$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa File: c9379183-2f78-494b-8d27-201a280c0f46.roa (raw, json) Hash identifier: ABlDcU43njyZK28QDnWZMj3hMmfgj/auagByL3yO2lw= Subject key identifier: 7F:A6:99:DB:EF:1F:56:B1:8D:7A:E3:38:36:BE:2B:68:1F:C7:3B:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1552699C842B51D6BEF076E526633C0F77093D17 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa Signing time: Mon 23 Jun 2025 15:00:40 +0000 ROA not before: Mon 23 Jun 2025 15:00:40 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:52:69:9c:84:2b:51:d6:be:f0:76:e5:26:63:3c:0f:77:09:3d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:00:40 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=05c26cfbb0e259b885bc4fe903c49167fb3b0573edbb031ec1cca564c6fa608d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:7e:7a:b5:6d:17:04:8c:78:8d:74:53:28: 72:76:4b:f1:02:2a:e5:0e:8a:fc:fb:ae:5f:2a:43: 3f:84:8f:90:73:73:c9:04:1c:5b:aa:f5:79:f1:ee: f5:2a:8b:a6:50:cb:41:47:9f:b0:df:4e:21:79:f0: b7:40:09:eb:ac:b5:41:4d:6e:fe:1f:30:41:89:5f: 28:ad:48:8a:3c:c8:22:90:7b:ef:c4:85:c2:16:9d: 84:5b:11:57:c6:f6:2d:ba:8f:a5:e1:c4:ad:84:8b: 97:e5:07:31:21:77:12:9a:af:03:1e:f7:9f:6f:a5: 37:2d:67:2c:89:6a:86:be:7a:15:27:da:46:a9:05: 44:ea:b0:4f:1e:a7:67:ca:9b:ed:a3:4d:c7:d1:3d: 5b:61:af:cd:66:44:7f:6a:0a:73:56:d1:81:77:47: 86:f9:80:e4:06:44:af:40:3b:dc:0a:0d:0e:74:ad: 2b:5e:d2:7e:81:a2:e8:d6:75:4f:7c:26:f9:48:4a: f0:e2:19:33:9c:4a:30:8c:5e:6f:1e:0b:f3:c8:9f: 31:8c:bc:0d:60:94:75:32:d6:41:ff:46:61:1a:41: d1:a6:e4:cc:d2:0c:7e:41:d1:88:23:d7:c7:cb:09: 35:33:88:e0:b0:5b:09:ab:d2:da:3b:ee:8c:88:0a: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A6:99:DB:EF:1F:56:B1:8D:7A:E3:38:36:BE:2B:68:1F:C7:3B:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.127.128.0/17 Signature Algorithm: sha256WithRSAEncryption b8:29:5a:8e:ff:c9:cc:dd:8b:fe:03:ac:19:da:cd:31:86:44: c7:69:6b:85:20:47:de:7b:d8:2b:16:e6:82:1f:1f:09:15:30: 36:52:24:e8:02:c6:76:e7:73:22:0d:58:46:fd:03:b9:44:0a: 69:f1:b1:1d:b9:77:f6:ec:53:30:70:f5:2e:99:55:e8:5b:a8: 52:30:18:d7:84:d6:7a:ca:22:dc:6c:97:ca:79:49:02:ec:60: 5f:9c:62:76:01:84:4e:06:3d:a0:aa:39:65:db:aa:3d:46:44: 18:86:63:93:25:20:9b:96:c1:06:13:b6:f1:49:bd:83:e8:ee: f8:47:ba:da:34:71:e9:90:97:e9:02:bb:ce:b4:39:36:90:3d: 68:0c:fc:c8:2d:85:12:9a:c1:ec:3f:33:fb:47:d4:1d:9b:d8: 46:0a:7f:5f:39:77:fd:db:54:6b:de:22:2d:57:0e:67:6a:ec: b4:9b:1d:fc:49:46:a7:ab:5d:02:2b:29:32:c4:4b:a7:fe:fd: fa:b2:16:25:cc:39:c5:55:05:6f:48:1a:95:98:69:c6:93:a9: f4:15:1a:c0:24:c7:c7:5d:59:07:bd:79:30:71:1f:85:05:43: b3:28:62:cc:8f:20:94:55:58:71:e7:69:78:92:3b:86:0c:36: 49:bd:78:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFVJpnIQrUda+8HblJmM8D3cJPRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUwMDQwWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWMyNmNmYmIwZTI1OWI4ODViYzRmZTkwM2M0OTE2N2Zi M2IwNTczZWRiYjAzMWVjMWNjYTU2NGM2ZmE2MDhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+rn56tW0XBIx4jXRTKHJ2S/ECKuUOivz7rl8qQz+Ej5Bz c8kEHFuq9Xnx7vUqi6ZQy0FHn7DfTiF58LdACeustUFNbv4fMEGJXyitSIo8yCKQ e+/EhcIWnYRbEVfG9i26j6XhxK2Ei5flBzEhdxKarwMe959vpTctZyyJaoa+ehUn 2kapBUTqsE8ep2fKm+2jTcfRPVthr81mRH9qCnNW0YF3R4b5gOQGRK9AO9wKDQ50 rSte0n6BoujWdU98JvlISvDiGTOcSjCMXm8eC/PInzGMvA1glHUy1kH/RmEaQdGm 5MzSDH5B0Ygj18fLCTUziOCwWwmr0to77oyICvlPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf6aZ2+8fVrGNeuM4Nr4raB/HOxowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5Mzc5MTgzLTJmNzgtNDk0Yi04ZDI3LTIwMWEyODBjMGY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfPf4AwDQYJKoZIhvcNAQELBQADggEBALgpWo7/yczdi/4DrBnazTGGRMdp a4UgR9572CsW5oIfHwkVMDZSJOgCxnbncyINWEb9A7lECmnxsR25d/bsUzBw9S6Z VehbqFIwGNeE1nrKItxsl8p5SQLsYF+cYnYBhE4GPaCqOWXbqj1GRBiGY5MlIJuW wQYTtvFJvYPo7vhHuto0cemQl+kCu860OTaQPWgM/MgthRKawew/M/tH1B2b2EYK f185d/3bVGveIi1XDmdq7LSbHfxJRqerXQIrKTLES6f+/fqyFiXMOcVVBW9IGpWY acaTqfQVGsAkx8ddWQe9eTBxH4UFQ7MoYsyPIJRVWHHnaXiSO4YMNkm9eEs= -----END CERTIFICATE-----Generated at Mon Jun 30 21:46:41 2025 by rpki-client