$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa File: 6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa (raw, json) Hash identifier: mxZPWUhk/WGlUQPsuoMEoZKlk/e7r9hnSugp7W0Jajo= Subject key identifier: CB:09:2B:A9:D5:DA:8C:69:B1:9F:FA:AA:EA:7C:92:BD:87:9F:C3:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 143CA5DA54B3A7EEBE3D98300EE186D5E19B47 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa Signing time: Sat 26 Jul 2025 00:20:21 +0000 ROA not before: Sat 26 Jul 2025 00:20:21 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 94.38.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3c:a5:da:54:b3:a7:ee:be:3d:98:30:0e:e1:86:d5:e1:9b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 26 00:20:21 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=ff7b32503814e952531b354b3499f0bd3a95c2e68f080cef5244ac0df7303f95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:58:5e:33:67:68:83:eb:62:ea:84:ac:d9: f8:60:17:ba:3a:99:eb:09:f4:99:4b:3f:f5:9b:aa: 40:4d:ad:f3:67:cc:d1:14:2d:b2:2d:33:38:29:f1: 02:87:12:db:4b:15:41:4c:0d:48:42:75:24:aa:7e: 87:c8:a0:d1:40:6d:e3:d4:39:92:3e:9e:83:db:23: 70:06:ea:7c:92:49:10:19:39:38:8e:40:b5:72:31: f6:ad:12:8b:67:1e:40:32:b4:2b:89:ee:50:3d:02: 45:ab:d2:b6:a5:df:8e:0b:bd:8b:60:8e:34:3b:f2: 42:54:ab:28:23:af:82:7a:81:49:58:a5:55:e4:4f: 9d:86:28:c7:98:5f:50:38:cd:93:f7:c5:b9:59:ed: cf:8e:c1:be:30:75:dc:58:3e:07:b0:31:79:82:ed: c8:8c:9a:7a:ad:a2:38:3a:8e:97:ee:88:38:54:6f: 05:84:a8:bd:f2:69:3b:c1:5c:0c:24:69:b0:2e:7d: 6b:05:b2:39:03:55:6e:c9:36:9c:0d:a7:7a:ea:bb: 8d:7f:33:55:fc:95:73:f4:49:dd:9b:58:ad:5e:61: be:93:f6:95:66:1b:88:d6:a9:93:6a:4c:44:c0:c0: 99:b5:da:43:61:27:2f:c2:87:bf:c8:18:52:d8:9a: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:2B:A9:D5:DA:8C:69:B1:9F:FA:AA:EA:7C:92:BD:87:9F:C3:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.38.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7c:4c:c4:88:d6:e1:f6:ca:d7:aa:af:fd:4e:9f:6f:16:22:38: c7:18:0f:2c:1b:25:94:aa:a0:76:3a:53:17:15:1b:65:1b:f2: 73:9a:ad:a3:11:52:f1:ed:88:a8:35:cf:a1:3c:27:36:ca:6b: 42:a4:df:23:f6:ef:c0:b9:26:b4:6f:6c:8b:1a:4c:db:0f:82: cc:21:bb:ee:92:2e:8e:77:ed:1f:16:53:f9:9e:d4:84:c3:f3: b1:20:e2:08:38:dc:e5:01:86:97:23:ad:46:72:27:e0:0f:0e: e6:e7:2a:a3:fa:89:e5:63:ae:73:b7:79:0a:45:83:2f:f8:0d: 3f:bd:ea:ae:85:b6:63:f2:9a:29:61:30:e0:0d:a7:9d:00:a3: ba:ab:50:8c:48:bc:c6:6f:b3:7e:9d:db:87:49:da:50:44:dd: 61:3e:7d:cf:5f:c6:08:b7:45:ff:83:7a:79:80:86:cc:fa:4a: 94:40:07:84:b2:78:48:58:7a:65:ec:6d:4e:05:a7:2f:4e:af: 5b:7e:94:a9:9d:1c:f7:a3:9c:d3:1b:11:3d:a6:6e:e4:04:c6: 1d:d4:b0:14:25:b4:53:0c:fe:f9:9f:54:08:71:9a:4b:9b:5e: 0d:79:a4:18:7f:7b:3c:21:62:16:af:c6:69:00:5a:28:18:be: 4a:12:ee:77 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITFDyl2lSzp+6+PZgwDuGG1eGbRzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA3MjYwMDIwMjFaFw0yNTA4MzAyMzU5NTla MHoxSTBHBgNVBAUTQGZmN2IzMjUwMzgxNGU5NTI1MzFiMzU0YjM0OTlmMGJkM2E5 NWMyZTY4ZjA4MGNlZjUyNDRhYzBkZjczMDNmOTUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJfCWF4zZ2iD62LqhKzZ+GAXujqZ6wn0mUs/9ZuqQE2t82fM 0RQtsi0zOCnxAocS20sVQUwNSEJ1JKp+h8ig0UBt49Q5kj6eg9sjcAbqfJJJEBk5 OI5AtXIx9q0Si2ceQDK0K4nuUD0CRavStqXfjgu9i2CONDvyQlSrKCOvgnqBSVil VeRPnYYox5hfUDjNk/fFuVntz47BvjB13Fg+B7AxeYLtyIyaeq2iODqOl+6IOFRv BYSovfJpO8FcDCRpsC59awWyOQNVbsk2nA2neuq7jX8zVfyVc/RJ3ZtYrV5hvpP2 lWYbiNapk2pMRMDAmbXaQ2EnL8KHv8gYUtia9RECAwEAAaOCArAwggKsMB0GA1Ud DgQWBBTLCSup1dqMabGf+qrqfJK9h5/DcDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNmZjZTY1MDYtODIwZS00MjExLWI5NzMtYjVlNWFjOWZjZDViLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAV4mMA0GCSqGSIb3DQEBCwUAA4IBAQB8TMSI1uH2yteqr/1On28WIjjHGA8s GyWUqqB2OlMXFRtlG/Jzmq2jEVLx7YioNc+hPCc2ymtCpN8j9u/AuSa0b2yLGkzb D4LMIbvuki6Od+0fFlP5ntSEw/OxIOIIONzlAYaXI61GcifgDw7m5yqj+onlY65z t3kKRYMv+A0/vequhbZj8popYTDgDaedAKO6q1CMSLzGb7N+nduHSdpQRN1hPn3P X8YIt0X/g3p5gIbM+kqUQAeEsnhIWHpl7G1OBacvTq9bfpSpnRz3o5zTGxE9pm7k BMYd1LAUJbRTDP75n1QIcZpLm14NeaQYf3s8IWIWr8ZpAFooGL5KEu53 -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:14 2025 by rpki-client