$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa File: d4afba84-8d51-440d-a653-037c4b7ea55e.roa (raw, json) Hash identifier: blNo7fPBPh8+/2dV2jK80s0F/fRgbsUjNTTQDPVsnhg= Subject key identifier: 14:2F:2C:54:D3:EA:31:40:3B:0E:B8:8A:89:B3:B5:63:4B:2F:39:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2123711004512606ED605FF5D619CF0F2BEBD602 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa Signing time: Mon 30 Jun 2025 15:41:44 +0000 ROA not before: Mon 30 Jun 2025 15:41:44 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 99.151.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:23:71:10:04:51:26:06:ed:60:5f:f5:d6:19:cf:0f:2b:eb:d6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:41:44 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=791141693f4ec39348865fb7a31fdbb81048cf4aaadffeeaba7eba7b3321fdac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:ea:d4:f5:b6:1a:00:e0:5c:e2:ab:94:2f: 70:9f:38:40:a8:fc:94:be:fe:4d:a0:00:31:77:e2: 70:67:26:5c:e1:5c:fe:e3:68:86:d3:49:cb:76:f3: 69:31:f7:be:f9:39:06:a8:a1:4a:59:e8:ef:fe:ff: ec:30:e6:d9:25:70:0e:66:37:f8:3a:61:06:b6:91: 88:a4:a9:5b:9e:97:9c:5e:6d:3d:8a:49:cc:d2:44: bd:4d:de:a4:b5:70:c2:af:23:04:38:3d:af:ff:e9: bb:79:14:eb:2f:87:5d:73:79:57:c2:bd:67:d6:d2: ed:b7:5d:37:81:56:39:e2:a9:e2:90:85:d2:9a:aa: 2a:a6:4f:d3:f4:15:89:dc:2d:46:6e:54:92:ef:3f: 06:13:51:03:37:00:89:c8:c0:b7:d0:9a:c9:83:e2: c4:f0:e0:54:e6:9e:2e:c8:a2:67:9d:5d:0b:5b:84: 68:ba:87:1f:5a:70:d4:0f:6a:a0:6c:1b:5b:43:6e: 5b:92:a6:a3:43:54:13:7e:1d:46:68:f4:28:46:f8: f3:9a:f9:0f:6c:bf:a4:8c:14:62:47:b6:8a:f6:f1: d6:92:2d:55:c8:a1:4f:2d:30:68:f6:00:88:14:42: 5f:d0:5b:6d:42:6e:71:f7:63:e1:91:91:ad:9e:c3: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2F:2C:54:D3:EA:31:40:3B:0E:B8:8A:89:B3:B5:63:4B:2F:39:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/21 Signature Algorithm: sha256WithRSAEncryption 72:83:0d:92:af:7a:95:6f:ff:02:1c:22:3e:9a:86:c7:7f:97: 16:9e:11:46:81:8e:12:a4:e3:ea:f8:09:d5:2d:bb:df:40:f3: 16:fd:b7:b6:10:aa:10:57:ca:56:b2:48:8d:82:04:ce:99:78: f9:98:dd:65:97:b6:84:83:79:8a:1e:44:e2:df:6a:0c:d4:af: 1d:45:94:3b:82:97:b0:5f:b6:c8:10:8d:49:19:b3:48:b4:15: a4:0e:4c:c1:4b:b5:69:f5:58:fa:5b:08:3b:ba:70:a5:41:12: 3a:e0:d8:c7:65:90:63:d8:e1:88:33:35:85:46:bf:38:28:75: 4c:c7:d0:c4:41:84:b2:42:4e:23:4a:bc:fd:9e:26:e3:d2:78: 1e:98:f9:c2:9d:d9:07:37:16:93:e4:fa:0f:8a:6d:5c:0e:e0: 9f:8a:bf:2a:67:10:66:3a:f3:cc:4a:55:a4:75:0a:5f:17:01: fe:8c:14:42:b3:9c:c9:a0:ca:e9:50:f6:27:f5:28:c6:03:46: e6:07:0b:29:5c:25:a2:3e:6b:de:98:19:04:52:97:a7:6b:b9: 19:7a:61:26:bb:aa:d2:87:51:89:f8:c0:21:ad:ad:e7:5c:55: 7a:bc:db:d6:21:38:db:52:01:0b:47:d9:51:7a:ba:9c:9c:76: 7a:4e:5f:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUISNxEARRJgbtYF/11hnPDyvr1gIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTU0MTQ0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTExNDE2OTNmNGVjMzkzNDg4NjVmYjdhMzFmZGJiODEw NDhjZjRhYWFkZmZlZWFiYTdlYmE3YjMzMjFmZGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHsOrU9bYaAOBc4quUL3CfOECo/JS+/k2gADF34nBnJlzh XP7jaIbTSct282kx9775OQaooUpZ6O/+/+ww5tklcA5mN/g6YQa2kYikqVuel5xe bT2KSczSRL1N3qS1cMKvIwQ4Pa//6bt5FOsvh11zeVfCvWfW0u23XTeBVjniqeKQ hdKaqiqmT9P0FYncLUZuVJLvPwYTUQM3AInIwLfQmsmD4sTw4FTmni7IomedXQtb hGi6hx9acNQPaqBsG1tDbluSpqNDVBN+HUZo9ChG+POa+Q9sv6SMFGJHtor28daS LVXIoU8tMGj2AIgUQl/QW21CbnH3Y+GRka2ewzWvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFC8sVNPqMUA7DriKibO1Y0svOYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0YWZiYTg0LThkNTEtNDQwZC1hNjUzLTAzN2M0YjdlYTU1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBAHKDDZKvepVv/wIcIj6ahsd/lxae EUaBjhKk4+r4CdUtu99A8xb9t7YQqhBXylaySI2CBM6ZePmY3WWXtoSDeYoeROLf agzUrx1FlDuCl7BftsgQjUkZs0i0FaQOTMFLtWn1WPpbCDu6cKVBEjrg2MdlkGPY 4YgzNYVGvzgodUzH0MRBhLJCTiNKvP2eJuPSeB6Y+cKd2Qc3FpPk+g+KbVwO4J+K vypnEGY688xKVaR1Cl8XAf6MFEKznMmgyulQ9if1KMYDRuYHCylcJaI+a96YGQRS l6druRl6YSa7qtKHUYn4wCGtredcVXq829YhONtSAQtH2VF6upycdnpOX/Q= -----END CERTIFICATE-----Generated at Fri Jul 4 02:18:44 2025 by rpki-client