$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/049788e9-af76-4438-b4f6-84216f536f0d.roa File: 049788e9-af76-4438-b4f6-84216f536f0d.roa (raw, json) Hash identifier: ltQDnu2qx5z2F4jm88x5wOCdiplSNARA/24QaKvsZlY= Subject key identifier: DF:78:CB:E9:B8:0D:3B:29:82:03:DC:56:1F:E9:7A:23:B8:05:D6:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1858EDEA718F0757745D36ABD2285098B88AB2DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/049788e9-af76-4438-b4f6-84216f536f0d.roa Signing time: Wed 13 Aug 2025 00:10:16 +0000 ROA not before: Wed 13 Aug 2025 00:10:16 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.7.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:ed:ea:71:8f:07:57:74:5d:36:ab:d2:28:50:98:b8:8a:b2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:10:16 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=010178b7818eac868c0c22c6ccae633396a3c738618172102c6fa8cfc3781a72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:65:33:f8:07:e0:8a:69:89:68:a0:85:8b: 08:ce:48:fc:da:c9:fe:56:36:4c:73:09:6c:c6:33: 43:1c:ad:69:b2:00:81:c1:b8:c2:c9:0b:98:e2:63: a6:bb:96:92:af:29:b9:ab:de:dc:54:9d:4d:c2:c4: 29:df:b9:20:fc:1a:eb:f4:8e:b9:00:6b:b6:60:a7: da:ad:e1:0e:b2:9e:5d:11:cd:06:fd:3a:d8:f7:5f: 67:02:59:c5:bd:b2:80:e1:50:11:52:05:fa:8e:d2: d7:f6:9a:5f:1e:2a:b2:c0:48:48:a8:9e:c0:e1:2a: 27:02:c5:82:f2:81:46:59:bc:7c:66:2d:25:9b:55: 7a:a6:0c:c0:ec:c2:04:4b:6f:a2:bd:a4:09:57:53: 42:45:ca:93:55:0f:7a:c9:6a:43:05:98:d3:15:cd: cc:56:eb:4a:b7:cc:20:bf:2f:fa:01:a1:a9:e4:44: a5:81:cb:14:c4:15:8a:cf:eb:9f:47:ef:6b:10:5d: 63:ab:80:4e:81:68:11:88:91:2a:48:f6:53:17:e1: fd:9d:72:a6:4b:5d:f6:29:31:8b:42:51:c9:6d:11: 77:ef:f3:8d:ee:ec:11:7f:94:ee:70:06:5d:1a:8b: d1:b9:1c:e9:5b:16:28:92:3c:d2:7f:c2:db:62:d4: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:CB:E9:B8:0D:3B:29:82:03:DC:56:1F:E9:7A:23:B8:05:D6:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/049788e9-af76-4438-b4f6-84216f536f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.7.0.0/19 Signature Algorithm: sha256WithRSAEncryption 11:76:10:c7:4c:56:b1:81:32:bd:de:57:c9:34:9a:4b:56:d8: 1b:98:6a:ab:73:4d:e6:28:40:bf:35:96:fb:11:d1:e5:14:0e: e0:8f:03:4a:96:b3:cc:d1:91:1c:9c:98:9a:fc:f6:b9:05:c0: 19:33:e4:e6:79:b6:a1:f7:6f:49:7f:c1:0b:a2:7a:8b:05:cb: 34:33:e9:d6:be:97:6a:07:c7:72:0c:1a:fc:2c:e6:35:be:4c: 2a:cc:e4:ab:c9:06:b5:3c:11:81:ac:5b:af:90:b2:9b:ea:6e: 88:65:86:04:2f:81:85:13:48:f0:75:49:fa:ed:c2:45:80:af: df:a9:70:e7:b7:24:4b:3d:a5:31:c8:25:78:29:88:a5:13:d3: 1d:2d:7a:dd:85:b8:37:99:03:0b:f5:9d:e2:9c:e3:a3:26:63: c1:b6:da:a3:4c:c0:f5:78:7f:14:b5:e3:b7:bc:55:89:94:b5: ee:39:a0:46:e2:ec:f3:3a:39:ff:87:bd:c9:c8:97:45:32:b9: 38:6b:09:89:da:58:03:84:ce:5e:1f:9b:e8:a2:04:0e:5b:40: 9a:ac:12:11:0e:00:33:30:e8:fb:35:8e:ea:c0:96:e1:98:85: 25:21:5d:93:78:a2:17:7d:f9:23:bd:17:82:c1:e3:19:bb:27: e2:b7:99:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGFjt6nGPB1d0XTar0ihQmLiKst4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAxMDE2WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTAxNzhiNzgxOGVhYzg2OGMwYzIyYzZjY2FlNjMzMzk2 YTNjNzM4NjE4MTcyMTAyYzZmYThjZmMzNzgxYTcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaVGUz+AfgimmJaKCFiwjOSPzayf5WNkxzCWzGM0McrWmy AIHBuMLJC5jiY6a7lpKvKbmr3txUnU3CxCnfuSD8Guv0jrkAa7Zgp9qt4Q6ynl0R zQb9Otj3X2cCWcW9soDhUBFSBfqO0tf2ml8eKrLASEionsDhKicCxYLygUZZvHxm LSWbVXqmDMDswgRLb6K9pAlXU0JFypNVD3rJakMFmNMVzcxW60q3zCC/L/oBoank RKWByxTEFYrP659H72sQXWOrgE6BaBGIkSpI9lMX4f2dcqZLXfYpMYtCUcltEXfv 843u7BF/lO5wBl0ai9G5HOlbFiiSPNJ/wtti1MgjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU33jL6bgNOymCA9xWH+l6I7gF1t4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0OTc4OGU5LWFmNzYtNDQzOC1iNGY2LTg0MjE2ZjUzNmYwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYBwAwDQYJKoZIhvcNAQELBQADggEBABF2EMdMVrGBMr3eV8k0mktW2BuY aqtzTeYoQL81lvsR0eUUDuCPA0qWs8zRkRycmJr89rkFwBkz5OZ5tqH3b0l/wQui eosFyzQz6da+l2oHx3IMGvws5jW+TCrM5KvJBrU8EYGsW6+QspvqbohlhgQvgYUT SPB1SfrtwkWAr9+pcOe3JEs9pTHIJXgpiKUT0x0tet2FuDeZAwv1neKc46MmY8G2 2qNMwPV4fxS147e8VYmUte45oEbi7PM6Of+HvcnIl0UyuThrCYnaWAOEzl4fm+ii BA5bQJqsEhEOADMw6Ps1jurAluGYhSUhXZN4ohd9+SO9F4LB4xm7J+K3mSs= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:18 2025 by rpki-client