$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa File: e87e4908-56e8-4607-9eaa-66bc2b561735.roa (raw, json) Hash identifier: QrUyPA3tYyYGD85l+0btoNTrwKanTkJ8WzMZMC77SVc= Subject key identifier: D9:FA:F8:3F:1D:7E:43:CB:EC:21:31:4B:F6:8F:2A:07:FA:DA:15:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60B8BC292C41A2714584DA644B7D3ABD77D2BC4F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa Signing time: Wed 13 Aug 2025 00:50:44 +0000 ROA not before: Wed 13 Aug 2025 00:50:44 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b8:bc:29:2c:41:a2:71:45:84:da:64:4b:7d:3a:bd:77:d2:bc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:50:44 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=f05db5079a4d027a79cee38672b7e8ab8eb46afcdb0cf8755c53486f39e1674c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:c3:29:84:8b:f9:c1:2f:58:0b:ca:ce:58: 3a:28:fb:75:4f:3f:5d:2a:30:75:fa:07:3a:74:cc: aa:41:3e:b6:ec:0b:66:8b:06:18:e9:6b:1c:b0:09: 1a:19:f3:63:91:b8:28:31:d0:79:2f:82:78:e5:2a: 7f:d7:47:fa:30:2b:76:cb:21:66:53:6b:f6:17:18: 90:f0:00:ff:59:04:b2:61:e3:b6:8c:c4:4b:6f:2b: ac:9c:ea:65:0a:25:d8:21:96:6e:0a:c3:04:a0:01: 63:e9:49:e3:37:be:b4:e3:80:fe:fe:5a:c9:1b:11: d5:05:35:3a:76:42:a4:38:7d:5c:f7:c4:c2:3f:f2: 1d:52:0d:ae:50:1f:34:74:b9:9d:75:de:ab:26:bb: fc:8e:f3:22:d7:34:3b:67:22:ce:b1:e1:09:28:d1: 77:ba:38:3e:ce:fb:9d:0f:07:6b:4b:9a:03:18:cd: 02:33:ab:67:b9:88:f9:78:21:1e:ad:f6:ee:8c:e4: 5f:35:db:65:5a:8c:7c:48:45:24:02:88:16:36:0e: ca:bc:94:bf:c2:83:0c:c6:38:16:14:58:de:10:8e: 88:e4:0c:54:b1:5e:f2:40:77:32:64:65:ec:5a:59: d8:4d:bb:24:7c:2a:2d:d2:c2:3c:a3:97:26:23:fe: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:F8:3F:1D:7E:43:CB:EC:21:31:4B:F6:8F:2A:07:FA:DA:15:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.128.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:2b:01:95:98:b6:b1:76:9e:74:bf:1e:7d:e1:c3:a5:da:b9: da:62:dc:c6:80:46:b2:0e:c0:6e:d1:e8:3b:c7:6b:49:0a:99: 72:2f:48:6d:e4:c1:a1:a3:ee:02:db:7b:61:77:20:e0:4c:cd: a3:f5:39:c0:14:4b:4b:bf:c6:ee:ea:25:19:4a:c2:e5:58:95: 12:85:0b:4d:8b:1d:47:3e:2f:72:24:75:c9:68:f3:07:22:cc: 7d:aa:5c:bf:df:9d:4a:a9:0e:3d:b4:79:4a:7b:14:64:3d:18: ed:12:a8:31:f6:e1:56:23:74:f9:39:e4:91:e6:30:bb:09:aa: 18:46:a0:33:b9:46:1c:3f:81:49:6b:0e:e7:29:5b:bc:6f:ea: cc:8e:a5:6e:78:d6:b2:ab:4e:0a:9a:14:1c:c6:c7:e2:07:b6: f8:62:44:1a:aa:24:d1:ec:6d:c8:ae:1e:98:7d:7a:b9:60:bf: b9:32:68:99:57:22:43:57:15:72:90:43:8f:de:d1:04:cf:d5: bc:39:b8:20:3b:e5:fe:f6:27:48:82:f5:31:e2:47:0e:b2:73: 66:b9:b8:3c:38:22:34:21:e6:8d:39:aa:18:17:a7:86:02:2e: 5f:89:a2:d9:fb:04:df:b8:fe:9d:ae:48:59:5a:64:c8:57:9c: 68:ee:97:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYLi8KSxBonFFhNpkS306vXfSvE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDA1MDQ0WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDVkYjUwNzlhNGQwMjdhNzljZWUzODY3MmI3ZThhYjhl YjQ2YWZjZGIwY2Y4NzU1YzUzNDg2ZjM5ZTE2NzRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZdMMphIv5wS9YC8rOWDoo+3VPP10qMHX6Bzp0zKpBPrbs C2aLBhjpaxywCRoZ82ORuCgx0HkvgnjlKn/XR/owK3bLIWZTa/YXGJDwAP9ZBLJh 47aMxEtvK6yc6mUKJdghlm4KwwSgAWPpSeM3vrTjgP7+WskbEdUFNTp2QqQ4fVz3 xMI/8h1SDa5QHzR0uZ113qsmu/yO8yLXNDtnIs6x4Qko0Xe6OD7O+50PB2tLmgMY zQIzq2e5iPl4IR6t9u6M5F8122VajHxIRSQCiBY2Dsq8lL/CgwzGOBYUWN4Qjojk DFSxXvJAdzJkZexaWdhNuyR8Ki3SwjyjlyYj/vaHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2fr4Px1+Q8vsITFL9o8qB/raFawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4N2U0OTA4LTU2ZTgtNDYwNy05ZWFhLTY2YmMyYjU2MTczNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYAwDQYJKoZIhvcNAQELBQADggEBAJ8rAZWYtrF2nnS/Hn3hw6Xaudpi 3MaARrIOwG7R6DvHa0kKmXIvSG3kwaGj7gLbe2F3IOBMzaP1OcAUS0u/xu7qJRlK wuVYlRKFC02LHUc+L3Ikdclo8wcizH2qXL/fnUqpDj20eUp7FGQ9GO0SqDH24VYj dPk55JHmMLsJqhhGoDO5Rhw/gUlrDucpW7xv6syOpW541rKrTgqaFBzGx+IHtvhi RBqqJNHsbciuHph9erlgv7kyaJlXIkNXFXKQQ4/e0QTP1bw5uCA75f72J0iC9THi Rw6yc2a5uDw4IjQh5o05qhgXp4YCLl+Jotn7BN+4/p2uSFlaZMhXnGjul+c= -----END CERTIFICATE-----Generated at Sat Aug 23 09:09:50 2025 by rpki-client