$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4311495-33c1-4f74-b737-ba3366c5845f.roa File: e4311495-33c1-4f74-b737-ba3366c5845f.roa (raw, json) Hash identifier: LxWWYOHwTB40Hy1bL/6alXzuZmfTQdfPOF4m46rOAnQ= Subject key identifier: 93:14:20:8C:AB:39:51:90:90:BE:E7:06:07:77:29:B6:D0:55:D5:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32E9686ED3F81058805E6B7AC7DC124D88247AE7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4311495-33c1-4f74-b737-ba3366c5845f.roa Signing time: Sat 19 Jul 2025 00:01:46 +0000 ROA not before: Sat 19 Jul 2025 00:01:46 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.21.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e9:68:6e:d3:f8:10:58:80:5e:6b:7a:c7:dc:12:4d:88:24:7a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:46 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=50fd32c56e5265962b900f63a16d8e9118a3d4cbebfe15beecb566b7d6c05e7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:00:04:05:6f:7b:e1:0f:8c:b8:b5:d4:87: 93:11:7f:8f:9e:14:63:9b:6c:fc:2f:60:9d:fc:ae: d0:ea:94:7a:89:a8:90:a3:c2:d9:8f:31:81:ce:17: 1b:12:d5:07:eb:da:e5:9b:d0:9a:99:af:62:27:e5: 16:52:0e:c5:03:2a:d6:57:3d:f3:5f:74:a1:2d:e9: 2a:50:6e:a6:33:af:e0:ce:50:d6:3b:fe:87:01:e0: 70:3b:8d:83:f3:6d:12:40:ec:5b:35:2d:dd:3d:da: c7:4f:19:ea:88:97:bb:b5:43:72:c7:1b:e6:5d:2e: 64:db:13:53:77:61:dd:d1:45:56:8f:4b:6d:d5:c8: b2:11:fe:a1:6b:00:7b:b2:b9:30:24:bc:d3:4b:a5: 24:39:ff:3b:5c:b9:22:ef:96:87:45:b7:26:77:fd: 0c:38:b5:b1:61:2e:13:22:fd:3c:51:4e:07:26:e2: bc:ad:93:a2:cb:47:3a:bf:4c:34:ee:a7:26:94:20: 60:9e:51:0d:5f:88:ed:1e:57:ca:e3:f2:8c:98:22: 01:4a:c3:24:69:bb:6f:ae:25:ce:7c:e2:71:e5:2d: 08:77:1d:9a:9d:42:f5:39:1a:fc:ea:d0:a1:d7:cf: 60:8e:e3:d7:cf:c1:3b:0f:cd:3d:cf:c5:21:5b:26: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:20:8C:AB:39:51:90:90:BE:E7:06:07:77:29:B6:D0:55:D5:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4311495-33c1-4f74-b737-ba3366c5845f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.21.96.0/20 Signature Algorithm: sha256WithRSAEncryption b0:ed:4a:f4:30:41:2b:64:5a:bc:ed:b8:0f:25:c6:36:90:9c: 81:29:80:e4:a8:30:1f:e6:2b:0d:0d:c6:02:6b:d0:b5:4e:58: 76:d3:69:e2:b9:30:58:5a:e7:d8:04:60:39:71:94:f7:ce:77: 95:e2:54:7e:d6:29:3e:76:ef:0a:18:ae:7c:3f:5b:38:a3:95: 8f:9c:b3:80:23:ec:1b:ee:2c:99:aa:e3:40:31:df:e5:38:14: c6:7d:c1:39:12:72:ba:e8:f6:6b:95:92:43:b9:ce:80:44:6a: 75:40:12:9a:c0:f4:a5:d6:42:48:43:69:a6:dd:a1:4b:95:ae: 79:5a:48:0e:bf:7a:b2:60:c1:af:2a:39:55:39:89:3a:f9:ac: c3:cb:90:67:ef:b3:5d:44:27:31:d6:19:89:d9:75:b2:f3:75: 5e:83:c8:f3:52:52:a3:16:ed:df:86:6a:7b:e5:69:98:da:0b: dc:bc:6e:c1:e3:19:dc:1c:c6:62:97:bd:76:e8:76:ea:44:ca: c5:d2:b6:6f:b3:d4:6e:2f:54:ad:d8:75:85:04:4d:3e:b1:77: 5c:c5:c6:cc:8d:d6:2e:6b:d1:db:c7:67:1a:b0:67:ff:3e:41: 21:29:8f:b3:9c:39:9c:ed:02:90:70:61:d4:83:1d:07:36:80: 0f:ed:ae:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMulobtP4EFiAXmt6x9wSTYgkeucwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTQ2WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGZkMzJjNTZlNTI2NTk2MmI5MDBmNjNhMTZkOGU5MTE4 YTNkNGNiZWJmZTE1YmVlY2I1NjZiN2Q2YzA1ZTdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6OAAEBW974Q+MuLXUh5MRf4+eFGObbPwvYJ38rtDqlHqJ qJCjwtmPMYHOFxsS1Qfr2uWb0JqZr2In5RZSDsUDKtZXPfNfdKEt6SpQbqYzr+DO UNY7/ocB4HA7jYPzbRJA7Fs1Ld092sdPGeqIl7u1Q3LHG+ZdLmTbE1N3Yd3RRVaP S23VyLIR/qFrAHuyuTAkvNNLpSQ5/ztcuSLvlodFtyZ3/Qw4tbFhLhMi/TxRTgcm 4rytk6LLRzq/TDTupyaUIGCeUQ1fiO0eV8rj8oyYIgFKwyRpu2+uJc584nHlLQh3 HZqdQvU5Gvzq0KHXz2CO49fPwTsPzT3PxSFbJh+dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkxQgjKs5UZCQvucGB3cpttBV1ekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0MzExNDk1LTMzYzEtNGY3NC1iNzM3LWJhMzM2NmM1ODQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRFWAwDQYJKoZIhvcNAQELBQADggEBALDtSvQwQStkWrztuA8lxjaQnIEp gOSoMB/mKw0NxgJr0LVOWHbTaeK5MFha59gEYDlxlPfOd5XiVH7WKT527woYrnw/ WzijlY+cs4Aj7BvuLJmq40Ax3+U4FMZ9wTkScrro9muVkkO5zoBEanVAEprA9KXW QkhDaabdoUuVrnlaSA6/erJgwa8qOVU5iTr5rMPLkGfvs11EJzHWGYnZdbLzdV6D yPNSUqMW7d+GanvlaZjaC9y8bsHjGdwcxmKXvXbodupEysXStm+z1G4vVK3YdYUE TT6xd1zFxsyN1i5r0dvHZxqwZ/8+QSEpj7OcOZztApBwYdSDHQc2gA/trn8= -----END CERTIFICATE-----Generated at Thu Jul 24 12:11:00 2025 by rpki-client