$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa File: acd9009c-1eb1-4035-bd6f-ae1855761542.roa (raw, json) Hash identifier: Jvuxq50C5ASpa9ou+4uD3aXFroXuchH16/4DgxB9/HE= Subject key identifier: 7C:76:4B:18:EC:5A:02:50:B3:34:72:55:CD:CE:71:01:99:D9:83:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 423D4496CA1711341531C880AC38B651140F5013 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa Signing time: Fri 01 Aug 2025 15:00:17 +0000 ROA not before: Fri 01 Aug 2025 15:00:17 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.196.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3d:44:96:ca:17:11:34:15:31:c8:80:ac:38:b6:51:14:0f:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:00:17 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=5d5ce53954d0188132e4561ada871f4fc514f3f9739f2b89b964ed0d7e621213, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:49:14:17:60:59:c3:20:73:e8:2e:a3:9c: 33:db:53:26:47:8e:a9:20:30:64:e2:08:ca:20:de: c8:eb:69:dc:f4:42:47:19:5b:dc:eb:c1:84:37:fe: 45:41:48:24:79:21:e8:40:1b:ea:72:f6:e8:6c:42: 60:19:24:3f:7d:71:78:0a:1e:6f:a2:f7:1a:44:8a: 4f:bf:7f:37:23:31:1a:7e:a0:7c:ac:96:32:97:82: 08:76:ca:bb:51:aa:ee:c3:78:06:d4:5f:f5:7c:7c: f1:62:f8:8c:8d:46:25:26:56:de:7f:f8:7a:af:8f: 4e:22:55:81:53:a7:da:f2:9c:fc:4b:92:37:e1:fd: 4a:43:c3:14:ec:6e:19:75:d8:e1:8d:71:23:0e:24: 2a:26:36:ef:97:30:7e:61:1a:fb:1e:4c:b0:88:d5: f6:5e:e2:75:88:2e:e6:23:ab:2c:f2:ce:bd:74:97: 8f:03:d2:ff:48:31:e4:4f:aa:58:a6:0a:38:3c:fd: cf:98:c6:57:c6:2f:6f:5e:84:3f:6e:e7:a2:03:c1: 1c:36:f9:6a:6e:f1:33:e3:bb:6f:12:61:83:fe:a2: ad:01:a0:19:81:6d:59:6d:f5:34:75:e5:1f:ca:a3: 8a:56:29:4d:06:a0:74:5f:56:cd:60:3d:81:1c:7d: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:76:4B:18:EC:5A:02:50:B3:34:72:55:CD:CE:71:01:99:D9:83:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.196.0.0/14 Signature Algorithm: sha256WithRSAEncryption 21:ae:e2:c2:ae:5c:e9:04:f1:ce:de:7c:55:36:03:29:14:0a: c3:c4:05:b8:6d:fd:1a:9c:0d:34:72:02:2a:66:45:66:4d:35: e5:02:61:6b:af:4c:78:35:b1:b7:e5:5d:cc:73:86:20:d2:04: 62:9d:7d:89:a4:f3:c3:60:61:78:59:ca:11:5b:c3:03:65:25: 85:db:ed:36:76:58:3a:81:4c:a9:c2:aa:76:0b:3c:d5:2d:a3: 69:bb:5a:fd:f8:02:f9:a1:e7:e3:d6:ae:52:c6:e9:a1:55:a0: 83:e9:c8:da:aa:a1:fd:82:43:bc:72:3a:47:54:c4:25:62:8c: 1c:52:3b:b5:00:eb:18:c4:14:cf:04:5b:02:7a:2e:08:c4:b3: 59:1d:f1:25:7c:a5:6f:33:a8:50:e9:9d:fb:4e:eb:6d:df:13: c3:cc:c9:59:18:1b:1a:02:10:7b:0f:b4:60:8b:59:a7:0d:06: 11:d3:f2:d5:a8:07:27:e2:28:a6:c7:93:1a:b7:dc:9d:53:31: 3b:a4:ea:7e:a3:fe:89:71:d4:62:0a:f6:75:8f:0b:79:d7:d8: 07:af:44:f6:ab:09:99:6b:1c:6b:43:39:28:21:c0:31:0e:22: 33:87:10:88:c3:8b:b0:d0:9b:4e:35:8c:9c:a9:1b:66:35:e1: f9:28:05:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQj1ElsoXETQVMciArDi2URQPUBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUwMDE3WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDVjZTUzOTU0ZDAxODgxMzJlNDU2MWFkYTg3MWY0ZmM1 MTRmM2Y5NzM5ZjJiODliOTY0ZWQwZDdlNjIxMjEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCih0kUF2BZwyBz6C6jnDPbUyZHjqkgMGTiCMog3sjradz0 QkcZW9zrwYQ3/kVBSCR5IehAG+py9uhsQmAZJD99cXgKHm+i9xpEik+/fzcjMRp+ oHysljKXggh2yrtRqu7DeAbUX/V8fPFi+IyNRiUmVt5/+Hqvj04iVYFTp9rynPxL kjfh/UpDwxTsbhl12OGNcSMOJComNu+XMH5hGvseTLCI1fZe4nWILuYjqyzyzr10 l48D0v9IMeRPqlimCjg8/c+YxlfGL29ehD9u56IDwRw2+Wpu8TPju28SYYP+oq0B oBmBbVlt9TR15R/Ko4pWKU0GoHRfVs1gPYEcfZvZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfHZLGOxaAlCzNHJVzc5xAZnZg5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjZDkwMDljLTFlYjEtNDAzNS1iZDZmLWFlMTg1NTc2MTU0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINxDANBgkqhkiG9w0BAQsFAAOCAQEAIa7iwq5c6QTxzt58VTYDKRQKw8QF uG39GpwNNHICKmZFZk015QJha69MeDWxt+VdzHOGINIEYp19iaTzw2BheFnKEVvD A2UlhdvtNnZYOoFMqcKqdgs81S2jabta/fgC+aHn49auUsbpoVWgg+nI2qqh/YJD vHI6R1TEJWKMHFI7tQDrGMQUzwRbAnouCMSzWR3xJXylbzOoUOmd+07rbd8Tw8zJ WRgbGgIQew+0YItZpw0GEdPy1agHJ+IopseTGrfcnVMxO6TqfqP+iXHUYgr2dY8L edfYB69E9qsJmWsca0M5KCHAMQ4iM4cQiMOLsNCbTjWMnKkbZjXh+SgFbw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:10:35 2025 by rpki-client