$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa File: 22b35d10-4128-4c80-92a2-801f07198be4.roa (raw, json) Hash identifier: 17ZlGLy421MxGVetgdxmzVsvtjMbHtXeYkQzDdpGUgk= Subject key identifier: 87:83:47:35:20:B9:F1:3C:A7:FA:45:62:D3:A3:63:38:E3:BA:22:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FAEE4C1F9710C7F16A2C22479B1C3FE81B09697 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa Signing time: Mon 23 Jun 2025 16:52:09 +0000 ROA not before: Mon 23 Jun 2025 16:52:09 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 1.178.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ae:e4:c1:f9:71:0c:7f:16:a2:c2:24:79:b1:c3:fe:81:b0:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 16:52:09 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=6dfd564eee4b95001e6e4193f60ea239ef57f57f4beb3d2fe98e7eab67066cf6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:81:bd:38:77:e9:2e:44:3a:a9:db:6e:95: c5:9d:05:6b:43:4a:20:8c:ad:c3:84:71:f0:d8:9a: a2:ae:e3:15:ef:25:59:70:bc:55:be:cb:da:4a:f1: 14:56:dc:34:5f:fa:3a:a9:5a:cd:51:a0:54:5f:44: ae:14:59:b5:af:30:1d:d5:e8:c9:ee:43:59:65:f2: cd:6b:26:57:66:22:0c:b5:78:0a:81:7c:4d:52:31: 29:19:3e:a9:03:05:07:e8:d7:4e:58:95:83:60:97: e7:0e:8a:83:40:df:03:f3:f2:e4:e5:6f:89:ce:0d: a8:b9:a0:cf:72:40:f2:12:d5:21:86:a4:e0:42:1c: 93:56:44:0d:bc:e3:43:72:36:6b:cb:1c:97:bd:75: 38:5b:ea:97:bc:ee:9f:30:bf:9d:6b:ad:5f:9d:82: 9c:63:fa:40:ee:25:97:b9:2f:3a:30:07:1d:af:37: b9:7f:17:59:ee:6f:47:56:ff:35:f9:c9:e1:ff:e6: 33:1a:56:be:66:b9:85:66:a4:a1:9f:24:99:3a:53: b4:45:4f:fc:e6:14:d8:7d:ff:7c:89:fd:64:25:83: 0e:0d:55:fd:09:c6:ee:c0:24:b1:2a:39:b6:47:e2: 7e:90:83:66:95:12:34:9d:64:69:d2:02:d2:8a:d4: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:83:47:35:20:B9:F1:3C:A7:FA:45:62:D3:A3:63:38:E3:BA:22:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b35d10-4128-4c80-92a2-801f07198be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.8.0/22 Signature Algorithm: sha256WithRSAEncryption 22:e4:76:cf:36:78:e5:95:7e:3a:62:ff:65:8a:ed:e8:c2:96: 32:2e:fb:2c:c5:ab:b5:4e:14:2b:96:f4:42:2a:03:50:35:03: 97:2e:db:39:b9:6b:0a:5e:f1:1a:1c:be:dd:76:df:45:38:d8: bb:63:da:12:97:01:a1:f5:1c:5d:93:85:7e:99:e1:3b:89:c9: 94:19:6e:3d:df:5f:7e:9d:36:19:53:aa:5e:7e:18:96:9c:fa: f7:4b:22:fe:18:a9:90:ec:39:cb:ee:79:fc:c1:f3:2c:33:31: 13:4d:00:e1:ef:d7:b3:5c:37:fa:69:c9:8c:af:4b:85:01:75: ac:a0:75:fd:22:ee:54:3c:f9:fc:b6:42:ae:76:45:d1:50:74: 9f:37:52:8d:5e:58:30:67:39:db:00:78:09:c0:e4:8c:4b:7d: 67:34:3c:a6:1a:28:1a:c9:82:7e:3c:ee:af:31:69:36:5b:1d: 0d:a1:df:77:28:c7:94:eb:bc:21:85:08:cc:5a:2d:4d:9c:28: db:e1:96:db:a5:56:4b:4c:82:02:78:75:24:b8:28:29:f4:2f: 23:e9:df:c9:38:1d:ab:37:84:98:3c:12:c0:b9:d5:9e:27:a0: d0:5f:f4:69:a4:31:06:9e:e2:10:98:96:ea:fa:a3:cd:44:39: 8c:81:e6:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD67kwflxDH8WosIkebHD/oGwlpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTY1MjA5WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGZkNTY0ZWVlNGI5NTAwMWU2ZTQxOTNmNjBlYTIzOWVm NTdmNTdmNGJlYjNkMmZlOThlN2VhYjY3MDY2Y2Y2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcpIG9OHfpLkQ6qdtulcWdBWtDSiCMrcOEcfDYmqKu4xXv JVlwvFW+y9pK8RRW3DRf+jqpWs1RoFRfRK4UWbWvMB3V6MnuQ1ll8s1rJldmIgy1 eAqBfE1SMSkZPqkDBQfo105YlYNgl+cOioNA3wPz8uTlb4nODai5oM9yQPIS1SGG pOBCHJNWRA2840NyNmvLHJe9dThb6pe87p8wv51rrV+dgpxj+kDuJZe5LzowBx2v N7l/F1nub0dW/zX5yeH/5jMaVr5muYVmpKGfJJk6U7RFT/zmFNh9/3yJ/WQlgw4N Vf0Jxu7AJLEqObZH4n6Qg2aVEjSdZGnSAtKK1IkdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh4NHNSC58Tyn+kVi06NjOOO6IikwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYjM1ZDEwLTQxMjgtNGM4MC05MmEyLTgwMWYwNzE5OGJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBsggwDQYJKoZIhvcNAQELBQADggEBACLkds82eOWVfjpi/2WK7ejCljIu +yzFq7VOFCuW9EIqA1A1A5cu2zm5awpe8Rocvt1230U42Ltj2hKXAaH1HF2ThX6Z 4TuJyZQZbj3fX36dNhlTql5+GJac+vdLIv4YqZDsOcvuefzB8ywzMRNNAOHv17Nc N/ppyYyvS4UBdaygdf0i7lQ8+fy2Qq52RdFQdJ83Uo1eWDBnOdsAeAnA5IxLfWc0 PKYaKBrJgn487q8xaTZbHQ2h33cox5TrvCGFCMxaLU2cKNvhltulVktMggJ4dSS4 KCn0LyPp38k4Has3hJg8EsC51Z4noNBf9GmkMQae4hCYlur6o81EOYyB5kk= -----END CERTIFICATE-----Generated at Tue Jul 1 08:59:00 2025 by rpki-client