$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa File: f1a1447c-63be-441c-867b-64a338ff41ca.roa (raw, json) Hash identifier: qgX3cBWtAgVHQEJ7b/gzaM6jkmq++PuhYfl3oNtdecM= Subject key identifier: FC:CB:18:93:52:CF:F0:78:46:BA:EC:19:00:99:D5:DC:B3:33:99:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B4C9846D12CF48CDDF892100DE5225D3062836F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa Signing time: Tue 24 Jun 2025 00:21:44 +0000 ROA not before: Tue 24 Jun 2025 00:21:44 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4c:98:46:d1:2c:f4:8c:dd:f8:92:10:0d:e5:22:5d:30:62:83:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:21:44 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=8ad9a2a23adbd3673381c0ea9003e9040618259d5f5b706eceb0e1fe6c9eaa15, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:1f:b3:cb:28:d6:90:1f:33:b6:d7:dd:91: 75:57:dd:2d:b6:33:77:0f:89:fc:e1:de:5b:62:01: f2:d8:6f:f7:2d:67:b9:dd:2d:c9:86:69:8f:2b:69: 50:ef:a6:0b:bd:89:ac:f5:28:d9:ad:c1:5e:f9:83: 6b:d6:8b:f2:88:c2:1b:26:b7:e0:90:35:62:0a:26: 6b:6d:ca:38:55:1e:23:66:fe:74:86:97:26:85:28: ca:1b:2d:f2:f2:ab:76:d8:ba:61:60:b6:15:66:67: 26:15:31:f5:81:71:40:a9:ba:77:b2:42:9b:25:37: 1e:3e:d1:0d:36:06:33:11:dd:67:71:b7:7d:43:f5: 33:1a:c6:e8:f6:5f:36:24:94:b0:8c:06:c5:f0:26: 12:7e:83:a0:27:4c:8c:0e:af:b5:68:75:e4:c7:99: 8d:98:ef:f8:fa:cd:21:29:00:c8:f1:69:81:e8:4b: 0b:c1:98:26:7c:50:ae:af:43:bf:98:cb:67:37:51: bc:d3:a9:5a:d7:fc:33:c2:8e:42:00:b8:5e:59:80: a0:09:b2:ac:7b:f4:77:f3:80:57:26:72:fd:94:ba: e9:f0:17:49:c5:fb:19:e1:c5:bf:ac:3f:68:83:3e: c8:94:92:b5:36:99:a7:9c:7c:21:28:ff:09:47:c3: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:18:93:52:CF:F0:78:46:BA:EC:19:00:99:D5:DC:B3:33:99:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:09:f4:d0:30:46:56:e2:43:81:96:b2:b9:9f:93:52:6f:2c: 70:03:cd:ca:d5:88:de:6b:37:06:98:7f:4d:c7:4a:c9:f4:18: 59:1e:20:84:de:6a:48:2e:af:8b:b0:38:85:70:7b:14:35:58: 20:87:01:cb:b7:96:94:a6:39:a8:ff:02:4b:27:db:83:5b:85: 9b:52:41:9f:fa:48:d2:b3:e5:f8:85:75:9d:60:de:3c:3e:87: 6f:27:03:44:ca:92:ff:f9:ef:d5:4e:d3:77:ef:16:3d:4c:f8: 67:e1:14:a0:6e:77:7f:7d:8a:5f:b6:96:bc:c9:8d:51:a8:56: 69:07:60:ac:0f:82:54:6d:66:dd:63:d1:74:eb:36:41:22:d0: fd:ad:b4:09:9f:dc:66:b1:92:de:a9:08:a4:78:4f:d6:76:2c: 59:1b:98:cd:07:dc:be:3a:0e:75:91:93:dc:a3:0a:77:ee:39: 75:ad:34:fc:cb:3d:99:4e:49:c4:01:4a:21:81:5e:49:f0:c3: 1f:91:a3:2f:86:07:55:94:ab:bc:50:db:9b:d8:32:2c:61:e3: 41:be:eb:a3:40:df:25:81:06:c9:ab:c3:29:ac:bd:56:a0:5b: a0:67:32:4f:bd:62:76:ff:b6:73:fc:6b:8d:20:c8:19:dd:c8: 87:6f:b1:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW0yYRtEs9Izd+JIQDeUiXTBig28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAyMTQ0WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWQ5YTJhMjNhZGJkMzY3MzM4MWMwZWE5MDAzZTkwNDA2 MTgyNTlkNWY1YjcwNmVjZWIwZTFmZTZjOWVhYTE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY1h+zyyjWkB8zttfdkXVX3S22M3cPifzh3ltiAfLYb/ct Z7ndLcmGaY8raVDvpgu9iaz1KNmtwV75g2vWi/KIwhsmt+CQNWIKJmttyjhVHiNm /nSGlyaFKMobLfLyq3bYumFgthVmZyYVMfWBcUCpuneyQpslNx4+0Q02BjMR3Wdx t31D9TMaxuj2XzYklLCMBsXwJhJ+g6AnTIwOr7VodeTHmY2Y7/j6zSEpAMjxaYHo SwvBmCZ8UK6vQ7+Yy2c3UbzTqVrX/DPCjkIAuF5ZgKAJsqx79HfzgFcmcv2Uuunw F0nF+xnhxb+sP2iDPsiUkrU2maecfCEo/wlHw15rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/MsYk1LP8HhGuuwZAJnV3LMzmfkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYTE0NDdjLTYzYmUtNDQxYy04NjdiLTY0YTMzOGZmNDFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoyTANBgkqhkiG9w0BAQsFAAOCAQEAdgn00DBGVuJDgZayuZ+TUm8scAPN ytWI3ms3Bph/TcdKyfQYWR4ghN5qSC6vi7A4hXB7FDVYIIcBy7eWlKY5qP8CSyfb g1uFm1JBn/pI0rPl+IV1nWDePD6HbycDRMqS//nv1U7Td+8WPUz4Z+EUoG53f32K X7aWvMmNUahWaQdgrA+CVG1m3WPRdOs2QSLQ/a20CZ/cZrGS3qkIpHhP1nYsWRuY zQfcvjoOdZGT3KMKd+45da00/Ms9mU5JxAFKIYFeSfDDH5GjL4YHVZSrvFDbm9gy LGHjQb7ro0DfJYEGyavDKay9VqBboGcyT71idv+2c/xrjSDIGd3Ih2+xZw== -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:44 2025 by rpki-client