$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa File: 584aba4e-d29c-4d06-8b73-b6262d5b3870.roa (raw, json) Hash identifier: 5xYE/n9juNaERzmQe6R+sF4ERmKtpP1xUVC6u7TVS1M= Subject key identifier: 80:23:3C:03:C6:20:A3:13:76:95:E1:54:A5:C9:17:1D:DD:F8:E8:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DA97CD8FEB1946AAB972ECBFCF80407C1D144C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa Signing time: Tue 12 Aug 2025 00:11:38 +0000 ROA not before: Tue 12 Aug 2025 00:11:38 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.70.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a9:7c:d8:fe:b1:94:6a:ab:97:2e:cb:fc:f8:04:07:c1:d1:44:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:11:38 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=96f1c374a39fed411a8496dbb5f5ccb903233aca33a517620cbec90049296787, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:8b:e7:cd:7d:21:e8:8f:4c:19:11:38:b4: c2:ef:5f:e7:4c:a8:13:98:3e:14:c7:66:bd:de:bf: 70:f0:f1:52:0c:89:80:91:5b:27:22:b6:91:8f:1f: f1:07:3d:14:3a:e3:49:55:e3:af:03:f8:d8:ad:0d: af:c0:66:2b:cd:b0:3a:f6:64:47:45:bb:48:be:c2: 7f:84:55:cb:db:b1:ab:83:b9:c5:04:88:b1:ed:d0: ef:83:ec:41:51:55:52:e2:b0:04:c3:1f:7f:01:19: 02:63:75:5b:2a:a1:4a:22:55:7d:e5:dc:4a:94:50: 6a:38:71:4a:d7:26:65:5f:72:96:cf:42:18:dd:be: 48:63:48:bd:20:0f:43:41:3d:15:e6:8c:17:b6:6b: 6a:c6:49:95:e5:fb:bf:27:cd:cc:5a:a4:f5:d3:f5: ad:32:36:22:89:58:c8:4f:08:7f:a2:ff:98:94:60: d9:33:c5:e8:c3:0b:e8:be:f7:a8:bf:7d:61:b1:47: 96:1a:63:ec:e2:03:24:1b:a6:80:9e:62:fe:b8:45: 42:c1:b3:ec:63:77:6d:21:40:fb:cd:40:83:0f:0d: 1e:fb:66:87:d6:d8:62:68:de:8a:9d:36:57:7d:b7: 0a:e1:46:b3:e2:e7:3e:c0:3f:1e:7c:e4:b4:7a:fe: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:3C:03:C6:20:A3:13:76:95:E1:54:A5:C9:17:1D:DD:F8:E8:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/584aba4e-d29c-4d06-8b73-b6262d5b3870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.70.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:a4:74:47:38:9a:72:cd:b9:bd:8c:4a:18:07:09:b5:b6:a6: d6:01:d0:18:27:8e:ec:31:42:a6:1b:e6:d5:6c:56:05:53:74: 3f:ff:07:ab:ad:5a:7b:f2:b1:1a:7f:23:d6:0f:2a:bf:a8:1b: ec:85:57:e1:9e:88:42:bd:6f:37:83:1f:91:1b:f6:fa:a3:1b: 88:6b:47:a4:c1:1f:e7:f4:92:05:13:7b:4d:33:d7:0c:da:23: d3:f6:67:44:7e:b1:8a:26:62:34:9a:05:1e:f0:06:99:68:1b: fd:08:59:3e:c2:e2:78:01:84:79:8e:46:a2:f4:eb:5b:b1:f4: 91:d4:ef:87:fc:83:db:cf:d7:b6:2d:cb:1a:87:fd:1a:43:77: 04:eb:ef:38:db:2e:ea:2c:87:93:ea:82:0e:18:54:5a:74:f7: ad:a8:4b:32:5c:fe:c6:a9:a9:8c:06:7a:43:30:2b:bf:1b:23: 3b:3c:75:4e:0d:38:1b:40:dc:cc:d3:95:9f:3d:61:16:2b:3b: 50:a0:cc:60:03:20:dc:ee:f3:f4:ee:b4:06:46:0f:20:0e:16: f6:a0:82:ee:b2:f8:11:b9:15:38:f3:93:31:9e:da:37:39:46: 85:c1:4a:01:6f:13:82:30:bf:d0:57:ed:d8:51:71:73:f1:10: 1f:18:bd:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbal82P6xlGqrly7L/PgEB8HRRMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAxMTM4WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmYxYzM3NGEzOWZlZDQxMWE4NDk2ZGJiNWY1Y2NiOTAz MjMzYWNhMzNhNTE3NjIwY2JlYzkwMDQ5Mjk2Nzg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIuIvnzX0h6I9MGRE4tMLvX+dMqBOYPhTHZr3ev3Dw8VIM iYCRWycitpGPH/EHPRQ640lV468D+NitDa/AZivNsDr2ZEdFu0i+wn+EVcvbsauD ucUEiLHt0O+D7EFRVVLisATDH38BGQJjdVsqoUoiVX3l3EqUUGo4cUrXJmVfcpbP QhjdvkhjSL0gD0NBPRXmjBe2a2rGSZXl+78nzcxapPXT9a0yNiKJWMhPCH+i/5iU YNkzxejDC+i+96i/fWGxR5YaY+ziAyQbpoCeYv64RULBs+xjd20hQPvNQIMPDR77 ZofW2GJo3oqdNld9twrhRrPi5z7APx585LR6/izzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgCM8A8YgoxN2leFUpckXHd346BAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4NGFiYTRlLWQyOWMtNGQwNi04YjczLWI2MjYyZDViMzg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQRkgwDQYJKoZIhvcNAQELBQADggEBAB+kdEc4mnLNub2MShgHCbW2ptYB 0BgnjuwxQqYb5tVsVgVTdD//B6utWnvysRp/I9YPKr+oG+yFV+GeiEK9bzeDH5Eb 9vqjG4hrR6TBH+f0kgUTe00z1wzaI9P2Z0R+sYomYjSaBR7wBploG/0IWT7C4ngB hHmORqL061ux9JHU74f8g9vP17YtyxqH/RpDdwTr7zjbLuosh5Pqgg4YVFp0962o SzJc/sapqYwGekMwK78bIzs8dU4NOBtA3MzTlZ89YRYrO1CgzGADINzu8/TutAZG DyAOFvaggu6y+BG5FTjzkzGe2jc5RoXBSgFvE4Iwv9BX7dhRcXPxEB8YvTk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:25:05 2025 by rpki-client