$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa File: ce9b44e8-c731-4450-962f-6cad76033edf.roa (raw, json) Hash identifier: e/lLvlcZA55VGP8ovtMhi644kPsQKnKjXenh9CWjOHk= Subject key identifier: 3A:E7:0C:7F:D7:02:36:33:9B:95:0C:FC:77:BD:93:EB:44:5A:35:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CE7F18FD603A24025FE045707E94069BB23EC33 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa Signing time: Mon 11 Aug 2025 15:10:31 +0000 ROA not before: Mon 11 Aug 2025 15:10:31 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e7:f1:8f:d6:03:a2:40:25:fe:04:57:07:e9:40:69:bb:23:ec:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:10:31 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=e8a7d21580db7e4abb96accf33868c0d4d7fe5ef52e02fd40dce867295bdc2ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:af:bc:a0:d4:67:0f:8d:ad:56:04:81:54: c5:1f:ed:ac:ed:58:cc:1d:85:b9:24:19:17:52:c3: 94:12:72:aa:d2:5a:d1:7d:24:74:46:73:8c:fe:5b: 70:18:7d:4e:8c:10:9d:43:c7:f4:5c:66:73:67:a0: b8:6f:99:b4:d2:7e:5e:be:3b:21:85:5e:5e:46:4d: 0f:ee:27:eb:18:8c:b6:52:97:0f:03:fb:4e:b1:84: b5:4b:06:36:55:88:09:a6:b6:fe:60:86:9a:da:a0: 88:75:a8:7b:40:98:20:9a:56:f5:f9:c8:da:90:91: 3b:eb:e3:4b:71:f0:2d:3e:a7:af:57:31:c5:50:78: 49:28:99:62:1b:8a:35:8e:9e:62:41:f0:f6:df:f1: 65:e8:b7:b6:e2:e0:a3:d9:81:a4:08:24:cb:aa:ae: 9d:27:12:c5:2e:96:ee:03:dd:31:18:d2:31:96:df: ff:8c:05:83:8a:71:3a:eb:c7:c7:fb:8f:07:4e:19: a6:5b:c4:b7:6d:c1:01:8d:63:25:fa:66:9c:d2:ae: 1f:fb:01:5b:56:3a:68:51:e8:b9:ab:33:7e:49:da: 03:4c:a2:78:7c:9a:28:e8:d7:4d:32:59:23:46:46: c5:dc:53:a2:14:91:71:cc:5d:4a:75:6e:23:ce:5f: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E7:0C:7F:D7:02:36:33:9B:95:0C:FC:77:BD:93:EB:44:5A:35:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9b44e8-c731-4450-962f-6cad76033edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:bf:23:96:6b:7f:41:8a:47:d9:32:74:0f:0a:b4:e1:f4:ae: 9d:da:8f:35:6d:e9:ab:dc:2b:67:91:c0:bd:c5:3f:0e:61:9e: 0f:cd:53:77:ca:46:61:e0:76:c5:f8:ff:a1:44:10:e1:48:97: 84:16:43:44:a8:e5:11:89:f5:88:90:be:c1:14:2a:80:86:dc: 2d:52:b5:04:aa:13:5b:39:65:ad:6f:17:e6:90:f9:c2:1d:29: fb:c2:e1:ef:84:18:e8:e6:2d:a4:89:12:d8:79:30:a6:02:d9: 82:6f:2a:72:3b:58:11:fe:90:de:b3:59:b9:88:a5:4c:67:de: 1f:88:49:86:e8:cc:b0:60:39:b0:86:6b:85:23:45:9d:a4:b5: 2f:e8:11:f9:9d:1a:4f:91:41:ed:70:5f:27:c6:ed:05:7e:97: 58:fe:61:e3:b0:37:95:2b:c3:76:7c:6a:07:8f:45:de:45:2d: 4d:17:6c:1b:4e:3f:09:51:c8:a4:ea:5b:9e:70:a6:20:43:81: 00:49:19:c4:f7:c0:04:0d:32:57:f9:fb:2f:2d:8b:11:6e:1d: a2:30:b7:40:21:46:4d:33:8f:d1:72:4d:0f:84:6f:45:f8:fb: 98:57:2f:75:45:a5:eb:4d:cd:69:66:75:9f:e3:b3:08:c6:b1: 9a:7a:34:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfOfxj9YDokAl/gRXB+lAabsj7DMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUxMDMxWhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGE3ZDIxNTgwZGI3ZTRhYmI5NmFjY2YzMzg2OGMwZDRk N2ZlNWVmNTJlMDJmZDQwZGNlODY3Mjk1YmRjMmVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxWq+8oNRnD42tVgSBVMUf7aztWMwdhbkkGRdSw5QScqrS WtF9JHRGc4z+W3AYfU6MEJ1Dx/RcZnNnoLhvmbTSfl6+OyGFXl5GTQ/uJ+sYjLZS lw8D+06xhLVLBjZViAmmtv5ghpraoIh1qHtAmCCaVvX5yNqQkTvr40tx8C0+p69X McVQeEkomWIbijWOnmJB8Pbf8WXot7bi4KPZgaQIJMuqrp0nEsUulu4D3TEY0jGW 3/+MBYOKcTrrx8f7jwdOGaZbxLdtwQGNYyX6ZpzSrh/7AVtWOmhR6LmrM35J2gNM onh8mijo100yWSNGRsXcU6IUkXHMXUp1biPOX9rvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOucMf9cCNjOblQz8d72T60RaNZgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlOWI0NGU4LWM3MzEtNDQ1MC05NjJmLTZjYWQ3NjAzM2VkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTTANBgkqhkiG9w0BAQsFAAOCAQEAib8jlmt/QYpH2TJ0Dwq04fSundqP NW3pq9wrZ5HAvcU/DmGeD81Td8pGYeB2xfj/oUQQ4UiXhBZDRKjlEYn1iJC+wRQq gIbcLVK1BKoTWzllrW8X5pD5wh0p+8Lh74QY6OYtpIkS2HkwpgLZgm8qcjtYEf6Q 3rNZuYilTGfeH4hJhujMsGA5sIZrhSNFnaS1L+gR+Z0aT5FB7XBfJ8btBX6XWP5h 47A3lSvDdnxqB49F3kUtTRdsG04/CVHIpOpbnnCmIEOBAEkZxPfABA0yV/n7Ly2L EW4dojC3QCFGTTOP0XJND4RvRfj7mFcvdUWl603NaWZ1n+OzCMaxmno0RA== -----END CERTIFICATE-----Generated at Thu Aug 21 18:57:16 2025 by rpki-client