$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa File: c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa (raw, json) Hash identifier: qrnLuC0ErioXv+zfhvSH/7O3CAaDFMjFjf0K022HFrA= Subject key identifier: F2:F1:64:85:C8:CC:A4:59:05:0C:12:9F:A1:74:8F:30:8F:4F:C1:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 424707289F49E344971E2906515E7D2D96A59A10 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa Signing time: Fri 18 Jul 2025 00:30:27 +0000 ROA not before: Fri 18 Jul 2025 00:30:27 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:47:07:28:9f:49:e3:44:97:1e:29:06:51:5e:7d:2d:96:a5:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:30:27 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=5c3f36022a6d7859fff7d0fd50e0daebaf3facb1b84fb3cf0df4dca2b02a90cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:13:3f:86:42:99:de:c5:40:8d:06:aa:fc: aa:22:86:0e:54:f0:f7:5a:93:0b:81:63:1e:ce:d9: 02:f4:55:96:c0:9e:26:86:ae:98:76:70:37:7e:88: 78:86:ee:1e:26:51:3a:4b:d2:74:5d:8e:57:b0:57: 93:40:fb:8c:45:e3:ce:c8:3c:81:20:3b:76:77:1a: 0e:ac:47:29:19:af:d7:79:af:2e:9e:fe:36:7d:24: 05:f5:b5:7e:a2:4f:09:84:f1:76:db:38:c3:e7:e2: c9:db:f9:ad:7c:ed:b4:9f:c8:8e:16:a7:00:ad:61: 0c:d2:ac:da:1f:47:5c:78:c8:a3:b0:79:3c:7f:17: e0:c6:c3:b0:5f:8e:0b:c8:3b:5c:4e:76:dd:a7:39: c5:2e:c4:94:70:db:ad:e3:43:9b:07:29:81:81:69: b9:6f:55:5c:37:aa:ec:82:2c:27:dc:a8:fb:13:6d: cb:59:a2:20:0e:61:c6:02:ef:d6:54:ef:dc:e5:5c: 62:f9:c5:4d:81:35:8b:37:40:79:fc:d9:ab:a6:06: b8:da:11:92:26:fa:b5:70:41:86:56:4b:60:7e:5f: a7:9c:ca:85:f3:63:8f:37:a0:6f:f0:30:e4:b1:4d: 69:45:18:df:3c:f3:16:eb:ac:d5:02:e7:8b:7a:e5: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:64:85:C8:CC:A4:59:05:0C:12:9F:A1:74:8F:30:8F:4F:C1:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 27:73:7b:91:49:d7:8c:45:00:f8:38:e7:73:c7:42:52:dd:71: 3f:e2:56:b7:47:bc:c4:1f:12:35:74:c5:2a:1a:46:bc:f8:a5: ee:ad:f2:cb:b6:f7:34:59:5d:18:23:dd:e3:57:19:4b:18:3a: 0e:20:b5:01:86:b3:43:bc:84:b9:c1:b1:b9:d8:c4:4a:cc:24: e9:d0:62:3c:18:7e:4d:f7:47:d5:f5:a8:4a:b1:d6:75:65:dd: 81:45:7c:da:9a:f0:05:96:d4:0d:76:92:47:2b:63:a3:28:c5: fe:f4:2d:0e:a5:ed:3c:cc:58:7f:16:d5:7f:f5:7f:97:06:97: ca:46:59:46:02:5f:2a:e5:3b:93:41:65:3b:f9:38:45:79:f0: 88:4a:14:10:27:29:dd:71:f4:03:45:ec:49:8c:00:6a:5d:04: 29:e5:45:d9:53:db:16:65:b2:29:19:53:96:da:1d:fc:59:89: b2:bc:85:e3:9d:18:7b:20:bb:bb:39:6b:8c:e2:2f:a0:89:b1: 5c:c7:d3:ec:45:e4:59:2d:5c:c0:9c:d4:72:43:93:e0:81:1a: b3:cc:95:bb:c7:43:88:99:31:b9:c0:33:c6:aa:9e:72:ac:46: f6:08:98:af:e8:47:93:40:df:83:52:af:37:ec:2f:89:1f:9e: 7a:7e:dc:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQkcHKJ9J40SXHikGUV59LZalmhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAzMDI3WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzNmMzYwMjJhNmQ3ODU5ZmZmN2QwZmQ1MGUwZGFlYmFm M2ZhY2IxYjg0ZmIzY2YwZGY0ZGNhMmIwMmE5MGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSURM/hkKZ3sVAjQaq/Koihg5U8PdakwuBYx7O2QL0VZbA niaGrph2cDd+iHiG7h4mUTpL0nRdjlewV5NA+4xF487IPIEgO3Z3Gg6sRykZr9d5 ry6e/jZ9JAX1tX6iTwmE8XbbOMPn4snb+a187bSfyI4WpwCtYQzSrNofR1x4yKOw eTx/F+DGw7BfjgvIO1xOdt2nOcUuxJRw263jQ5sHKYGBablvVVw3quyCLCfcqPsT bctZoiAOYcYC79ZU79zlXGL5xU2BNYs3QHn82aumBrjaEZIm+rVwQYZWS2B+X6ec yoXzY483oG/wMOSxTWlFGN888xbrrNUC54t65TVvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8vFkhcjMpFkFDBKfoXSPMI9PwbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxY2JmZjIzLWM1YjctNDAzZC1hNTNjLWJkMjNmYzFiMGEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EAwDQYJKoZIhvcNAQELBQADggEBACdze5FJ14xFAPg453PHQlLdcT/i VrdHvMQfEjV0xSoaRrz4pe6t8su29zRZXRgj3eNXGUsYOg4gtQGGs0O8hLnBsbnY xErMJOnQYjwYfk33R9X1qEqx1nVl3YFFfNqa8AWW1A12kkcrY6Moxf70LQ6l7TzM WH8W1X/1f5cGl8pGWUYCXyrlO5NBZTv5OEV58IhKFBAnKd1x9ANF7EmMAGpdBCnl RdlT2xZlsikZU5baHfxZibK8heOdGHsgu7s5a4ziL6CJsVzH0+xF5FktXMCc1HJD k+CBGrPMlbvHQ4iZMbnAM8aqnnKsRvYImK/oR5NA34NSrzfsL4kfnnp+3JU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:45 2025 by rpki-client