$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825bfb63-e691-44c3-91b1-ef9cfe07ece2.roa File: 825bfb63-e691-44c3-91b1-ef9cfe07ece2.roa (raw, json) Hash identifier: bYoUD/PnulEam73nZ/FWvNvwHosEz792EUEuKwSY5vw= Subject key identifier: F3:72:1E:B9:17:C9:D1:0D:86:76:03:E7:DE:D7:41:1A:28:34:C7:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A8393B74E0F7D981090BBE1187E7DE64A687C7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825bfb63-e691-44c3-91b1-ef9cfe07ece2.roa Signing time: Mon 16 Jun 2025 15:30:26 +0000 ROA not before: Mon 16 Jun 2025 15:30:26 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.29.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:83:93:b7:4e:0f:7d:98:10:90:bb:e1:18:7e:7d:e6:4a:68:7c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:30:26 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=67cf805e327f9403913c6029e32628f43bf200b151a98b325bb541897efbc12f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:02:4a:1d:4b:21:11:2d:1c:d2:60:bd:75: 44:6b:14:66:65:df:24:03:57:35:0b:1a:81:43:95: dd:a7:95:52:1c:4b:56:bc:5f:e1:51:0a:17:ab:88: cf:d4:8c:b5:de:3e:b4:72:d4:45:b3:ee:31:2a:54: 00:67:90:39:96:4b:cc:c8:08:76:5a:9c:ee:01:4c: a5:6f:7a:52:26:b4:fc:48:05:dc:6a:be:79:2e:93: 76:be:81:cb:35:eb:b3:1e:e8:10:4d:3a:ee:2b:78: b7:27:f5:76:fe:94:46:91:4d:11:88:30:6f:1b:7d: 78:94:fa:1a:e2:7b:ca:c6:2f:5b:e5:3d:36:2f:7c: db:e9:94:40:0f:23:28:d0:47:f8:36:51:5a:d1:23: cf:7c:74:f6:71:1c:24:ef:30:59:d2:0c:f2:5a:18: 85:5d:c2:a4:d0:01:07:30:bc:30:dc:40:2f:a5:73: de:eb:a3:d7:1d:41:08:3f:95:94:1a:18:ff:a2:89: cd:78:ca:95:85:72:a2:ae:86:e1:4f:f3:ee:72:ed: c7:fe:77:3a:31:53:1e:3d:9a:88:f7:df:05:a5:85: 37:ce:f3:8e:3e:a3:10:d6:ce:92:9b:43:9b:7a:79: e7:90:dd:e7:6d:01:bc:33:b4:c7:0a:a8:93:1d:6b: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:72:1E:B9:17:C9:D1:0D:86:76:03:E7:DE:D7:41:1A:28:34:C7:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825bfb63-e691-44c3-91b1-ef9cfe07ece2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5b:11:fb:f3:e7:2f:c6:78:83:df:8d:c1:96:ab:cd:69:64:54: e0:6d:45:c4:69:cf:a5:59:57:1f:90:df:60:4c:9e:ed:b1:ef: a8:43:93:0a:94:a3:34:d6:74:73:de:6e:ff:a5:8b:f8:14:b5: 35:20:5b:bd:8e:e9:bf:ee:61:79:bd:39:42:50:33:f3:f4:66: a8:38:84:30:ff:73:38:38:16:bd:43:dc:20:f9:e7:d1:d7:24: 82:fb:c4:4f:76:c5:e8:96:48:d9:1c:55:92:f9:a7:b3:e6:cf: 55:f8:a9:e1:dd:3f:6e:53:bd:54:66:a7:d9:8d:da:4f:80:48: 08:30:a8:bd:15:3b:11:79:cd:83:35:b3:6d:62:28:33:d3:e6: 50:48:b1:48:27:a4:19:de:29:d6:12:7d:74:25:02:7f:3a:67: d0:4e:8f:cc:0f:c4:3b:15:b8:09:1b:dd:9c:61:5a:06:6b:92: 08:3c:6f:49:d2:e4:60:17:68:0c:ed:7e:4b:07:e4:6c:74:e7: c7:9a:14:0b:b1:38:2a:c2:b8:c0:82:66:d0:84:3b:1c:9f:2d: 03:ae:26:c8:11:5f:4c:9e:b2:49:50:e0:2b:41:cf:65:77:cd: ee:db:77:03:a8:b9:f6:b1:5e:0d:bb:c3:7a:64:91:3d:17:18: 5f:2e:1a:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSoOTt04PfZgQkLvhGH595kpofH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMDI2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2NmODA1ZTMyN2Y5NDAzOTEzYzYwMjllMzI2MjhmNDNi ZjIwMGIxNTFhOThiMzI1YmI1NDE4OTdlZmJjMTJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnTwJKHUshES0c0mC9dURrFGZl3yQDVzULGoFDld2nlVIc S1a8X+FRCheriM/UjLXePrRy1EWz7jEqVABnkDmWS8zICHZanO4BTKVvelImtPxI Bdxqvnkuk3a+gcs167Me6BBNOu4reLcn9Xb+lEaRTRGIMG8bfXiU+hrie8rGL1vl PTYvfNvplEAPIyjQR/g2UVrRI898dPZxHCTvMFnSDPJaGIVdwqTQAQcwvDDcQC+l c97ro9cdQQg/lZQaGP+iic14ypWFcqKuhuFP8+5y7cf+dzoxUx49moj33wWlhTfO 844+oxDWzpKbQ5t6eeeQ3edtAbwztMcKqJMda7ERAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU83IeuRfJ0Q2GdgPn3tdBGig0x9IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyNWJmYjYzLWU2OTEtNDRjMy05MWIxLWVmOWNmZTA3ZWNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4HTANBgkqhkiG9w0BAQsFAAOCAQEAWxH78+cvxniD343BlqvNaWRU4G1F xGnPpVlXH5DfYEye7bHvqEOTCpSjNNZ0c95u/6WL+BS1NSBbvY7pv+5heb05QlAz 8/RmqDiEMP9zODgWvUPcIPnn0dckgvvET3bF6JZI2RxVkvmns+bPVfip4d0/blO9 VGan2Y3aT4BICDCovRU7EXnNgzWzbWIoM9PmUEixSCekGd4p1hJ9dCUCfzpn0E6P zA/EOxW4CRvdnGFaBmuSCDxvSdLkYBdoDO1+SwfkbHTnx5oUC7E4KsK4wIJm0IQ7 HJ8tA64myBFfTJ6ySVDgK0HPZXfN7tt3A6i59rFeDbvDemSRPRcYXy4aXA== -----END CERTIFICATE-----Generated at Wed Jul 2 16:12:51 2025 by rpki-client