$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa File: c08fc396-5601-4f07-8925-a04dd514252b.roa (raw, json) Hash identifier: Y8gvdCjIX7/2kukKNzdKS/RKisxKEZ3mOd6W2ZoGoJc= Subject key identifier: 08:B4:83:D9:E1:C2:E3:50:7D:AB:4A:E3:8C:9F:E7:71:D0:4D:41:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11416AB9DEB4067D4B8FB571B1275214F4FEDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa Signing time: Sat 14 Jun 2025 00:11:06 +0000 ROA not before: Sat 14 Jun 2025 00:11:06 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:41:6a:b9:de:b4:06:7d:4b:8f:b5:71:b1:27:52:14:f4:fe:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:11:06 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=74d0029c2890a591b847e0d83d80b2166fb7af52a431b6c45bc73ed9268fefbf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:1e:18:db:1f:2b:8a:d3:2e:c5:cf:1b:4e: 1a:60:07:90:ea:91:d9:41:b9:01:e5:e8:7a:98:40: 36:9a:2a:09:c2:25:61:33:ff:b6:97:4d:da:f7:ab: 08:e3:33:a8:dd:7a:6b:50:d5:f7:ac:8d:c2:91:d1: 18:a9:e6:61:46:62:db:2f:64:4a:49:7d:01:a2:b5: ef:73:c8:b9:4e:de:a4:00:f2:62:f7:0e:08:c4:d3: df:13:b5:53:ab:f4:13:b2:15:30:cf:28:95:c8:14: ae:11:bd:e0:b8:c3:d4:20:fb:98:5e:88:5c:6f:41: a0:64:72:07:f8:88:9d:ab:99:f8:fa:66:f4:2a:83: 34:9a:dd:60:ed:8f:a4:74:66:4b:da:bd:a7:d0:72: f7:a8:73:a1:58:96:1f:41:45:04:10:71:8a:e9:60: 24:fb:ee:38:cf:d4:a3:ec:0d:df:82:6d:4d:a2:a4: a2:44:e9:8b:92:d3:a5:8a:49:de:6b:12:f7:26:42: 31:2a:2f:f1:21:8f:d1:b0:21:f3:01:dc:d3:a3:4c: 80:21:eb:e3:ae:4f:18:3c:39:57:37:01:4f:12:d4: ba:60:ba:c5:1e:c5:8d:78:d9:23:59:a5:c1:62:57: 1f:47:13:62:0b:31:19:5c:84:fc:63:3f:39:2d:ce: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B4:83:D9:E1:C2:E3:50:7D:AB:4A:E3:8C:9F:E7:71:D0:4D:41:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.27.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5b:78:ed:91:af:18:cf:b8:00:58:c5:93:16:eb:97:38:b2: d4:ef:cd:75:97:56:bb:13:67:35:aa:c4:68:69:fb:66:e9:da: b3:4e:7e:aa:b5:c3:36:b2:cb:b9:30:d3:1b:bc:82:a2:35:5c: 9e:a4:e5:41:65:99:2c:c1:44:89:98:27:20:15:31:1d:9d:91: 7a:9f:84:1a:95:bd:0c:78:c7:06:1d:0c:4d:87:79:08:fe:8e: f3:35:2f:db:b1:b7:32:13:4f:9a:c0:a0:00:28:aa:34:ab:09: 85:17:0b:11:b6:3d:d8:ef:3b:8c:43:68:33:36:6c:60:77:ab: 27:95:4e:c3:11:fe:81:bc:6e:05:24:3c:bd:48:be:03:ee:48: 29:be:a8:dd:fa:3c:4b:ef:d8:a2:b0:e9:d6:f5:19:ff:c2:8a: eb:e1:37:4a:7d:86:45:7b:be:5c:91:92:a7:67:73:cb:db:53: b3:b1:51:8f:b6:9b:a3:9a:68:99:0c:53:d6:6d:fe:8f:8e:d3: 3e:e0:3e:46:49:35:e9:c2:1b:81:80:87:14:21:ae:56:b0:67: 12:7c:f4:c7:61:2d:67:00:e0:5e:96:33:d1:4b:d2:e9:e6:fb: a1:bc:99:28:15:ca:93:f1:55:2f:5b:3b:4b:37:fb:df:6a:c3: 41:17:48:f2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITEUFqud60Bn1Lj7VxsSdSFPT+2zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA2MTQwMDExMDZaFw0yNTA3MTkyMzU5NTla MHoxSTBHBgNVBAUTQDc0ZDAwMjljMjg5MGE1OTFiODQ3ZTBkODNkODBiMjE2NmZi N2FmNTJhNDMxYjZjNDViYzczZWQ5MjY4ZmVmYmYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALhZHhjbHyuK0y7FzxtOGmAHkOqR2UG5AeXoephANpoqCcIl YTP/tpdN2verCOMzqN16a1DV96yNwpHRGKnmYUZi2y9kSkl9AaK173PIuU7epADy YvcOCMTT3xO1U6v0E7IVMM8olcgUrhG94LjD1CD7mF6IXG9BoGRyB/iInauZ+Ppm 9CqDNJrdYO2PpHRmS9q9p9By96hzoViWH0FFBBBxiulgJPvuOM/Uo+wN34JtTaKk okTpi5LTpYpJ3msS9yZCMSov8SGP0bAh8wHc06NMgCHr465PGDw5VzcBTxLUumC6 xR7FjXjZI1mlwWJXH0cTYgsxGVyE/GM/OS3OzdMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQItIPZ4cLjUH2rSuOMn+dx0E1BJDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYzA4ZmMzOTYtNTYwMS00ZjA3LTg5MjUtYTA0ZGQ1MTQyNTJiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG7vGzANBgkqhkiG9w0BAQsFAAOCAQEAP1t47ZGvGM+4AFjFkxbrlziy1O/N dZdWuxNnNarEaGn7Zunas05+qrXDNrLLuTDTG7yCojVcnqTlQWWZLMFEiZgnIBUx HZ2Rep+EGpW9DHjHBh0MTYd5CP6O8zUv27G3MhNPmsCgACiqNKsJhRcLEbY92O87 jENoMzZsYHerJ5VOwxH+gbxuBSQ8vUi+A+5IKb6o3fo8S+/YorDp1vUZ/8KK6+E3 Sn2GRXu+XJGSp2dzy9tTs7FRj7abo5pomQxT1m3+j47TPuA+Rkk16cIbgYCHFCGu VrBnEnz0x2EtZwDgXpYz0UvS6eb7obyZKBXKk/FVL1s7Szf732rDQRdI8g== -----END CERTIFICATE-----Generated at Wed Jul 2 16:19:41 2025 by rpki-client