$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1cfdde-5505-4973-8a61-33c56b97592b.roa File: 3c1cfdde-5505-4973-8a61-33c56b97592b.roa (raw, json) Hash identifier: uREKwDZK8Yjk1YgEeCHJqU/8k+ur32mLethsWKvedYE= Subject key identifier: 72:C2:1B:23:9B:B6:B0:4A:B2:D8:1B:95:57:3D:69:9C:43:29:EE:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E93855B77337EC548E6C80A0FC94C2150A44189 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1cfdde-5505-4973-8a61-33c56b97592b.roa Signing time: Tue 12 Aug 2025 00:51:26 +0000 ROA not before: Tue 12 Aug 2025 00:51:26 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 71.141.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:93:85:5b:77:33:7e:c5:48:e6:c8:0a:0f:c9:4c:21:50:a4:41:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:51:26 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=ddb7ad531433299998b2d66236f6ea1db14f2c85e392d8df9fa901bc1ba4dd2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:49:1f:f7:24:a7:ee:8d:de:d9:9e:9c:c3: 02:74:66:4f:24:c7:b8:f1:dd:6f:d6:f9:ab:1b:23: 6a:c8:30:e1:8e:c2:7d:c6:3b:35:50:cd:28:ac:a5: 84:a4:6a:a9:5d:a6:44:da:cb:6c:e9:59:89:9b:f1: d8:1f:8a:18:a5:7e:fe:cd:4d:21:15:73:90:19:63: 87:1b:c9:da:11:3e:51:f5:a3:48:80:b5:17:d0:6f: 1d:1d:c4:27:ac:b0:3b:ba:d0:8c:e8:b6:1c:b5:9a: 10:ad:bb:bd:c9:86:d8:a5:aa:10:ea:11:6f:70:a4: c3:aa:eb:2a:53:82:bd:05:95:8a:bb:c7:f5:62:52: 06:35:9a:75:50:6d:8f:fb:91:01:d3:b9:92:9a:16: 07:19:fe:f7:b8:6e:92:5e:31:13:b7:60:11:a8:6c: c2:f6:f3:45:e4:a9:41:cb:f4:61:52:90:34:fd:37: e9:41:0a:b1:13:7b:b9:33:28:01:f8:32:0b:4c:45: 52:fc:1b:0d:37:08:86:9a:0b:bf:d6:ac:8f:cc:db: a7:b5:f8:49:c8:7b:7c:50:ec:7d:18:03:0c:62:ff: a2:d3:83:26:6d:7d:6b:a2:39:82:d6:04:3d:8d:55: f7:be:5b:c0:2d:43:bc:78:c3:a5:24:a7:10:53:20: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C2:1B:23:9B:B6:B0:4A:B2:D8:1B:95:57:3D:69:9C:43:29:EE:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1cfdde-5505-4973-8a61-33c56b97592b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.141.128.0/18 Signature Algorithm: sha256WithRSAEncryption 21:a8:43:bb:f0:35:bc:13:67:41:48:59:e9:bd:c0:cc:2e:cb: ac:4d:9a:30:d1:04:68:89:f8:1e:c5:16:52:86:b7:02:b0:29: 97:9b:0d:b5:7f:aa:fc:ea:58:09:a0:66:99:79:29:41:d4:8d: cb:a1:0e:49:cc:d8:be:fa:8a:0b:ac:80:48:4b:b0:fd:28:cc: 30:36:3f:8f:4e:3e:92:c1:f3:39:44:b2:2c:8c:a8:f5:49:b7: af:aa:6e:7b:d0:12:51:1d:06:6b:04:f1:90:82:65:8a:73:3c: 44:9b:2c:25:68:3c:67:87:9f:32:61:90:fd:16:97:02:0d:98: 7f:86:8e:e5:bd:2f:27:7c:3d:21:cf:81:ec:73:82:57:91:c4: 34:be:94:d5:19:3f:4c:8f:15:62:c6:5b:e5:a7:23:49:5d:c1: ca:a7:80:3c:83:6b:ed:5e:41:5c:9b:7f:13:ec:9e:4a:c9:21: fc:d6:c5:5a:8b:47:e7:72:ef:56:1e:bc:50:39:41:73:c7:4c: e0:2b:8f:a0:43:72:bf:87:f1:75:5c:63:df:82:d5:e2:3a:16: 21:5f:ae:9c:a5:7c:12:d2:76:15:72:4e:85:63:cd:1f:2b:d8: eb:b6:7b:f7:fc:d8:82:31:3b:ca:31:ce:2d:f8:6f:de:21:20: 6e:74:3d:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHpOFW3czfsVI5sgKD8lMIVCkQYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MTI2WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGI3YWQ1MzE0MzMyOTk5OThiMmQ2NjIzNmY2ZWExZGIx NGYyYzg1ZTM5MmQ4ZGY5ZmE5MDFiYzFiYTRkZDJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnL0kf9ySn7o3e2Z6cwwJ0Zk8kx7jx3W/W+asbI2rIMOGO wn3GOzVQzSispYSkaqldpkTay2zpWYmb8dgfihilfv7NTSEVc5AZY4cbydoRPlH1 o0iAtRfQbx0dxCessDu60Izothy1mhCtu73JhtilqhDqEW9wpMOq6ypTgr0FlYq7 x/ViUgY1mnVQbY/7kQHTuZKaFgcZ/ve4bpJeMRO3YBGobML280XkqUHL9GFSkDT9 N+lBCrETe7kzKAH4MgtMRVL8Gw03CIaaC7/WrI/M26e1+EnIe3xQ7H0YAwxi/6LT gyZtfWuiOYLWBD2NVfe+W8AtQ7x4w6UkpxBTIP/LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcsIbI5u2sEqy2BuVVz1pnEMp7o4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjMWNmZGRlLTU1MDUtNDk3My04YTYxLTMzYzU2Yjk3NTkyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHjYAwDQYJKoZIhvcNAQELBQADggEBACGoQ7vwNbwTZ0FIWem9wMwuy6xN mjDRBGiJ+B7FFlKGtwKwKZebDbV/qvzqWAmgZpl5KUHUjcuhDknM2L76igusgEhL sP0ozDA2P49OPpLB8zlEsiyMqPVJt6+qbnvQElEdBmsE8ZCCZYpzPESbLCVoPGeH nzJhkP0WlwINmH+GjuW9Lyd8PSHPgexzgleRxDS+lNUZP0yPFWLGW+WnI0ldwcqn gDyDa+1eQVybfxPsnkrJIfzWxVqLR+dy71YevFA5QXPHTOArj6BDcr+H8XVcY9+C 1eI6FiFfrpylfBLSdhVyToVjzR8r2Ou2e/f82IIxO8oxzi34b94hIG50PQM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:33 2025 by rpki-client