$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa File: e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa (raw, json) Hash identifier: Ao/fXnv61kbg+K5MlNs38cv88SB02Abbwk5qLBru3k4= Subject key identifier: 4F:C1:34:DB:B3:93:7B:5D:27:AA:3A:A8:C0:87:3D:69:E8:BE:42:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F2A5B4CED0FF87063D54A8C9E4AEC316C49B8B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa Signing time: Sat 09 Aug 2025 00:00:51 +0000 ROA not before: Sat 09 Aug 2025 00:00:51 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 134.251.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:5b:4c:ed:0f:f8:70:63:d5:4a:8c:9e:4a:ec:31:6c:49:b8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 9 00:00:51 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=de7327d2a4c67722587685ab6575aea013704913ce21d2f8b10cb1781f0e1990, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:c1:97:f1:2c:89:09:21:3a:e9:b9:d2:4c: df:f7:eb:63:4c:cb:4a:5e:de:e5:fb:46:80:6b:a7: 1a:19:e9:fa:60:44:fd:cb:bb:99:83:18:da:55:f2: f1:4b:7b:1d:87:21:b5:71:70:fd:63:b2:9c:07:a8: 60:d1:d4:ad:ee:bd:e4:bc:59:47:78:be:e5:db:da: c8:69:df:47:e5:70:14:56:68:2b:03:1d:5f:9e:5c: 24:b7:19:0e:d7:86:ee:61:ec:ee:7a:8f:5c:4f:67: 2b:0b:06:88:1e:ba:44:be:33:c2:ff:c6:5e:07:c1: ab:e3:99:64:da:d5:33:0d:e0:aa:bf:1c:72:23:3d: 91:c5:7b:af:7d:a6:03:01:72:8a:6b:dc:d8:b9:7b: b0:98:2a:2c:db:24:fd:16:23:b4:af:44:dd:e3:4d: af:11:f9:d0:6f:14:1a:9f:5c:70:c8:da:b2:b4:aa: 0c:0b:0f:e3:bd:03:41:ba:42:8a:d0:da:73:b5:47: 7b:07:a0:fb:9f:c3:63:1b:e6:d9:52:87:b2:b4:3f: ec:44:b7:88:5e:49:3a:a2:8c:b1:11:5c:0e:9c:89: 54:9d:53:e8:b7:9c:a5:a7:fb:eb:e1:e0:1a:b1:3c: 72:61:19:9c:cc:6b:06:d2:3c:69:7a:30:05:ba:c1: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C1:34:DB:B3:93:7B:5D:27:AA:3A:A8:C0:87:3D:69:E8:BE:42:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.251.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2c:93:88:73:7b:30:bf:b9:00:15:a1:a6:7b:6a:3e:fc:42:7e: 9f:4f:85:df:0c:94:d1:04:02:66:66:50:8d:5c:45:7e:94:4d: 0a:61:4f:92:25:51:cf:d1:be:39:9e:04:91:bf:50:79:bb:8f: 45:52:46:7a:fa:0e:30:ee:8d:ce:16:34:21:cd:a0:0b:1d:63: 86:15:d4:d5:07:e0:a4:81:10:c9:58:30:c4:61:57:1d:01:a8: 06:7c:94:4f:9c:eb:e6:8c:59:2d:4e:de:44:ad:85:6b:1f:e5: 03:64:40:c2:83:4e:f5:c0:61:83:4d:43:17:76:fb:48:5b:a7: fa:15:7b:a6:99:60:1d:6b:68:cc:e7:2e:0a:fa:23:1b:40:09: e7:2e:c2:3f:f6:25:72:ce:85:ff:bb:40:5d:9e:18:1c:89:7b: 60:ab:60:54:ef:ab:e7:f6:7f:6a:fb:c1:23:a3:f0:3e:f6:de: f0:6e:e4:01:c4:be:17:bd:5e:18:95:68:db:82:f2:39:87:b7: 8a:8e:88:18:7a:2e:c8:3d:19:46:ef:76:44:7d:2a:91:64:b8: ef:e8:4d:8a:54:55:3c:26:ac:75:80:67:f5:20:e3:0f:e4:df: 59:89:54:d2:02:5e:45:77:ad:67:d8:12:4a:a3:15:5f:7d:b0: 7f:09:0f:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDypbTO0P+HBj1UqMnkrsMWxJuLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAwMDUxWhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTczMjdkMmE0YzY3NzIyNTg3Njg1YWI2NTc1YWVhMDEz NzA0OTEzY2UyMWQyZjhiMTBjYjE3ODFmMGUxOTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMQMGX8SyJCSE66bnSTN/362NMy0pe3uX7RoBrpxoZ6fpg RP3Lu5mDGNpV8vFLex2HIbVxcP1jspwHqGDR1K3uveS8WUd4vuXb2shp30flcBRW aCsDHV+eXCS3GQ7Xhu5h7O56j1xPZysLBogeukS+M8L/xl4HwavjmWTa1TMN4Kq/ HHIjPZHFe699pgMBcopr3Ni5e7CYKizbJP0WI7SvRN3jTa8R+dBvFBqfXHDI2rK0 qgwLD+O9A0G6QorQ2nO1R3sHoPufw2Mb5tlSh7K0P+xEt4heSTqijLERXA6ciVSd U+i3nKWn++vh4BqxPHJhGZzMawbSPGl6MAW6wfEFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUT8E027OTe10nqjqowIc9aei+QjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5Y2NkNmQ4LTZlNGEtNDEzYi04NDQyLTQyZTUzZjgzOTkxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCG+zANBgkqhkiG9w0BAQsFAAOCAQEALJOIc3swv7kAFaGme2o+/EJ+n0+F 3wyU0QQCZmZQjVxFfpRNCmFPkiVRz9G+OZ4Ekb9QebuPRVJGevoOMO6NzhY0Ic2g Cx1jhhXU1QfgpIEQyVgwxGFXHQGoBnyUT5zr5oxZLU7eRK2Fax/lA2RAwoNO9cBh g01DF3b7SFun+hV7pplgHWtozOcuCvojG0AJ5y7CP/Ylcs6F/7tAXZ4YHIl7YKtg VO+r5/Z/avvBI6PwPvbe8G7kAcS+F71eGJVo24LyOYe3io6IGHouyD0ZRu92RH0q kWS47+hNilRVPCasdYBn9SDjD+TfWYlU0gJeRXetZ9gSSqMVX32wfwkPVw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:39 2025 by rpki-client