$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa File: eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa (raw, json) Hash identifier: rwqxplyvG+rdC0lwCe4V2U1B48T5CH4AIe5o+4nnjRY= Subject key identifier: 9E:E9:1B:13:55:2D:1F:90:07:BF:86:A5:4C:1C:7C:46:CA:33:1E:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41D2425F5B2190EF8C5B405175038BAB04337FB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa Signing time: Tue 02 Sep 2025 00:31:00 +0000 ROA not before: Tue 02 Sep 2025 00:31:00 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:42:5f:5b:21:90:ef:8c:5b:40:51:75:03:8b:ab:04:33:7f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 2 00:31:00 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=36ed0fe1962cc77365450575ac29891c14cf77f864528e425d077e9c95cdb17f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:be:65:74:de:da:37:53:1c:c9:61:43:e7: b6:12:30:7c:f4:33:7c:43:0e:ad:88:3b:72:3b:3e: 54:67:c5:1d:6f:e3:13:43:5a:a7:42:4c:a3:e4:ae: ad:d8:ff:83:ff:02:cd:1d:dc:9d:f8:b4:58:95:7a: 4e:84:fb:3e:bb:1c:1f:62:5c:7d:de:6d:80:8b:e6: 92:4d:21:9c:75:42:f5:69:c3:de:9b:a3:7e:35:ad: 70:28:87:67:37:74:5b:5b:e7:68:a4:e7:9e:28:2d: fb:ba:97:56:aa:37:ae:b0:e4:43:d2:a4:26:1e:c3: 62:66:4f:0d:11:d5:dd:24:fe:b3:68:7c:c5:b9:87: 76:5b:71:dc:d6:61:de:bf:3c:d5:20:48:ce:8d:59: e9:56:c2:e5:7f:d2:92:40:4e:38:fe:23:2c:30:d7: 22:b1:33:54:4b:57:0f:e7:dc:81:cd:1a:ba:de:f9: 36:fe:48:0f:bc:43:93:83:9a:ae:97:d6:15:de:6b: 12:3f:91:d5:e6:b2:9c:18:c9:44:36:be:38:89:2b: 8a:49:10:6e:15:e0:91:95:88:a1:0c:19:c3:8c:2c: 16:4e:71:58:00:f5:94:76:a2:ce:40:05:7e:ae:3d: b2:66:34:66:93:82:7c:56:1f:8f:2a:dd:aa:40:6e: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:1B:13:55:2D:1F:90:07:BF:86:A5:4C:1C:7C:46:CA:33:1E:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.16.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:32:91:7a:b4:0b:ef:bf:f9:a2:10:00:6e:67:5c:02:31:52: a2:c2:5f:30:35:aa:fb:f6:3a:70:24:89:e6:17:21:23:31:27: ef:c8:cf:60:7d:1c:7b:dd:fd:b9:c1:f5:98:ed:33:28:16:82: b5:f5:3f:69:f9:52:5f:5c:41:1e:0f:9c:9d:48:3f:bf:ea:52: 1b:4e:fe:f5:f5:0d:48:e5:29:c0:c5:80:ac:28:1b:e6:e6:30: b6:ce:be:6e:7c:d9:ab:d5:dc:54:d7:e1:22:a8:17:cc:09:90: fb:5b:f1:0b:4d:cb:dd:d8:e2:74:d6:ec:1b:10:7f:b0:ca:fa: 0a:de:ff:cb:4c:7d:56:ff:f3:3f:0d:67:c9:b3:b2:ee:cc:22: 01:09:e0:fd:84:9d:80:af:d2:6e:ae:83:97:0a:4f:b1:e9:49: 69:bf:41:eb:68:e8:ad:63:f5:6d:08:86:6d:d8:9d:7c:02:bf: c1:b5:71:46:00:00:15:f7:6b:c8:0f:08:87:f7:be:12:60:e1: a5:f7:a9:01:16:b9:2f:36:2b:7c:35:54:30:46:0d:f1:a7:54: 9f:eb:75:4e:60:5c:10:8b:81:38:1b:03:58:83:30:7e:cc:e7: 25:85:c5:f1:68:a6:a0:ba:20:56:f2:c7:56:ae:95:c1:5a:30: e1:db:f2:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQdJCX1shkO+MW0BRdQOLqwQzf7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAyMDAzMTAwWhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmVkMGZlMTk2MmNjNzczNjU0NTA1NzVhYzI5ODkxYzE0 Y2Y3N2Y4NjQ1MjhlNDI1ZDA3N2U5Yzk1Y2RiMTdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDshL5ldN7aN1McyWFD57YSMHz0M3xDDq2IO3I7PlRnxR1v 4xNDWqdCTKPkrq3Y/4P/As0d3J34tFiVek6E+z67HB9iXH3ebYCL5pJNIZx1QvVp w96bo341rXAoh2c3dFtb52ik554oLfu6l1aqN66w5EPSpCYew2JmTw0R1d0k/rNo fMW5h3ZbcdzWYd6/PNUgSM6NWelWwuV/0pJATjj+Iyww1yKxM1RLVw/n3IHNGrre +Tb+SA+8Q5ODmq6X1hXeaxI/kdXmspwYyUQ2vjiJK4pJEG4V4JGViKEMGcOMLBZO cVgA9ZR2os5ABX6uPbJmNGaTgnxWH48q3apAblOFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnukbE1UtH5AHv4alTBx8RsozHtQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhY2ExMGVkLWY3NjUtNGE3Ni05ZWE1LTMyZjM5YjE5YzM2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlhAwDQYJKoZIhvcNAQELBQADggEBADwykXq0C++/+aIQAG5nXAIxUqLC XzA1qvv2OnAkieYXISMxJ+/Iz2B9HHvd/bnB9ZjtMygWgrX1P2n5Ul9cQR4PnJ1I P7/qUhtO/vX1DUjlKcDFgKwoG+bmMLbOvm582avV3FTX4SKoF8wJkPtb8QtNy93Y 4nTW7BsQf7DK+gre/8tMfVb/8z8NZ8mzsu7MIgEJ4P2EnYCv0m6ug5cKT7HpSWm/ Qeto6K1j9W0Ihm3YnXwCv8G1cUYAABX3a8gPCIf3vhJg4aX3qQEWuS82K3w1VDBG DfGnVJ/rdU5gXBCLgTgbA1iDMH7M5yWFxfFopqC6IFbyx1aulcFaMOHb8jw= -----END CERTIFICATE-----Generated at Sat Sep 6 16:41:06 2025 by rpki-client