$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa File: 6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa (raw, json) Hash identifier: 1FWFyICSE/5PJPROlJwyY5UCPlwkVfCEczGzEwJWypQ= Subject key identifier: 7C:56:A2:F5:ED:F3:66:65:11:12:68:1F:63:FF:3F:8C:69:13:7F:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3485A6F9972E813ADED5F878E7770B8C7326C1D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa Signing time: Fri 11 Jul 2025 00:41:26 +0000 ROA not before: Fri 11 Jul 2025 00:41:26 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.32.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:85:a6:f9:97:2e:81:3a:de:d5:f8:78:e7:77:0b:8c:73:26:c1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:41:26 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=220f0cbcfbd67722279ce55943bf05db6b448c23240b7fcafb96667faee6ede8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:e2:cf:e5:b2:2a:8d:e4:20:d8:d7:77:72: f8:29:83:a2:7b:2e:7d:13:4a:a5:8e:10:8d:23:96: 58:2a:20:f8:01:da:a4:a3:94:87:94:ce:d7:44:8f: b3:d8:30:5d:90:35:76:db:13:e5:f0:7e:e1:0b:69: 93:e3:41:bc:9b:9d:29:1f:4c:29:3e:b5:5f:33:66: c9:93:d7:37:e3:25:ec:91:40:2c:88:9c:34:67:d7: ee:97:cc:84:e0:5d:b3:14:40:7b:48:db:b5:04:26: fb:61:02:2f:8f:17:88:7a:41:fc:89:96:6d:f5:75: 59:ae:05:90:7b:ae:90:bc:d4:e6:0a:5c:fa:60:35: cb:fd:ae:99:33:5b:40:a5:48:67:b6:e6:6d:86:b8: 7a:27:78:f5:11:93:81:58:7e:98:d1:0c:a2:fa:73: 34:4f:03:a7:0f:d0:ab:2b:c3:61:ff:ad:e3:73:fe: 4f:92:e9:12:f1:6b:1f:44:48:1a:7f:0a:8d:5a:b0: a1:5a:c9:b9:47:6c:2b:f8:0b:71:ef:41:94:2c:b5: e4:f8:f4:13:ae:93:3b:be:fe:9e:2f:da:55:d9:6a: 40:da:8d:73:e8:32:0c:12:c1:69:93:17:9f:48:cd: 15:b3:d7:88:92:9c:21:e1:28:b7:d6:a2:20:64:4f: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:56:A2:F5:ED:F3:66:65:11:12:68:1F:63:FF:3F:8C:69:13:7F:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.32.0.0/14 Signature Algorithm: sha256WithRSAEncryption 82:4f:1e:a3:dd:c5:13:56:ea:d1:26:51:35:3d:6a:2c:9c:2c: b8:e0:b7:3a:c8:17:79:fc:f0:fb:07:f7:11:1a:b5:d5:fb:7e: 3a:40:6f:92:4f:ab:1c:80:98:b4:10:e2:ec:96:89:70:8b:1e: 67:ae:a7:60:f1:aa:5d:1b:c6:a2:84:49:d1:2b:4d:33:99:d7: 9e:3e:e3:29:b6:66:6c:f3:a5:0c:41:63:94:79:b7:12:92:30: 76:d6:fe:9e:0f:d8:1b:dd:b4:78:46:22:3e:17:c6:97:34:76: c6:a9:7b:e2:90:df:c1:62:37:a8:b4:a2:50:5e:df:a8:b9:ef: bd:1f:b5:b0:bf:64:8b:e3:34:7e:9b:b4:ef:bd:78:c8:a3:60: ec:92:11:8c:b2:d2:40:ee:74:ca:b1:57:ae:1e:1c:73:97:73: 86:eb:e2:c3:28:93:17:fc:fa:69:10:c2:f1:91:f8:5b:7b:1f: ea:70:2c:84:57:c4:c2:7a:25:0e:98:71:8b:16:de:6a:b5:26: b2:10:0d:9b:1e:01:54:40:05:de:e9:94:a5:cf:9e:b2:83:c3: 37:1c:17:8d:e0:9e:30:52:e1:70:ce:19:83:c6:53:73:9a:72: dc:eb:f3:92:62:b9:4e:39:17:ee:4e:6a:a6:d2:90:fa:db:83: 72:7e:51:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNIWm+ZcugTre1fh453cLjHMmwdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MTI2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjBmMGNiY2ZiZDY3NzIyMjc5Y2U1NTk0M2JmMDVkYjZi NDQ4YzIzMjQwYjdmY2FmYjk2NjY3ZmFlZTZlZGU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMQ+LP5bIqjeQg2Nd3cvgpg6J7Ln0TSqWOEI0jllgqIPgB 2qSjlIeUztdEj7PYMF2QNXbbE+XwfuELaZPjQbybnSkfTCk+tV8zZsmT1zfjJeyR QCyInDRn1+6XzITgXbMUQHtI27UEJvthAi+PF4h6QfyJlm31dVmuBZB7rpC81OYK XPpgNcv9rpkzW0ClSGe25m2GuHonePURk4FYfpjRDKL6czRPA6cP0Ksrw2H/reNz /k+S6RLxax9ESBp/Co1asKFayblHbCv4C3HvQZQsteT49BOukzu+/p4v2lXZakDa jXPoMgwSwWmTF59IzRWz14iSnCHhKLfWoiBkTywvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfFai9e3zZmUREmgfY/8/jGkTfw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlZmYwYWQ2LTRmNWUtNDg1My1iYWE5LWE1YzA4ZWQzM2JkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI/IDANBgkqhkiG9w0BAQsFAAOCAQEAgk8eo93FE1bq0SZRNT1qLJwsuOC3 OsgXefzw+wf3ERq11ft+OkBvkk+rHICYtBDi7JaJcIseZ66nYPGqXRvGooRJ0StN M5nXnj7jKbZmbPOlDEFjlHm3EpIwdtb+ng/YG920eEYiPhfGlzR2xql74pDfwWI3 qLSiUF7fqLnvvR+1sL9ki+M0fpu07714yKNg7JIRjLLSQO50yrFXrh4cc5dzhuvi wyiTF/z6aRDC8ZH4W3sf6nAshFfEwnolDphxixbearUmshANmx4BVEAF3umUpc+e soPDNxwXjeCeMFLhcM4Zg8ZTc5py3OvzkmK5TjkX7k5qptKQ+tuDcn5Rvw== -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:01 2025 by rpki-client