$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd7b0829-2b25-45b8-86ae-7ed864d17727.roa File: fd7b0829-2b25-45b8-86ae-7ed864d17727.roa (raw, json) Hash identifier: 4ncYwE6t1tN39W72IFuKb81SI6ripjF0qaEDac4TCE4= Subject key identifier: 59:77:37:50:A4:D8:DC:A8:45:80:54:04:61:B4:EC:BF:58:97:35:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 761AB225810306FCEDC6A9499CDED1D94EDE095B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd7b0829-2b25-45b8-86ae-7ed864d17727.roa Signing time: Wed 02 Jul 2025 00:41:49 +0000 ROA not before: Wed 02 Jul 2025 00:41:49 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.87.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1a:b2:25:81:03:06:fc:ed:c6:a9:49:9c:de:d1:d9:4e:de:09:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:41:49 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=287ad76e87600eab99093c358317dd50dadcdacd97c46fe41acc621d9d8c8967, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:51:f2:8b:43:dc:e6:9e:fa:3c:f2:0a:6c: cf:34:93:f9:fb:7c:42:79:09:8a:66:9f:d0:12:15: e8:37:82:2c:d5:ff:7e:92:8f:a9:bb:04:d5:d0:e1: e7:fe:73:cb:7e:03:e3:73:2d:b2:a6:dd:fe:98:fe: f0:62:cd:ef:62:57:55:32:37:16:a4:d8:3d:af:dc: ed:fc:11:a9:36:81:cd:01:40:6b:2c:1f:94:d8:34: fe:0a:cf:f2:a0:32:4c:04:25:b6:c7:cb:db:5e:b0: 5d:a6:3f:59:f8:f8:d4:a6:9e:1b:00:96:63:b3:a5: 2a:56:ff:0c:a5:e3:65:9d:c2:1d:5f:97:53:ca:ee: ed:dd:98:f7:ad:0a:07:89:8e:90:0c:6b:ae:c7:ed: da:80:e9:09:a7:77:c0:3c:56:82:1e:76:32:c9:6e: 24:ae:c3:22:9b:51:76:8a:72:47:90:ce:44:1f:5b: f1:62:71:33:e9:93:63:38:2e:83:d9:dc:e3:0c:27: 5c:ea:e1:72:cd:51:e7:b4:a7:76:ae:0c:43:ad:3b: 6b:c1:66:2f:4c:48:06:d5:5c:b4:08:69:e8:83:09: 3f:b2:c2:9b:4e:a8:82:c7:62:0c:fb:d5:1a:d2:a7: 11:40:85:16:d6:d7:91:6e:94:52:3c:fb:b1:a4:4c: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:77:37:50:A4:D8:DC:A8:45:80:54:04:61:B4:EC:BF:58:97:35:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd7b0829-2b25-45b8-86ae-7ed864d17727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.30.0/23 Signature Algorithm: sha256WithRSAEncryption 94:b5:78:f2:b9:ec:5e:64:21:05:3d:8e:a8:1d:78:03:ba:b7: 5f:a0:43:37:ad:7c:0f:ee:5b:ef:6e:6c:46:21:f7:13:6e:28: 93:15:42:3d:35:e8:50:89:16:0d:d0:b4:7c:db:c2:5a:bc:d1: 1c:9d:c2:19:31:c0:88:38:1f:cd:19:57:28:a8:d9:7d:77:8d: 4d:a5:c2:07:5f:d1:02:16:bd:82:8e:6a:ae:c2:e9:9a:d2:be: f5:d3:0c:52:d6:bc:73:e0:e1:bd:9f:d7:2e:28:0b:47:95:a9: 91:d6:10:1b:ca:0a:83:ff:ee:58:50:9e:66:eb:93:92:14:7f: 3a:27:78:19:96:eb:c6:6c:97:d5:fd:15:7a:bf:51:54:36:d5: 1f:05:b4:15:79:d0:48:da:20:f7:79:b7:17:eb:ca:d8:2f:6a: f7:4b:ba:2e:5a:dc:23:87:7d:da:3f:78:78:7e:51:24:bf:4f: 43:4e:26:b7:c4:af:71:81:fd:e3:bc:aa:11:d9:20:70:6e:a9: 8e:c2:e5:bf:67:87:47:92:62:82:7e:01:7b:25:cb:0c:37:76: 56:6e:52:b3:b8:59:f7:4e:e2:2e:bd:a7:8c:6c:64:68:70:d5: c4:c1:4f:1a:31:d9:ec:ff:57:f2:a9:d3:94:85:f2:97:ff:7b: f6:b0:9f:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdhqyJYEDBvztxqlJnN7R2U7eCVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MTQ5WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODdhZDc2ZTg3NjAwZWFiOTkwOTNjMzU4MzE3ZGQ1MGRh ZGNkYWNkOTdjNDZmZTQxYWNjNjIxZDlkOGM4OTY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhV1Hyi0Pc5p76PPIKbM80k/n7fEJ5CYpmn9ASFeg3gizV /36Sj6m7BNXQ4ef+c8t+A+NzLbKm3f6Y/vBize9iV1UyNxak2D2v3O38Eak2gc0B QGssH5TYNP4Kz/KgMkwEJbbHy9tesF2mP1n4+NSmnhsAlmOzpSpW/wyl42Wdwh1f l1PK7u3dmPetCgeJjpAMa67H7dqA6Qmnd8A8VoIedjLJbiSuwyKbUXaKckeQzkQf W/FicTPpk2M4LoPZ3OMMJ1zq4XLNUee0p3auDEOtO2vBZi9MSAbVXLQIaeiDCT+y wptOqILHYgz71RrSpxFAhRbW15FulFI8+7GkTP4jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWXc3UKTY3KhFgFQEYbTsv1iXNVQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkN2IwODI5LTJiMjUtNDViOC04NmFlLTdlZDg2NGQxNzcyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYVx4wDQYJKoZIhvcNAQELBQADggEBAJS1ePK57F5kIQU9jqgdeAO6t1+g QzetfA/uW+9ubEYh9xNuKJMVQj016FCJFg3QtHzbwlq80RydwhkxwIg4H80ZVyio 2X13jU2lwgdf0QIWvYKOaq7C6ZrSvvXTDFLWvHPg4b2f1y4oC0eVqZHWEBvKCoP/ 7lhQnmbrk5IUfzoneBmW68Zsl9X9FXq/UVQ21R8FtBV50EjaIPd5txfrytgvavdL ui5a3COHfdo/eHh+USS/T0NOJrfEr3GB/eO8qhHZIHBuqY7C5b9nh0eSYoJ+AXsl yww3dlZuUrO4WfdO4i69p4xsZGhw1cTBTxox2ez/V/Kp05SF8pf/e/awnww= -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:46 2025 by rpki-client