$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e893d247-a871-4625-a1dc-d362c9082fa4.roa File: e893d247-a871-4625-a1dc-d362c9082fa4.roa (raw, json) Hash identifier: fYsN4bjZM11nkbuX9mIUfk8L6PP8O978RF3ACvqRreA= Subject key identifier: 75:2D:E0:DF:1F:1A:5B:BA:81:16:24:C7:EC:7B:58:44:A2:FC:50:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01670623C5185994FD37CD304C17D81B0FE2F2D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e893d247-a871-4625-a1dc-d362c9082fa4.roa Signing time: Tue 24 Jun 2025 00:41:34 +0000 ROA not before: Tue 24 Jun 2025 00:41:34 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 93.78.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:67:06:23:c5:18:59:94:fd:37:cd:30:4c:17:d8:1b:0f:e2:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:41:34 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=ae2eca124fa094fb80944aef060035b0661d15cb714820ea1b0f34c9468a772c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:08:19:3b:c5:7f:f4:7a:ce:72:79:a6:29: 21:df:16:c3:90:3c:2d:f1:5e:58:48:3f:81:2a:3e: 67:5a:f9:be:e9:b0:83:a1:0e:0c:37:bb:30:de:2f: a2:3b:3e:5a:c2:b0:00:76:ee:f5:9b:69:86:7a:db: 13:1b:26:63:33:a4:84:c2:66:35:7f:49:91:af:37: 9a:3b:b7:0c:72:a7:bd:76:70:53:e1:c1:6f:c7:3b: 51:9e:e8:d4:65:ab:25:a7:30:d0:e8:55:0b:2a:b2: 80:5c:de:2d:6e:fa:dd:66:48:04:e0:f2:cb:fa:03: da:de:70:ba:08:72:1c:ec:4c:5f:05:23:88:57:40: e4:cf:18:74:ad:8f:5a:c6:f2:c0:78:0f:66:01:a5: 83:e7:89:20:01:b1:89:68:b5:55:cd:8f:a3:9e:7f: 6e:d1:90:37:ba:1a:eb:66:7f:96:6c:d0:27:c2:b3: c5:3e:16:df:32:1d:13:8e:3d:59:63:61:25:75:63: 96:5e:70:68:76:eb:62:4b:d5:e2:bd:82:8c:24:57: 93:cc:f4:7f:92:d8:78:3a:bd:bf:b1:39:d6:56:09: ef:a0:4e:ef:bb:f0:5d:6d:35:ca:ca:37:fa:ee:d5: b6:2e:87:bd:b0:59:1b:20:a0:0a:97:4f:3d:df:02: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:E0:DF:1F:1A:5B:BA:81:16:24:C7:EC:7B:58:44:A2:FC:50:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e893d247-a871-4625-a1dc-d362c9082fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.78.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:af:ac:0f:e9:8a:56:b9:82:28:a5:10:42:bb:e4:53:83:e0: e1:69:71:da:74:bb:96:20:c3:47:94:5b:15:86:6c:c0:2c:3c: c8:2c:f0:b7:25:7a:a4:74:bd:89:ab:7c:38:67:28:40:0b:64: a3:33:75:5e:bf:98:a3:2b:0a:43:10:4c:5d:9b:4a:0e:d5:fe: 57:54:55:07:a6:c1:e7:c4:a8:af:d6:bd:68:24:b6:14:43:68: e8:58:37:df:41:f8:d7:f7:ad:eb:c0:ab:f2:44:f6:41:c5:64: e6:37:f5:f1:18:75:76:59:7c:f9:79:e7:f7:e3:be:67:bf:6c: 79:99:b6:e6:e7:fe:06:2d:68:0a:4e:8d:98:2f:a2:96:39:20: 9d:ea:b6:66:2a:54:e2:bd:65:6a:fc:5e:6b:31:8d:07:26:c9: 22:b5:a2:05:b4:2c:f7:98:1c:3f:19:1e:15:21:85:56:74:3f: 82:38:81:cb:fe:2d:ce:c9:ce:17:37:f5:02:e0:f0:87:f8:69: e7:16:49:73:bd:15:69:7b:af:f3:11:6b:7b:b5:ab:df:4a:e2: ac:1f:41:a9:81:4f:e4:f1:d3:41:51:ca:5d:c9:2c:ef:49:6c: 3b:31:b6:8b:d2:69:df:46:91:50:68:88:9d:48:47:b1:11:3a: 05:e9:e9:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAWcGI8UYWZT9N80wTBfYGw/i8tgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDA0MTM0WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTJlY2ExMjRmYTA5NGZiODA5NDRhZWYwNjAwMzViMDY2 MWQxNWNiNzE0ODIwZWExYjBmMzRjOTQ2OGE3NzJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEkQgZO8V/9HrOcnmmKSHfFsOQPC3xXlhIP4EqPmda+b7p sIOhDgw3uzDeL6I7PlrCsAB27vWbaYZ62xMbJmMzpITCZjV/SZGvN5o7twxyp712 cFPhwW/HO1Ge6NRlqyWnMNDoVQsqsoBc3i1u+t1mSATg8sv6A9recLoIchzsTF8F I4hXQOTPGHStj1rG8sB4D2YBpYPniSABsYlotVXNj6Oef27RkDe6Gutmf5Zs0CfC s8U+Ft8yHROOPVljYSV1Y5ZecGh262JL1eK9gowkV5PM9H+S2Hg6vb+xOdZWCe+g Tu+78F1tNcrKN/ru1bYuh72wWRsgoAqXTz3fAuhBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdS3g3x8aW7qBFiTH7HtYRKL8UH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4OTNkMjQ3LWE4NzEtNDYyNS1hMWRjLWQzNjJjOTA4MmZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAddTgAwDQYJKoZIhvcNAQELBQADggEBAB2vrA/pila5giilEEK75FOD4OFp cdp0u5Ygw0eUWxWGbMAsPMgs8LcleqR0vYmrfDhnKEALZKMzdV6/mKMrCkMQTF2b Sg7V/ldUVQemwefEqK/WvWgkthRDaOhYN99B+Nf3revAq/JE9kHFZOY39fEYdXZZ fPl55/fjvme/bHmZtubn/gYtaApOjZgvopY5IJ3qtmYqVOK9ZWr8XmsxjQcmySK1 ogW0LPeYHD8ZHhUhhVZ0P4I4gcv+Lc7Jzhc39QLg8If4aecWSXO9FWl7r/MRa3u1 q99K4qwfQamBT+Tx00FRyl3JLO9JbDsxtovSad9GkVBoiJ1IR7EROgXp6ZM= -----END CERTIFICATE-----Generated at Wed Jul 2 15:36:29 2025 by rpki-client