$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa File: b50e29db-8ea8-465e-b77b-6bb4903e7932.roa (raw, json) Hash identifier: BmZbHu26D5jXHXmsi0NJv2MguE16sEiPOcfyZ2kElHE= Subject key identifier: ED:68:F8:56:21:32:84:4A:96:3D:D3:D6:DF:7C:1D:5B:FB:C4:00:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B728154C85FA1E9F3391B01EAF23E73E6E9C169 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa Signing time: Tue 05 Aug 2025 00:30:30 +0000 ROA not before: Tue 05 Aug 2025 00:30:30 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:72:81:54:c8:5f:a1:e9:f3:39:1b:01:ea:f2:3e:73:e6:e9:c1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:30:30 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=dbecf5f9933279071ce1b2cee532fe48fd54b958746fa7d49ad3b82a2637cbf2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:87:19:cf:10:fe:8a:48:ad:94:60:7c:77:2e: af:92:bd:ea:5c:c4:e1:f6:9a:1f:e5:00:d1:8f:cc: db:4b:09:d0:78:04:53:c7:e6:55:df:04:22:34:4a: cc:6d:73:02:48:eb:70:d1:d4:3b:49:5f:a2:f3:bd: 8f:7d:a7:b4:9b:a3:a7:73:4d:3a:e1:e8:e9:f7:e9: 64:f0:3e:e7:ff:1f:a7:08:73:f8:8f:4c:52:c9:a4: 47:22:42:c0:c1:cc:4b:26:81:e4:d2:8c:8a:8a:86: 74:e0:ac:50:c2:dc:0f:3f:a4:34:56:75:28:bd:98: 06:f8:4f:b2:4e:71:69:c0:e8:fd:5c:73:0a:f4:af: 7c:58:91:d2:28:9c:35:15:4c:2f:d5:da:f0:78:e4: a7:aa:28:12:38:b9:02:fe:b1:e2:a1:c6:74:93:ba: 4a:9d:0a:14:62:41:86:1a:a2:b4:61:89:90:5d:79: 3d:5b:06:13:c6:97:3e:0e:14:b5:23:df:69:36:84: f9:85:5c:d5:0b:54:68:be:c5:21:70:89:91:03:85: 2b:f3:4c:08:94:88:30:be:76:a6:50:d4:cf:bc:14: 57:97:da:f2:05:93:27:a0:b9:36:2a:cb:96:86:02: eb:6c:b2:18:1f:4f:d4:38:1e:da:f5:20:59:b8:c9: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:F8:56:21:32:84:4A:96:3D:D3:D6:DF:7C:1D:5B:FB:C4:00:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:33:5d:fd:0f:b4:76:7c:65:45:2e:8c:66:70:61:e5:fb:0c: 8f:63:12:9a:d1:b3:09:92:d0:6d:ff:98:84:b2:be:25:a5:6a: 4d:ae:61:11:7f:db:8a:ac:2a:0e:9a:cc:50:d9:fb:e0:25:6c: 76:5b:0d:b2:6e:54:7d:be:ff:48:77:37:ec:93:11:33:89:00: 2c:34:50:9f:f8:28:f0:47:08:1a:c8:41:da:cc:75:f7:a7:3a: d5:99:40:1c:d2:4f:0b:eb:a2:e4:e4:7b:d5:a8:8d:a9:47:e3: 5b:04:e6:c2:e6:ed:db:dd:ba:0b:af:d7:72:a0:6a:d6:f4:78: 2e:84:3d:3a:a4:2f:78:8e:72:79:9f:02:68:05:11:0a:1e:bb: 5c:90:c6:41:6a:60:48:6e:59:76:70:87:06:d7:fa:86:29:b6: bb:d7:68:96:a7:0c:19:f3:67:b7:4f:a5:39:ec:a6:08:70:51: f6:37:e2:7c:29:5a:30:00:13:9c:e1:03:cc:15:24:bf:6a:23: 63:78:53:05:91:1e:82:14:9c:10:b7:cd:1a:e3:5b:ca:21:05: 90:22:09:ee:9b:04:ab:9c:d2:56:f2:5f:c1:11:3b:fb:3d:f8: 1f:13:77:a6:90:be:02:22:94:6a:b1:b8:55:48:0c:23:4d:78: ad:d2:bf:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUG3KBVMhfoenzORsB6vI+c+bpwWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAzMDMwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmVjZjVmOTkzMzI3OTA3MWNlMWIyY2VlNTMyZmU0OGZk NTRiOTU4NzQ2ZmE3ZDQ5YWQzYjgyYTI2MzdjYmYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhhxnPEP6KSK2UYHx3Lq+SvepcxOH2mh/lANGPzNtLCdB4 BFPH5lXfBCI0SsxtcwJI63DR1DtJX6LzvY99p7Sbo6dzTTrh6On36WTwPuf/H6cI c/iPTFLJpEciQsDBzEsmgeTSjIqKhnTgrFDC3A8/pDRWdSi9mAb4T7JOcWnA6P1c cwr0r3xYkdIonDUVTC/V2vB45KeqKBI4uQL+seKhxnSTukqdChRiQYYaorRhiZBd eT1bBhPGlz4OFLUj32k2hPmFXNULVGi+xSFwiZEDhSvzTAiUiDC+dqZQ1M+8FFeX 2vIFkyeguTYqy5aGAutsshgfT9Q4Htr1IFm4ycEtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7Wj4ViEyhEqWPdPW33wdW/vEAAAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MGUyOWRiLThlYTgtNDY1ZS1iNzdiLTZiYjQ5MDNlNzkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA41zANBgkqhkiG9w0BAQsFAAOCAQEAJjNd/Q+0dnxlRS6MZnBh5fsMj2MS mtGzCZLQbf+YhLK+JaVqTa5hEX/biqwqDprMUNn74CVsdlsNsm5Ufb7/SHc37JMR M4kALDRQn/go8EcIGshB2sx196c61ZlAHNJPC+ui5OR71aiNqUfjWwTmwubt2926 C6/XcqBq1vR4LoQ9OqQveI5yeZ8CaAURCh67XJDGQWpgSG5ZdnCHBtf6him2u9do lqcMGfNnt0+lOeymCHBR9jfifClaMAATnOEDzBUkv2ojY3hTBZEeghScELfNGuNb yiEFkCIJ7psEq5zSVvJfwRE7+z34HxN3ppC+AiKUarG4VUgMI014rdK/FA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:43 2025 by rpki-client