$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa File: 0c0e751c-d984-449d-ab22-482731648dc9.roa (raw, json) Hash identifier: BChpwNc5dacV5rfzzx3wWQW/LdQKdnTmDel1U2S1dVc= Subject key identifier: 29:52:9A:EE:36:A3:DC:B1:86:55:28:A5:77:79:BD:DE:4D:2C:D1:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CE367A1A9266B638AB834D155BC02DA058A97A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa Signing time: Tue 22 Jul 2025 00:20:59 +0000 ROA not before: Tue 22 Jul 2025 00:20:59 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.33.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e3:67:a1:a9:26:6b:63:8a:b8:34:d1:55:bc:02:da:05:8a:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:20:59 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=b663ece1b8dc68a3689c8c48a32451e653ca4d6ecfdcb3d926352de5b3b366fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:63:11:46:c8:12:f6:87:14:71:c3:75:88: cc:75:63:8b:55:c1:50:f3:59:3c:8d:79:f1:45:e1: 05:d8:10:1d:b1:c8:d8:76:30:82:77:2e:87:0d:1c: 2d:3b:cc:8c:9f:cf:ee:c4:18:95:bf:86:1e:61:24: f0:ce:cc:48:0d:d0:3f:34:f0:2d:b8:91:66:24:8e: ab:8b:a2:fe:b4:22:c6:64:ec:1e:42:40:94:47:1e: 27:1b:99:46:fe:27:56:69:87:f9:c0:56:cf:cf:e6: 11:29:9f:a9:81:e2:5e:79:44:16:9b:44:2a:dd:71: ea:d9:4a:ae:22:2e:20:c4:f1:57:92:18:41:66:f6: 46:1e:94:b9:92:8f:86:3a:f8:02:96:43:61:fb:d2: 65:09:ab:1a:09:3c:f7:e5:4f:4d:73:c8:30:ff:7e: b8:7e:bb:d2:ad:39:d0:71:88:d3:0b:b7:3f:87:89: 18:52:12:5d:67:a2:19:2a:d0:35:09:1b:37:2e:37: b0:36:36:69:b2:e1:d3:2f:1d:b3:fc:89:53:da:39: 26:9f:57:73:23:43:02:ff:87:1b:13:24:b2:f1:5b: 43:90:43:59:46:b3:b1:d8:f9:65:30:06:ce:d6:27: b0:36:d7:b4:88:ef:54:75:78:6b:ae:34:f6:c9:53: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:52:9A:EE:36:A3:DC:B1:86:55:28:A5:77:79:BD:DE:4D:2C:D1:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.33.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7e:e3:ac:00:cd:1e:6a:fa:b0:06:57:a3:12:17:07:a2:70:3b: 65:2c:24:9d:35:0a:22:26:4d:b8:a3:84:18:e1:45:fb:1f:80: 32:b3:9e:5d:54:70:e5:25:61:cc:d2:ef:cd:6a:50:4c:8d:fd: 5b:da:7d:64:a2:87:35:93:0f:04:36:f1:2c:94:02:aa:34:e4: c5:79:42:7d:34:42:df:8b:07:1e:67:85:f9:dc:1c:61:ea:8f: a4:87:73:86:e2:94:15:5f:55:b3:20:06:f2:e0:0a:1b:39:ef: 24:bc:19:dd:22:44:fe:4a:9d:4c:1f:bc:0f:3b:1a:7c:43:b5: 18:c8:99:4e:2b:de:92:3b:70:7d:ba:e0:35:3c:7c:a2:17:e3: 18:f8:6e:e8:7b:23:6e:60:ab:f9:53:7a:e2:14:75:24:c0:8b: 13:88:9b:1b:58:8a:72:5f:bc:49:50:56:33:c1:9c:38:29:ee: a7:b8:65:67:48:0a:43:ea:b4:77:ec:88:50:9b:91:04:94:05: e4:a4:fa:67:55:f6:e2:c4:96:c1:26:00:36:68:af:f3:36:4e: 98:ef:4a:c5:eb:77:b9:4d:1a:3f:1c:6a:a7:04:83:5e:7c:82: a9:37:81:c3:50:d3:4b:54:36:93:b7:93:b6:c9:17:ba:e5:99: 92:c6:8c:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTONnoakma2OKuDTRVbwC2gWKl6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAyMDU5WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjYzZWNlMWI4ZGM2OGEzNjg5YzhjNDhhMzI0NTFlNjUz Y2E0ZDZlY2ZkY2IzZDkyNjM1MmRlNWIzYjM2NmZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC58WMRRsgS9ocUccN1iMx1Y4tVwVDzWTyNefFF4QXYEB2x yNh2MIJ3LocNHC07zIyfz+7EGJW/hh5hJPDOzEgN0D808C24kWYkjquLov60IsZk 7B5CQJRHHicbmUb+J1Zph/nAVs/P5hEpn6mB4l55RBabRCrdcerZSq4iLiDE8VeS GEFm9kYelLmSj4Y6+AKWQ2H70mUJqxoJPPflT01zyDD/frh+u9KtOdBxiNMLtz+H iRhSEl1nohkq0DUJGzcuN7A2Nmmy4dMvHbP8iVPaOSafV3MjQwL/hxsTJLLxW0OQ Q1lGs7HY+WUwBs7WJ7A217SI71R1eGuuNPbJU2mLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKVKa7jaj3LGGVSild3m93k0s0XwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjMGU3NTFjLWQ5ODQtNDQ5ZC1hYjIyLTQ4MjczMTY0OGRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjIYAwDQYJKoZIhvcNAQELBQADggEBAH7jrADNHmr6sAZXoxIXB6JwO2Us JJ01CiImTbijhBjhRfsfgDKznl1UcOUlYczS781qUEyN/VvafWSihzWTDwQ28SyU Aqo05MV5Qn00Qt+LBx5nhfncHGHqj6SHc4bilBVfVbMgBvLgChs57yS8Gd0iRP5K nUwfvA87GnxDtRjImU4r3pI7cH264DU8fKIX4xj4buh7I25gq/lTeuIUdSTAixOI mxtYinJfvElQVjPBnDgp7qe4ZWdICkPqtHfsiFCbkQSUBeSk+mdV9uLElsEmADZo r/M2TpjvSsXrd7lNGj8caqcEg158gqk3gcNQ00tUNpO3k7bJF7rlmZLGjHg= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:29 2025 by rpki-client