$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677448d3-c998-4825-9df7-dd9ac11a3c19.roa File: 677448d3-c998-4825-9df7-dd9ac11a3c19.roa (raw, json) Hash identifier: 479S2j6ZjV6XOBtKA7z9zLX4CIfP2BeEqzv62/aQtu4= Subject key identifier: 41:97:64:36:EC:58:0C:33:C0:5B:3C:5A:A1:C0:D6:B1:1E:02:07:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CB1E7C6E0A8FE9109AD2E87CDBECB27716C8311 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677448d3-c998-4825-9df7-dd9ac11a3c19.roa Signing time: Sat 02 Aug 2025 00:42:06 +0000 ROA not before: Sat 02 Aug 2025 00:42:06 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.178.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:e7:c6:e0:a8:fe:91:09:ad:2e:87:cd:be:cb:27:71:6c:83:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:42:06 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=b9211ae30498c32350d75844a3ecfc63da8c0b33de90560c356e04fde87101fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:5c:0d:07:e6:29:da:9a:47:1e:3c:cc:57: 8a:66:24:4a:31:e9:0e:fe:92:50:69:c4:72:45:31: b0:76:60:f5:d0:55:0b:b7:2b:38:a5:92:12:b6:9d: f0:12:47:45:aa:96:30:88:8f:20:94:c1:b9:4d:9f: cf:ae:bf:8b:af:af:e4:9b:96:e7:e7:4c:a4:9a:b2: b8:35:f2:ae:f9:c4:df:95:dc:6b:52:5c:65:01:62: db:9d:5c:cc:1b:86:d9:d7:84:5c:de:dc:d1:31:28: 27:1e:27:c7:24:d2:a7:4e:d4:ae:7f:25:87:c5:91: 24:61:37:c0:3f:b8:8f:79:5f:cb:87:cd:04:73:d8: 99:68:05:05:71:c4:65:0f:4d:0d:b1:44:24:27:2b: 1c:91:65:4f:e1:a5:0e:f8:77:52:36:15:48:01:17: f4:82:26:7b:b1:10:e2:40:83:a8:12:5a:e0:89:9b: b0:96:82:64:9c:6f:5b:3b:45:72:f4:5b:51:a7:23: 45:ed:1f:82:bd:93:b4:ef:fe:9d:e3:1e:fb:61:8c: c1:66:04:e5:82:a8:e5:bd:93:eb:0a:bd:bc:06:87: c1:85:5c:4e:33:c7:73:3c:94:d9:4f:d5:f7:6a:1f: 09:29:6f:46:1d:0a:45:f2:41:59:53:5e:c5:54:b6: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:64:36:EC:58:0C:33:C0:5B:3C:5A:A1:C0:D6:B1:1E:02:07:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677448d3-c998-4825-9df7-dd9ac11a3c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.128.0/19 Signature Algorithm: sha256WithRSAEncryption 51:57:67:c4:d3:6d:50:ec:6f:88:76:9d:b8:c7:ec:cc:a9:b5: 23:0a:0f:51:b7:60:f1:e9:c1:b2:b2:a4:44:3e:61:d0:07:f0: 68:a2:76:e8:74:f3:07:a3:f9:9c:b7:dc:67:a0:75:16:e8:1b: e6:68:61:21:77:9a:03:58:aa:17:4f:dd:6e:91:d9:b5:44:ca: 15:dd:75:37:ce:6b:6b:54:b2:61:2b:92:2f:5c:9e:2e:32:96: 3f:f8:0b:20:df:04:83:77:ec:d2:1c:63:9d:d9:42:68:a0:34: 4b:c1:64:fd:7e:8e:74:ec:b2:75:65:f0:11:c5:f7:ca:38:82: 31:65:ce:1c:30:05:6a:db:49:8c:4a:dc:32:3a:68:98:28:cb: 61:6f:10:9a:4f:75:37:1f:09:03:56:93:95:b3:cf:e4:a5:c0: 69:a1:20:9b:f3:84:83:7c:b9:32:68:34:4d:0d:23:cc:c8:35: 97:84:05:2e:dd:17:40:f4:d9:fa:6e:3f:5b:b6:03:b0:e1:9c: 9c:8e:55:16:08:9a:3c:75:73:af:99:da:db:15:f6:45:6e:ba: e7:6a:af:26:7e:16:4f:cd:d5:ed:69:35:9b:5b:87:50:c3:a7: e9:07:b6:68:87:9a:6c:ca:7e:74:6e:36:cc:38:66:3f:52:1b: 8e:52:00:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfLHnxuCo/pEJrS6Hzb7LJ3FsgxEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA0MjA2WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTIxMWFlMzA0OThjMzIzNTBkNzU4NDRhM2VjZmM2M2Rh OGMwYjMzZGU5MDU2MGMzNTZlMDRmZGU4NzEwMWZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbeFwNB+Yp2ppHHjzMV4pmJEox6Q7+klBpxHJFMbB2YPXQ VQu3KzilkhK2nfASR0WqljCIjyCUwblNn8+uv4uvr+SblufnTKSasrg18q75xN+V 3GtSXGUBYtudXMwbhtnXhFze3NExKCceJ8ck0qdO1K5/JYfFkSRhN8A/uI95X8uH zQRz2JloBQVxxGUPTQ2xRCQnKxyRZU/hpQ74d1I2FUgBF/SCJnuxEOJAg6gSWuCJ m7CWgmScb1s7RXL0W1GnI0XtH4K9k7Tv/p3jHvthjMFmBOWCqOW9k+sKvbwGh8GF XE4zx3M8lNlP1fdqHwkpb0YdCkXyQVlTXsVUtttxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQZdkNuxYDDPAWzxaocDWsR4CB60wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3NzQ0OGQzLWM5OTgtNDgyNS05ZGY3LWRkOWFjMTFhM2MxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhsoAwDQYJKoZIhvcNAQELBQADggEBAFFXZ8TTbVDsb4h2nbjH7MyptSMK D1G3YPHpwbKypEQ+YdAH8Giiduh08wej+Zy33GegdRboG+ZoYSF3mgNYqhdP3W6R 2bVEyhXddTfOa2tUsmErki9cni4ylj/4CyDfBIN37NIcY53ZQmigNEvBZP1+jnTs snVl8BHF98o4gjFlzhwwBWrbSYxK3DI6aJgoy2FvEJpPdTcfCQNWk5Wzz+SlwGmh IJvzhIN8uTJoNE0NI8zINZeEBS7dF0D02fpuP1u2A7DhnJyOVRYImjx1c6+Z2tsV 9kVuuudqryZ+Fk/N1e1pNZtbh1DDp+kHtmiHmmzKfnRuNsw4Zj9SG45SAA4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:08 2025 by rpki-client