$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa File: 5ef35af6-a704-4311-b43f-c62b39327200.roa (raw, json) Hash identifier: NLbao0pvMJIs9bkUOcblvhJIYXaCKbC64q2iNlNMW2g= Subject key identifier: 85:D1:D2:1C:88:8D:F1:2C:82:1F:80:A3:A0:08:51:55:29:4B:DF:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 424BB9E2D031CF076425871F9D4F75B2178DD5C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa Signing time: Fri 18 Jul 2025 00:52:19 +0000 ROA not before: Fri 18 Jul 2025 00:52:19 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.105.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:b9:e2:d0:31:cf:07:64:25:87:1f:9d:4f:75:b2:17:8d:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:52:19 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=18c3262f2b55e16775b9a885614094ec88d6837d9d289921c27c3916277351c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:52:5f:27:4c:1d:69:5f:0e:ef:c9:f6:d2: 60:ed:90:be:36:af:b9:6c:67:7c:ad:87:24:5e:de: 27:56:13:30:7f:10:c6:a8:de:e5:2d:f4:0a:09:09: ec:1c:7e:48:37:14:ea:ce:c3:a2:2e:b6:89:3a:ab: fd:10:89:22:80:e0:18:d1:7a:7a:b7:19:9d:5b:53: 68:61:13:4e:7e:4e:19:23:49:60:d6:41:e5:be:36: a9:99:e4:66:14:9b:7e:b6:07:a1:ee:90:26:8a:01: 64:67:ef:28:18:6f:64:95:a0:21:b1:51:d2:af:0a: bd:98:51:e5:49:a1:4e:ba:db:56:ab:bd:b2:7d:d4: 63:fa:25:86:70:90:d0:ec:48:1c:0c:35:64:73:80: 4c:66:5e:99:e7:42:8a:76:21:21:d8:fd:2d:13:1c: 75:c0:87:01:7f:dd:9e:21:79:62:6b:51:f0:42:94: 21:4a:1e:fa:20:1c:45:66:b3:d3:b7:f4:34:57:fa: ec:b7:eb:b4:fe:71:1c:93:8c:45:61:fd:6d:3b:54: ed:60:a8:21:fb:db:65:33:bb:cc:a2:e3:4e:8e:94: c2:bd:6c:8f:e2:28:e6:81:3e:ff:ea:e9:f7:51:2e: 73:6f:25:b8:ff:dd:fb:53:02:d8:7a:91:0b:4e:b7: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:D2:1C:88:8D:F1:2C:82:1F:80:A3:A0:08:51:55:29:4B:DF:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.105.128.0/18 Signature Algorithm: sha256WithRSAEncryption 30:00:8f:2f:fd:c8:e5:60:44:7b:1a:a8:c5:5f:e9:7c:16:ba: 84:3d:75:42:1b:5b:d4:98:c6:5f:12:1d:2f:09:fd:7a:e3:21: 62:01:9e:51:9f:03:99:44:7e:cf:49:91:cd:44:54:90:6b:88: 33:52:f9:91:fd:06:bb:3f:12:4e:95:f0:81:ae:03:07:13:bd: 75:88:70:6e:f9:aa:cc:ec:32:aa:87:86:6a:19:1f:1a:b3:7a: fc:d1:7b:5d:ad:f5:ca:de:a8:ab:65:fb:3c:c9:3b:80:3d:a3: bc:eb:bf:3f:a5:2a:f9:6e:b6:db:1b:7a:06:a1:7d:22:15:40: d9:54:e7:e4:64:5c:5b:a8:e6:01:32:e4:1a:41:e9:d7:fe:39: d0:f0:c8:10:96:d6:52:94:ed:85:32:e8:e8:6f:ee:33:df:d7: 24:50:4c:93:4c:55:47:3b:b1:28:36:b9:c4:9c:6d:da:2e:0f: cf:21:1d:1a:f0:fb:a0:53:6a:9b:1f:d1:6e:ca:e3:71:16:96: fc:c2:e1:26:d3:8a:2e:ce:3a:6a:32:de:da:01:a6:04:06:8d: ed:47:02:9b:39:b5:44:71:2f:d9:0e:52:98:20:d4:07:52:99: 0b:f6:6a:ce:7a:09:e5:97:19:c4:21:f4:45:71:ea:95:26:bb: 22:6c:09:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQku54tAxzwdkJYcfnU91sheN1cQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDA1MjE5WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGMzMjYyZjJiNTVlMTY3NzViOWE4ODU2MTQwOTRlYzg4 ZDY4MzdkOWQyODk5MjFjMjdjMzkxNjI3NzM1MWM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcUFJfJ0wdaV8O78n20mDtkL42r7lsZ3ythyRe3idWEzB/ EMao3uUt9AoJCewcfkg3FOrOw6Iutok6q/0QiSKA4BjRenq3GZ1bU2hhE05+Thkj SWDWQeW+NqmZ5GYUm362B6HukCaKAWRn7ygYb2SVoCGxUdKvCr2YUeVJoU6621ar vbJ91GP6JYZwkNDsSBwMNWRzgExmXpnnQop2ISHY/S0THHXAhwF/3Z4heWJrUfBC lCFKHvogHEVms9O39DRX+uy367T+cRyTjEVh/W07VO1gqCH722Uzu8yi406OlMK9 bI/iKOaBPv/q6fdRLnNvJbj/3ftTAth6kQtOt9LbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhdHSHIiN8SyCH4CjoAhRVSlL3z0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlZjM1YWY2LWE3MDQtNDMxMS1iNDNmLWM2MmIzOTMyNzIwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjaYAwDQYJKoZIhvcNAQELBQADggEBADAAjy/9yOVgRHsaqMVf6XwWuoQ9 dUIbW9SYxl8SHS8J/XrjIWIBnlGfA5lEfs9Jkc1EVJBriDNS+ZH9Brs/Ek6V8IGu AwcTvXWIcG75qszsMqqHhmoZHxqzevzRe12t9creqKtl+zzJO4A9o7zrvz+lKvlu ttsbegahfSIVQNlU5+RkXFuo5gEy5BpB6df+OdDwyBCW1lKU7YUy6Ohv7jPf1yRQ TJNMVUc7sSg2ucScbdouD88hHRrw+6BTapsf0W7K43EWlvzC4SbTii7OOmoy3toB pgQGje1HAps5tURxL9kOUpgg1AdSmQv2as56CeWXGcQh9EVx6pUmuyJsCZY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:49 2025 by rpki-client