$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa File: 05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json) Hash identifier: onaK9A/gNU+9croskkN+xtCthxhG3SR567NUTtZhUrY= Subject key identifier: F3:8F:C9:75:AA:F3:6E:9E:B9:85:D2:88:C2:B7:20:40:74:C3:9D:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E1BFA1AE75426AF9A44D3586A191306C1A28620 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa Signing time: Sat 21 Jun 2025 00:10:14 +0000 ROA not before: Sat 21 Jun 2025 00:10:14 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1b:fa:1a:e7:54:26:af:9a:44:d3:58:6a:19:13:06:c1:a2:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:10:14 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=87e67bc7ae4435705a9eefe56b73dd0cee8a4aa5ea07259e9a1a5151615b42a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:5c:02:81:b1:6b:61:aa:d7:e4:51:a2:e2: 00:fa:5c:59:ad:8f:15:1e:ee:14:63:a6:93:4f:2f: be:92:f8:f2:a7:65:02:ad:42:ca:71:8c:e4:56:01: c8:c2:f5:ff:1f:a7:ba:f1:0c:f0:0e:25:26:6e:e9: f2:aa:a2:2e:54:34:1b:60:e6:f8:fa:b1:5d:f2:23: 71:92:0a:21:09:36:c7:c5:b8:4a:93:62:ef:f4:2a: f2:23:94:ac:f5:fe:8e:7c:e4:cd:ac:06:d7:a7:94: b4:29:3e:b1:ed:74:3a:bf:a7:49:fa:14:d9:ce:08: aa:81:da:d9:df:16:0d:36:1e:77:4e:0d:5f:25:49: 71:71:6b:a7:9b:26:e3:19:99:30:4c:ea:e5:ba:c1: 12:62:f3:6c:53:b8:33:89:06:9b:2e:63:90:48:18: 24:d6:8e:23:f1:9d:5c:78:40:c5:f4:0c:57:b4:c8: a3:f3:f7:33:4f:db:0c:5a:12:e6:19:7e:04:9b:e5: 05:5d:fa:16:e9:a5:76:41:5d:87:30:58:a2:80:35: 25:67:12:62:32:e7:1d:04:d0:e5:64:84:2d:69:58: c7:30:c2:69:09:5d:91:76:2c:7f:ca:53:e6:c9:e8: 9f:b2:fb:60:c0:ac:d9:d6:1f:3e:82:65:67:e0:a8: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:C9:75:AA:F3:6E:9E:B9:85:D2:88:C2:B7:20:40:74:C3:9D:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:a4:b7:a7:6a:94:6d:74:b6:30:7f:42:9f:b1:0b:be:cf:b9: d7:46:24:b3:1a:d7:1e:16:2b:0c:b4:1e:37:3c:bd:78:0f:02: 8f:24:61:a7:73:89:fc:86:a2:78:60:8e:39:d0:39:c4:a5:c1: 89:e6:c8:b1:8a:96:a6:b6:bd:9b:4d:e8:b8:80:b5:58:09:f3: 93:91:41:df:6d:2c:6b:73:4f:8d:5b:8d:34:2d:38:e0:89:d4: ca:46:8b:a1:1a:e0:a1:e0:27:39:2a:fe:3b:77:e0:83:f9:d1: 1b:0a:05:32:12:2c:1e:a8:c2:a6:72:a3:e3:b5:82:dd:fe:6b: 18:d7:73:6c:33:a0:96:c3:26:8d:de:ad:04:1b:71:84:33:44: a9:74:41:83:88:23:82:90:b7:ed:19:2c:24:3f:31:aa:e4:82: e7:97:59:eb:26:94:21:38:7d:22:16:cc:93:71:f1:60:78:48: 21:e2:71:a8:c2:05:fe:5b:b7:14:4c:1e:54:15:27:16:24:c7: b3:4b:f4:ab:07:40:2d:09:f4:3d:53:ef:09:4b:fe:39:f7:fb: 4e:c0:b3:a3:b4:57:60:0c:cd:b8:4f:8f:04:a0:58:10:78:2c: c4:69:6e:bd:96:64:af:1e:0b:19:3f:a1:14:69:39:09:06:44: 9c:7f:8f:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDhv6GudUJq+aRNNYahkTBsGihiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAxMDE0WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2U2N2JjN2FlNDQzNTcwNWE5ZWVmZTU2YjczZGQwY2Vl OGE0YWE1ZWEwNzI1OWU5YTFhNTE1MTYxNWI0MmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVnlwCgbFrYarX5FGi4gD6XFmtjxUe7hRjppNPL76S+PKn ZQKtQspxjORWAcjC9f8fp7rxDPAOJSZu6fKqoi5UNBtg5vj6sV3yI3GSCiEJNsfF uEqTYu/0KvIjlKz1/o585M2sBtenlLQpPrHtdDq/p0n6FNnOCKqB2tnfFg02HndO DV8lSXFxa6ebJuMZmTBM6uW6wRJi82xTuDOJBpsuY5BIGCTWjiPxnVx4QMX0DFe0 yKPz9zNP2wxaEuYZfgSb5QVd+hbppXZBXYcwWKKANSVnEmIy5x0E0OVkhC1pWMcw wmkJXZF2LH/KU+bJ6J+y+2DArNnWHz6CZWfgqMAXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU84/Jdarzbp65hdKIwrcgQHTDnegwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzY3YzBjLWE1MWEtNDcyNC04MTg4LTI0ZDA5OWM1OGJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvjANBgkqhkiG9w0BAQsFAAOCAQEARaS3p2qUbXS2MH9Cn7ELvs+510Yk sxrXHhYrDLQeNzy9eA8CjyRhp3OJ/IaieGCOOdA5xKXBiebIsYqWpra9m03ouIC1 WAnzk5FB320sa3NPjVuNNC044InUykaLoRrgoeAnOSr+O3fgg/nRGwoFMhIsHqjC pnKj47WC3f5rGNdzbDOglsMmjd6tBBtxhDNEqXRBg4gjgpC37RksJD8xquSC55dZ 6yaUITh9IhbMk3HxYHhIIeJxqMIF/lu3FEweVBUnFiTHs0v0qwdALQn0PVPvCUv+ Off7TsCzo7RXYAzNuE+PBKBYEHgsxGluvZZkrx4LGT+hFGk5CQZEnH+PQw== -----END CERTIFICATE-----Generated at Sun Jun 29 04:36:02 2025 by rpki-client