$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa File: 0a4ce9e7-b596-43b2-bb24-814c65627e76.roa (raw, json) Hash identifier: EEAVj9BUSZf8ZWpnUBaZ3e5pbkFNVJpelM4MGTC2mqw= Subject key identifier: 7C:F7:D5:90:65:2A:80:AC:13:04:5A:CD:58:36:63:7B:A5:17:99:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66C292F4BAA8A68861D387473C8C1E7BF3547895 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa Signing time: Tue 24 Jun 2025 00:21:47 +0000 ROA not before: Tue 24 Jun 2025 00:21:47 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:92:f4:ba:a8:a6:88:61:d3:87:47:3c:8c:1e:7b:f3:54:78:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:21:47 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=a7d3a93d5ff1703a92b6227e1c0679235d0ae55533cbdeb55bca91c0cf9094b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:12:7a:67:b1:2c:e3:49:06:ae:eb:6d:d6: 45:24:bc:18:b4:72:05:67:77:f8:44:ef:0f:fb:02: b4:e4:13:65:3d:ba:88:1f:3a:56:7c:ba:ed:67:46: 95:13:4e:e2:94:3e:e2:40:1f:fb:f7:61:69:e7:b4: ab:e4:dc:77:e6:29:6f:48:be:c6:d8:7f:d9:eb:83: b2:86:85:64:9f:7e:ca:60:1c:9d:94:6e:fc:25:11: 81:c8:4e:c7:f7:5a:bb:3e:2d:29:9c:93:e8:69:c3: 86:51:6c:d1:09:82:c4:15:15:89:ab:f5:87:ad:4d: 18:41:18:4d:f0:06:a6:0e:e8:df:17:f6:d2:b1:5a: 3a:00:f9:50:cc:5e:45:2c:86:8f:f9:a6:c8:4c:30: 34:f5:2b:1b:d3:f6:78:71:a4:eb:f3:e0:18:4c:47: 94:d4:81:a4:b9:ee:ba:69:c4:ff:51:86:f8:98:c0: 02:79:28:b9:2a:c9:eb:56:3d:18:55:1b:be:79:a7: c1:43:6e:b1:db:c7:ed:11:30:00:67:9c:95:01:56: 33:63:24:f7:cd:8e:96:7e:a7:e9:86:2f:47:6c:54: f7:b1:c8:23:12:57:3a:20:d1:0f:89:58:61:70:e2: 70:d9:26:92:34:71:73:13:42:6a:0f:d4:9f:fc:6a: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:D5:90:65:2A:80:AC:13:04:5A:CD:58:36:63:7B:A5:17:99:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 44:b8:b6:8a:81:0e:9e:e1:46:1e:fc:e7:62:6d:26:77:48:44: f3:2b:5c:a9:61:bb:df:d0:18:62:5f:c0:20:ad:f8:8a:6a:86: ea:76:24:93:10:5e:ce:3f:1e:71:db:f5:bf:03:89:e7:51:5a: 33:7b:ec:3a:bf:4a:aa:57:1f:20:80:bb:27:ef:69:ab:fc:60: b6:a1:68:3e:ca:a5:33:f8:2e:69:5d:c5:a1:d3:89:e4:d3:9f: 45:0a:cc:e9:fd:d9:48:43:e1:49:53:dc:ba:d3:eb:9a:a5:ff: 85:7c:24:03:3e:9a:87:fb:50:de:2a:45:9d:21:63:71:8d:b6: 45:20:74:24:fa:49:02:fc:c3:d9:9b:fd:e3:76:36:d6:fc:1b: a0:a5:45:78:a6:e5:e3:fd:c6:c8:f8:33:86:74:d1:c8:0e:43: ff:d2:b0:d8:8c:5a:31:94:19:2b:52:37:05:3b:fd:31:11:ce: b7:be:7e:c7:91:46:eb:58:22:9f:dd:95:37:90:cb:5e:ce:7c: f0:21:82:1a:5f:c6:93:a0:b8:34:b2:c7:51:71:60:96:ba:d9: e9:a4:a4:44:f3:33:8d:ab:8c:c5:49:be:f7:2b:ae:a3:82:6f: cb:ef:be:e8:b5:fd:9d:cc:c2:08:38:63:bb:ae:4c:c3:50:1e: b4:ce:97:0c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZsKS9Lqopohh04dHPIwee/NUeJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAyMTQ3WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2QzYTkzZDVmZjE3MDNhOTJiNjIyN2UxYzA2NzkyMzVk MGFlNTU1MzNjYmRlYjU1YmNhOTFjMGNmOTA5NGIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpbRJ6Z7Es40kGrutt1kUkvBi0cgVnd/hE7w/7ArTkE2U9 uogfOlZ8uu1nRpUTTuKUPuJAH/v3YWnntKvk3HfmKW9IvsbYf9nrg7KGhWSffspg HJ2UbvwlEYHITsf3Wrs+LSmck+hpw4ZRbNEJgsQVFYmr9YetTRhBGE3wBqYO6N8X 9tKxWjoA+VDMXkUsho/5pshMMDT1KxvT9nhxpOvz4BhMR5TUgaS57rppxP9RhviY wAJ5KLkqyetWPRhVG755p8FDbrHbx+0RMABnnJUBVjNjJPfNjpZ+p+mGL0dsVPex yCMSVzog0Q+JWGFw4nDZJpI0cXMTQmoP1J/8anxvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfPfVkGUqgKwTBFrNWDZje6UXmVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhNGNlOWU3LWI1OTYtNDNiMi1iYjI0LTgxNGM2NTYyN2U3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2IDANBgkqhkiG9w0BAQsFAAOCAQEARLi2ioEOnuFGHvznYm0md0hE8ytc qWG739AYYl/AIK34imqG6nYkkxBezj8ecdv1vwOJ51FaM3vsOr9KqlcfIIC7J+9p q/xgtqFoPsqlM/guaV3FodOJ5NOfRQrM6f3ZSEPhSVPcutPrmqX/hXwkAz6ah/tQ 3ipFnSFjcY22RSB0JPpJAvzD2Zv943Y21vwboKVFeKbl4/3GyPgzhnTRyA5D/9Kw 2IxaMZQZK1I3BTv9MRHOt75+x5FG61gin92VN5DLXs588CGCGl/Gk6C4NLLHUXFg lrrZ6aSkRPMzjauMxUm+9yuuo4Jvy+++6LX9nczCCDhju65Mw1AetM6XDA== -----END CERTIFICATE-----Generated at Sun Jun 29 08:36:48 2025 by rpki-client