$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa File: 1a931f43-76c7-4a61-9317-d9b5dcabea95.roa (raw, json) Hash identifier: Y/D8ieHTr1gUt0OMQKl4l0RYqp8VcOTw3aGiQWH3L6k= Subject key identifier: 91:C6:B5:6A:3D:AD:A3:77:9D:97:52:2D:31:BC:E6:4C:19:53:14:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5ECFAC94832B92C8689BD17431B058FB97825740 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa Signing time: Wed 02 Jul 2025 00:41:19 +0000 ROA not before: Wed 02 Jul 2025 00:41:19 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cf:ac:94:83:2b:92:c8:68:9b:d1:74:31:b0:58:fb:97:82:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:41:19 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=2b8fd06aab746cb2e242939f3c42e4ee64bf89c6a9f582987b5a0b2b100991a7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:5e:54:87:a0:4d:56:34:eb:3a:18:15:09: 00:a4:e7:39:44:be:33:65:fc:e7:31:59:8f:8b:c7: 59:95:a0:89:c4:81:f0:60:ce:c2:bf:8c:bc:f0:11: ba:e6:7a:3d:c2:84:f8:ab:c6:e4:b9:42:bf:b9:4e: 9e:f8:a9:4e:35:09:2b:c8:45:06:66:57:8e:7f:79: 8e:8c:44:08:df:33:e7:ce:f9:c8:04:ca:c6:aa:40: 81:92:fb:b9:df:df:f7:b0:6d:8b:2a:7d:5b:66:da: 15:c3:7f:21:91:e2:c3:e3:30:7f:3b:9f:e6:63:f6: ef:a7:73:04:13:0e:73:21:ea:b2:83:9a:fd:8a:ca: 3e:f2:77:57:84:b3:e2:74:49:33:1d:ab:47:3a:45: a0:b4:40:6b:bc:ac:2c:0a:d3:c7:d6:76:c9:4a:e9: 9a:f3:fb:38:03:93:9c:71:bd:75:e9:d0:da:27:3c: 39:10:da:37:3f:0d:24:a3:96:40:37:ed:df:c8:dd: 5e:bb:01:6d:2d:e5:34:c3:b1:99:ae:48:78:76:76: 41:01:ad:f8:bd:74:a3:ee:c4:87:f6:9c:1c:72:59: 33:ec:ca:ab:59:fd:7d:19:c1:4c:29:71:28:d1:37: fe:85:ec:de:af:df:8b:e2:af:44:1b:ff:ea:a6:16: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C6:B5:6A:3D:AD:A3:77:9D:97:52:2D:31:BC:E6:4C:19:53:14:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.104.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:76:f3:1d:98:d0:98:0c:88:0e:da:18:ef:d9:32:d8:57:d4: 65:7d:a4:19:c1:1c:d5:c3:79:b9:80:f6:13:0d:06:dc:d9:69: ff:48:df:30:93:13:ba:7e:16:12:e7:11:44:c4:fb:f3:b9:e4: 7d:ee:e5:9f:bc:29:4f:df:a9:29:48:48:b1:cd:f7:6d:0f:03: 58:67:d7:bd:15:e3:f2:60:0e:66:57:35:1a:e6:fa:04:6c:4f: 27:af:37:7a:07:65:ef:4d:b7:92:36:6e:d6:7b:de:90:12:28: 9c:88:d3:e7:2a:83:9f:a9:ca:84:5d:af:35:7f:7e:0b:4a:a4: ba:39:12:85:27:f3:13:ac:77:71:42:ef:ba:29:b8:c7:ae:b3: 12:4a:7c:61:4d:7f:5d:50:ed:00:49:45:05:23:5e:3c:43:90: d7:db:2a:b4:37:59:46:1f:3d:f5:ac:27:bc:72:7f:6e:a3:62: f5:49:32:21:67:70:a1:d8:49:ef:3b:03:97:01:83:b0:1f:67: 28:d3:37:cc:ad:ab:85:07:24:3f:4c:0a:f3:59:12:10:0d:da: 8f:0b:c9:5f:26:51:be:04:62:26:88:95:ae:fa:0e:a1:a0:a4: da:ac:31:9d:b4:d6:80:3d:2d:eb:8b:4d:ba:d1:20:b6:95:70: 55:7d:11:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXs+slIMrkshom9F0MbBY+5eCV0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MTE5WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjhmZDA2YWFiNzQ2Y2IyZTI0MjkzOWYzYzQyZTRlZTY0 YmY4OWM2YTlmNTgyOTg3YjVhMGIyYjEwMDk5MWE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj+15Uh6BNVjTrOhgVCQCk5zlEvjNl/OcxWY+Lx1mVoInE gfBgzsK/jLzwEbrmej3ChPirxuS5Qr+5Tp74qU41CSvIRQZmV45/eY6MRAjfM+fO +cgEysaqQIGS+7nf3/ewbYsqfVtm2hXDfyGR4sPjMH87n+Zj9u+ncwQTDnMh6rKD mv2Kyj7yd1eEs+J0STMdq0c6RaC0QGu8rCwK08fWdslK6Zrz+zgDk5xxvXXp0Non PDkQ2jc/DSSjlkA37d/I3V67AW0t5TTDsZmuSHh2dkEBrfi9dKPuxIf2nBxyWTPs yqtZ/X0ZwUwpcSjRN/6F7N6v34vir0Qb/+qmFuZ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkca1aj2to3edl1ItMbzmTBlTFLgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhOTMxZjQzLTc2YzctNGE2MS05MzE3LWQ5YjVkY2FiZWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABANGgwDQYJKoZIhvcNAQELBQADggEBADx28x2Y0JgMiA7aGO/ZMthX1GV9 pBnBHNXDebmA9hMNBtzZaf9I3zCTE7p+FhLnEUTE+/O55H3u5Z+8KU/fqSlISLHN 920PA1hn170V4/JgDmZXNRrm+gRsTyevN3oHZe9Nt5I2btZ73pASKJyI0+cqg5+p yoRdrzV/fgtKpLo5EoUn8xOsd3FC77opuMeusxJKfGFNf11Q7QBJRQUjXjxDkNfb KrQ3WUYfPfWsJ7xyf26jYvVJMiFncKHYSe87A5cBg7AfZyjTN8ytq4UHJD9MCvNZ EhAN2o8LyV8mUb4EYiaIla76DqGgpNqsMZ201oA9LeuLTbrRILaVcFV9EaU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:01 2025 by rpki-client