$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa File: 41a012c8-f13b-4d84-8fb0-ec582723cddf.roa (raw, json) Hash identifier: 3VyuCCn/zpBlTbIh0rvzTsZ1tHy2PVxZQssCGF1VEUU= Subject key identifier: DA:DF:44:85:A4:53:8F:B6:6A:E4:1A:3D:C7:4F:34:54:18:E1:F3:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71888D595C9E81B3A2A921466F823DC3D97A7D9F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa Signing time: Wed 13 Aug 2025 00:41:48 +0000 ROA not before: Wed 13 Aug 2025 00:41:48 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:88:8d:59:5c:9e:81:b3:a2:a9:21:46:6f:82:3d:c3:d9:7a:7d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:41:48 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=de2f1646277db67098b1548dae624383e4b2f1c7b4f09a7f6bb66a8bf51702bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:8b:2d:d6:11:8d:fb:d0:0e:2b:cd:90:83: 89:bd:a2:c4:6d:21:0b:09:f7:87:32:57:f2:a1:4d: 70:a0:51:57:da:4b:56:5a:37:8c:e3:c8:8d:95:c8: 9a:32:56:28:f5:af:f8:cc:a0:85:17:bf:ac:25:9c: d5:8e:68:7e:82:37:ad:fd:ea:81:b2:ec:64:dd:e6: b4:b6:d5:7b:21:a2:4d:1a:fd:00:bd:18:f1:41:ed: a6:a4:6f:b4:fd:40:7c:7a:fe:25:1f:a1:84:17:ab: 74:d9:ca:6b:12:e5:9e:6f:c4:72:5b:cc:ba:4c:19: 93:da:64:52:46:77:46:17:f5:bf:0d:27:06:c5:72: 1a:0d:28:f9:5c:fe:9e:ea:dd:8d:94:ec:13:ba:d9: c7:3a:7a:98:60:9d:34:c9:ad:1e:64:4c:85:1f:27: 48:93:ce:b2:80:52:04:24:bc:c9:ba:35:b7:c0:63: 96:62:a9:23:28:d4:f8:23:06:18:f9:99:42:b3:27: 8f:79:b8:14:18:39:50:74:2e:8f:c1:c5:7d:a9:8a: ca:85:74:97:39:bb:1e:04:02:81:31:6d:a7:b2:ef: 5b:31:8e:a2:bc:1f:ca:e6:6d:c2:ea:63:f5:36:50: 8a:88:36:29:9e:68:14:88:dc:dd:26:9d:08:73:80: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DF:44:85:A4:53:8F:B6:6A:E4:1A:3D:C7:4F:34:54:18:E1:F3:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.254.0/24 Signature Algorithm: sha256WithRSAEncryption 92:54:99:ed:11:4f:25:c0:5b:14:9f:96:cc:86:7a:c0:54:5b: 75:05:21:47:c9:61:d7:65:2b:4d:2f:7c:dd:e5:cc:1f:f7:75: 52:b1:cc:40:4b:7b:ec:b7:51:93:95:04:8f:c2:f2:a1:4b:7b: 96:31:51:e8:80:ab:f4:69:6e:22:85:f3:d7:a7:3f:ad:98:3d: f8:68:92:ac:f1:b4:de:93:20:38:be:ae:cb:d0:b5:4e:b4:89: 4d:ca:67:bc:79:e9:a3:4c:e5:30:a5:07:bd:c9:c6:03:4c:09: 8e:fd:cf:ef:0d:4f:7e:a6:53:a5:08:66:c5:ae:1d:e4:b4:d9: b6:01:b0:c4:88:e0:66:96:ea:75:ba:a8:65:26:69:7c:41:65: 20:38:86:15:96:3c:4d:b1:e2:78:f9:49:8c:10:c2:d5:a1:71: 7d:d8:9f:7f:c0:a0:2a:b5:1f:8f:ad:8d:2c:c4:c8:f7:0d:07: 1f:96:9c:dc:a5:d1:98:2a:2a:6a:95:07:3f:24:fb:75:99:47: 00:13:85:cf:86:36:98:eb:be:9c:5b:77:8f:3d:00:01:af:21: c5:f4:8a:64:77:be:0a:97:a1:4f:39:84:ca:f1:58:ec:96:ac: 7e:2b:31:ca:41:62:37:a0:2b:b8:c5:80:61:fa:bd:a3:f4:d8: 00:a3:ab:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcYiNWVyegbOiqSFGb4I9w9l6fZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDA0MTQ4WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTJmMTY0NjI3N2RiNjcwOThiMTU0OGRhZTYyNDM4M2U0 YjJmMWM3YjRmMDlhN2Y2YmI2NmE4YmY1MTcwMmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1WIst1hGN+9AOK82Qg4m9osRtIQsJ94cyV/KhTXCgUVfa S1ZaN4zjyI2VyJoyVij1r/jMoIUXv6wlnNWOaH6CN6396oGy7GTd5rS21Xshok0a /QC9GPFB7aakb7T9QHx6/iUfoYQXq3TZymsS5Z5vxHJbzLpMGZPaZFJGd0YX9b8N JwbFchoNKPlc/p7q3Y2U7BO62cc6ephgnTTJrR5kTIUfJ0iTzrKAUgQkvMm6NbfA Y5ZiqSMo1PgjBhj5mUKzJ495uBQYOVB0Lo/BxX2pisqFdJc5ux4EAoExbaey71sx jqK8H8rmbcLqY/U2UIqINimeaBSI3N0mnQhzgF0XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2t9EhaRTj7Zq5Bo9x080VBjh8wkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxYTAxMmM4LWYxM2ItNGQ4NC04ZmIwLWVjNTgyNzIzY2RkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTf4wDQYJKoZIhvcNAQELBQADggEBAJJUme0RTyXAWxSflsyGesBUW3UF IUfJYddlK00vfN3lzB/3dVKxzEBLe+y3UZOVBI/C8qFLe5YxUeiAq/RpbiKF89en P62YPfhokqzxtN6TIDi+rsvQtU60iU3KZ7x56aNM5TClB73JxgNMCY79z+8NT36m U6UIZsWuHeS02bYBsMSI4GaW6nW6qGUmaXxBZSA4hhWWPE2x4nj5SYwQwtWhcX3Y n3/AoCq1H4+tjSzEyPcNBx+WnNyl0ZgqKmqVBz8k+3WZRwAThc+GNpjrvpxbd489 AAGvIcX0imR3vgqXoU85hMrxWOyWrH4rMcpBYjegK7jFgGH6vaP02ACjq5s= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:17 2025 by rpki-client