$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa File: 713d60da-dad2-49a0-b57f-6b63365113f7.roa (raw, json) Hash identifier: mh7p+yyK8t4MAvM6CxWMjz89oV6/NrCzdF727K44Kmk= Subject key identifier: DD:6E:D9:E4:B3:0B:AF:69:AB:FE:4E:47:1E:90:0A:EF:39:FC:D7:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C39276425ED1EBB8748CEAEC70198224714F2D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa Signing time: Sat 14 Jun 2025 00:31:49 +0000 ROA not before: Sat 14 Jun 2025 00:31:49 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:39:27:64:25:ed:1e:bb:87:48:ce:ae:c7:01:98:22:47:14:f2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:31:49 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=7c0c8c0bcb2d5a1b7de803ca35f75eb874adb2065a9ff873b929f1a87d175de1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:07:cb:82:0e:d6:f3:8c:47:64:2a:ab:c0: 6f:17:d2:11:78:0e:c0:b8:f3:96:f5:6d:90:61:ec: 03:b1:16:c6:c2:d7:5d:1c:13:71:87:76:5a:ea:db: 4a:02:9e:2a:a7:bd:ba:79:4b:cb:3d:0c:18:d5:fa: cb:80:6a:d2:72:5f:2e:64:74:bf:55:fb:e4:40:e6: 6e:81:ed:5a:13:a2:84:0f:23:47:d2:14:27:79:1b: 7a:1f:7b:79:8d:cf:9c:80:10:97:09:07:16:92:4f: 0c:37:7a:bb:69:39:79:7e:f1:0e:a6:aa:82:ba:e0: 7b:59:3a:43:ce:8d:d2:00:93:b4:82:ed:83:ae:00: 4f:63:c2:66:d1:ba:38:e4:76:5b:81:9c:7b:1b:6b: 05:fc:95:e4:cd:eb:e4:88:7f:7a:b7:e1:e8:fa:02: 01:60:76:6a:53:e1:45:22:26:52:f8:ad:25:66:ca: 8b:13:e6:36:17:a6:cb:4b:43:23:dd:9f:c2:91:5b: 98:28:58:4b:eb:10:e6:bb:9b:23:06:4f:3a:93:4e: 2c:05:ff:5d:2a:05:61:dc:02:6b:10:57:52:17:eb: 67:c9:66:a7:64:6d:25:5a:22:f0:71:0c:66:69:32: 7b:60:96:03:8c:1d:55:fa:4b:6c:ef:36:e4:b6:a4: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:D9:E4:B3:0B:AF:69:AB:FE:4E:47:1E:90:0A:EF:39:FC:D7:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.96.0/19 Signature Algorithm: sha256WithRSAEncryption b1:e9:3a:71:25:bf:aa:81:11:eb:e0:11:30:53:cb:f4:85:21: 58:05:13:92:bd:96:91:93:3a:7d:ac:03:14:04:49:37:b7:ef: 70:b0:a7:c8:9d:fc:c6:63:84:22:02:49:1f:40:26:d5:fd:69: 86:00:a0:7e:8c:b2:0f:86:22:cc:9c:5e:2a:7b:5d:88:d6:e6: 54:38:8b:f4:91:d6:bb:b4:36:af:8b:98:83:71:89:6a:36:1c: dd:31:73:68:59:84:5a:8a:82:60:c1:24:96:d8:0c:86:50:b2: 8d:93:8c:25:16:a5:5c:73:c4:31:77:bf:36:6c:cd:0f:f8:81: 7c:9c:4d:62:82:7a:0a:2c:3b:6e:eb:01:71:48:7e:9e:45:5e: 02:02:89:b8:e1:75:05:00:43:b3:63:6b:7f:3c:b9:bc:f3:e8: cb:fa:d0:fc:bb:3b:1e:8f:bf:15:00:53:a8:aa:0a:25:06:60: 10:41:f9:0e:de:5f:7b:2e:ec:42:72:4f:64:1a:26:79:65:e5: 14:d5:6d:fb:6b:d8:a1:7e:47:e8:e1:1d:4c:46:9b:3f:09:a9: 39:70:d1:6c:56:5b:b8:e3:07:fc:f1:09:71:bd:40:c3:0d:d8: 4a:3f:eb:5f:99:34:83:2e:37:06:e1:93:59:54:38:3e:50:f5: 5c:d1:5b:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULDknZCXtHruHSM6uxwGYIkcU8tkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMTQ5WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzBjOGMwYmNiMmQ1YTFiN2RlODAzY2EzNWY3NWViODc0 YWRiMjA2NWE5ZmY4NzNiOTI5ZjFhODdkMTc1ZGUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+JgfLgg7W84xHZCqrwG8X0hF4DsC485b1bZBh7AOxFsbC 110cE3GHdlrq20oCniqnvbp5S8s9DBjV+suAatJyXy5kdL9V++RA5m6B7VoTooQP I0fSFCd5G3ofe3mNz5yAEJcJBxaSTww3ertpOXl+8Q6mqoK64HtZOkPOjdIAk7SC 7YOuAE9jwmbRujjkdluBnHsbawX8leTN6+SIf3q34ej6AgFgdmpT4UUiJlL4rSVm yosT5jYXpstLQyPdn8KRW5goWEvrEOa7myMGTzqTTiwF/10qBWHcAmsQV1IX62fJ ZqdkbSVaIvBxDGZpMntglgOMHVX6S2zvNuS2pJk3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3W7Z5LMLr2mr/k5HHpAK7zn816MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxM2Q2MGRhLWRhZDItNDlhMC1iNTdmLTZiNjMzNjUxMTNmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXFmAwDQYJKoZIhvcNAQELBQADggEBALHpOnElv6qBEevgETBTy/SFIVgF E5K9lpGTOn2sAxQESTe373Cwp8id/MZjhCICSR9AJtX9aYYAoH6Msg+GIsycXip7 XYjW5lQ4i/SR1ru0Nq+LmINxiWo2HN0xc2hZhFqKgmDBJJbYDIZQso2TjCUWpVxz xDF3vzZszQ/4gXycTWKCegosO27rAXFIfp5FXgICibjhdQUAQ7Nja388ubzz6Mv6 0Py7Ox6PvxUAU6iqCiUGYBBB+Q7eX3su7EJyT2QaJnll5RTVbftr2KF+R+jhHUxG mz8JqTlw0WxWW7jjB/zxCXG9QMMN2Eo/61+ZNIMuNwbhk1lUOD5Q9VzRW6s= -----END CERTIFICATE-----Generated at Mon Jun 30 18:20:20 2025 by rpki-client