$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa File: e85f7629-042d-460b-8057-96331b4ff972.roa (raw, json) Hash identifier: J8kBOcn6M7RzwtvcdB3nTxYQOwLDI+RermWdumtIabI= Subject key identifier: 86:7E:59:53:41:8E:4C:6F:CB:0E:6E:07:5F:7B:92:79:FC:20:C4:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4556965EB114448FB10F9E0801CCE137218C29C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa Signing time: Wed 23 Jul 2025 00:30:29 +0000 ROA not before: Wed 23 Jul 2025 00:30:29 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.19.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:56:96:5e:b1:14:44:8f:b1:0f:9e:08:01:cc:e1:37:21:8c:29:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:29 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=2581674cd82435ea90fc08f19ac1c34f0622c8b9b41f26164bbd73449da6db84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:73:87:02:24:94:b5:9d:29:88:d2:90:df: c3:e2:9d:1f:be:08:de:54:91:7c:36:62:a7:1a:88: 09:0d:94:21:ce:7e:1f:1e:f7:a8:dc:19:56:51:78: bd:b3:f9:d5:35:c5:52:d5:15:c2:c8:bc:56:d8:8a: da:3e:d5:08:00:48:85:dd:4b:1c:74:1f:91:da:35: ef:fc:8d:28:0b:48:1e:9c:7b:8c:f6:db:32:bd:86: 5f:8d:5b:de:e3:40:61:51:39:4c:86:41:37:08:92: 92:dc:cd:ea:a6:d5:db:fc:6f:09:96:4d:e5:cc:8f: 11:a0:43:41:52:67:39:d1:0c:68:86:37:bd:99:19: 5a:ec:51:b7:61:5d:ab:cc:98:8a:38:cf:8a:02:7b: 02:52:24:9c:4b:54:ea:ac:22:06:f4:63:a4:44:d0: f8:e1:09:e3:e7:96:29:8c:c0:cf:76:8e:1a:2c:a3: 39:14:02:3a:19:5e:81:2b:d5:67:6e:2a:4e:70:bd: 4e:99:bc:ad:1f:bd:f1:6f:9b:bf:1f:13:a2:2b:c1: 1f:9c:2e:6d:5e:92:af:86:c6:35:e9:8f:47:83:b5: e4:0b:00:4e:0a:99:23:d4:8f:3f:02:6e:6b:0c:08: eb:d0:cc:9f:0c:96:d4:05:e6:db:bc:7d:0c:a8:74: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:59:53:41:8E:4C:6F:CB:0E:6E:07:5F:7B:92:79:FC:20:C4:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.19.0.0/17 Signature Algorithm: sha256WithRSAEncryption b4:4e:80:0b:2e:aa:8f:8b:a7:45:2f:48:3a:7f:38:d8:f4:5c: 77:c3:e1:83:45:fd:a4:02:9f:12:17:8f:14:33:b8:64:45:46: ee:c6:31:93:01:95:1c:65:4f:00:98:35:6a:a9:7b:7f:b4:f1: c6:60:b9:33:d6:04:f2:2f:53:17:5a:ca:76:bd:7b:0f:b1:8c: dc:0a:41:af:bb:6d:bf:5c:4b:31:e3:64:f0:5a:6f:1c:4e:24: 14:59:2c:ae:73:7e:81:dc:40:be:da:6b:bd:28:b2:38:ac:ca: 83:3a:cd:37:50:77:11:a1:ef:ce:2f:71:94:27:a3:3e:ae:98: 38:fc:9e:dd:49:e8:f4:c5:aa:cb:95:94:f7:56:0b:75:c9:f1: a7:b5:b4:e8:d4:de:49:44:87:86:d7:04:36:4e:69:f0:ed:60: b1:e0:f3:a3:b7:84:ff:00:17:82:70:58:b4:1c:9f:77:31:0c: ba:e6:54:90:2a:df:44:0a:d3:07:25:fa:99:bd:c8:12:52:49: 11:f9:5e:99:4d:15:28:d8:b3:21:19:5d:50:d7:30:02:5c:53: 02:e7:b6:ff:c9:e6:58:7f:28:9a:d2:94:31:82:c9:68:34:37: 1f:05:67:d1:e7:e8:56:3e:19:84:03:49:83:b2:29:5e:47:8e: 2f:c2:af:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURVaWXrEURI+xD54IAczhNyGMKcIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAzMDI5WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTgxNjc0Y2Q4MjQzNWVhOTBmYzA4ZjE5YWMxYzM0ZjA2 MjJjOGI5YjQxZjI2MTY0YmJkNzM0NDlkYTZkYjg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaiHOHAiSUtZ0piNKQ38PinR++CN5UkXw2YqcaiAkNlCHO fh8e96jcGVZReL2z+dU1xVLVFcLIvFbYito+1QgASIXdSxx0H5HaNe/8jSgLSB6c e4z22zK9hl+NW97jQGFROUyGQTcIkpLczeqm1dv8bwmWTeXMjxGgQ0FSZznRDGiG N72ZGVrsUbdhXavMmIo4z4oCewJSJJxLVOqsIgb0Y6RE0PjhCePnlimMwM92jhos ozkUAjoZXoEr1WduKk5wvU6ZvK0fvfFvm78fE6IrwR+cLm1ekq+GxjXpj0eDteQL AE4KmSPUjz8CbmsMCOvQzJ8MltQF5tu8fQyodO3NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhn5ZU0GOTG/LDm4HX3uSefwgxOQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NWY3NjI5LTA0MmQtNDYwYi04MDU3LTk2MzMxYjRmZjk3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfREwAwDQYJKoZIhvcNAQELBQADggEBALROgAsuqo+Lp0UvSDp/ONj0XHfD 4YNF/aQCnxIXjxQzuGRFRu7GMZMBlRxlTwCYNWqpe3+08cZguTPWBPIvUxdayna9 ew+xjNwKQa+7bb9cSzHjZPBabxxOJBRZLK5zfoHcQL7aa70osjisyoM6zTdQdxGh 784vcZQnoz6umDj8nt1J6PTFqsuVlPdWC3XJ8ae1tOjU3klEh4bXBDZOafDtYLHg 86O3hP8AF4JwWLQcn3cxDLrmVJAq30QK0wcl+pm9yBJSSRH5XplNFSjYsyEZXVDX MAJcUwLntv/J5lh/KJrSlDGCyWg0Nx8FZ9Hn6FY+GYQDSYOyKV5Hji/Cryo= -----END CERTIFICATE-----Generated at Thu Jul 31 01:11:36 2025 by rpki-client