$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1211eab-13c0-41aa-a262-29dfa67debc7.roa File: c1211eab-13c0-41aa-a262-29dfa67debc7.roa (raw, json) Hash identifier: uP+KIRHQVhegwsB5JHzrLae3I56BOnpDWTGLPlLto8Y= Subject key identifier: 1D:A5:4B:A2:AB:09:9A:23:D7:25:42:C5:AF:A6:3E:BA:AA:FD:01:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DB7DDEAD3BD21BF74320D449BC2BD63F5BCA38D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1211eab-13c0-41aa-a262-29dfa67debc7.roa Signing time: Fri 27 Jun 2025 00:30:53 +0000 ROA not before: Fri 27 Jun 2025 00:30:53 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.216.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:dd:ea:d3:bd:21:bf:74:32:0d:44:9b:c2:bd:63:f5:bc:a3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:30:53 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=8d4e9109976ea52b563ee03aca53d2ef5d96e4cb515221e214a69308e2944f1b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:e6:fb:d7:ac:d5:1e:0d:40:04:4b:0c:7d: 42:89:e4:9b:91:4d:08:3d:7f:65:a3:22:09:af:12: af:f6:5a:cb:66:3f:1e:91:ec:90:1a:b0:05:98:35: bc:01:6b:a8:98:9c:96:20:fd:8c:56:a0:6f:9f:9f: a8:1b:cf:68:a3:b3:30:1e:64:e8:f6:c5:e4:47:9e: 07:68:63:40:57:e8:93:cb:27:c2:85:46:fb:00:8a: 64:59:68:7c:28:a2:bb:77:4a:22:96:a7:69:ee:cd: b3:50:9c:8d:0c:9f:0f:a3:fd:83:47:63:d3:88:09: 98:c8:81:48:42:76:0f:7c:35:b0:25:cb:b0:d2:bb: b8:7d:d1:da:37:3c:7e:2e:41:2b:9b:61:91:a2:26: c0:9f:25:05:fc:cd:3c:43:b7:ef:9a:c2:d2:19:62: 54:65:a9:f7:4b:10:91:3d:92:10:a9:06:8f:d9:93: 76:c0:37:d0:de:4d:4a:50:00:be:b5:ac:a1:ee:b7: 8f:12:11:d1:c9:30:12:6a:2d:48:80:db:5a:5e:ca: 27:ab:00:7c:f5:02:09:1f:f2:8e:be:62:9a:7d:1b: 9b:d0:d6:3f:c0:df:12:1a:3a:68:9d:94:83:31:4e: 36:69:cd:29:a1:e3:bd:1d:69:a0:d9:81:fa:99:97: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A5:4B:A2:AB:09:9A:23:D7:25:42:C5:AF:A6:3E:BA:AA:FD:01:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1211eab-13c0-41aa-a262-29dfa67debc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.216.196.0/22 Signature Algorithm: sha256WithRSAEncryption 42:94:b5:a2:0b:55:56:7b:8f:67:75:be:93:9d:ff:f9:52:a3: 2b:e7:c8:78:64:24:9b:4e:15:5a:d7:bb:e7:fa:35:f1:02:28: 80:c0:6b:34:43:c0:25:f9:0a:b7:a5:ea:a0:c2:c2:6c:2b:57: a4:b3:c2:6a:93:18:d6:4d:b5:f5:74:0d:48:1b:d5:f2:fc:40: b1:ad:35:22:0a:72:78:e1:08:05:09:02:ca:0c:c4:b8:04:b0: 7e:e9:2c:a8:0b:ea:8d:6d:d2:bd:64:b5:ee:67:1a:d1:62:0d: f1:cc:b3:b8:5e:f0:29:ea:9d:91:6a:9b:5c:f4:1d:cb:fa:a2: 62:7c:39:48:e7:ed:43:a7:e3:da:03:dc:58:99:f5:22:42:f6: bb:65:df:43:4a:35:dd:3f:98:6c:b6:84:80:e7:9b:a6:70:25: 07:2e:a8:55:fc:1e:dd:d2:f1:b1:f7:25:0b:9b:68:c0:b3:cc: 58:4e:6f:79:11:e0:bc:25:02:4c:f0:28:67:08:b4:c9:ce:fa: 00:bc:4a:0b:87:e9:25:0b:c8:be:d0:63:48:8f:69:71:6e:52: 7f:eb:9c:58:b8:83:0a:8c:6d:40:50:c5:ae:77:da:4f:62:38: 64:42:23:95:d1:18:a6:73:52:ff:65:1c:c6:13:20:90:c4:91: 24:85:46:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPbfd6tO9Ib90Mg1Em8K9Y/W8o40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAzMDUzWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDRlOTEwOTk3NmVhNTJiNTYzZWUwM2FjYTUzZDJlZjVk OTZlNGNiNTE1MjIxZTIxNGE2OTMwOGUyOTQ0ZjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbEOb716zVHg1ABEsMfUKJ5JuRTQg9f2WjIgmvEq/2Wstm Px6R7JAasAWYNbwBa6iYnJYg/YxWoG+fn6gbz2ijszAeZOj2xeRHngdoY0BX6JPL J8KFRvsAimRZaHwoort3SiKWp2nuzbNQnI0Mnw+j/YNHY9OICZjIgUhCdg98NbAl y7DSu7h90do3PH4uQSubYZGiJsCfJQX8zTxDt++awtIZYlRlqfdLEJE9khCpBo/Z k3bAN9DeTUpQAL61rKHut48SEdHJMBJqLUiA21peyierAHz1Agkf8o6+Ypp9G5vQ 1j/A3xIaOmidlIMxTjZpzSmh470daaDZgfqZl7FRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHaVLoqsJmiPXJULFr6Y+uqr9AUswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxMjExZWFiLTEzYzAtNDFhYS1hMjYyLTI5ZGZhNjdkZWJjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs2MQwDQYJKoZIhvcNAQELBQADggEBAEKUtaILVVZ7j2d1vpOd//lSoyvn yHhkJJtOFVrXu+f6NfECKIDAazRDwCX5Crel6qDCwmwrV6SzwmqTGNZNtfV0DUgb 1fL8QLGtNSIKcnjhCAUJAsoMxLgEsH7pLKgL6o1t0r1kte5nGtFiDfHMs7he8Cnq nZFqm1z0Hcv6omJ8OUjn7UOn49oD3FiZ9SJC9rtl30NKNd0/mGy2hIDnm6ZwJQcu qFX8Ht3S8bH3JQubaMCzzFhOb3kR4LwlAkzwKGcItMnO+gC8SguH6SULyL7QY0iP aXFuUn/rnFi4gwqMbUBQxa532k9iOGRCI5XRGKZzUv9lHMYTIJDEkSSFRuc= -----END CERTIFICATE-----Generated at Sun Jun 29 21:08:25 2025 by rpki-client