$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa File: 1a931f43-76c7-4a61-9317-d9b5dcabea95.roa (raw, json) Hash identifier: 55ysZj1BdBUh5Qf84mZG1KbWmvntbeIB7XimhW17I4g= Subject key identifier: 98:A1:A1:1A:CC:FD:8F:C3:85:99:F3:61:81:4A:BE:55:2C:5F:B2:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E3747B149EBBEEFF28AA11CC56094D0B0B4EE7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa Signing time: Mon 28 Jul 2025 15:41:03 +0000 ROA not before: Mon 28 Jul 2025 15:41:03 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:37:47:b1:49:eb:be:ef:f2:8a:a1:1c:c5:60:94:d0:b0:b4:ee:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 15:41:03 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=b6be7243957f06656c8ea191fdd43c4f1d0056fda430c6dc24fe201b31702d35, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:52:24:a6:43:97:51:68:a2:dc:df:3d:88: 99:e4:0c:7b:54:98:e2:f8:a4:38:4f:92:1e:23:2e: 48:c6:fd:d2:77:cc:7a:79:40:aa:bd:45:b2:d0:79: f1:be:ad:c0:c3:ee:7f:9f:68:ac:d4:79:a3:3d:02: 21:2f:03:a2:9b:58:9d:38:d5:f6:cd:6c:ab:02:4b: 46:a1:0d:8b:40:6f:1f:4b:b5:81:0d:a6:fb:b0:0e: 29:a5:87:8d:2e:3c:f3:57:d2:83:b7:ee:b1:fe:d2: 6f:11:52:0b:66:06:c7:4f:7e:ca:be:16:2e:a3:1c: 1f:37:70:eb:84:e7:a8:0b:fe:53:d5:dd:3b:c0:df: 1f:e6:74:e8:d4:29:fd:54:ae:21:a7:24:e5:b8:6a: 0d:79:8d:94:d5:ca:0c:7c:69:2b:af:55:84:db:5d: 5d:ad:28:e4:de:a7:0f:76:62:90:48:ea:bd:fc:21: 65:e4:64:b3:2d:e6:36:87:24:1a:67:89:29:3b:ac: e6:0c:db:65:3a:7a:a8:5a:05:39:58:c0:21:49:b8: 02:d0:68:2d:48:9d:dc:65:69:36:19:62:43:9d:04: 3e:e6:90:ef:7a:a0:2a:32:73:e8:06:ae:c4:9d:21: aa:3f:cf:22:80:05:97:1c:d4:a2:33:1f:95:ff:b7: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:A1:1A:CC:FD:8F:C3:85:99:F3:61:81:4A:BE:55:2C:5F:B2:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a931f43-76c7-4a61-9317-d9b5dcabea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.104.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c3:2e:74:2e:68:d8:bd:da:b4:ce:f8:4d:ee:0c:70:4a:87: 2d:0c:46:9d:da:5f:e0:67:62:61:c2:05:cf:cd:dc:66:0f:b7: 9d:df:57:cf:c5:d3:e5:ce:33:87:db:1b:fa:90:cd:24:9a:0b: 5d:e5:3d:ca:a8:87:f8:e0:ff:99:6e:71:c3:3d:bb:c8:52:f2: 92:fe:f9:b6:2b:c7:3d:3f:ad:d2:36:9f:7e:c0:30:62:aa:bf: 0f:d4:51:3e:87:f6:be:4f:51:55:89:67:38:1d:4a:03:8b:fa: 32:6e:93:77:b0:8c:87:24:7f:aa:5c:60:53:b7:f5:aa:71:ff: 01:1d:5d:db:dd:34:26:ea:55:38:69:93:15:c8:47:5a:30:22: 6e:ac:ba:f8:ab:19:36:1a:f5:18:11:de:db:bb:ee:ac:1d:71: de:f3:f5:da:ee:7d:f2:1d:56:3e:20:92:ed:3d:01:46:2e:d0: 8a:31:71:f2:d8:6a:a8:08:98:1f:b7:e3:22:9b:c2:f3:60:5d: af:af:a6:f6:c8:4c:1b:c6:db:6d:34:8b:cf:54:fc:f0:e1:c4: 97:d6:aa:db:e7:88:74:11:10:65:3d:68:bd:ee:65:e9:04:ba: d3:5a:ba:96:58:84:97:bc:3e:4e:1d:ed:cf:49:54:b5:eb:b1: ad:90:3e:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDjdHsUnrvu/yiqEcxWCU0LC07nowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI4MTU0MTAzWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmJlNzI0Mzk1N2YwNjY1NmM4ZWExOTFmZGQ0M2M0ZjFk MDA1NmZkYTQzMGM2ZGMyNGZlMjAxYjMxNzAyZDM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzxFIkpkOXUWii3N89iJnkDHtUmOL4pDhPkh4jLkjG/dJ3 zHp5QKq9RbLQefG+rcDD7n+faKzUeaM9AiEvA6KbWJ041fbNbKsCS0ahDYtAbx9L tYENpvuwDimlh40uPPNX0oO37rH+0m8RUgtmBsdPfsq+Fi6jHB83cOuE56gL/lPV 3TvA3x/mdOjUKf1UriGnJOW4ag15jZTVygx8aSuvVYTbXV2tKOTepw92YpBI6r38 IWXkZLMt5jaHJBpniSk7rOYM22U6eqhaBTlYwCFJuALQaC1IndxlaTYZYkOdBD7m kO96oCoyc+gGrsSdIao/zyKABZcc1KIzH5X/t245AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmKGhGsz9j8OFmfNhgUq+VSxfsqYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhOTMxZjQzLTc2YzctNGE2MS05MzE3LWQ5YjVkY2FiZWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABANGgwDQYJKoZIhvcNAQELBQADggEBACHDLnQuaNi92rTO+E3uDHBKhy0M Rp3aX+BnYmHCBc/N3GYPt53fV8/F0+XOM4fbG/qQzSSaC13lPcqoh/jg/5luccM9 u8hS8pL++bYrxz0/rdI2n37AMGKqvw/UUT6H9r5PUVWJZzgdSgOL+jJuk3ewjIck f6pcYFO39apx/wEdXdvdNCbqVThpkxXIR1owIm6suvirGTYa9RgR3tu77qwdcd7z 9druffIdVj4gku09AUYu0IoxcfLYaqgImB+34yKbwvNgXa+vpvbITBvG2200i89U /PDhxJfWqtvniHQREGU9aL3uZekEutNaupZYhJe8Pk4d7c9JVLXrsa2QPmI= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:30 2025 by rpki-client