$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa File: 7aec645b-f991-4a6c-97ff-47cd491428c4.roa (raw, json) Hash identifier: SNJWv4VEno78k1lUQOwGaOPjRejwaniyq27uPAbAIIA= Subject key identifier: 0E:D0:AF:F0:D9:46:4E:97:80:19:F7:DB:63:44:C1:8F:40:E9:E1:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11901B771D30EAAA99B44D331F187908EA78CB89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa Signing time: Wed 04 Jun 2025 00:41:36 +0000 ROA not before: Wed 04 Jun 2025 00:41:36 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:90:1b:77:1d:30:ea:aa:99:b4:4d:33:1f:18:79:08:ea:78:cb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:41:36 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=13e1f1676c6feb2999427c506244ab79dce2be97cfe77e54fdb55b8eea2338e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:c4:8b:7e:d3:38:fb:79:dd:44:65:09:76: 60:eb:a4:82:0f:02:92:a4:a3:34:f5:13:a9:94:af: 14:16:4e:d3:2b:a3:d7:a2:0a:ff:be:75:a4:ce:3f: 9f:0e:40:bf:17:2c:c6:cb:86:61:7d:15:9d:f4:ba: 04:85:50:0d:e0:ec:21:ab:ea:17:55:ac:bc:8f:a9: a2:70:a6:8a:74:20:09:e5:76:77:28:02:60:54:30: 76:6d:2e:04:9b:6b:9d:5f:c1:c6:0f:53:54:20:40: ee:3b:34:46:88:b4:fe:99:d9:7f:b5:35:9b:b0:ce: 08:28:dc:fa:36:da:81:59:4c:ff:76:7f:05:3f:36: 33:18:32:a2:0f:95:f2:da:71:d3:1d:65:6d:bb:f1: cf:19:17:eb:98:fe:f1:f5:87:fa:98:3a:a4:ce:03: 66:d0:17:8c:31:b5:1d:2c:84:90:ee:62:1d:4f:a5: eb:60:e2:1f:3a:4c:2f:35:24:9e:c3:a5:4a:e5:68: a1:c9:ec:64:7e:ce:21:27:0a:f5:67:28:0e:4f:74: 62:2d:8e:73:56:bc:18:a7:10:1f:61:82:28:01:6a: 71:5d:0e:da:93:77:e1:8f:db:d2:c6:ad:8a:3d:cb: b5:95:f6:f9:80:22:04:d1:23:a0:d1:c1:5b:47:69: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:AF:F0:D9:46:4E:97:80:19:F7:DB:63:44:C1:8F:40:E9:E1:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:56:8f:81:cd:bc:04:72:20:53:3e:d8:47:a2:76:c6:d3:4b: 0b:71:30:8f:c2:5a:47:51:8f:58:c8:51:0c:41:f7:36:f7:e0: c2:28:18:37:4c:c7:31:41:1c:54:b8:7a:e1:e4:f1:02:ed:37: 14:62:99:e1:d7:cb:d9:0b:52:9e:e9:84:93:da:bc:9a:00:46: 25:e7:1f:b8:92:5e:8e:7a:60:b8:eb:1a:28:9d:32:19:79:ce: e2:0f:a5:4d:5c:9f:82:23:83:ab:24:88:20:8b:1d:66:b7:5d: 67:06:0c:ad:76:6f:cf:cc:8c:d2:79:4b:6e:01:a2:a9:72:47: 53:6d:5b:5c:9c:6e:75:ac:f1:a1:63:83:3a:75:ac:3a:ee:0d: 46:9f:8b:9b:88:68:09:91:82:9c:1a:77:f2:6c:52:d2:95:cd: 56:5d:4c:58:cd:d4:93:c4:54:de:b2:ac:97:7e:ce:10:99:65: f0:96:b7:1e:e1:d9:99:f2:e2:66:d1:e6:60:e8:47:57:aa:39: 3a:78:e2:09:68:08:3e:ea:dc:36:e3:58:3c:97:f3:f5:c5:bd: 02:ef:c4:a8:d2:92:da:a2:8e:06:b4:0f:2a:18:72:97:65:05: 99:92:b4:f5:09:86:f1:e1:cb:e7:07:35:d6:b3:1e:d4:54:79: 9a:a6:f3:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEZAbdx0w6qqZtE0zHxh5COp4y4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDA0MTM2WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2UxZjE2NzZjNmZlYjI5OTk0MjdjNTA2MjQ0YWI3OWRj ZTJiZTk3Y2ZlNzdlNTRmZGI1NWI4ZWVhMjMzOGUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjyMSLftM4+3ndRGUJdmDrpIIPApKkozT1E6mUrxQWTtMr o9eiCv++daTOP58OQL8XLMbLhmF9FZ30ugSFUA3g7CGr6hdVrLyPqaJwpop0IAnl dncoAmBUMHZtLgSba51fwcYPU1QgQO47NEaItP6Z2X+1NZuwzggo3Po22oFZTP92 fwU/NjMYMqIPlfLacdMdZW278c8ZF+uY/vH1h/qYOqTOA2bQF4wxtR0shJDuYh1P petg4h86TC81JJ7DpUrlaKHJ7GR+ziEnCvVnKA5PdGItjnNWvBinEB9hgigBanFd DtqTd+GP29LGrYo9y7WV9vmAIgTRI6DRwVtHaZDxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDtCv8NlGTpeAGffbY0TBj0Dp4WswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhZWM2NDViLWY5OTEtNGE2Yy05N2ZmLTQ3Y2Q0OTE0MjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl3AwDQYJKoZIhvcNAQELBQADggEBAD9Wj4HNvARyIFM+2EeidsbTSwtx MI/CWkdRj1jIUQxB9zb34MIoGDdMxzFBHFS4euHk8QLtNxRimeHXy9kLUp7phJPa vJoARiXnH7iSXo56YLjrGiidMhl5zuIPpU1cn4Ijg6skiCCLHWa3XWcGDK12b8/M jNJ5S24BoqlyR1NtW1ycbnWs8aFjgzp1rDruDUafi5uIaAmRgpwad/JsUtKVzVZd TFjN1JPEVN6yrJd+zhCZZfCWtx7h2Zny4mbR5mDoR1eqOTp44gloCD7q3DbjWDyX 8/XFvQLvxKjSktqijga0DyoYcpdlBZmStPUJhvHhy+cHNdazHtRUeZqm86g= -----END CERTIFICATE-----Generated at Sat Jun 14 06:45:39 2025 by rpki-client