$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb690e1-8cd6-488a-b034-5a458c73c51a.roa File: cbb690e1-8cd6-488a-b034-5a458c73c51a.roa (raw, json) Hash identifier: uFwCrDzKSh1R44MdSSYlul30prqzFYxg+66C68xYQUo= Subject key identifier: C9:67:D9:B7:69:45:81:7C:4E:2D:82:A6:7B:69:A6:15:9E:59:C2:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0264715E52DA979C6210E3327479134A7D9A75FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb690e1-8cd6-488a-b034-5a458c73c51a.roa Signing time: Mon 04 Aug 2025 15:11:59 +0000 ROA not before: Mon 04 Aug 2025 15:11:59 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 174.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:64:71:5e:52:da:97:9c:62:10:e3:32:74:79:13:4a:7d:9a:75:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:11:59 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=9e2029608396269efa2e8bc8a9bfc8056354d78b014d2b4d97376dc52364b147, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:72:7b:52:9c:87:32:43:6b:d7:03:98:b1: 8c:98:f8:63:b7:42:03:5d:ef:5e:61:01:14:47:76: 2f:1f:38:0f:aa:5b:72:aa:16:60:06:50:48:4c:be: 8c:19:0d:98:2c:00:31:31:f0:a6:57:c7:b1:ff:82: 91:5f:8b:83:8c:78:df:e5:76:d9:e2:eb:7e:68:c8: f6:78:8a:22:b5:a8:4f:3e:8f:e4:f0:91:b2:40:14: 89:aa:d6:37:fc:b3:a4:57:e1:98:8a:10:7b:01:30: a5:e2:68:74:67:2a:60:50:4b:a1:74:0b:25:86:5b: bd:b5:68:b5:96:3a:6e:ce:0d:2e:c4:83:7b:5d:6a: a3:6b:e4:f6:09:88:b6:14:c5:22:51:fe:e4:69:3a: 45:19:79:b5:ef:d8:ae:3f:78:94:47:4b:36:31:eb: 0f:fa:ea:91:09:c5:40:da:af:c2:99:95:dc:da:bd: 25:34:0d:a1:3f:e7:80:36:ed:60:e8:fa:07:1f:d1: 46:12:e2:9d:71:61:a4:cc:58:be:3a:29:29:a0:9b: f3:52:a7:89:8e:5a:87:cd:d6:ae:77:7c:89:cf:5a: ef:bf:8f:99:1c:44:41:4e:05:5f:17:6a:f6:0a:d2: 93:12:81:c4:ed:6c:c9:a2:50:09:89:1c:b5:47:db: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:D9:B7:69:45:81:7C:4E:2D:82:A6:7B:69:A6:15:9E:59:C2:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb690e1-8cd6-488a-b034-5a458c73c51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:05:6a:25:54:44:de:f2:79:3f:f9:53:52:0c:b2:75:6f:21: 38:95:3f:80:29:2c:cc:8c:2c:8e:e2:c2:a3:68:37:6c:bb:be: 69:d5:ec:3c:cb:cc:90:1c:09:ec:ee:9c:66:ba:a8:06:9c:b0: b3:f4:a9:dd:a7:ff:26:26:e6:45:60:5c:63:4a:25:02:5d:ef: f5:8d:b2:cf:7b:b0:8f:54:40:8d:2f:93:c1:8a:51:c5:30:f3: 32:13:4f:1f:3f:cb:2f:0b:07:6c:cf:81:02:f0:5b:e7:5d:13: c1:39:8a:c0:c0:39:1c:9d:5d:57:7e:de:f5:97:72:e9:f3:db: 81:4b:f6:22:d9:35:2f:4f:6e:06:94:b9:47:73:7c:72:cf:55: 29:e9:c1:15:fe:5a:76:64:46:dc:04:45:07:82:65:47:f0:ad: b5:77:d2:30:6b:72:56:aa:31:2f:70:25:05:6c:0b:6c:40:96: c9:53:c6:5e:bd:32:ed:c8:9d:d7:58:59:ce:2b:2e:f1:74:cd: 5d:c7:ed:50:d1:03:35:6d:37:56:a3:39:c6:99:dc:ad:9f:0a: 61:49:d0:e5:c7:85:9f:3a:19:cc:40:69:5d:cc:4a:10:6e:14: 95:6f:94:2a:07:5a:55:1b:3b:5e:f3:3c:47:e1:35:22:94:09: a4:b3:f7:c6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAmRxXlLal5xiEOMydHkTSn2adfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTUxMTU5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTIwMjk2MDgzOTYyNjllZmEyZThiYzhhOWJmYzgwNTYz NTRkNzhiMDE0ZDJiNGQ5NzM3NmRjNTIzNjRiMTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeQnJ7UpyHMkNr1wOYsYyY+GO3QgNd715hARRHdi8fOA+q W3KqFmAGUEhMvowZDZgsADEx8KZXx7H/gpFfi4OMeN/ldtni635oyPZ4iiK1qE8+ j+TwkbJAFImq1jf8s6RX4ZiKEHsBMKXiaHRnKmBQS6F0CyWGW721aLWWOm7ODS7E g3tdaqNr5PYJiLYUxSJR/uRpOkUZebXv2K4/eJRHSzYx6w/66pEJxUDar8KZldza vSU0DaE/54A27WDo+gcf0UYS4p1xYaTMWL46KSmgm/NSp4mOWofN1q53fInPWu+/ j5kcREFOBV8XavYK0pMSgcTtbMmiUAmJHLVH2wADAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyWfZt2lFgXxOLYKme2mmFZ5ZwtAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYjY5MGUxLThjZDYtNDg4YS1iMDM0LTVhNDU4YzczYzUxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCugTANBgkqhkiG9w0BAQsFAAOCAQEAQwVqJVRE3vJ5P/lTUgyydW8hOJU/ gCkszIwsjuLCo2g3bLu+adXsPMvMkBwJ7O6cZrqoBpyws/Sp3af/JibmRWBcY0ol Al3v9Y2yz3uwj1RAjS+TwYpRxTDzMhNPHz/LLwsHbM+BAvBb510TwTmKwMA5HJ1d V37e9Zdy6fPbgUv2Itk1L09uBpS5R3N8cs9VKenBFf5admRG3ARFB4JlR/CttXfS MGtyVqoxL3AlBWwLbECWyVPGXr0y7cid11hZzisu8XTNXcftUNEDNW03VqM5xpnc rZ8KYUnQ5ceFnzoZzEBpXcxKEG4UlW+UKgdaVRs7XvM8R+E1IpQJpLP3xg== -----END CERTIFICATE-----Generated at Mon Aug 4 22:18:22 2025 by rpki-client