$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa File: 49d51f42-2ffc-4217-9e32-f46cec71a85a.roa (raw, json) Hash identifier: u1otC/5+HWo2ScmZz1tx1JXKRlNnJD5Lrw4kwrarwW4= Subject key identifier: EC:1A:81:1F:2E:5C:2B:E4:35:0F:D8:92:81:D8:70:B1:85:B1:88:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B9C956A12B6723647C9878CBDAF179021886763 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa Signing time: Fri 08 Aug 2025 00:11:36 +0000 ROA not before: Fri 08 Aug 2025 00:11:36 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9c:95:6a:12:b6:72:36:47:c9:87:8c:bd:af:17:90:21:88:67:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:36 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=e1834ae8704d242f4f2374a0607c4e8386a89d32a7394ff48bec9ff926932671, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:38:47:9f:5e:64:6f:9c:9a:1a:3e:12:c9: 37:75:e1:15:81:e8:bc:9f:74:cc:44:cb:5d:1d:4e: e4:1a:ef:c1:2f:e7:7f:63:35:c3:32:6f:93:e3:46: 22:da:a5:7d:39:aa:13:45:90:db:23:ee:71:8d:65: 17:cb:f6:40:63:a5:15:45:6a:5a:67:2a:2b:3d:83: 48:64:55:1e:d7:69:02:75:6d:8b:85:74:3f:16:83: 5c:1d:dd:5c:5e:57:d7:c2:c8:ce:5d:9b:29:31:b9: af:69:63:8d:ea:a7:cd:42:0e:27:12:94:d1:7a:06: 78:24:3b:66:8b:f8:3d:51:f2:eb:5d:ae:88:03:17: d1:55:a0:8b:49:3a:54:3b:43:fa:c1:0c:39:c5:ac: 2e:fb:c7:70:d6:62:12:ef:77:c4:73:4d:af:f1:67: dd:f9:3e:a4:af:70:b1:0c:0e:01:71:dc:d3:a3:99: d8:4e:ae:3d:8d:b6:71:36:d7:6b:70:1e:a6:6c:78: 88:a8:d7:4c:69:bf:85:27:a6:17:75:2b:09:6a:5e: ac:45:c6:e2:f3:e8:ed:eb:ee:72:96:80:5f:c1:81: d7:d2:de:df:4c:1e:c8:2a:6d:f7:8f:eb:7e:5d:13: 5e:3e:1c:be:6d:01:b5:90:a1:8c:15:ab:1b:1f:ac: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1A:81:1F:2E:5C:2B:E4:35:0F:D8:92:81:D8:70:B1:85:B1:88:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:c4:38:a4:08:a8:93:14:34:e1:2c:f6:01:2f:5e:85:8c:fe: f1:87:67:4b:45:23:62:29:7d:50:77:26:3e:80:18:be:f9:45: 35:0a:5f:19:5b:38:9e:ff:75:3e:dd:c3:c1:dc:c0:2a:12:b8: 1d:2b:05:39:99:d1:93:74:f3:2c:90:57:a7:2e:2f:67:ca:ea: a4:c5:62:d2:f6:68:0c:f9:cc:61:3f:ee:6c:e2:0b:15:10:fc: 14:29:ae:e1:96:98:c4:8b:1f:05:bf:e5:01:09:e9:82:a8:9b: 3a:35:26:58:9b:e1:7f:d3:2e:e4:5d:7e:c6:57:c3:cf:d0:55: 50:1f:99:40:9c:0d:72:d7:7a:84:b8:9c:eb:8a:7c:c4:f1:35: cb:f6:74:50:71:07:00:ad:5f:81:36:93:b3:6a:8d:58:d2:d0: 6c:2b:23:10:d2:93:1a:cf:db:12:a1:3d:7a:95:1b:8d:2e:26: 61:38:4b:d4:34:8e:57:b0:84:94:72:65:9b:bb:d6:5f:5a:26: 07:31:56:67:a0:ff:df:a4:78:af:81:bf:94:26:36:49:6c:33: 63:bc:52:43:15:6d:5f:33:77:13:2c:7a:38:59:63:c6:ed:2c: 06:c4:b8:5e:7b:79:0d:0f:b3:65:5e:52:66:d4:db:70:ad:f4: 34:2b:a9:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUa5yVahK2cjZHyYeMva8XkCGIZ2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMTM2WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTgzNGFlODcwNGQyNDJmNGYyMzc0YTA2MDdjNGU4Mzg2 YTg5ZDMyYTczOTRmZjQ4YmVjOWZmOTI2OTMyNjcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLgThHn15kb5yaGj4SyTd14RWB6LyfdMxEy10dTuQa78Ev 539jNcMyb5PjRiLapX05qhNFkNsj7nGNZRfL9kBjpRVFalpnKis9g0hkVR7XaQJ1 bYuFdD8Wg1wd3VxeV9fCyM5dmykxua9pY43qp81CDicSlNF6BngkO2aL+D1R8utd rogDF9FVoItJOlQ7Q/rBDDnFrC77x3DWYhLvd8RzTa/xZ935PqSvcLEMDgFx3NOj mdhOrj2NtnE212twHqZseIio10xpv4Unphd1KwlqXqxFxuLz6O3r7nKWgF/BgdfS 3t9MHsgqbfeP635dE14+HL5tAbWQoYwVqxsfrMcPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7BqBHy5cK+Q1D9iSgdhwsYWxiIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZDUxZjQyLTJmZmMtNDIxNy05ZTMyLWY0NmNlYzcxYTg1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjIzANBgkqhkiG9w0BAQsFAAOCAQEAF8Q4pAiokxQ04Sz2AS9ehYz+8Ydn S0UjYil9UHcmPoAYvvlFNQpfGVs4nv91Pt3DwdzAKhK4HSsFOZnRk3TzLJBXpy4v Z8rqpMVi0vZoDPnMYT/ubOILFRD8FCmu4ZaYxIsfBb/lAQnpgqibOjUmWJvhf9Mu 5F1+xlfDz9BVUB+ZQJwNctd6hLic64p8xPE1y/Z0UHEHAK1fgTaTs2qNWNLQbCsj ENKTGs/bEqE9epUbjS4mYThL1DSOV7CElHJlm7vWX1omBzFWZ6D/36R4r4G/lCY2 SWwzY7xSQxVtXzN3Eyx6OFljxu0sBsS4Xnt5DQ+zZV5SZtTbcK30NCupbQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:51 2025 by rpki-client