$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647b88e7-5e8c-4a24-a5d3-68e79aeee6f7.roa File: 647b88e7-5e8c-4a24-a5d3-68e79aeee6f7.roa (raw, json) Hash identifier: NB8e39L/w+cn0Vf691gE7/JfvYawbWznLo5Nm1ckboY= Subject key identifier: D3:22:90:40:49:E8:56:5B:27:8C:65:10:38:62:4A:2D:FF:F7:A3:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FC9EFE64D2900C844B31F55E236A446045BC58E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647b88e7-5e8c-4a24-a5d3-68e79aeee6f7.roa Signing time: Sat 28 Jun 2025 00:21:48 +0000 ROA not before: Sat 28 Jun 2025 00:21:48 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c9:ef:e6:4d:29:00:c8:44:b3:1f:55:e2:36:a4:46:04:5b:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:21:48 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=b29ec25804ba94c5537f49d2448af3cc580404a5d20475740509aa9c053dbfe4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:82:e6:55:97:14:31:da:dd:60:3e:b6:82: 45:20:c5:57:f2:e7:f8:43:eb:9b:13:61:d7:84:f2: ec:84:99:ee:20:a4:3b:59:c6:c2:51:e9:fc:cc:fc: ff:63:5a:d4:61:f7:dd:6e:61:4e:d5:c0:9e:d9:ff: a6:ba:ce:d2:6c:00:61:e4:8b:b4:1a:9f:e5:f9:13: fb:11:08:d7:50:0c:09:ce:32:57:e0:64:bb:8d:a4: 0c:3b:fa:9f:45:85:67:b4:56:ca:eb:ed:6a:87:53: 03:dc:1c:5a:60:ef:1a:e9:55:e2:5d:34:c9:65:07: 7b:78:12:76:a3:83:3b:b7:4e:3e:00:3e:c5:a0:c7: 8e:00:e1:7e:56:71:64:92:27:f7:f5:01:7b:00:d5: 74:29:ea:58:75:86:f1:61:90:c4:c9:e1:fa:7a:ba: be:23:1d:68:97:50:9a:e0:8c:79:ce:af:c8:7a:ef: 62:71:5c:d7:03:22:80:d0:33:7f:e6:dd:b1:93:63: 74:d3:08:69:ad:b3:ed:f3:4f:c3:b2:f0:cb:34:7c: 28:4f:b6:88:2f:0e:8c:d2:44:54:aa:8a:b3:07:c6: da:46:d9:c9:2a:b1:95:5d:7f:de:ee:d1:44:96:9a: b1:56:7c:17:86:af:a8:c1:c2:62:5b:33:a7:d1:63: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:90:40:49:E8:56:5B:27:8C:65:10:38:62:4A:2D:FF:F7:A3:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647b88e7-5e8c-4a24-a5d3-68e79aeee6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:ba:c6:ab:c3:85:31:c5:68:c7:22:83:29:0c:36:aa:d4:2a: 04:a1:a5:ec:d0:b7:4b:48:c1:ed:08:c8:e0:d2:f2:75:05:68: 19:47:05:d2:6d:72:c6:b8:cc:43:cc:8f:42:ab:84:b2:9e:59: 31:91:8e:77:65:3d:b7:51:5a:fc:e0:f4:47:a9:d0:ca:f5:ec: 9b:8d:78:cd:9a:7a:54:79:7f:cc:12:2c:42:48:be:a7:0f:e8: e9:d2:a7:2f:02:80:dd:6b:0a:bb:66:da:0f:34:84:35:9d:41: 51:b8:06:7a:3a:1a:64:3a:bc:13:ab:27:a3:31:f7:13:b4:64: 93:2f:91:ec:bc:bd:d3:90:87:a7:b7:4b:17:0f:ba:1a:d5:00: 29:47:c6:02:80:b2:12:40:a4:d3:06:c8:dc:f4:96:00:0a:fb: 02:b3:9f:d5:5d:dc:fb:47:a8:1c:2d:75:92:bd:e5:0a:41:9e: f9:79:27:df:71:01:97:64:ad:4f:6b:57:ec:8a:71:eb:ba:c6: e7:b3:8e:b2:62:0d:59:47:bf:ea:04:cd:51:f5:71:ec:37:cf: 7e:a6:4e:74:a9:be:f9:fe:c7:0f:d7:6e:f3:4a:be:3b:9f:11: 17:c3:b8:d7:71:cf:57:cd:2a:94:09:01:c5:4a:d5:cc:a1:0b: 3b:43:d4:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL8nv5k0pAMhEsx9V4jakRgRbxY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAyMTQ4WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjllYzI1ODA0YmE5NGM1NTM3ZjQ5ZDI0NDhhZjNjYzU4 MDQwNGE1ZDIwNDc1NzQwNTA5YWE5YzA1M2RiZmU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh9oLmVZcUMdrdYD62gkUgxVfy5/hD65sTYdeE8uyEme4g pDtZxsJR6fzM/P9jWtRh991uYU7VwJ7Z/6a6ztJsAGHki7Qan+X5E/sRCNdQDAnO MlfgZLuNpAw7+p9FhWe0Vsrr7WqHUwPcHFpg7xrpVeJdNMllB3t4Enajgzu3Tj4A PsWgx44A4X5WcWSSJ/f1AXsA1XQp6lh1hvFhkMTJ4fp6ur4jHWiXUJrgjHnOr8h6 72JxXNcDIoDQM3/m3bGTY3TTCGmts+3zT8Oy8Ms0fChPtogvDozSRFSqirMHxtpG 2ckqsZVdf97u0USWmrFWfBeGr6jBwmJbM6fRYwKBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0yKQQEnoVlsnjGUQOGJKLf/3o7EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0N2I4OGU3LTVlOGMtNGEyNC1hNWQzLTY4ZTc5YWVlZTZmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW4SOAwDQYJKoZIhvcNAQELBQADggEBAE+6xqvDhTHFaMcigykMNqrUKgSh pezQt0tIwe0IyODS8nUFaBlHBdJtcsa4zEPMj0KrhLKeWTGRjndlPbdRWvzg9Eep 0Mr17JuNeM2aelR5f8wSLEJIvqcP6OnSpy8CgN1rCrtm2g80hDWdQVG4Bno6GmQ6 vBOrJ6Mx9xO0ZJMvkey8vdOQh6e3SxcPuhrVAClHxgKAshJApNMGyNz0lgAK+wKz n9Vd3PtHqBwtdZK95QpBnvl5J99xAZdkrU9rV+yKceu6xuezjrJiDVlHv+oEzVH1 cew3z36mTnSpvvn+xw/XbvNKvjufERfDuNdxz1fNKpQJAcVK1cyhCztD1K8= -----END CERTIFICATE-----Generated at Sun Jun 29 03:51:17 2025 by rpki-client