$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa File: 8b4d99c5-89ad-4008-a629-96e00cf5656f.roa (raw, json) Hash identifier: gWindhiPqWzReWoZWLdVNRP3zRYKK/64mn91EuC8MRw= Subject key identifier: 69:8E:D6:FC:81:50:86:6B:90:C2:80:F9:DD:74:F7:DA:CC:16:91:E6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D5F30B9777DE0EFA1B980CA7F8553B08F58251E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa Signing time: Fri 25 Jul 2025 00:40:25 +0000 ROA not before: Fri 25 Jul 2025 00:40:25 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.171.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5f:30:b9:77:7d:e0:ef:a1:b9:80:ca:7f:85:53:b0:8f:58:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 25 00:40:25 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=e161d5cd23a2ffee385445708d6f8f1084734153106a30c01ca1e4aed5abb196, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:37:48:24:9f:4e:06:00:94:77:d7:eb:db: 8c:f9:64:da:11:21:a9:1f:74:f1:59:67:a1:e6:f0: fb:98:34:eb:49:49:3a:8b:7c:85:28:b0:2c:98:b4: 87:54:b7:e5:7b:09:71:17:96:50:47:08:6e:26:b8: 42:93:ad:0d:f4:98:5e:e0:1a:57:10:02:f2:e0:63: f1:49:30:86:cd:ef:34:c5:2d:a5:1b:eb:53:21:43: 5d:ba:92:03:b3:d4:83:ad:fe:6b:bb:c3:f1:49:39: 74:f6:57:83:67:c4:33:77:b8:8b:9a:7a:56:2d:74: 51:13:67:40:e8:b1:c9:ba:83:d4:f3:69:8f:12:0b: 6d:63:19:ae:3c:4e:e5:49:76:47:6f:98:1d:89:1d: c7:7b:f8:19:40:dc:50:59:52:33:d9:23:a8:cb:0d: 5d:62:10:b2:58:0d:e6:9f:2b:96:f1:fd:84:89:86: a8:32:25:81:b9:d7:75:78:d9:22:a4:a2:9f:95:59: f4:b6:84:f2:b8:37:e4:ac:cf:07:2a:40:fc:75:5f: a2:dc:74:c7:91:f4:d6:83:8a:11:ce:9e:fb:00:f9: f1:fc:a5:c5:dd:bf:08:88:d7:71:c4:d9:32:f1:03: 31:93:76:fc:5c:fc:c9:85:c7:79:ec:9d:5d:63:72: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:D6:FC:81:50:86:6B:90:C2:80:F9:DD:74:F7:DA:CC:16:91:E6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.171.160.0/20 Signature Algorithm: sha256WithRSAEncryption 00:50:53:c8:44:36:50:e8:b5:43:1b:59:b9:d0:40:b5:3e:ef: 0b:be:21:d0:3e:89:d0:05:46:e0:03:b7:af:e9:fe:48:35:94: 6a:87:50:1c:2c:e9:4e:4f:c3:f0:04:e4:b9:ad:82:ad:5d:c8: 9e:fc:b6:8f:a1:47:0b:d4:b2:92:a5:c8:a0:68:25:4e:3b:fe: fa:b1:bb:d7:ac:02:0b:84:7e:71:67:44:bf:dd:67:54:58:94: ee:3c:02:22:4f:59:29:9c:09:f5:47:7b:17:e5:e3:31:9f:7c: 02:a0:06:34:2c:6e:ba:cf:06:60:f6:46:34:1f:e8:8e:e9:09: 3b:02:25:19:0f:64:78:74:8d:72:55:ed:35:44:e3:a3:81:85: d7:d5:60:e6:35:53:22:5d:5a:1b:f9:0e:2c:8d:8a:b7:32:16: 6d:e1:da:0d:82:f1:d7:91:8d:e5:46:44:58:f4:47:28:c8:61: af:ba:72:24:ca:a2:67:04:cf:de:eb:e0:a4:36:80:3d:7f:db: d3:88:de:11:8a:97:7b:e6:5f:4c:a7:2a:72:7d:5d:10:a7:10: 41:d2:e0:13:82:8e:b8:3b:63:65:3f:1e:86:f8:28:1d:61:ea: 14:b2:9f:00:9d:6d:53:bd:84:cf:ab:da:7a:c6:7b:61:5a:98: c0:7e:3f:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfV8wuXd94O+huYDKf4VTsI9YJR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNzI1MDA0MDI1WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTYxZDVjZDIzYTJmZmVlMzg1NDQ1NzA4ZDZmOGYxMDg0 NzM0MTUzMTA2YTMwYzAxY2ExZTRhZWQ1YWJiMTk2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC41jdIJJ9OBgCUd9fr24z5ZNoRIakfdPFZZ6Hm8PuYNOtJ STqLfIUosCyYtIdUt+V7CXEXllBHCG4muEKTrQ30mF7gGlcQAvLgY/FJMIbN7zTF LaUb61MhQ126kgOz1IOt/mu7w/FJOXT2V4NnxDN3uIuaelYtdFETZ0Doscm6g9Tz aY8SC21jGa48TuVJdkdvmB2JHcd7+BlA3FBZUjPZI6jLDV1iELJYDeafK5bx/YSJ hqgyJYG513V42SKkop+VWfS2hPK4N+SszwcqQPx1X6LcdMeR9NaDihHOnvsA+fH8 pcXdvwiI13HE2TLxAzGTdvxc/MmFx3nsnV1jcoDdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaY7W/IFQhmuQwoD53XT32swWkeYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhiNGQ5OWM1LTg5YWQtNDAwOC1hNjI5LTk2ZTAwY2Y1NjU2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATPq6AwDQYJKoZIhvcNAQELBQADggEBAABQU8hENlDotUMbWbnQQLU+7wu+ IdA+idAFRuADt6/p/kg1lGqHUBws6U5Pw/AE5Lmtgq1dyJ78to+hRwvUspKlyKBo JU47/vqxu9esAguEfnFnRL/dZ1RYlO48AiJPWSmcCfVHexfl4zGffAKgBjQsbrrP BmD2RjQf6I7pCTsCJRkPZHh0jXJV7TVE46OBhdfVYOY1UyJdWhv5DiyNircyFm3h 2g2C8deRjeVGRFj0RyjIYa+6ciTKomcEz97r4KQ2gD1/29OI3hGKl3vmX0ynKnJ9 XRCnEEHS4BOCjrg7Y2U/Hob4KB1h6hSynwCdbVO9hM+r2nrGe2FamMB+P/c= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:41 2025 by rpki-client