$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c2bd182-7179-4e78-9d39-dd928bccf652.roa File: 1c2bd182-7179-4e78-9d39-dd928bccf652.roa (raw, json) Hash identifier: N1lo4SWKdU1DdDEJHq+SuCNF/QWm/ttrUbZe5B2b+7Q= Subject key identifier: 66:94:56:AA:34:DD:65:C8:50:C6:38:45:06:A3:6F:5E:36:D6:6B:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C951E61DEA038631D2D3BF327C376AF36D32168 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c2bd182-7179-4e78-9d39-dd928bccf652.roa Signing time: Sat 07 Jun 2025 00:41:03 +0000 ROA not before: Sat 07 Jun 2025 00:41:03 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:95:1e:61:de:a0:38:63:1d:2d:3b:f3:27:c3:76:af:36:d3:21:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 7 00:41:03 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=581f04c250b8eed1d457e74946c9139c8e238506ed8cbf84eb76dbbe06d0f435, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:1f:ff:15:fb:89:83:13:81:3d:a4:c9:77: 60:bb:af:a7:5b:39:42:51:ed:51:9b:2a:b8:aa:6e: 77:85:c2:80:79:92:39:3d:7a:58:23:58:14:73:08: 12:03:20:ef:d9:4b:44:59:04:d5:ef:6a:c5:bb:06: c1:19:27:92:02:fc:d0:fd:d3:87:a8:bf:bd:f9:cc: dc:31:98:d1:60:5b:c0:d2:3d:d9:23:56:c2:47:ea: cd:92:12:6c:21:b3:d9:05:16:f2:42:ea:2e:07:31: 42:85:0d:24:74:f7:25:ed:bf:7d:88:64:f6:bf:0e: 4e:bf:ce:f2:73:9b:44:3c:91:9f:22:9b:52:3c:37: 44:9f:fe:6b:2f:b3:5f:4e:d8:4c:b3:2a:40:49:c9: e1:50:54:be:75:92:98:92:22:30:6d:cb:f5:7d:77: a5:57:31:ca:42:dd:5a:07:33:51:96:11:a7:af:f8: 35:fb:1a:bb:c0:af:6f:b9:10:e3:22:42:ca:02:4f: ea:53:31:b3:1c:46:62:07:7a:16:a6:0b:f0:8d:34: 3c:3b:21:d8:fe:38:46:d4:ee:0f:c7:35:63:2f:d2: 5f:95:b9:3f:c2:ab:58:d7:1e:e2:26:61:8f:27:ca: 5e:33:26:8b:95:20:c6:ee:6c:f1:14:17:8a:3c:fd: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:94:56:AA:34:DD:65:C8:50:C6:38:45:06:A3:6F:5E:36:D6:6B:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c2bd182-7179-4e78-9d39-dd928bccf652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.232.0/21 Signature Algorithm: sha256WithRSAEncryption 70:cc:f8:b5:a1:10:2b:f0:bf:d5:6b:1a:c6:8a:a4:ca:83:de: 29:6a:b3:7a:95:a8:dd:1c:9b:83:33:88:d7:7d:62:12:e7:4c: 92:87:fa:8c:37:fd:01:43:c1:80:d1:90:6a:f6:ce:dc:8b:44: d1:6a:4f:77:df:aa:0a:de:f4:94:9a:0c:c7:7a:54:ed:5c:0b: c8:6a:97:af:60:15:51:c1:d8:80:ad:e1:a2:a3:5b:36:43:47: 4d:11:40:62:0e:9a:ce:0c:dd:26:88:d8:5c:8b:26:9f:c5:8a: 50:93:df:04:a9:f2:f6:a3:67:5f:16:fb:09:b8:7c:7e:24:16: f0:79:3b:94:f9:fe:40:63:c2:98:8d:bc:96:53:ad:a6:19:1d: fb:dd:99:b7:58:58:fb:5d:8f:a3:73:f4:b9:dd:f1:47:24:fa: 4c:4c:17:89:d9:c4:e7:2e:2d:3f:21:52:19:3b:8a:be:7d:38: c1:f0:f7:ac:a7:ed:aa:4b:24:77:3a:77:ea:66:a6:81:17:cd: dd:f1:89:26:de:69:47:76:2a:3e:47:5d:c0:d4:67:16:1b:59: 38:cf:d9:b7:54:c2:6d:13:17:18:dc:8c:86:31:5b:af:ed:31: 20:95:7e:7b:5a:49:a1:50:0a:91:b0:41:54:29:3e:cc:4b:93: 06:78:4f:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHJUeYd6gOGMdLTvzJ8N2rzbTIWgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA3MDA0MTAzWhcNMjUwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODFmMDRjMjUwYjhlZWQxZDQ1N2U3NDk0NmM5MTM5Yzhl MjM4NTA2ZWQ4Y2JmODRlYjc2ZGJiZTA2ZDBmNDM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu1h//FfuJgxOBPaTJd2C7r6dbOUJR7VGbKriqbneFwoB5 kjk9elgjWBRzCBIDIO/ZS0RZBNXvasW7BsEZJ5IC/ND904eov735zNwxmNFgW8DS PdkjVsJH6s2SEmwhs9kFFvJC6i4HMUKFDSR09yXtv32IZPa/Dk6/zvJzm0Q8kZ8i m1I8N0Sf/msvs19O2EyzKkBJyeFQVL51kpiSIjBty/V9d6VXMcpC3VoHM1GWEaev +DX7GrvAr2+5EOMiQsoCT+pTMbMcRmIHehamC/CNNDw7Idj+OEbU7g/HNWMv0l+V uT/Cq1jXHuImYY8nyl4zJouVIMbubPEUF4o8/VVBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZpRWqjTdZchQxjhFBqNvXjbWa3IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjMmJkMTgyLTcxNzktNGU3OC05ZDM5LWRkOTI4YmNjZjY1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANA4ugwDQYJKoZIhvcNAQELBQADggEBAHDM+LWhECvwv9VrGsaKpMqD3ilq s3qVqN0cm4MziNd9YhLnTJKH+ow3/QFDwYDRkGr2ztyLRNFqT3ffqgre9JSaDMd6 VO1cC8hql69gFVHB2ICt4aKjWzZDR00RQGIOms4M3SaI2FyLJp/FilCT3wSp8vaj Z18W+wm4fH4kFvB5O5T5/kBjwpiNvJZTraYZHfvdmbdYWPtdj6Nz9Lnd8Uck+kxM F4nZxOcuLT8hUhk7ir59OMHw96yn7apLJHc6d+pmpoEXzd3xiSbeaUd2Kj5HXcDU ZxYbWTjP2bdUwm0TFxjcjIYxW6/tMSCVfntaSaFQCpGwQVQpPsxLkwZ4T4c= -----END CERTIFICATE-----Generated at Sat Jun 14 06:50:51 2025 by rpki-client