$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa File: f98e5b39-9271-4700-b6e2-c2328787d9f6.roa (raw, json) Hash identifier: vSKs4aIwIRQ9wXaVuRa8mTKG5PE8TsX53C2oA97E0nc= Subject key identifier: E7:C5:BD:E3:C4:43:86:FB:63:56:2C:33:69:CB:73:7B:1C:50:17:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D84A0DE18EC468493EC703C9395E0E81D68B5E1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa Signing time: Mon 14 Jul 2025 15:01:59 +0000 ROA not before: Mon 14 Jul 2025 15:01:59 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.148.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:84:a0:de:18:ec:46:84:93:ec:70:3c:93:95:e0:e8:1d:68:b5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:01:59 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=00828e03182c61c2a269a7b0cae8cac9017dd9532c1804dd6fed29880ca0a974, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:74:b6:3d:6e:51:26:c1:dd:bd:24:3c:b4: b9:4e:0a:1c:04:db:65:3d:0d:e5:ad:7a:26:df:ad: fe:32:54:b1:15:8c:ca:8b:03:be:c2:69:f2:47:54: 11:10:7a:b7:57:32:14:b9:6a:44:99:ae:37:bd:f8: 37:88:4d:c1:cc:27:1d:c8:e7:ef:8f:63:69:31:79: f7:a6:5f:1a:c8:86:ca:45:8c:c7:4f:35:5c:2e:68: ae:ae:ce:d0:df:8c:52:9d:06:00:3b:b1:83:28:42: f1:7f:b6:75:36:60:80:90:f7:7a:04:13:9e:79:b5: e9:85:af:17:37:36:a0:85:23:d2:96:de:f4:32:41: 0d:3c:e4:f9:db:52:32:34:17:cd:3a:bd:72:fe:f9: ba:fd:2b:e1:8d:ef:b0:15:16:53:35:36:0a:e9:87: b6:02:28:bb:d9:6a:64:45:9a:10:d6:9a:c6:8d:32: 31:00:25:47:d8:e1:c0:38:ad:1c:e3:cb:ac:a4:fa: a1:0e:67:c5:38:84:61:57:48:c8:8b:66:b2:40:9f: 40:9a:35:e6:58:84:b3:2e:26:8b:6b:05:bd:15:21: 65:b0:5c:e7:06:df:c3:a8:f3:d6:c6:40:3a:cb:cd: c1:16:bc:be:a1:e5:9f:40:e1:5b:57:3a:e6:8e:f4: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:BD:E3:C4:43:86:FB:63:56:2C:33:69:CB:73:7B:1C:50:17:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.64.0/18 Signature Algorithm: sha256WithRSAEncryption cb:6c:ef:70:ce:eb:6a:45:cd:bd:35:cd:7f:a1:a0:9a:3e:0b: b4:46:ff:97:9f:5d:91:04:79:11:6b:cb:ed:90:a6:a6:78:ec: 29:c9:3d:e2:9c:31:79:2a:6d:36:ad:1b:68:64:d3:d8:1b:d4: 96:ca:95:b8:30:99:df:23:21:09:a7:90:1e:f8:6d:ff:0f:d0: c7:ae:52:f3:73:02:d2:b1:1b:85:1f:08:ca:0a:26:0c:42:6c: 29:6b:90:aa:14:95:36:ec:47:ae:96:20:8d:fa:88:23:35:51: 8c:9d:34:e5:be:d4:35:a0:a2:94:f6:da:37:11:ee:e7:a5:0f: 38:89:6b:d0:bd:76:54:49:2e:b4:d2:ab:3e:a0:5e:0c:95:82: f4:09:9d:7b:4a:8a:f3:89:cb:57:5c:d8:4f:8e:97:aa:c6:b9: 16:6e:44:be:46:f2:50:c9:0b:5c:74:7d:6f:4b:43:3b:71:56: dd:0d:14:f0:cf:9c:b3:f3:01:d5:f8:05:73:e9:31:43:8b:29: be:31:b4:b3:15:fb:3b:50:12:bb:93:80:26:f0:b8:21:c9:1f: a0:0a:9f:8e:7a:4a:59:7e:f7:b1:0b:c6:76:97:6c:53:0f:eb: 00:2d:69:72:33:3c:30:49:d0:14:ef:ec:63:a5:b7:ca:15:48: 3e:8f:66:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbYSg3hjsRoST7HA8k5Xg6B1oteEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMTU5WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDgyOGUwMzE4MmM2MWMyYTI2OWE3YjBjYWU4Y2FjOTAx N2RkOTUzMmMxODA0ZGQ2ZmVkMjk4ODBjYTBhOTc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYJHS2PW5RJsHdvSQ8tLlOChwE22U9DeWteibfrf4yVLEV jMqLA77CafJHVBEQerdXMhS5akSZrje9+DeITcHMJx3I5++PY2kxefemXxrIhspF jMdPNVwuaK6uztDfjFKdBgA7sYMoQvF/tnU2YICQ93oEE555temFrxc3NqCFI9KW 3vQyQQ085PnbUjI0F806vXL++br9K+GN77AVFlM1Ngrph7YCKLvZamRFmhDWmsaN MjEAJUfY4cA4rRzjy6yk+qEOZ8U4hGFXSMiLZrJAn0CaNeZYhLMuJotrBb0VIWWw XOcG38Oo89bGQDrLzcEWvL6h5Z9A4VtXOuaO9IALAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU58W948RDhvtjViwzactzexxQFzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5OGU1YjM5LTkyNzEtNDcwMC1iNmUyLWMyMzI4Nzg3ZDlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaXlEAwDQYJKoZIhvcNAQELBQADggEBAMts73DO62pFzb01zX+hoJo+C7RG /5efXZEEeRFry+2QpqZ47CnJPeKcMXkqbTatG2hk09gb1JbKlbgwmd8jIQmnkB74 bf8P0MeuUvNzAtKxG4UfCMoKJgxCbClrkKoUlTbsR66WII36iCM1UYydNOW+1DWg opT22jcR7uelDziJa9C9dlRJLrTSqz6gXgyVgvQJnXtKivOJy1dc2E+Ol6rGuRZu RL5G8lDJC1x0fW9LQztxVt0NFPDPnLPzAdX4BXPpMUOLKb4xtLMV+ztQEruTgCbw uCHJH6AKn456Sll+97ELxnaXbFMP6wAtaXIzPDBJ0BTv7GOlt8oVSD6PZqw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:27 2025 by rpki-client