$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa File: fe65d460-86d4-4da6-ba70-04bf7787ba40.roa (raw, json) Hash identifier: mLZnl7JQCJbAG9xMTfeyn0qDbjuekT2C0OJS/AhNxKQ= Subject key identifier: 04:49:B6:97:0A:C0:EB:3E:99:76:D0:2C:A1:A5:50:1F:06:65:79:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51280010E5ECA84F694C8C01895EFB278F854A84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa Signing time: Tue 05 Aug 2025 15:00:29 +0000 ROA not before: Tue 05 Aug 2025 15:00:29 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:28:00:10:e5:ec:a8:4f:69:4c:8c:01:89:5e:fb:27:8f:85:4a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 15:00:29 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=7d8209ef31c47b90690a3b4aa96b7166aacb2d668cf509fda9d8758b9f7a07c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:39:60:7c:c5:0e:da:e2:12:9c:d7:db:a1: c2:30:b2:9b:48:df:d8:da:d6:ae:1e:33:5b:c3:26: 30:30:c1:c6:a2:cd:a3:4f:7f:0f:33:f3:c3:4e:ca: dc:5d:9c:fa:76:68:64:db:d7:e2:2c:10:13:68:07: a3:3d:b4:a2:04:98:ae:e5:eb:19:c0:e9:79:9c:62: ef:95:c1:d6:0c:1f:c0:a1:57:27:a2:e2:4c:8d:1f: 93:3a:bf:a6:25:70:b9:d3:4f:4e:35:cb:c8:d8:bf: 93:81:8e:79:84:02:02:f5:f4:73:90:04:74:61:29: 6c:15:4e:70:26:97:e5:8f:bd:1a:a4:b4:c1:f0:fd: 1e:4c:fd:0e:76:aa:48:7a:87:ec:64:ab:8d:35:0b: 29:b2:08:02:2f:6a:33:9d:a3:fe:a0:6d:2e:6a:02: d0:19:47:56:d0:67:27:85:77:82:64:a2:21:40:6a: 22:cd:85:cb:11:67:a1:4a:c4:3f:d4:ca:2c:a3:3f: 9b:0d:5d:a3:49:f4:04:a8:76:ff:bf:98:cb:a1:fa: 60:3c:88:82:54:75:f0:a3:dc:3e:63:84:22:d8:04: 66:20:11:db:f2:45:59:53:9d:ba:3a:c9:b0:d9:d0: 28:11:03:fb:39:ea:ae:0a:cd:f8:fc:8b:59:da:ea: 16:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:49:B6:97:0A:C0:EB:3E:99:76:D0:2C:A1:A5:50:1F:06:65:79:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe65d460-86d4-4da6-ba70-04bf7787ba40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.156.0/23 Signature Algorithm: sha256WithRSAEncryption 33:47:89:50:46:6d:1e:28:77:38:a2:ce:d8:74:47:e6:e1:d7: 80:fa:37:cd:81:09:82:5a:0c:9d:79:07:a4:c8:f0:bc:7c:bc: 37:62:5a:80:f6:68:a2:d4:df:fb:85:5f:d6:d1:26:85:82:86: a6:3b:ed:c4:c1:51:61:b5:22:52:59:19:34:d0:71:d4:5c:5e: 1b:0e:22:3c:b1:65:cf:7d:3b:59:f5:8d:86:f0:82:16:bc:71: 43:da:63:66:ec:1b:ab:0d:6f:a7:4d:cb:53:d5:62:a6:48:e0: d1:57:27:94:c8:80:4e:94:be:dd:d3:40:fb:ee:b2:01:dc:61: 24:d4:69:5f:6d:de:ca:b8:03:b9:93:e2:aa:ea:85:3e:11:67: 5f:1c:e4:d5:6e:31:c1:9e:71:8f:9e:e1:b6:07:27:1b:c3:28: 59:0e:68:6e:a5:60:a8:e1:73:ca:cf:12:09:bf:74:0c:e6:26: 68:2a:d8:55:10:96:ee:54:54:50:50:99:80:32:82:9c:55:c0: 7b:6f:3f:85:74:dc:37:80:35:32:92:88:e3:5a:2e:c9:02:dc: e6:70:29:61:00:41:d5:09:5f:38:7b:c6:5b:1c:b3:54:c2:d3: 7a:a5:c9:58:0a:7f:3d:2c:00:6a:f3:2f:3a:ee:be:cd:71:59: 56:54:6e:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUSgAEOXsqE9pTIwBiV77J4+FSoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTUwMDI5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDgyMDllZjMxYzQ3YjkwNjkwYTNiNGFhOTZiNzE2NmFh Y2IyZDY2OGNmNTA5ZmRhOWQ4NzU4YjlmN2EwN2M3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcGjlgfMUO2uISnNfbocIwsptI39ja1q4eM1vDJjAwwcai zaNPfw8z88NOytxdnPp2aGTb1+IsEBNoB6M9tKIEmK7l6xnA6XmcYu+VwdYMH8Ch Vyei4kyNH5M6v6YlcLnTT041y8jYv5OBjnmEAgL19HOQBHRhKWwVTnAml+WPvRqk tMHw/R5M/Q52qkh6h+xkq401CymyCAIvajOdo/6gbS5qAtAZR1bQZyeFd4JkoiFA aiLNhcsRZ6FKxD/UyiyjP5sNXaNJ9ASodv+/mMuh+mA8iIJUdfCj3D5jhCLYBGYg EdvyRVlTnbo6ybDZ0CgRA/s56q4Kzfj8i1na6hZrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBEm2lwrA6z6ZdtAsoaVQHwZlecwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlNjVkNDYwLTg2ZDQtNGRhNi1iYTcwLTA0YmY3Nzg3YmE0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpwwDQYJKoZIhvcNAQELBQADggEBADNHiVBGbR4odziizth0R+bh14D6 N82BCYJaDJ15B6TI8Lx8vDdiWoD2aKLU3/uFX9bRJoWChqY77cTBUWG1IlJZGTTQ cdRcXhsOIjyxZc99O1n1jYbwgha8cUPaY2bsG6sNb6dNy1PVYqZI4NFXJ5TIgE6U vt3TQPvusgHcYSTUaV9t3sq4A7mT4qrqhT4RZ18c5NVuMcGecY+e4bYHJxvDKFkO aG6lYKjhc8rPEgm/dAzmJmgq2FUQlu5UVFBQmYAygpxVwHtvP4V03DeANTKSiONa LskC3OZwKWEAQdUJXzh7xlscs1TC03qlyVgKfz0sAGrzLzruvs1xWVZUbrw= -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:02 2025 by rpki-client