$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa File: 88612825-39ba-446a-a645-27d9ef61fe28.roa (raw, json) Hash identifier: Hqf5MGVODhH3VSyk8dfdV1LAEGIhYqO7CzbnQRjgu6E= Subject key identifier: C6:A4:F6:1F:84:03:19:88:00:02:D4:04:0E:0E:61:2D:2B:FC:F5:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08B7C9F3F51F2AB19E7740DD2F02AC5B208CB137 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa Signing time: Tue 17 Jun 2025 00:10:34 +0000 ROA not before: Tue 17 Jun 2025 00:10:34 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.52.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b7:c9:f3:f5:1f:2a:b1:9e:77:40:dd:2f:02:ac:5b:20:8c:b1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:10:34 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=df97846673079033e8267561e82b6c07321d70af7d077b091d2b18c7546718c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:ed:1f:6a:d2:7b:25:ef:84:04:cf:d3:04: 95:9e:91:8a:ab:74:66:10:79:6f:3d:34:bd:7c:c4: f4:73:71:3c:33:e9:a2:2e:87:91:64:15:0c:52:a9: 6b:c3:02:53:2a:40:8c:d7:35:6a:da:5a:71:07:bc: 81:f1:7b:af:67:85:1e:49:00:da:df:c4:ba:52:ed: e2:2a:2f:ca:9b:70:b6:d5:34:dd:6d:5d:bf:8d:e7: e8:94:e1:8b:dc:30:bb:9a:8e:4d:f0:0c:f9:b2:e4: 82:d7:3d:f2:8b:f5:30:f0:b6:6b:7f:f5:d7:5f:b0: 71:f5:3c:a7:2e:92:59:2b:d9:86:bf:a5:fd:7a:42: e8:ca:aa:1f:01:bc:9c:00:ca:2f:c4:4a:a8:8a:8b: 32:44:45:1f:74:e9:cd:70:ec:ee:87:53:34:1e:aa: ec:77:7d:8c:cd:b1:3b:2f:5f:9a:58:b4:82:16:cd: cc:b5:3f:15:9d:e6:54:38:3b:50:78:27:16:ca:52: d9:3d:3b:ee:0c:18:59:d2:a2:8e:3e:be:46:54:64: be:a4:b7:0e:01:49:ad:88:52:5d:aa:9a:98:aa:7d: ab:eb:ec:d0:37:db:fc:70:fc:6d:2a:53:89:b4:7d: e1:40:8c:c1:fe:77:f4:2f:e2:bd:33:a8:3d:9d:37: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:F6:1F:84:03:19:88:00:02:D4:04:0E:0E:61:2D:2B:FC:F5:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.52.96.0/19 Signature Algorithm: sha256WithRSAEncryption a3:cf:10:b1:0c:b4:5b:da:05:81:31:63:af:db:ce:99:5f:72: 44:e0:ce:39:89:99:17:76:0b:18:5e:90:33:ab:54:b3:bb:6f: c0:1b:3a:0a:49:d1:7f:39:3e:74:50:f4:ec:13:56:06:a3:7d: c7:30:23:ab:8a:63:b6:08:97:a6:c5:f4:ca:f8:69:ec:85:7e: 1d:94:f8:e4:ec:55:29:43:a5:06:b5:12:d7:51:be:f3:6f:cd: a5:98:04:33:a9:5c:c4:0f:64:53:10:d9:ff:26:8d:bf:75:7c: bb:94:89:57:40:93:e6:46:6f:36:01:5b:00:27:59:09:a8:3e: 1c:6f:6a:e7:ed:ab:87:d3:1d:01:fb:ac:60:93:da:ae:2e:e5: ba:a0:e9:77:c7:ef:42:d7:f0:83:e9:0f:23:77:c0:9c:f6:8e: 3e:34:f6:06:a6:35:44:80:e8:8e:bf:26:19:c0:87:a2:f2:c6: 8c:b1:63:35:a9:7e:67:41:64:d7:8b:87:96:04:a2:00:ad:9c: 78:88:b8:ef:b0:27:34:f7:34:9d:90:5b:c9:e2:63:9f:85:e9: 3b:81:b4:9c:aa:81:b6:a4:37:37:cb:d1:cc:9b:2e:19:05:ab: 41:c2:38:51:86:bb:05:4b:52:e6:f8:aa:f7:82:2f:79:46:77: 02:e0:37:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCLfJ8/UfKrGed0DdLwKsWyCMsTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMDM0WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjk3ODQ2NjczMDc5MDMzZTgyNjc1NjFlODJiNmMwNzMy MWQ3MGFmN2QwNzdiMDkxZDJiMThjNzU0NjcxOGM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqju0fatJ7Je+EBM/TBJWekYqrdGYQeW89NL18xPRzcTwz 6aIuh5FkFQxSqWvDAlMqQIzXNWraWnEHvIHxe69nhR5JANrfxLpS7eIqL8qbcLbV NN1tXb+N5+iU4YvcMLuajk3wDPmy5ILXPfKL9TDwtmt/9ddfsHH1PKcuklkr2Ya/ pf16QujKqh8BvJwAyi/ESqiKizJERR906c1w7O6HUzQequx3fYzNsTsvX5pYtIIW zcy1PxWd5lQ4O1B4JxbKUtk9O+4MGFnSoo4+vkZUZL6ktw4BSa2IUl2qmpiqfavr 7NA32/xw/G0qU4m0feFAjMH+d/Qv4r0zqD2dN1FNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxqT2H4QDGYgAAtQEDg5hLSv89d8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4NjEyODI1LTM5YmEtNDQ2YS1hNjQ1LTI3ZDllZjYxZmUyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGNGAwDQYJKoZIhvcNAQELBQADggEBAKPPELEMtFvaBYExY6/bzplfckTg zjmJmRd2CxhekDOrVLO7b8AbOgpJ0X85PnRQ9OwTVgajfccwI6uKY7YIl6bF9Mr4 aeyFfh2U+OTsVSlDpQa1EtdRvvNvzaWYBDOpXMQPZFMQ2f8mjb91fLuUiVdAk+ZG bzYBWwAnWQmoPhxvauftq4fTHQH7rGCT2q4u5bqg6XfH70LX8IPpDyN3wJz2jj40 9gamNUSA6I6/JhnAh6LyxoyxYzWpfmdBZNeLh5YEogCtnHiIuO+wJzT3NJ2QW8ni Y5+F6TuBtJyqgbakNzfL0cybLhkFq0HCOFGGuwVLUub4qveCL3lGdwLgN4k= -----END CERTIFICATE-----Generated at Thu Jul 3 10:23:01 2025 by rpki-client