$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa File: 5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa (raw, json) Hash identifier: dCPDOzSkR4Ebh9h0AqFD4wWf+02zaQE20pGWtNoa7to= Subject key identifier: A2:35:38:CF:EB:D5:F3:E6:EC:8B:FC:3F:32:BE:44:A9:30:E4:2F:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1715B11C000E25FBC13346A4738BD4C4405AEB79 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa Signing time: Fri 11 Jul 2025 15:00:33 +0000 ROA not before: Fri 11 Jul 2025 15:00:33 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.79.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:15:b1:1c:00:0e:25:fb:c1:33:46:a4:73:8b:d4:c4:40:5a:eb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 15:00:33 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=e87ab5fa44e2fcbd5f489481c58a2047e3b184b754a78ab506af788a5bf3b400, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:a0:15:21:2e:51:74:6a:94:06:68:92:d0: a3:75:da:dd:8c:f9:d3:1f:56:b2:23:ac:c4:c4:ce: b6:98:37:23:04:36:48:ed:b8:c0:8d:94:c6:5c:2f: 5a:27:af:3e:3d:04:8e:34:d8:c5:99:03:b7:ad:d5: b5:7f:77:1a:0d:30:bd:6b:4a:d0:27:47:3e:a7:6c: 6d:22:c7:a7:00:60:86:36:7f:95:5c:a7:49:37:56: 06:db:f7:03:87:87:a0:03:a7:e7:1f:41:5d:13:9e: 01:c1:36:04:48:83:d0:0a:ab:83:b6:a2:b2:ed:5b: c3:8c:65:e2:c8:1f:b7:d1:01:33:2e:30:20:38:bf: 05:a9:64:7c:07:eb:66:a0:ac:16:d1:c0:e6:df:8b: 22:20:eb:a4:02:2f:ee:12:a5:12:e7:ab:3b:97:4a: bf:05:7e:8b:07:5a:e2:db:0b:12:2d:d5:ff:23:73: 96:25:b7:3e:08:ed:03:df:7d:fd:36:a5:8d:0e:03: 14:9f:67:38:35:70:91:1b:e2:ca:49:c7:7e:fa:08: 4d:46:91:90:ce:c4:34:11:f6:d5:42:1a:dd:5b:6d: 68:40:17:12:4e:3a:51:3e:ff:ab:1f:f2:ea:69:ef: e0:be:9c:d8:56:ef:87:ab:f5:91:32:e7:49:23:1c: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:38:CF:EB:D5:F3:E6:EC:8B:FC:3F:32:BE:44:A9:30:E4:2F:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.79.34.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:40:ca:ae:72:77:14:85:62:c4:82:fa:ec:5a:ab:bc:df:02: 87:fa:4b:53:fd:89:a8:dc:9c:05:80:9f:e5:e5:8c:c8:34:cf: 95:36:7c:53:6b:47:e9:52:f2:32:b6:c3:8e:bc:6c:14:c2:35: cf:69:54:06:02:ba:67:95:60:9b:bc:4c:b8:8d:5c:f7:76:e2: 40:90:3e:ad:37:a7:4b:fc:35:b9:e2:92:d6:bd:63:96:7e:bd: 39:59:b5:56:af:25:98:3a:d4:2d:0b:2b:33:d2:b0:b4:6b:7a: 1d:35:1c:dc:8e:3a:ea:7c:fe:35:82:45:55:ad:00:df:19:c1: 33:bd:42:e9:a1:4d:3c:ed:83:a3:0c:f2:ec:c7:d2:05:67:8d: 33:d1:72:5a:94:fb:02:e6:c4:eb:7f:8d:eb:7d:b3:73:b3:13: da:20:d1:90:7f:0c:1c:44:b4:cc:9c:f2:18:f6:68:5a:5a:13: b8:ca:4f:d2:29:80:db:67:d0:55:30:06:91:ce:23:2d:69:44: b2:14:bb:42:84:06:42:af:09:47:f3:47:b9:94:05:95:23:9f: a4:4e:2e:ce:b2:71:17:dc:e2:7e:e2:c0:a8:93:99:ec:8f:83: 57:21:96:11:f8:51:12:9f:b1:31:f3:cc:d3:18:75:d0:55:64: b9:09:88:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFxWxHAAOJfvBM0akc4vUxEBa63kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMTUwMDMzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODdhYjVmYTQ0ZTJmY2JkNWY0ODk0ODFjNThhMjA0N2Uz YjE4NGI3NTRhNzhhYjUwNmFmNzg4YTViZjNiNDAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTFKAVIS5RdGqUBmiS0KN12t2M+dMfVrIjrMTEzraYNyME NkjtuMCNlMZcL1onrz49BI402MWZA7et1bV/dxoNML1rStAnRz6nbG0ix6cAYIY2 f5Vcp0k3Vgbb9wOHh6ADp+cfQV0TngHBNgRIg9AKq4O2orLtW8OMZeLIH7fRATMu MCA4vwWpZHwH62agrBbRwObfiyIg66QCL+4SpRLnqzuXSr8FfosHWuLbCxIt1f8j c5Yltz4I7QPfff02pY0OAxSfZzg1cJEb4spJx376CE1GkZDOxDQR9tVCGt1bbWhA FxJOOlE+/6sf8upp7+C+nNhW74er9ZEy50kjHBbvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUojU4z+vV8+bsi/w/Mr5EqTDkL5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlZDVkMmFmLTkxNDYtNDk0Ni1iYTFmLTY4MGI0YmExZTBmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjTyIwDQYJKoZIhvcNAQELBQADggEBAG1Ayq5ydxSFYsSC+uxaq7zfAof6 S1P9iajcnAWAn+XljMg0z5U2fFNrR+lS8jK2w468bBTCNc9pVAYCumeVYJu8TLiN XPd24kCQPq03p0v8Nbnikta9Y5Z+vTlZtVavJZg61C0LKzPSsLRreh01HNyOOup8 /jWCRVWtAN8ZwTO9QumhTTztg6MM8uzH0gVnjTPRclqU+wLmxOt/jet9s3OzE9og 0ZB/DBxEtMyc8hj2aFpaE7jKT9IpgNtn0FUwBpHOIy1pRLIUu0KEBkKvCUfzR7mU BZUjn6ROLs6ycRfc4n7iwKiTmeyPg1chlhH4URKfsTHzzNMYddBVZLkJiIE= -----END CERTIFICATE-----Generated at Thu Jul 31 01:20:30 2025 by rpki-client