$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa File: ebe39619-319e-458b-b84a-3d8a21095a66.roa (raw, json) Hash identifier: AFlEwrnIR7s6YvW2EWZvamDjOGT0sGi/QqQFlSeWg6A= Subject key identifier: 7F:AF:15:79:ED:9E:14:35:CE:3A:99:DD:5F:90:CD:47:0A:40:39:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36959C14CC74BC7DCAC14D73743224188418D80E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa Signing time: Tue 12 Aug 2025 00:50:27 +0000 ROA not before: Tue 12 Aug 2025 00:50:27 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:95:9c:14:cc:74:bc:7d:ca:c1:4d:73:74:32:24:18:84:18:d8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:50:27 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=9bcd44fedad9fe8f4d98acf7e2ce43f78e4fafc565cc596e807464fd4ac4b747, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:71:04:8d:42:53:d0:5a:e8:4c:09:75:c4: 55:73:06:a7:14:fb:bd:9b:b4:bc:96:c1:00:35:75: 8b:92:db:b5:8f:3f:73:e6:23:52:c9:4d:79:b2:91: b5:be:57:87:eb:e7:be:d8:df:e7:7f:f8:cc:81:e8: fa:bd:4a:03:bf:3e:04:aa:ae:3b:08:77:ba:b3:b2: 78:fd:51:37:d9:b8:17:2c:b4:81:67:7c:d2:d3:c5: 7f:35:58:99:38:b7:d6:d6:6a:7d:05:4d:df:3b:c6: 94:8f:c6:75:27:94:13:86:f4:fe:9b:02:30:e5:6a: 0b:55:d3:d2:82:95:01:5a:e7:68:af:e1:c0:96:21: cb:68:f0:e7:77:f6:66:47:17:c0:be:29:18:04:fe: 43:e7:ee:90:10:ae:f2:3b:06:27:c5:a9:1b:8e:0d: ad:71:f8:57:f2:96:4e:73:23:93:d8:86:54:eb:87: 7f:f3:d3:15:94:57:9b:65:69:9e:cd:db:a6:02:e5: 66:ad:ca:d7:2d:dc:3e:8f:2c:0f:b6:2e:e0:53:6c: 60:77:b8:94:64:d3:94:1f:eb:d8:a0:02:8c:47:91: 6e:56:b8:79:3c:4d:d5:bf:35:dc:15:8c:0f:74:f7: 01:35:b3:ad:4b:26:58:60:29:f5:4e:a7:cf:e1:c9: 88:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:15:79:ED:9E:14:35:CE:3A:99:DD:5F:90:CD:47:0A:40:39:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.143.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:1c:63:8d:c4:b0:ad:6c:0b:4b:3d:cd:40:86:19:6b:fb:48: ce:92:5e:dc:af:87:63:e1:a9:6f:c4:fd:59:84:11:b5:98:55: 16:2b:64:e0:15:7e:8f:db:3d:ed:1a:2a:69:81:12:de:a5:16: 38:ed:14:55:d9:f5:51:d5:b8:04:a3:9d:52:83:0b:c3:f6:47: 51:ae:83:0c:81:67:23:14:a2:78:32:e7:5f:4e:dc:33:f7:81: 67:69:20:ba:a5:ee:fe:cd:f6:30:37:cb:f8:c3:24:d5:b4:cf: 4e:6f:18:a0:93:a9:f2:2d:76:50:dd:5e:2a:9d:e6:6f:26:88: d7:0f:23:17:57:95:ff:77:fd:d1:7a:99:c1:4f:46:32:01:1e: 93:af:e2:72:46:36:4e:30:fb:56:d6:39:17:f9:00:cf:18:e9: 48:8b:88:44:ab:a8:08:69:a3:74:0c:83:1b:fe:20:ba:51:b7: 92:15:71:f0:b7:be:fd:f0:ae:1f:a8:fd:90:62:3f:08:a7:4f: b9:ae:23:9a:41:9b:b2:61:0c:7e:6c:a9:ef:b8:91:89:53:6b: be:f7:ad:be:3f:81:24:33:0f:a9:73:74:a7:ec:8a:c9:6f:b4: 07:fe:46:ac:dd:45:6d:67:4c:9d:56:13:89:ab:f0:86:c6:18: 96:2b:d1:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNpWcFMx0vH3KwU1zdDIkGIQY2A4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MDI3WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmNkNDRmZWRhZDlmZThmNGQ5OGFjZjdlMmNlNDNmNzhl NGZhZmM1NjVjYzU5NmU4MDc0NjRmZDRhYzRiNzQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJtXEEjUJT0FroTAl1xFVzBqcU+72btLyWwQA1dYuS27WP P3PmI1LJTXmykbW+V4fr577Y3+d/+MyB6Pq9SgO/PgSqrjsId7qzsnj9UTfZuBcs tIFnfNLTxX81WJk4t9bWan0FTd87xpSPxnUnlBOG9P6bAjDlagtV09KClQFa52iv 4cCWIcto8Od39mZHF8C+KRgE/kPn7pAQrvI7BifFqRuODa1x+Ffylk5zI5PYhlTr h3/z0xWUV5tlaZ7N26YC5Watytct3D6PLA+2LuBTbGB3uJRk05Qf69igAoxHkW5W uHk8TdW/NdwVjA909wE1s61LJlhgKfVOp8/hyYjvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf68Vee2eFDXOOpndX5DNRwpAOaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViZTM5NjE5LTMxOWUtNDU4Yi1iODRhLTNkOGEyMTA5NWE2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTY8wDQYJKoZIhvcNAQELBQADggEBAAscY43EsK1sC0s9zUCGGWv7SM6S Xtyvh2PhqW/E/VmEEbWYVRYrZOAVfo/bPe0aKmmBEt6lFjjtFFXZ9VHVuASjnVKD C8P2R1GugwyBZyMUongy519O3DP3gWdpILql7v7N9jA3y/jDJNW0z05vGKCTqfIt dlDdXiqd5m8miNcPIxdXlf93/dF6mcFPRjIBHpOv4nJGNk4w+1bWORf5AM8Y6UiL iESrqAhpo3QMgxv+ILpRt5IVcfC3vv3wrh+o/ZBiPwinT7muI5pBm7JhDH5sqe+4 kYlTa773rb4/gSQzD6lzdKfsislvtAf+RqzdRW1nTJ1WE4mr8IbGGJYr0Vg= -----END CERTIFICATE-----Generated at Sat Aug 23 06:51:52 2025 by rpki-client