$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa File: 8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa (raw, json) Hash identifier: FT3pKH0ssS7AEn8whrXeGf5Q3DBYFDbXJ6QiSAFbepY= Subject key identifier: 6A:96:05:4B:29:79:50:58:3E:49:BA:26:5E:54:73:6F:18:E0:3C:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32E3E73BC331783E5CAA299E3AFCE1F60B51F352 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa Signing time: Sat 21 Jun 2025 00:01:47 +0000 ROA not before: Sat 21 Jun 2025 00:01:47 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:e7:3b:c3:31:78:3e:5c:aa:29:9e:3a:fc:e1:f6:0b:51:f3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:01:47 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=b8e63335bdc775fed3d27004aef42532ada84629bf5e3a87c12d1cca0074f98a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:a0:e7:87:a8:22:3e:42:e7:06:3a:29:d6: 98:1b:c4:f5:77:7d:91:0d:c7:0f:53:95:92:d2:c5: ac:92:c7:91:bd:79:f8:6a:ed:7a:f2:7d:4d:34:b0: 9e:64:44:3c:ae:cd:f2:32:7c:e9:ac:b1:08:30:10: 5a:ef:90:01:9b:16:cf:66:00:e2:57:f1:ce:5c:a0: 50:90:4a:0d:a7:33:99:19:49:be:7e:c8:e8:a7:21: 3b:e3:ad:7a:31:10:db:28:a4:30:1d:c0:2a:4d:c2: 7f:b3:76:15:bd:57:96:da:19:4f:3d:7a:6d:0a:72: 6b:52:62:3a:03:4b:c0:49:a6:ad:c1:ee:a9:17:e6: 6c:f5:76:6d:3c:27:7f:f1:22:63:54:89:09:ac:df: 99:b8:dd:7f:ca:1b:58:b8:9b:34:81:b7:3a:11:66: 6d:71:57:a9:a3:91:a1:3f:ab:6e:f7:28:17:ea:1d: 81:8a:eb:6d:14:2e:c6:09:49:05:95:0f:05:be:c2: 37:4d:0c:16:2d:c5:f8:06:bb:da:71:73:c7:a6:22: 1b:cc:bb:04:32:6f:bd:9a:3b:45:46:39:22:15:b1: 1d:91:77:50:a3:1c:ae:3d:f6:d7:a1:88:3f:f5:6b: f0:68:8a:7b:da:97:07:c0:8a:31:71:39:00:ad:48: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:05:4B:29:79:50:58:3E:49:BA:26:5E:54:73:6F:18:E0:3C:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:c6:e3:78:17:7e:fb:be:a9:6a:cb:30:48:4f:dd:69:18:c3: c8:64:de:d0:f1:f3:bc:bf:11:77:9f:c9:0e:05:57:dc:6f:3f: 92:d7:8c:be:f0:91:81:45:a3:89:b0:5d:1b:2c:bd:9d:de:3e: 29:67:23:d5:78:43:22:6c:1e:60:02:a1:6a:d2:b6:60:0c:b4: b0:50:25:6c:7f:f1:30:1b:71:4f:07:4a:5f:70:64:62:2b:3a: 11:e3:24:69:39:8c:2b:72:1e:1b:82:c2:e3:a5:66:2d:b3:e9: 08:ec:96:cc:8b:2c:d9:c3:6e:56:b6:b0:a0:85:b6:5b:84:18: 14:2b:8e:38:ee:2d:a7:5d:20:44:f1:01:df:7c:11:c8:c5:17: d9:3f:a6:aa:4e:48:2b:25:bc:cb:a1:d1:78:4d:09:27:97:2a: 38:34:c3:9e:4a:7b:e0:26:35:bb:3c:a8:a4:52:20:af:58:7b: ef:99:0e:1a:b5:2e:89:40:8e:60:48:99:47:6f:49:38:b2:a8: cf:dd:65:59:f5:6f:22:9e:26:75:b8:90:95:d2:30:bf:73:77: f2:ec:e3:bc:bf:5f:53:46:83:dc:1f:da:e0:c2:5e:98:88:5f: 4b:0f:93:f4:5d:83:3f:f2:4f:68:53:4e:46:bd:5e:97:c1:0b: 4f:2d:4f:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMuPnO8MxeD5cqimeOvzh9gtR81IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAwMTQ3WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGU2MzMzNWJkYzc3NWZlZDNkMjcwMDRhZWY0MjUzMmFk YTg0NjI5YmY1ZTNhODdjMTJkMWNjYTAwNzRmOThhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsLKDnh6giPkLnBjop1pgbxPV3fZENxw9TlZLSxaySx5G9 efhq7XryfU00sJ5kRDyuzfIyfOmssQgwEFrvkAGbFs9mAOJX8c5coFCQSg2nM5kZ Sb5+yOinITvjrXoxENsopDAdwCpNwn+zdhW9V5baGU89em0KcmtSYjoDS8BJpq3B 7qkX5mz1dm08J3/xImNUiQms35m43X/KG1i4mzSBtzoRZm1xV6mjkaE/q273KBfq HYGK620ULsYJSQWVDwW+wjdNDBYtxfgGu9pxc8emIhvMuwQyb72aO0VGOSIVsR2R d1CjHK499tehiD/1a/BoinvalwfAijFxOQCtSMyxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUapYFSyl5UFg+SbomXlRzbxjgPIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkN2I3ZTMwLTA1ZjYtNDM4OS05MWUyLWZkMWUwZWQyNmM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgDANBgkqhkiG9w0BAQsFAAOCAQEAesbjeBd++76passwSE/daRjDyGTe 0PHzvL8Rd5/JDgVX3G8/kteMvvCRgUWjibBdGyy9nd4+KWcj1XhDImweYAKhatK2 YAy0sFAlbH/xMBtxTwdKX3BkYis6EeMkaTmMK3IeG4LC46VmLbPpCOyWzIss2cNu VrawoIW2W4QYFCuOOO4tp10gRPEB33wRyMUX2T+mqk5IKyW8y6HReE0JJ5cqODTD nkp74CY1uzyopFIgr1h775kOGrUuiUCOYEiZR29JOLKoz91lWfVvIp4mdbiQldIw v3N38uzjvL9fU0aD3B/a4MJemIhfSw+T9F2DP/JPaFNORr1el8ELTy1PkQ== -----END CERTIFICATE-----Generated at Sun Jun 29 14:48:51 2025 by rpki-client