5MGYmpR0MyZ322a91Ne2Ersejbf 4j69x8uVfqSZ5r11e+DHLPtQrJj2Fb0QNUZFl2UeKeJw7v3CR0Ypz5GD6kyY6MWh 5yBF51xUZCed2n4fvmiGcqKzwjjhzrmhrM2o1RMSfO4+fObInJ68NIZhTQ== -----END CERTIFICATE-----Generated at Thu Jul 31 01:22:48 2025 by rpki-client