$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f57ba1-e739-4940-be5b-fc066b3b005e.roa File: e5f57ba1-e739-4940-be5b-fc066b3b005e.roa (raw, json) Hash identifier: EPP2Ute6nq3T8AmXwicms+HUhAINoHTBK5IyW90x2lE= Subject key identifier: 63:C4:89:AE:04:5B:09:B9:47:28:59:8A:66:99:F5:32:A1:FC:BD:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 725A17F14609939B7DD76F3C2C48B3761DA29EC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f57ba1-e739-4940-be5b-fc066b3b005e.roa Signing time: Wed 06 Aug 2025 00:10:12 +0000 ROA not before: Wed 06 Aug 2025 00:10:12 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.148.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5a:17:f1:46:09:93:9b:7d:d7:6f:3c:2c:48:b3:76:1d:a2:9e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:10:12 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=8d4eafcffffbfa1e3d7f9f64b989ade286b880ec3236f05df06249772691005c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:52:f3:98:78:ce:59:e2:bd:00:64:dd:96: b5:55:86:07:fc:c5:f4:9c:47:ec:4d:2c:a7:6d:c3: 6c:19:1e:b4:73:3d:7d:94:62:41:27:3a:b3:f2:64: 97:ce:d2:6f:d3:16:d5:60:58:b9:7a:ea:65:48:65: a0:48:c1:31:a4:39:51:b7:63:4a:24:6c:4c:d8:e4: 6c:98:ca:86:aa:14:c8:56:41:14:84:dd:8a:f4:bd: 3a:ae:21:03:f9:b6:55:86:7f:d2:67:48:17:a0:16: c3:23:4c:59:8e:ae:e7:d5:c1:36:a7:0d:f4:ac:52: 3a:ca:94:33:8e:af:0d:89:32:93:1c:f8:e6:b4:f5: 3b:16:72:ad:df:a8:f6:a1:ab:83:56:c8:9b:81:71: 9c:fd:e5:1c:b7:48:21:0b:5e:f3:ca:6e:0f:64:8c: 32:56:aa:d5:4f:ba:3a:f0:db:34:20:62:7a:b6:cf: f8:e4:36:0b:a8:85:3c:3d:5c:58:6c:76:5f:9a:f4: f2:60:73:75:73:08:fb:87:78:2a:3f:9b:b1:f6:ae: 0e:ae:39:af:e4:b0:48:83:ad:69:ed:e7:20:da:bf: 7c:ca:36:3d:0f:bb:c5:d2:50:07:28:4b:27:1f:68: 06:60:d6:48:89:04:79:45:06:22:f5:62:59:a7:3a: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:89:AE:04:5B:09:B9:47:28:59:8A:66:99:F5:32:A1:FC:BD:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f57ba1-e739-4940-be5b-fc066b3b005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:6b:c7:fa:cd:ea:f2:67:c0:8e:34:c0:8d:8d:78:52:b8:54: 86:bd:61:2d:7e:dc:1b:e8:d7:69:4f:e0:fd:57:1c:2d:9c:9d: fc:36:c6:64:d4:07:4d:12:07:a8:6e:36:73:ad:66:6a:db:34: fe:eb:03:9f:85:bb:79:ef:c3:e9:85:62:1e:9d:a7:11:a9:be: 18:50:04:20:db:6a:8d:41:a4:c9:38:b6:51:1c:14:64:12:4d: 19:12:cf:73:6c:4f:31:a1:49:eb:4e:85:8e:e0:b1:78:8f:e9: 5b:b5:9f:ee:ea:de:86:ce:1b:4b:8d:6a:7c:f1:8f:03:4a:45: f7:33:ab:d3:cb:66:c9:4a:08:43:d1:af:61:22:19:12:4b:2c: 26:2c:3a:84:22:4e:4a:22:1e:0a:bc:31:d8:c4:12:1e:e2:66: a0:22:6b:5b:f0:c1:43:02:16:c6:c8:00:28:c2:0e:80:0a:e6: 3a:7f:30:dc:ee:68:a0:52:b3:df:18:df:9b:ab:82:b8:c5:8c: 48:00:0b:00:cd:cb:6a:42:ee:1a:2e:36:03:e7:5a:d8:f0:28: a3:cb:1f:b6:ef:54:2b:5d:93:c5:3c:31:48:71:a8:6b:d3:45: ec:f1:cf:a8:16:71:71:c7:80:61:55:12:10:b1:63:44:09:04: 28:57:74:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcloX8UYJk5t91288LEizdh2inskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAxMDEyWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDRlYWZjZmZmZmJmYTFlM2Q3ZjlmNjRiOTg5YWRlMjg2 Yjg4MGVjMzIzNmYwNWRmMDYyNDk3NzI2OTEwMDVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ1VLzmHjOWeK9AGTdlrVVhgf8xfScR+xNLKdtw2wZHrRz PX2UYkEnOrPyZJfO0m/TFtVgWLl66mVIZaBIwTGkOVG3Y0okbEzY5GyYyoaqFMhW QRSE3Yr0vTquIQP5tlWGf9JnSBegFsMjTFmOrufVwTanDfSsUjrKlDOOrw2JMpMc +Oa09TsWcq3fqPahq4NWyJuBcZz95Ry3SCELXvPKbg9kjDJWqtVPujrw2zQgYnq2 z/jkNguohTw9XFhsdl+a9PJgc3VzCPuHeCo/m7H2rg6uOa/ksEiDrWnt5yDav3zK Nj0Pu8XSUAcoSycfaAZg1kiJBHlFBiL1YlmnOtFnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUY8SJrgRbCblHKFmKZpn1MqH8vRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1ZjU3YmExLWU3MzktNDk0MC1iZTViLWZjMDY2YjNiMDA1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlDANBgkqhkiG9w0BAQsFAAOCAQEAXGvH+s3q8mfAjjTAjY14UrhUhr1h LX7cG+jXaU/g/VccLZyd/DbGZNQHTRIHqG42c61mats0/usDn4W7ee/D6YViHp2n Eam+GFAEINtqjUGkyTi2URwUZBJNGRLPc2xPMaFJ606FjuCxeI/pW7Wf7urehs4b S41qfPGPA0pF9zOr08tmyUoIQ9GvYSIZEkssJiw6hCJOSiIeCrwx2MQSHuJmoCJr W/DBQwIWxsgAKMIOgArmOn8w3O5ooFKz3xjfm6uCuMWMSAALAM3LakLuGi42A+da 2PAoo8sftu9UK12TxTwxSHGoa9NF7PHPqBZxcceAYVUSELFjRAkEKFd0tQ== -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:58 2025 by rpki-client