$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa File: 985b59c8-a923-4d73-afff-2650138ef0c2.roa (raw, json) Hash identifier: 0JlZbN7KcJ79OOjVsWM8gb6IQA5WWK4aqbjddNLCQ1Y= Subject key identifier: E8:46:22:7C:32:8C:DF:AB:58:21:74:3D:32:50:20:03:5D:56:AE:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CAB193B62AF9E2B691C6D1C55EE5DE9B1DF610C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa Signing time: Wed 23 Jul 2025 00:00:14 +0000 ROA not before: Wed 23 Jul 2025 00:00:14 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.216.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ab:19:3b:62:af:9e:2b:69:1c:6d:1c:55:ee:5d:e9:b1:df:61:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:00:14 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=db8f1d5fd4a428f7a764a4cccbfc2ff165428f5f1e504eb79c67de99e6552f45, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:51:9c:76:45:2f:58:05:aa:2b:8f:8c:af: 2b:0b:73:52:97:22:b2:12:99:5a:41:12:38:f8:9a: 69:5a:2d:60:e3:84:c5:d3:c4:61:7d:26:2c:6a:48: 84:88:e2:25:e2:fd:ca:39:94:21:14:13:c4:b0:e8: 8f:6b:8f:5f:1a:05:02:4f:82:3b:b0:7c:d6:a2:0e: 46:e2:93:4b:31:c7:ad:da:c5:a7:85:96:ac:31:0f: 53:28:f3:bc:7b:43:14:3e:fe:ab:32:be:6a:e7:13: dc:3b:2c:ee:ca:ca:e7:04:2b:11:41:e3:38:5f:5b: 6b:f8:6f:19:0e:b4:01:cd:c5:e9:0e:45:1e:e0:91: 0a:60:ff:f5:ee:42:76:c2:71:4b:a8:8c:14:1a:04: a4:30:e1:f4:67:ce:54:26:19:aa:7f:6f:d1:d0:9a: 98:9b:59:71:86:5c:cc:e7:f4:8b:1a:25:b9:27:52: b8:93:b6:69:2b:70:3d:d6:33:12:dd:41:8b:a7:e1: 05:03:36:da:f0:58:71:7b:6a:1b:66:04:b5:81:4a: fc:d3:35:58:1c:5d:2a:6b:47:b6:ac:b5:4f:7b:19: fa:c0:df:47:ba:b8:45:f9:1a:18:f4:3f:c6:cf:e5: b3:75:28:40:d4:8f:eb:57:e4:95:ac:c6:5a:3c:eb: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:22:7C:32:8C:DF:AB:58:21:74:3D:32:50:20:03:5D:56:AE:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1a:7a:b0:ef:f8:00:aa:04:42:21:61:20:2b:6e:74:04:3b:b5: 64:90:5f:a1:98:e3:31:d2:bb:ee:e2:72:34:2d:ce:26:08:d3: 37:86:6f:19:05:52:1f:ee:22:d3:8d:66:91:d3:a1:57:17:48: 9e:59:2b:50:4b:d5:83:9e:6c:cf:e8:fb:ec:30:34:8c:66:a7: c6:b0:80:dc:17:b6:cf:b1:98:ff:0d:d6:37:5e:58:e8:30:2f: 82:c9:17:4f:d3:90:50:29:bb:1c:71:5f:e7:56:8e:e0:6b:ff: 4f:25:b1:2b:07:6f:ac:6b:94:21:a1:5a:94:42:7b:7e:06:1e: ea:76:d0:5f:87:d1:31:a8:79:e3:e7:40:f8:db:23:9c:02:32: e7:3c:d3:31:d5:93:b3:a2:0f:85:1c:00:5b:c5:e1:fd:70:ca: 7b:cb:9f:d8:94:bf:53:88:c2:da:eb:e6:23:5e:5a:f4:eb:89: bd:95:30:5d:c0:9c:1d:d3:2c:70:84:f9:2c:3e:4c:f9:c6:eb: c8:d1:2b:1d:4b:ad:22:5c:a2:d2:e0:81:25:84:c3:fc:bc:32: 16:8c:19:d3:d4:35:aa:44:c1:dc:5b:8c:0e:09:08:45:70:49: 0d:97:8d:23:a6:f0:bb:05:37:a0:59:ad:cd:dc:57:20:55:4b: a5:1d:38:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULKsZO2KvnitpHG0cVe5d6bHfYQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAwMDE0WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjhmMWQ1ZmQ0YTQyOGY3YTc2NGE0Y2NjYmZjMmZmMTY1 NDI4ZjVmMWU1MDRlYjc5YzY3ZGU5OWU2NTUyZjQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHilGcdkUvWAWqK4+MrysLc1KXIrISmVpBEjj4mmlaLWDj hMXTxGF9JixqSISI4iXi/co5lCEUE8Sw6I9rj18aBQJPgjuwfNaiDkbik0sxx63a xaeFlqwxD1Mo87x7QxQ+/qsyvmrnE9w7LO7KyucEKxFB4zhfW2v4bxkOtAHNxekO RR7gkQpg//XuQnbCcUuojBQaBKQw4fRnzlQmGap/b9HQmpibWXGGXMzn9IsaJbkn UriTtmkrcD3WMxLdQYun4QUDNtrwWHF7ahtmBLWBSvzTNVgcXSprR7astU97GfrA 30e6uEX5Ghj0P8bP5bN1KEDUj+tX5JWsxlo86zhtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6EYifDKM36tYIXQ9MlAgA11WrhYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NWI1OWM4LWE5MjMtNGQ3My1hZmZmLTI2NTAxMzhlZjBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFo2DANBgkqhkiG9w0BAQsFAAOCAQEAGnqw7/gAqgRCIWEgK250BDu1ZJBf oZjjMdK77uJyNC3OJgjTN4ZvGQVSH+4i041mkdOhVxdInlkrUEvVg55sz+j77DA0 jGanxrCA3Be2z7GY/w3WN15Y6DAvgskXT9OQUCm7HHFf51aO4Gv/TyWxKwdvrGuU IaFalEJ7fgYe6nbQX4fRMah54+dA+NsjnAIy5zzTMdWTs6IPhRwAW8Xh/XDKe8uf 2JS/U4jC2uvmI15a9OuJvZUwXcCcHdMscIT5LD5M+cbryNErHUutIlyi0uCBJYTD /LwyFowZ09Q1qkTB3FuMDgkIRXBJDZeNI6bwuwU3oFmtzdxXIFVLpR04Qw== -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:16 2025 by rpki-client