$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e49841-4dd6-4e74-b084-2dff9b23bd2a.roa File: 08e49841-4dd6-4e74-b084-2dff9b23bd2a.roa (raw, json) Hash identifier: eWik5oTXP9XOtR2wTJzlDi1XQq+AVMQEOqZxtbDVKcA= Subject key identifier: AC:14:0B:9D:23:F2:05:EA:79:24:D9:7F:6B:D8:A4:E5:A0:65:3C:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 308317A77F2656991F1BA5789F5318D889863C75 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e49841-4dd6-4e74-b084-2dff9b23bd2a.roa Signing time: Mon 04 Aug 2025 15:50:19 +0000 ROA not before: Mon 04 Aug 2025 15:50:19 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:83:17:a7:7f:26:56:99:1f:1b:a5:78:9f:53:18:d8:89:86:3c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:50:19 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=df984b2ee0d45479374fba76ef6d3d07c4342fde5feff1da090b603e0f948414, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:90:c0:22:e5:13:59:24:eb:cb:fa:4d:ba: 78:39:2a:92:35:4c:7e:2a:d4:31:dc:cd:12:24:72: bf:07:b9:a4:b4:88:1d:a5:fb:68:ef:26:eb:d7:cd: 24:a7:44:24:8f:de:9a:15:7e:e0:78:d7:d4:40:07: e2:dd:2e:5e:a5:df:4c:b8:3e:48:6e:8c:9c:cf:aa: 10:ae:f3:50:8d:da:cb:d8:56:93:e0:eb:86:11:50: 7c:3b:58:93:54:9e:00:ea:d6:25:2d:8c:87:fb:71: 36:98:a7:7d:b9:11:0a:5a:88:49:83:cf:cd:af:38: 12:33:15:23:32:67:d9:d5:0f:7f:cd:a0:b3:69:6f: 25:27:0e:dc:f0:ee:b7:29:27:49:20:3e:d3:fa:2f: ed:75:cf:59:f3:e5:e4:a6:03:04:15:af:bc:96:76: 29:d4:30:53:5e:0f:3a:f1:39:80:bf:75:9e:5e:55: e2:57:51:99:65:e8:dd:13:53:6a:96:3e:79:85:2e: 2b:0b:eb:30:1f:ac:57:77:2a:d9:04:dc:9a:19:b1: 95:ab:bd:ce:93:12:6a:d3:83:49:3e:4a:01:ae:14: ed:8b:5d:77:c2:52:e0:3c:ce:fb:55:6c:b7:59:84: f3:a9:39:61:c5:6e:3d:9f:88:ce:de:f0:e7:bd:a2: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:0B:9D:23:F2:05:EA:79:24:D9:7F:6B:D8:A4:E5:A0:65:3C:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e49841-4dd6-4e74-b084-2dff9b23bd2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.64.0/23 Signature Algorithm: sha256WithRSAEncryption cf:c8:c2:f8:22:78:5e:c5:0a:08:b8:42:5a:6c:a3:ea:0b:59: 54:aa:3f:7b:60:43:81:a4:82:f6:fa:45:80:ab:98:84:8d:ca: f0:12:aa:4b:4c:25:c6:48:43:af:ea:3c:8e:28:b8:c2:8a:21: 31:17:f9:8a:cc:1b:d9:3e:6e:9e:04:71:a4:cf:a5:36:50:41: e7:d4:e2:1b:45:6a:33:a6:2e:68:41:58:15:a0:93:38:4a:85: 4d:73:1a:63:28:7c:36:6d:f7:1c:71:ea:87:d4:ef:b7:e2:a1: 0b:95:68:03:4f:2b:c0:f9:a5:b4:3c:21:80:c0:68:29:86:da: 23:b0:ae:3d:bc:4d:12:da:01:46:b0:1c:e8:a9:c1:45:bd:0b: 7b:04:71:b2:48:61:a2:11:8b:12:49:20:a2:49:ac:ea:ff:7a: c3:60:17:a8:6f:0b:e4:9a:af:0e:b7:44:8c:92:1e:a5:ad:f1: 2b:3d:3d:39:0b:d4:25:65:06:97:4c:6b:df:3c:25:55:b6:fc: 26:9e:b7:ff:bd:a9:16:f0:cb:f8:9d:39:ba:d4:51:f2:f8:fe: 8a:41:08:75:2d:a0:42:de:d1:bc:96:07:fa:2b:1d:96:77:ce: f3:1b:9f:2b:17:e5:63:5e:86:ae:8c:66:7c:43:1e:99:43:49: 42:d0:5e:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMIMXp38mVpkfG6V4n1MY2ImGPHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU1MDE5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjk4NGIyZWUwZDQ1NDc5Mzc0ZmJhNzZlZjZkM2QwN2M0 MzQyZmRlNWZlZmYxZGEwOTBiNjAzZTBmOTQ4NDE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDiJDAIuUTWSTry/pNung5KpI1TH4q1DHczRIkcr8HuaS0 iB2l+2jvJuvXzSSnRCSP3poVfuB419RAB+LdLl6l30y4PkhujJzPqhCu81CN2svY VpPg64YRUHw7WJNUngDq1iUtjIf7cTaYp325EQpaiEmDz82vOBIzFSMyZ9nVD3/N oLNpbyUnDtzw7rcpJ0kgPtP6L+11z1nz5eSmAwQVr7yWdinUMFNeDzrxOYC/dZ5e VeJXUZll6N0TU2qWPnmFLisL6zAfrFd3KtkE3JoZsZWrvc6TEmrTg0k+SgGuFO2L XXfCUuA8zvtVbLdZhPOpOWHFbj2fiM7e8Oe9ovk5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrBQLnSPyBep5JNl/a9ik5aBlPP0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4ZTQ5ODQxLTRkZDYtNGU3NC1iMDg0LTJkZmY5YjIzYmQyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBskAwDQYJKoZIhvcNAQELBQADggEBAM/IwvgieF7FCgi4Qlpso+oLWVSq P3tgQ4Gkgvb6RYCrmISNyvASqktMJcZIQ6/qPI4ouMKKITEX+YrMG9k+bp4EcaTP pTZQQefU4htFajOmLmhBWBWgkzhKhU1zGmMofDZt9xxx6ofU77fioQuVaANPK8D5 pbQ8IYDAaCmG2iOwrj28TRLaAUawHOipwUW9C3sEcbJIYaIRixJJIKJJrOr/esNg F6hvC+Sarw63RIySHqWt8Ss9PTkL1CVlBpdMa988JVW2/Caet/+9qRbwy/idObrU UfL4/opBCHUtoELe0byWB/orHZZ3zvMbnysX5WNehq6MZnxDHplDSULQXjI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:18:06 2025 by rpki-client