$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b816526-e2a1-4137-8d6a-34a37b0ba6c8.roa File: 6b816526-e2a1-4137-8d6a-34a37b0ba6c8.roa (raw, json) Hash identifier: 6X67IZJkP/kLFwgtdpACVJUQGZXo/Xd4/X1hxfql2TU= Subject key identifier: D5:B9:DD:D3:1A:2A:76:E7:1F:63:C4:0C:D1:3E:C4:CC:06:77:63:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5331D74CC0DB3FCCD30F1129CFDCAF943ACD0B33 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b816526-e2a1-4137-8d6a-34a37b0ba6c8.roa Signing time: Tue 17 Jun 2025 00:10:23 +0000 ROA not before: Tue 17 Jun 2025 00:10:23 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 165.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:31:d7:4c:c0:db:3f:cc:d3:0f:11:29:cf:dc:af:94:3a:cd:0b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:10:23 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=7e275c66488d102127d703f222b9ca068212d76614da6ad3987adf9fc254f8f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9f:32:48:2d:b7:f9:7d:aa:11:d7:a5:ea:d3: 60:45:c8:94:ca:a2:70:30:48:7c:43:17:14:97:5c: 0b:c0:d6:0c:72:c5:e8:a6:2f:0a:31:b7:dc:d7:9d: b4:f7:80:cc:f6:b1:79:85:f3:f5:1e:50:40:cb:b2: 76:95:fc:50:d2:60:8b:b7:6f:91:40:27:04:b7:7a: 6e:98:8a:3a:b8:7b:5c:a4:66:81:23:27:38:3e:85: a4:0a:f8:a5:31:1a:8c:87:39:f0:3f:b1:34:5d:9a: 31:20:5f:81:1c:e0:ef:dd:ee:56:6e:ce:ef:5a:e6: 02:08:b3:f6:79:03:ac:1a:b6:4b:5a:77:21:23:d5: 5e:8e:0b:a4:03:cc:44:87:ac:48:77:f5:af:f9:60: 6e:d7:47:4c:c3:4a:e9:48:4f:55:fb:02:6c:2f:6e: a9:1c:ca:0a:7a:77:d0:02:70:d7:0d:77:d2:bb:bd: 96:02:c1:2c:c9:1d:de:12:6c:f6:b8:9e:cc:cf:f3: 41:e7:6d:29:96:50:aa:39:df:36:89:87:31:d9:91: c9:d9:e4:18:10:9e:00:81:45:6e:c5:19:93:f8:ef: c5:4f:5b:94:dd:a7:64:96:30:e4:d2:4c:08:2a:f6: 86:23:b3:ae:be:7b:3b:c6:08:85:2b:a2:bf:c0:e7: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B9:DD:D3:1A:2A:76:E7:1F:63:C4:0C:D1:3E:C4:CC:06:77:63:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b816526-e2a1-4137-8d6a-34a37b0ba6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.70.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:48:f0:25:8b:27:1a:d2:fc:25:80:04:7c:cb:05:2f:23:5f: 67:ed:27:5f:08:31:c1:9a:aa:9a:50:62:97:9a:34:e2:6e:d8: cc:c8:3b:05:66:b1:ed:a4:d3:03:1c:d7:88:b3:ec:15:7e:bf: 6a:3f:fb:32:21:23:d7:cf:6f:f9:42:2b:68:77:c6:10:d7:60: 57:95:01:59:24:0d:c5:c6:8c:5a:07:a5:8d:1a:1d:37:64:30: 9f:ee:96:f7:93:8e:7e:d8:75:49:b5:f1:8d:f9:99:d6:cc:60: c8:a1:9e:f2:e6:66:5d:ec:52:b5:0d:23:af:56:fe:10:b7:00: ab:fa:c5:17:00:01:46:b9:cc:65:3e:b5:bc:96:5a:f7:ab:97: af:b3:c3:e8:80:4a:df:30:9e:6b:86:31:e6:61:6d:de:7d:36: e3:fc:4e:a9:ec:93:e6:ca:a2:12:08:b4:84:b1:13:2d:9b:85: a8:14:93:07:10:d1:4b:2d:37:43:73:e6:79:3d:31:0e:7e:4b: 37:04:d7:46:ee:dd:0a:0f:68:66:57:f6:1f:9d:b2:a9:9b:5f: ce:80:ce:79:42:86:38:8a:93:b4:57:b6:37:31:5b:47:10:35: ed:e5:4c:5a:67:1b:b8:51:a2:b7:64:52:08:a4:07:d4:98:84: 37:78:6c:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUzHXTMDbP8zTDxEpz9yvlDrNCzMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMDIzWhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTI3NWM2NjQ4OGQxMDIxMjdkNzAzZjIyMmI5Y2EwNjgy MTJkNzY2MTRkYTZhZDM5ODdhZGY5ZmMyNTRmOGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7nzJILbf5faoR16Xq02BFyJTKonAwSHxDFxSXXAvA1gxy xeimLwoxt9zXnbT3gMz2sXmF8/UeUEDLsnaV/FDSYIu3b5FAJwS3em6Yijq4e1yk ZoEjJzg+haQK+KUxGoyHOfA/sTRdmjEgX4Ec4O/d7lZuzu9a5gIIs/Z5A6watkta dyEj1V6OC6QDzESHrEh39a/5YG7XR0zDSulIT1X7Amwvbqkcygp6d9ACcNcNd9K7 vZYCwSzJHd4SbPa4nszP80HnbSmWUKo53zaJhzHZkcnZ5BgQngCBRW7FGZP478VP W5Tdp2SWMOTSTAgq9oYjs66+ezvGCIUror/A5xStAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1bnd0xoqducfY8QM0T7EzAZ3Y9IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiODE2NTI2LWUyYTEtNDEzNy04ZDZhLTM0YTM3YjBiYTZjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwClRjANBgkqhkiG9w0BAQsFAAOCAQEAmUjwJYsnGtL8JYAEfMsFLyNfZ+0n XwgxwZqqmlBil5o04m7YzMg7BWax7aTTAxzXiLPsFX6/aj/7MiEj189v+UIraHfG ENdgV5UBWSQNxcaMWgeljRodN2Qwn+6W95OOfth1SbXxjfmZ1sxgyKGe8uZmXexS tQ0jr1b+ELcAq/rFFwABRrnMZT61vJZa96uXr7PD6IBK3zCea4Yx5mFt3n024/xO qeyT5sqiEgi0hLETLZuFqBSTBxDRSy03Q3PmeT0xDn5LNwTXRu7dCg9oZlf2H52y qZtfzoDOeUKGOIqTtFe2NzFbRxA17eVMWmcbuFGit2RSCKQH1JiEN3hsVw== -----END CERTIFICATE-----Generated at Tue Jul 1 10:44:41 2025 by rpki-client