$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa File: 34c884bc-661c-40e5-b482-3e818092414c.roa (raw, json) Hash identifier: tgLo6x8Xu+262ifwEcklP6eOETTo1/mPN1I5EBJ4wf8= Subject key identifier: ED:81:1C:E3:96:88:9D:F2:40:B0:54:FB:AB:22:B5:18:ED:6F:10:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D30984D484659A22518188006B7D5B306B553EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa Signing time: Wed 13 Aug 2025 00:31:42 +0000 ROA not before: Wed 13 Aug 2025 00:31:42 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:30:98:4d:48:46:59:a2:25:18:18:80:06:b7:d5:b3:06:b5:53:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:31:42 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=bf3000d64d085abbfc7913956db499643a20108d823c69535e1ed1e64950b704, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:cd:c2:c6:fa:9e:e4:0f:11:0b:66:47:b3: 9f:75:33:09:ad:7e:bd:60:60:31:20:63:f5:53:77: 6e:e3:65:ef:86:6a:7d:b4:1d:62:06:cb:18:6c:84: 93:ff:a7:c8:75:19:c2:35:15:66:ed:f2:4b:24:82: 4b:4b:e9:6d:e5:30:c1:5f:4e:e1:94:13:a8:90:f1: 38:5b:7e:9d:91:d5:12:fb:76:c3:ae:0d:a8:d1:a2: 2e:1a:c8:48:45:8d:d7:19:d0:c3:9d:b2:2e:ac:98: 68:cf:bd:b6:d6:95:49:18:56:26:cf:6f:18:df:54: a1:46:c8:e1:9f:12:c0:c4:b7:39:f2:c2:e0:00:23: f9:6a:b1:4b:ce:7f:56:3f:4e:b5:35:fc:a5:00:60: 77:6d:bb:1d:35:93:c1:9a:9a:eb:fa:8d:09:c4:2e: ce:6f:c0:43:c8:16:92:76:a3:4d:6d:9a:80:e9:01: 0f:52:88:90:24:0f:69:af:31:e1:a6:ef:7a:c2:cf: 37:e5:45:4a:06:e1:75:5a:ab:73:89:57:7e:fb:d3: 21:ce:51:69:59:43:d9:ad:c5:30:f5:74:37:5d:23: 62:2f:dc:9a:52:6f:6c:8b:79:3c:e9:ae:f7:2d:fb: ed:c8:17:6d:72:6d:36:c7:d3:45:f3:e2:3c:e6:98: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:81:1C:E3:96:88:9D:F2:40:B0:54:FB:AB:22:B5:18:ED:6F:10:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.85.0/24 Signature Algorithm: sha256WithRSAEncryption 28:2a:dd:09:44:d6:a8:8c:dd:3a:a0:26:e6:3c:5a:ab:fa:7f: 7a:e3:b9:29:e8:d3:7e:ff:29:4d:ac:75:a7:b5:75:b7:ce:c5: cc:a7:8e:c8:00:91:1d:38:21:b6:02:50:2f:0e:5c:b3:a8:27: 45:8a:43:00:df:f3:75:05:b5:9c:7a:93:c2:80:99:94:a9:ae: 90:7c:f5:44:4a:06:a0:a1:a2:24:9a:83:b7:c2:68:f2:95:cf: dd:15:ae:8f:17:27:22:fc:6a:97:09:6c:40:d7:15:76:9f:ef: c0:87:30:d6:18:23:ef:25:79:8f:e9:4b:67:b2:90:47:e2:d4: ac:0e:e3:49:b7:6a:80:58:d3:09:e3:db:73:33:a0:66:0f:d3: 83:5b:9c:7e:a4:42:14:0f:ac:51:6c:11:d3:b3:d0:bc:4d:ae: c4:26:fe:7a:19:77:28:22:a1:e6:af:c3:c9:99:dd:06:4c:6a: 2f:f2:a3:5c:3f:61:3f:1f:ed:d2:4f:bc:da:9a:ba:35:b6:f3: 94:88:a3:ef:28:28:90:77:bb:b6:08:5b:60:c2:b5:27:41:21: aa:27:24:3c:19:0f:40:bf:fa:eb:cc:54:2f:91:77:b5:af:44: 26:9f:31:b5:d9:e8:a1:d2:bc:f2:12:68:66:c7:94:64:0b:e1: 0a:32:d4:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPTCYTUhGWaIlGBiABrfVswa1U+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAzMTQyWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjMwMDBkNjRkMDg1YWJiZmM3OTEzOTU2ZGI0OTk2NDNh MjAxMDhkODIzYzY5NTM1ZTFlZDFlNjQ5NTBiNzA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtXc3Cxvqe5A8RC2ZHs591Mwmtfr1gYDEgY/VTd27jZe+G an20HWIGyxhshJP/p8h1GcI1FWbt8kskgktL6W3lMMFfTuGUE6iQ8Thbfp2R1RL7 dsOuDajRoi4ayEhFjdcZ0MOdsi6smGjPvbbWlUkYVibPbxjfVKFGyOGfEsDEtzny wuAAI/lqsUvOf1Y/TrU1/KUAYHdtux01k8Gamuv6jQnELs5vwEPIFpJ2o01tmoDp AQ9SiJAkD2mvMeGm73rCzzflRUoG4XVaq3OJV3770yHOUWlZQ9mtxTD1dDddI2Iv 3JpSb2yLeTzprvct++3IF21ybTbH00Xz4jzmmGEpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7YEc45aInfJAsFT7qyK1GO1vEJAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0Yzg4NGJjLTY2MWMtNDBlNS1iNDgyLTNlODE4MDkyNDE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FUwDQYJKoZIhvcNAQELBQADggEBACgq3QlE1qiM3TqgJuY8Wqv6f3rj uSno037/KU2sdae1dbfOxcynjsgAkR04IbYCUC8OXLOoJ0WKQwDf83UFtZx6k8KA mZSprpB89URKBqChoiSag7fCaPKVz90Vro8XJyL8apcJbEDXFXaf78CHMNYYI+8l eY/pS2eykEfi1KwO40m3aoBY0wnj23MzoGYP04NbnH6kQhQPrFFsEdOz0LxNrsQm /noZdygioeavw8mZ3QZMai/yo1w/YT8f7dJPvNqaujW285SIo+8oKJB3u7YIW2DC tSdBIaonJDwZD0C/+uvMVC+Rd7WvRCafMbXZ6KHSvPISaGbHlGQL4Qoy1Hw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:14 2025 by rpki-client