$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa File: 10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa (raw, json) Hash identifier: 2QmYjegvYCli5SRpE+X21ncMQubwsPPewdFMmlV09VE= Subject key identifier: 87:D5:4A:6E:7C:34:32:F1:C2:0E:51:FC:AC:FD:5B:1E:B7:CD:89:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D44B633D2F90C91B32FA4FB47E6114A24DBA98D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa Signing time: Fri 25 Jul 2025 00:21:45 +0000 ROA not before: Fri 25 Jul 2025 00:21:45 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:44:b6:33:d2:f9:0c:91:b3:2f:a4:fb:47:e6:11:4a:24:db:a9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:21:45 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=427c3c6362f383ce92a7db25bb64961202cd9601244100cf116d47a16246d117, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:94:ef:ce:e0:52:9f:f8:e2:25:24:2a:e3: 69:8d:77:bc:24:41:de:bb:7e:66:ab:b7:4a:97:74: 7d:75:74:b1:91:d0:06:02:a7:e0:41:b9:84:bd:8e: 1e:65:d0:d4:ef:c0:8d:20:0d:32:06:14:f9:75:94: d2:1b:97:77:ee:ab:72:d6:25:30:ce:4f:eb:74:23: 06:ff:8d:1b:c9:53:19:23:28:2d:ca:6b:cd:0d:51: ed:09:83:8a:b2:a0:87:13:c5:88:a4:f5:ef:e8:ff: 7f:79:83:ed:04:16:ce:f3:29:97:e0:e4:55:67:6a: c8:c3:e6:c7:dc:6f:08:0c:ab:1f:47:f5:0d:37:46: 3d:0b:bb:57:54:e9:45:33:f6:c8:da:8f:c1:d3:02: 1b:af:23:57:65:12:9d:fd:80:f2:b1:c0:ee:18:cd: a3:91:29:a8:de:13:82:48:0b:57:59:2e:24:5f:9b: 7c:a0:08:a0:50:44:b3:30:37:02:4e:30:b9:f8:ee: 24:b4:5f:a7:d8:01:50:0e:55:c5:2a:17:93:40:5f: eb:b7:f2:08:a4:b0:1b:31:ec:6f:3d:70:ba:e2:7f: 10:ca:ea:20:d8:2f:aa:62:e1:7e:c8:3d:ef:75:84: 76:df:9b:80:0b:8d:d5:e7:2a:8b:1e:f6:d1:6f:3f: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D5:4A:6E:7C:34:32:F1:C2:0E:51:FC:AC:FD:5B:1E:B7:CD:89:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.72.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:13:7f:46:6a:62:08:f3:27:c4:7a:0f:88:e5:f1:be:4b:97: 53:2c:27:95:7b:cd:13:6c:d7:41:1a:63:60:7e:49:85:5d:47: f4:c0:7c:1f:98:58:df:b5:3b:d6:77:04:94:18:5d:c1:51:c0: fa:0c:dd:0d:e2:ce:00:2f:81:06:ad:88:9e:49:96:15:49:e1: 3e:c1:d9:e9:81:2e:37:3e:48:14:58:17:f2:01:4a:68:7c:df: da:72:d7:55:0d:20:f3:3e:60:05:62:53:4e:ab:f0:c0:36:05: 1e:5f:c2:d0:a1:9f:1f:b7:80:9e:9c:68:2f:fb:9f:a1:9f:39: 99:ed:39:5b:56:f2:b3:09:f4:50:28:5d:6f:dd:d0:24:22:21: b3:6d:1a:7a:d6:12:cb:e2:c7:e4:e4:37:34:9a:1e:b1:29:aa: 14:a7:c1:1c:2b:b3:a2:36:e4:15:ba:f6:2f:70:2b:3d:8f:95: 41:e6:d2:26:ff:51:2f:eb:82:36:59:d4:ee:b5:67:ca:5c:f0: f1:d2:5c:52:28:a6:e2:cd:e7:45:44:e6:4e:92:99:72:14:b1: 0f:16:e6:fc:43:9c:85:e1:4a:9f:2e:a1:cd:5a:bd:b6:73:f2: d9:e9:22:e9:45:0c:c8:9b:09:3b:2c:7c:4a:a1:16:08:0a:0d: fa:a2:6f:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfUS2M9L5DJGzL6T7R+YRSiTbqY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAyMTQ1WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjdjM2M2MzYyZjM4M2NlOTJhN2RiMjViYjY0OTYxMjAy Y2Q5NjAxMjQ0MTAwY2YxMTZkNDdhMTYyNDZkMTE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl5ZTvzuBSn/jiJSQq42mNd7wkQd67fmart0qXdH11dLGR 0AYCp+BBuYS9jh5l0NTvwI0gDTIGFPl1lNIbl3fuq3LWJTDOT+t0Iwb/jRvJUxkj KC3Ka80NUe0Jg4qyoIcTxYik9e/o/395g+0EFs7zKZfg5FVnasjD5sfcbwgMqx9H 9Q03Rj0Lu1dU6UUz9sjaj8HTAhuvI1dlEp39gPKxwO4YzaORKajeE4JIC1dZLiRf m3ygCKBQRLMwNwJOMLn47iS0X6fYAVAOVcUqF5NAX+u38giksBsx7G89cLrifxDK 6iDYL6pi4X7IPe91hHbfm4ALjdXnKose9tFvP0PdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh9VKbnw0MvHCDlH8rP1bHrfNiRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwZmFjMDhlLTE5NjYtNGZhNy1iM2UzLTNmNTU0ZmMzZGYyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlkgwDQYJKoZIhvcNAQELBQADggEBAIwTf0ZqYgjzJ8R6D4jl8b5Ll1Ms J5V7zRNs10EaY2B+SYVdR/TAfB+YWN+1O9Z3BJQYXcFRwPoM3Q3izgAvgQatiJ5J lhVJ4T7B2emBLjc+SBRYF/IBSmh839py11UNIPM+YAViU06r8MA2BR5fwtChnx+3 gJ6caC/7n6GfOZntOVtW8rMJ9FAoXW/d0CQiIbNtGnrWEsvix+TkNzSaHrEpqhSn wRwrs6I25BW69i9wKz2PlUHm0ib/US/rgjZZ1O61Z8pc8PHSXFIopuLN50VE5k6S mXIUsQ8W5vxDnIXhSp8uoc1avbZz8tnpIulFDMibCTssfEqhFggKDfqib3o= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:24 2025 by rpki-client