$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa File: 59b45e95-5c92-40c2-8378-600986966c75.roa (raw, json) Hash identifier: 2ALSCISQG2QWAl2HkMp+DXYJiYhi8L0ZS5pOiLWzXck= Subject key identifier: 82:64:82:41:67:3C:38:06:F6:A3:7D:3F:C7:C6:DA:AD:31:AD:B1:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C4C8BD3D4B854E8DDF1BADB92AB572531EE571B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa Signing time: Tue 12 Aug 2025 00:50:53 +0000 ROA not before: Tue 12 Aug 2025 00:50:53 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4c:8b:d3:d4:b8:54:e8:dd:f1:ba:db:92:ab:57:25:31:ee:57:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:50:53 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=0a79731acc24ca6851414bb9e103626cff5b34655098c2b29091d386ace11e40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:ce:9c:e5:5a:43:ba:af:8f:71:55:5c:a5: a8:8a:66:79:69:88:91:fb:d4:ad:2c:60:5c:35:7e: 15:ce:20:4f:5f:20:c1:88:1b:3a:87:a4:7d:57:53: cd:78:fc:3e:74:29:21:75:aa:03:e8:61:d8:b3:f0: c6:67:f6:9c:6d:eb:41:c0:46:f1:b6:8b:b1:dc:1a: ac:7d:18:bc:ec:d1:90:89:30:8a:22:5b:d5:a4:9a: f7:f9:27:07:29:e6:64:2d:7a:05:b0:1b:5c:3d:2c: 8d:a1:a3:28:8f:b6:63:af:dd:cf:f0:5d:a4:c3:0d: e1:aa:b5:61:d5:2d:49:cf:c1:3a:6c:b5:53:a6:62: a7:66:1b:0e:29:f4:28:89:24:2b:bb:ca:ed:ca:3e: 0b:45:96:41:47:76:03:bc:a8:5d:4e:fd:f8:8b:34: 32:fe:61:a8:7d:19:11:09:c5:99:b8:89:cf:5d:d1: 57:51:ba:16:25:eb:a4:28:e7:26:93:88:9e:f5:19: 26:cc:f4:20:f2:0a:6d:1b:dd:85:7c:76:20:a5:fb: 6b:0f:f9:8d:b7:1e:99:00:a1:56:ad:80:47:c7:7e: 7e:2c:44:eb:f0:d6:e0:04:7a:ea:34:e8:8a:0d:1e: 6d:56:ff:47:ca:97:c9:8f:6c:c7:de:0b:9f:7a:31: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:82:41:67:3C:38:06:F6:A3:7D:3F:C7:C6:DA:AD:31:AD:B1:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.102.0/23 Signature Algorithm: sha256WithRSAEncryption 17:1a:cb:00:7b:bf:6b:94:b4:0d:3b:43:80:5a:80:17:a6:05: ae:e0:f4:0e:ff:c6:3f:34:68:44:31:64:35:a1:de:df:d3:bc: e6:95:93:25:c8:fc:4e:b5:5b:e1:6c:64:0e:87:d1:1c:b0:f2: b8:ab:93:96:be:99:d9:30:a1:40:3c:06:5e:3a:59:3a:07:56: 2f:0e:b3:d2:2d:f4:0f:61:b8:29:ed:70:83:91:e5:1e:bc:99: 6d:3c:b1:7a:87:1c:dd:62:0f:15:32:70:7f:dd:5f:ca:5d:2f: 4b:06:7a:c0:b8:0c:d6:ca:b1:86:99:54:1c:a8:4e:0f:b3:85: f3:d6:74:27:ce:3b:1c:25:ff:52:d3:7e:b4:cb:16:60:64:6d: 62:e2:34:e8:8e:80:3e:be:6d:7a:18:11:71:2f:29:66:04:2a: 44:c8:00:d1:b4:9e:1b:35:88:57:38:40:60:93:a9:c1:bc:e6: d4:1c:00:79:62:60:79:58:ed:29:8e:69:d4:00:5b:7b:f4:4f: 1c:ea:2a:97:ca:1e:97:e1:54:59:26:a5:6c:9c:e9:2f:cc:74: 6b:61:ed:46:42:e7:c4:5e:77:da:e5:a3:26:94:65:8a:96:7d: 13:97:a4:81:01:ca:14:46:40:b8:da:18:9e:36:8b:1b:a2:3b: 3c:8a:48:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbEyL09S4VOjd8brbkqtXJTHuVxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MDUzWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTc5NzMxYWNjMjRjYTY4NTE0MTRiYjllMTAzNjI2Y2Zm NWIzNDY1NTA5OGMyYjI5MDkxZDM4NmFjZTExZTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCae86c5VpDuq+PcVVcpaiKZnlpiJH71K0sYFw1fhXOIE9f IMGIGzqHpH1XU814/D50KSF1qgPoYdiz8MZn9pxt60HARvG2i7HcGqx9GLzs0ZCJ MIoiW9Wkmvf5Jwcp5mQtegWwG1w9LI2hoyiPtmOv3c/wXaTDDeGqtWHVLUnPwTps tVOmYqdmGw4p9CiJJCu7yu3KPgtFlkFHdgO8qF1O/fiLNDL+Yah9GREJxZm4ic9d 0VdRuhYl66Qo5yaTiJ71GSbM9CDyCm0b3YV8diCl+2sP+Y23HpkAoVatgEfHfn4s ROvw1uAEeuo06IoNHm1W/0fKl8mPbMfeC596MWZvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgmSCQWc8OAb2o30/x8barTGtseEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5YjQ1ZTk1LTVjOTItNDBjMi04Mzc4LTYwMDk4Njk2NmM3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAGYwDQYJKoZIhvcNAQELBQADggEBABcaywB7v2uUtA07Q4BagBemBa7g 9A7/xj80aEQxZDWh3t/TvOaVkyXI/E61W+FsZA6H0Ryw8rirk5a+mdkwoUA8Bl46 WToHVi8Os9It9A9huCntcIOR5R68mW08sXqHHN1iDxUycH/dX8pdL0sGesC4DNbK sYaZVByoTg+zhfPWdCfOOxwl/1LTfrTLFmBkbWLiNOiOgD6+bXoYEXEvKWYEKkTI ANG0nhs1iFc4QGCTqcG85tQcAHliYHlY7SmOadQAW3v0TxzqKpfKHpfhVFkmpWyc 6S/MdGth7UZC58Red9rloyaUZYqWfROXpIEByhRGQLjaGJ42ixuiOzyKSLw= -----END CERTIFICATE-----Generated at Sat Aug 23 07:01:51 2025 by rpki-client