$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa File: 94760639-2712-4f50-9362-9ff9626e6a44.roa (raw, json) Hash identifier: aKZzuEkgYCJM6+Jd2svgVD5yEBnv9ajT/w0pMXf5/9c= Subject key identifier: 22:BD:1B:56:C8:1E:E2:E8:2B:AA:C8:EC:ED:3C:77:C4:D3:70:58:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31CD0319E9AA37B9347BE1DEF83F53F59C4DADC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa Signing time: Sat 19 Jul 2025 00:00:22 +0000 ROA not before: Sat 19 Jul 2025 00:00:22 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.152.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cd:03:19:e9:aa:37:b9:34:7b:e1:de:f8:3f:53:f5:9c:4d:ad:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:00:22 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=4b0f72d0c91bb54862119429f524e2c14a5d296230f48cb83c2358eb7ba18bca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:aa:a3:20:87:c3:48:99:ed:6a:02:32:e3: d4:67:2e:7d:31:57:1d:9b:d6:56:5d:d3:2b:7d:9c: 01:a1:59:b6:2c:e5:6a:de:bb:3d:5d:59:0d:36:da: bc:36:0f:1e:1e:da:a8:ad:c0:0a:fc:e7:66:82:f4: 0b:21:2e:73:44:7f:a8:c3:8d:b1:f7:3f:ca:9f:49: 8a:b0:20:35:34:99:53:e9:ef:82:fb:eb:90:93:39: 0f:ae:97:ec:ae:e2:5d:8c:cc:0d:b5:7c:a7:4e:e9: e0:73:8d:4b:6b:f5:b8:41:c9:5b:b1:0f:5a:45:fc: 39:78:6f:7c:3e:ed:bd:82:e5:37:88:86:f4:7f:bb: b7:6c:96:83:71:d4:13:1f:24:ea:8d:82:5d:98:02: ab:e8:e4:25:46:8c:1e:24:80:1f:d8:2f:b0:a8:94: 0b:f5:83:03:6c:0e:57:cf:78:e8:08:45:db:86:0d: f9:8e:d9:fc:e6:bd:b1:c8:5a:a0:9c:c6:3c:26:4a: f7:f4:15:38:eb:8c:f2:e7:1d:13:95:9d:9d:ab:b9: e9:fb:7a:e6:d9:2b:8a:e6:7d:12:13:08:d8:5c:92: f5:f0:9d:0e:b6:5b:75:13:5d:aa:c7:86:a7:02:51: e6:73:db:18:47:af:9a:61:96:d7:04:d3:36:6e:f4: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BD:1B:56:C8:1E:E2:E8:2B:AA:C8:EC:ED:3C:77:C4:D3:70:58:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption 93:c2:9a:03:f5:0d:8f:74:e8:a0:45:00:73:87:e9:30:f9:cc: 9f:1e:06:a7:6d:12:2f:ae:e3:ea:7b:fd:a6:3f:6a:ea:9a:af: 9d:c1:a3:0e:80:85:76:d3:ef:33:bc:cc:88:94:25:c4:a9:05: e8:5a:a4:53:22:8f:de:fe:5c:ab:76:93:ca:a3:2a:21:b4:44: 61:ee:10:20:00:f7:81:ee:10:e9:46:75:85:6d:a6:26:73:a3: f0:22:66:8c:cd:73:7f:c9:c0:1d:18:52:32:b6:4b:54:2f:e7: 21:a3:99:ab:3a:f0:1f:d4:fa:7b:37:7e:06:6c:93:4c:4c:fd: d2:25:c4:0e:7c:6f:c7:7e:b1:00:9b:0f:89:e7:a3:ed:42:13: 53:fe:e8:f8:65:96:78:00:8e:b5:86:28:d7:5e:22:5b:dd:71: ca:d9:a8:33:57:80:9f:d3:3b:bd:1b:7d:4d:de:ac:29:b2:94: f2:1e:26:cb:e6:74:6f:e4:e6:8b:6d:e0:5f:7f:59:60:df:a6: 5b:d8:30:96:5d:6d:4e:dc:c9:1c:06:40:c3:a6:e7:85:67:a1: 9f:5f:5c:14:09:2a:a9:a0:b9:0c:57:2c:60:e9:a1:58:53:ef: ea:b2:6a:37:42:8a:cf:64:68:7e:d5:0a:10:d0:49:48:49:d3: 47:cc:48:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMc0DGemqN7k0e+He+D9T9ZxNrckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMDIyWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjBmNzJkMGM5MWJiNTQ4NjIxMTk0MjlmNTI0ZTJjMTRh NWQyOTYyMzBmNDhjYjgzYzIzNThlYjdiYTE4YmNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGV6qjIIfDSJntagIy49RnLn0xVx2b1lZd0yt9nAGhWbYs 5Wreuz1dWQ022rw2Dx4e2qitwAr852aC9AshLnNEf6jDjbH3P8qfSYqwIDU0mVPp 74L765CTOQ+ul+yu4l2MzA21fKdO6eBzjUtr9bhByVuxD1pF/Dl4b3w+7b2C5TeI hvR/u7dsloNx1BMfJOqNgl2YAqvo5CVGjB4kgB/YL7ColAv1gwNsDlfPeOgIRduG DfmO2fzmvbHIWqCcxjwmSvf0FTjrjPLnHROVnZ2ruen7eubZK4rmfRITCNhckvXw nQ62W3UTXarHhqcCUeZz2xhHr5phltcE0zZu9FHjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIr0bVsge4ugrqsjs7Tx3xNNwWO0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NzYwNjM5LTI3MTItNGY1MC05MzYyLTlmZjk2MjZlNmE0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrmIAwDQYJKoZIhvcNAQELBQADggEBAJPCmgP1DY906KBFAHOH6TD5zJ8e BqdtEi+u4+p7/aY/auqar53Bow6AhXbT7zO8zIiUJcSpBehapFMij97+XKt2k8qj KiG0RGHuECAA94HuEOlGdYVtpiZzo/AiZozNc3/JwB0YUjK2S1Qv5yGjmas68B/U +ns3fgZsk0xM/dIlxA58b8d+sQCbD4nno+1CE1P+6PhllngAjrWGKNdeIlvdccrZ qDNXgJ/TO70bfU3erCmylPIeJsvmdG/k5ott4F9/WWDfplvYMJZdbU7cyRwGQMOm 54VnoZ9fXBQJKqmguQxXLGDpoVhT7+qyajdCis9kaH7VChDQSUhJ00fMSAQ= -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:10 2025 by rpki-client