$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa File: c589a841-11da-4452-b1db-8ead5539a844.roa (raw, json) Hash identifier: +BbAWcd+IwHSVfJZ5Vyrd/PMLLnkaGOB+5LP4aBpEiY= Subject key identifier: 44:85:B1:8E:82:A8:95:0A:59:77:24:88:11:FF:A2:E5:CD:74:70:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59AEF2AB87AAFEF136E5B5C28AB8034CC8615E80 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa Signing time: Fri 25 Jul 2025 00:30:32 +0000 ROA not before: Fri 25 Jul 2025 00:30:32 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ae:f2:ab:87:aa:fe:f1:36:e5:b5:c2:8a:b8:03:4c:c8:61:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:30:32 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=6581f29dddfb7feb9e613e72afdc4ee8a09379ec4c1e7bd448f8f511411f5c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:5a:7d:8b:1c:b9:85:b6:1f:d2:f6:c3:d0: d1:b0:00:65:27:e6:ee:c5:00:1f:24:ec:ce:86:24: ee:a5:a6:35:17:1c:5e:7e:6c:eb:0e:6b:7e:9a:be: 0e:48:82:fc:c2:fb:74:f6:ec:60:01:ca:3c:7b:5a: 06:b5:83:4d:83:92:60:e4:b7:07:3c:1e:38:fa:3c: 5a:ca:68:59:fd:6d:0a:be:43:e5:75:c3:38:8d:04: b0:1a:8e:c6:9e:ee:de:53:16:a6:d3:c2:1e:04:b0: 43:26:99:ac:a2:cb:6a:4c:97:9e:a9:32:7a:1e:6f: ee:34:eb:7f:0c:23:3f:ba:47:26:1f:d3:41:c7:e0: e1:8a:fb:6f:f4:29:d0:dd:95:6e:cc:80:9e:d0:10: 92:44:3c:04:5a:47:59:28:f5:7e:ed:ca:24:b7:27: 9b:78:23:89:8e:74:5d:97:dd:de:c7:cd:8f:86:ae: 98:11:26:6d:cb:11:d9:1b:d1:47:9c:6f:a0:cd:53: 1c:5c:ea:02:24:dc:63:77:85:e3:e0:e4:6e:36:2e: bc:6f:6a:bd:55:34:08:bf:d2:78:48:c9:45:d1:0f: ff:e5:cc:e3:8e:ed:f1:f5:8b:4b:7e:a3:00:a7:53: f5:35:63:12:9c:85:b2:1d:f3:74:db:26:60:98:e9: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:B1:8E:82:A8:95:0A:59:77:24:88:11:FF:A2:E5:CD:74:70:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.184.0/23 Signature Algorithm: sha256WithRSAEncryption 50:31:8d:6b:3a:c2:48:fb:8e:c6:91:93:58:7c:3e:36:cc:b1: 5b:9f:c8:cb:d5:45:df:87:3d:0f:81:c1:fc:e5:bc:ee:ce:f9: 0a:17:33:07:f3:98:8f:1a:59:16:4c:5b:84:7e:24:03:86:2e: 59:d0:38:27:43:74:18:09:e6:95:6d:a6:ce:68:bd:67:d7:c1: 39:9e:ed:30:7a:4f:94:59:5a:1f:04:d9:cf:ec:17:0d:b3:d7: 16:65:ba:6c:4c:17:ca:6a:56:56:8f:f3:e2:5d:43:5d:05:78: 9b:a1:a2:57:a2:90:b2:ec:29:07:69:6a:58:a4:ef:ce:21:66: 3a:78:b9:58:97:f4:96:85:4c:50:59:c9:4a:1f:11:42:e7:a6: 0d:fd:27:4f:5f:07:61:25:0e:d5:83:bb:44:ea:80:39:af:89: 45:4c:db:d8:a4:2d:82:0e:62:95:a6:19:d9:28:b9:37:41:e9: cd:ab:7c:49:bd:c4:dc:6a:b5:1d:55:d8:a0:40:ab:c8:ba:b5: ad:66:8b:80:e5:25:0b:83:6b:0f:0e:a1:89:89:f8:b1:bc:21: 7d:f4:ba:7b:f5:58:ad:08:e9:50:2b:0d:d6:1d:f7:47:b1:35: 7a:74:c3:e9:05:ad:01:bc:ab:22:f9:77:e5:d9:3b:93:67:1b: 8c:e4:71:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWa7yq4eq/vE25bXCirgDTMhhXoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAzMDMyWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTgxZjI5ZGRkZmI3ZmViOWU2MTNlNzJhZmRjNGVlOGEw OTM3OWVjNGMxZTdiZDQ0OGY4ZjUxMTQxMWY1YzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIMVp9ixy5hbYf0vbD0NGwAGUn5u7FAB8k7M6GJO6lpjUX HF5+bOsOa36avg5IgvzC+3T27GAByjx7Wga1g02DkmDktwc8Hjj6PFrKaFn9bQq+ Q+V1wziNBLAajsae7t5TFqbTwh4EsEMmmayiy2pMl56pMnoeb+40638MIz+6RyYf 00HH4OGK+2/0KdDdlW7MgJ7QEJJEPARaR1ko9X7tyiS3J5t4I4mOdF2X3d7HzY+G rpgRJm3LEdkb0Uecb6DNUxxc6gIk3GN3hePg5G42Lrxvar1VNAi/0nhIyUXRD//l zOOO7fH1i0t+owCnU/U1YxKchbId83TbJmCY6arxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURIWxjoKolQpZdySIEf+i5c10cGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1ODlhODQxLTExZGEtNDQ1Mi1iMWRiLThlYWQ1NTM5YTg0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl7gwDQYJKoZIhvcNAQELBQADggEBAFAxjWs6wkj7jsaRk1h8PjbMsVuf yMvVRd+HPQ+BwfzlvO7O+QoXMwfzmI8aWRZMW4R+JAOGLlnQOCdDdBgJ5pVtps5o vWfXwTme7TB6T5RZWh8E2c/sFw2z1xZlumxMF8pqVlaP8+JdQ10FeJuholeikLLs KQdpalik784hZjp4uViX9JaFTFBZyUofEULnpg39J09fB2ElDtWDu0TqgDmviUVM 29ikLYIOYpWmGdkouTdB6c2rfEm9xNxqtR1V2KBAq8i6ta1mi4DlJQuDaw8OoYmJ +LG8IX30unv1WK0I6VArDdYd90exNXp0w+kFrQG8qyL5d+XZO5NnG4zkcYY= -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:35 2025 by rpki-client