$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa File: f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa (raw, json) Hash identifier: LvNOYUCxYeXn7O0xnxFsUXyswpxk7YZ+5mJ41TeW1Hs= Subject key identifier: 20:C6:4E:6F:FC:63:66:66:64:9F:A0:12:D0:36:70:B6:99:B7:19:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6949F0EBFF35A17C9B05B752042E6A572F91B7C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa Signing time: Mon 14 Jul 2025 15:11:53 +0000 ROA not before: Mon 14 Jul 2025 15:11:53 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.156.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:49:f0:eb:ff:35:a1:7c:9b:05:b7:52:04:2e:6a:57:2f:91:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:11:53 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=21ed00b36894af923ee95f17c88052681cda6a67e85920f36f9c7fb8b869734c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:56:cc:f5:a0:67:97:a6:15:26:1a:1f:64: f8:ca:59:a3:16:9f:d0:fa:b8:aa:ff:c5:24:b7:23: 06:c2:45:fa:4d:14:c8:66:7b:4b:ea:7c:38:9f:6f: 6a:07:a0:9c:57:1f:e8:5c:2f:ce:ab:f9:98:7a:e4: 64:b6:55:09:d0:af:4b:e3:63:2a:38:65:ac:6c:d6: 20:5a:61:48:1f:af:3b:4b:cc:4e:e9:77:6b:24:1e: d8:b4:01:0c:90:10:2e:39:3f:f6:34:8d:0c:94:fe: 0f:51:d2:da:16:e1:23:3b:61:ab:85:ed:10:0a:33: cd:b3:e6:5b:3b:b6:75:d9:43:08:bf:e6:87:e0:9d: 3e:99:df:f2:68:98:88:bd:46:40:88:02:75:50:89: cf:a7:a6:1a:49:ad:8b:f7:a3:0e:73:6c:60:a3:79: 2f:4d:ca:d8:59:7c:f6:57:2b:5e:d9:ef:01:01:59: 9a:ea:62:bd:95:0c:eb:27:40:ee:8f:70:50:39:27: 85:6e:8b:31:2c:13:7a:5c:1a:6f:75:48:dc:fd:e9: 1c:aa:2f:d8:52:98:e4:69:7d:22:7b:f1:f7:e6:6b: c2:e2:a8:3c:fd:5d:3e:65:78:d3:68:07:8a:35:92: b2:63:6e:0e:2a:9a:e9:bd:4d:e4:bd:93:62:5c:91: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:4E:6F:FC:63:66:66:64:9F:A0:12:D0:36:70:B6:99:B7:19:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.156.0.0/15 Signature Algorithm: sha256WithRSAEncryption c9:26:4a:ae:62:bc:b2:04:b4:c7:c1:08:91:ed:a5:54:b1:6b: ad:2c:99:55:a5:8d:2d:81:44:ba:b6:e6:3b:2d:8a:e8:cd:c4: 1c:16:83:cf:4d:61:18:35:cf:79:ce:fe:8c:07:af:90:2a:55: d0:a9:f8:b0:7a:df:6d:6f:32:26:77:46:da:6c:e6:c1:45:6a: fe:42:00:75:4a:6e:89:a7:7d:40:91:3c:30:1f:0c:19:51:ec: 59:b1:27:dc:b2:ba:0c:ae:e4:9b:34:98:47:4c:59:9e:f0:20: 64:d3:c1:59:21:ef:59:b8:91:26:b0:5b:38:85:ae:9d:2e:76: a7:8c:2d:3c:ee:f8:ec:28:45:bd:39:08:ad:6f:25:46:8d:e4: 63:ba:df:25:64:bd:95:e3:5e:31:fd:a8:af:cc:7d:a2:fd:82: b6:32:a9:15:00:4d:15:55:f7:01:e0:eb:6b:ac:61:7c:46:9e: 8f:e4:ac:0b:2d:e9:e3:9e:7c:cf:2c:ca:0b:8c:f0:cf:1c:d1: da:ac:8f:c3:04:7d:a7:4f:65:06:57:24:72:63:b8:00:f7:9b: 7f:f3:b9:e8:fd:b5:d8:55:0b:18:92:ea:af:92:8f:22:c6:db: de:0f:8e:d8:24:ec:33:bf:5a:3f:5c:4f:58:a5:a3:ef:90:e8: e2:3b:ae:88 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaUnw6/81oXybBbdSBC5qVy+Rt8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUxMTUzWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWVkMDBiMzY4OTRhZjkyM2VlOTVmMTdjODgwNTI2ODFj ZGE2YTY3ZTg1OTIwZjM2ZjljN2ZiOGI4Njk3MzRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3n1bM9aBnl6YVJhofZPjKWaMWn9D6uKr/xSS3IwbCRfpN FMhme0vqfDifb2oHoJxXH+hcL86r+Zh65GS2VQnQr0vjYyo4Zaxs1iBaYUgfrztL zE7pd2skHti0AQyQEC45P/Y0jQyU/g9R0toW4SM7YauF7RAKM82z5ls7tnXZQwi/ 5ofgnT6Z3/JomIi9RkCIAnVQic+nphpJrYv3ow5zbGCjeS9NythZfPZXK17Z7wEB WZrqYr2VDOsnQO6PcFA5J4VuizEsE3pcGm91SNz96RyqL9hSmORpfSJ78ffma8Li qDz9XT5leNNoB4o1krJjbg4qmum9TeS9k2JckSlRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIMZOb/xjZmZkn6AS0DZwtpm3GZwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYWFjMjliLTNmNTktNDAzMy1iNzJlLTM3YjJhYWI3ZDFjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE4nDANBgkqhkiG9w0BAQsFAAOCAQEAySZKrmK8sgS0x8EIke2lVLFrrSyZ VaWNLYFEurbmOy2K6M3EHBaDz01hGDXPec7+jAevkCpV0Kn4sHrfbW8yJndG2mzm wUVq/kIAdUpuiad9QJE8MB8MGVHsWbEn3LK6DK7kmzSYR0xZnvAgZNPBWSHvWbiR JrBbOIWunS52p4wtPO747ChFvTkIrW8lRo3kY7rfJWS9leNeMf2or8x9ov2CtjKp FQBNFVX3AeDra6xhfEaej+SsCy3p4558zyzKC4zwzxzR2qyPwwR9p09lBlckcmO4 APebf/O56P212FULGJLqr5KPIsbb3g+O2CTsM79aP1xPWKWj75Do4juuiA== -----END CERTIFICATE-----Generated at Wed Aug 6 10:56:52 2025 by rpki-client