$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa File: 41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa (raw, json) Hash identifier: oEtBsHEjXaOVKn4kjvXK0OJnF46svE2N4TKN8UKHZ7k= Subject key identifier: 8B:0E:0F:6B:FB:08:38:93:91:F3:66:EF:CD:90:88:6A:BD:58:87:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A19EEB5F02E7F2AF35481FE694DB0EEC1502601 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa Signing time: Tue 05 Aug 2025 00:30:34 +0000 ROA not before: Tue 05 Aug 2025 00:30:34 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:19:ee:b5:f0:2e:7f:2a:f3:54:81:fe:69:4d:b0:ee:c1:50:26:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:34 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=e453849665f4bae75ab42423c08d94cc99b2d613901f446656b6d9a2d0bad98d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:e1:d7:ba:12:40:64:7d:bb:3e:fe:d3:69: 71:84:7d:a6:50:26:d9:11:6a:72:7a:c1:2f:50:7a: 61:30:5c:a0:f9:ee:f7:6a:0f:f1:44:79:48:08:b1: 48:16:01:0a:4c:2a:6c:47:0b:af:d7:49:f1:ca:cf: 4c:3a:3d:be:88:ae:52:96:dd:64:f6:2d:3c:fe:9e: d5:0e:41:47:95:ee:2a:5b:8c:c1:25:37:c8:e9:1e: e7:12:7b:f9:d9:1e:fc:be:97:37:29:17:9b:ef:f8: 4b:1d:59:a9:b9:f2:36:99:d6:01:e5:9f:6e:d9:89: 74:ed:17:79:ec:64:49:df:4f:77:6b:e4:1a:84:0a: b8:82:f2:ac:71:58:20:9b:98:66:44:d2:a9:8c:70: 87:dd:2a:e2:87:83:53:23:3b:de:da:cb:3b:a4:ed: df:77:9f:22:a7:26:eb:cc:80:08:f9:fc:24:4a:72: b9:e7:16:b5:df:1e:89:28:29:d1:a1:e5:aa:e7:7a: bd:e2:25:24:3d:29:69:f5:8b:1c:65:98:9e:2f:c3: d1:f7:dc:1b:80:78:4c:f7:bf:08:f1:85:64:91:56: 86:0f:b7:cf:64:d6:cb:ef:a2:9f:a3:ab:13:3a:b8: 69:26:17:7b:f1:8d:73:e1:e1:5f:83:24:a0:0a:50: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0E:0F:6B:FB:08:38:93:91:F3:66:EF:CD:90:88:6A:BD:58:87:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:6a:00:d6:b5:af:cb:e2:08:db:85:17:fe:07:35:f7:af:7f: 9a:61:f5:b5:17:8b:b4:66:de:39:31:80:3c:c8:23:f9:8c:c1: b6:61:68:09:ab:5b:45:51:e5:a8:1a:4a:86:4e:05:92:45:d3: c0:99:3a:c9:1b:00:7e:39:0a:a4:41:4a:d3:db:08:08:08:26: a5:4e:c8:fe:a3:6c:ea:fd:15:1c:23:96:82:23:b0:8a:73:ec: 89:67:b5:1d:68:f6:22:f3:fb:1e:18:6d:c7:77:26:5c:14:f4: 9f:16:eb:22:0b:dd:4d:89:90:a6:33:7f:19:4f:b5:fe:95:0c: 26:d1:1d:ec:dc:52:20:ac:5e:92:bc:bf:5e:7e:42:df:24:1c: c9:76:fa:5c:a4:f8:6d:80:c6:47:70:9e:ec:99:4c:74:8c:59: 74:7d:70:83:9c:55:bf:0b:13:58:41:7e:37:a9:9b:fc:5b:54: cc:c0:a4:ab:80:ba:25:68:24:0f:db:c6:3c:c8:0d:cd:c7:ae: 8b:07:d3:67:18:e2:57:00:fe:cc:e4:33:7a:54:9c:2c:87:e6: 72:12:96:4f:e1:d2:47:f5:72:bf:67:c5:4a:88:5a:2c:35:54: 57:96:31:bc:8c:02:25:50:da:fc:f3:37:11:2d:b8:95:b2:10: 3d:9d:de:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKhnutfAufyrzVIH+aU2w7sFQJgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAzMDM0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDUzODQ5NjY1ZjRiYWU3NWFiNDI0MjNjMDhkOTRjYzk5 YjJkNjEzOTAxZjQ0NjY1NmI2ZDlhMmQwYmFkOThkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC17uHXuhJAZH27Pv7TaXGEfaZQJtkRanJ6wS9QemEwXKD5 7vdqD/FEeUgIsUgWAQpMKmxHC6/XSfHKz0w6Pb6IrlKW3WT2LTz+ntUOQUeV7ipb jMElN8jpHucSe/nZHvy+lzcpF5vv+EsdWam58jaZ1gHln27ZiXTtF3nsZEnfT3dr 5BqECriC8qxxWCCbmGZE0qmMcIfdKuKHg1MjO97ayzuk7d93nyKnJuvMgAj5/CRK crnnFrXfHokoKdGh5arner3iJSQ9KWn1ixxlmJ4vw9H33BuAeEz3vwjxhWSRVoYP t89k1svvop+jqxM6uGkmF3vxjXPh4V+DJKAKUPsnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiw4Pa/sIOJOR82bvzZCIar1Yhz0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxMjQxYjYwLTdhYjgtNDY3Ny05ZjRmLWRjNDQwMmI5NWQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA43TANBgkqhkiG9w0BAQsFAAOCAQEAcGoA1rWvy+II24UX/gc1969/mmH1 tReLtGbeOTGAPMgj+YzBtmFoCatbRVHlqBpKhk4FkkXTwJk6yRsAfjkKpEFK09sI CAgmpU7I/qNs6v0VHCOWgiOwinPsiWe1HWj2IvP7Hhhtx3cmXBT0nxbrIgvdTYmQ pjN/GU+1/pUMJtEd7NxSIKxekry/Xn5C3yQcyXb6XKT4bYDGR3Ce7JlMdIxZdH1w g5xVvwsTWEF+N6mb/FtUzMCkq4C6JWgkD9vGPMgNzceuiwfTZxjiVwD+zOQzelSc LIfmchKWT+HSR/Vyv2fFSohaLDVUV5YxvIwCJVDa/PM3ES24lbIQPZ3eXA== -----END CERTIFICATE-----Generated at Wed Aug 6 16:19:11 2025 by rpki-client