$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa File: 3dd10443-0b96-450b-8a58-0da2b4ad7028.roa (raw, json) Hash identifier: jZc/Td03pS++OT4Oxf6dAi4+N7ocRrZ3iNz/tQexNVg= Subject key identifier: 9E:B4:47:89:D9:AA:8D:3C:84:A0:F1:8D:3B:E2:F7:AA:A5:85:26:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14094EC638F1DFDD08DAC3775FFC5A7E142C1DDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa Signing time: Sat 26 Jul 2025 00:11:36 +0000 ROA not before: Sat 26 Jul 2025 00:11:36 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.82.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:09:4e:c6:38:f1:df:dd:08:da:c3:77:5f:fc:5a:7e:14:2c:1d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 26 00:11:36 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=097b4b1fa9728c653d759ba212260b136522d1d85d734d6b690c8208b3c95104, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:fe:10:64:41:07:34:8e:ff:0f:12:b3:71: 43:fe:2c:59:5e:6b:05:3c:82:be:17:d8:84:65:75: 7f:1d:85:c2:93:05:1d:32:49:ac:c5:62:77:20:e2: fa:4a:ec:c5:62:60:07:2f:69:75:7c:5a:c4:c8:0a: cb:5f:ff:e2:a0:41:40:23:4d:55:dd:ec:fd:58:e9: 88:9f:88:89:64:92:45:f4:3d:b4:ab:83:ee:3c:d2: b4:26:69:aa:1f:84:cc:6d:74:78:34:0d:30:42:48: 2f:56:6c:da:fb:c2:b2:8f:20:4e:81:84:16:6f:48: 9e:48:22:c6:5c:ab:ea:6a:02:43:91:9f:74:24:e3: d4:23:53:a7:2f:ea:4b:4e:8e:de:64:ea:2a:c9:20: d7:86:af:76:16:88:24:94:10:2f:e9:6c:c6:aa:94: a0:8d:09:63:4d:b2:5f:d2:fe:48:ab:27:76:8c:69: be:53:ca:66:1d:21:dc:7e:60:95:f7:32:a7:c9:90: 43:64:ef:a6:f3:9f:5a:a2:af:3f:5f:db:60:1d:15: 58:e6:9b:19:b3:52:d1:82:f7:1b:62:6a:e5:fc:10: dc:a9:0c:82:ce:a3:30:2a:06:c8:1c:c8:c7:68:1b: 41:23:0f:42:0c:a1:ae:15:cd:4d:c0:18:b4:d2:57: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:47:89:D9:AA:8D:3C:84:A0:F1:8D:3B:E2:F7:AA:A5:85:26:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.82.0.0/17 Signature Algorithm: sha256WithRSAEncryption 25:fa:12:f1:49:20:dd:cd:55:f6:f2:e9:56:a6:33:ac:7c:f2: 70:4a:47:00:91:22:52:79:44:a9:75:6a:57:46:ad:c6:21:94: 84:74:2b:a4:59:ff:02:cc:bb:92:cf:40:2e:f1:ff:b9:e4:07: d1:31:8f:8d:8c:98:50:21:fa:51:3b:f6:8d:b0:94:b2:8f:e7: b7:bc:59:fc:46:25:46:fb:d7:fb:99:e2:e1:32:39:d9:c6:b0: 96:1e:8b:89:38:2a:34:6c:49:d9:9f:b6:cf:c7:1d:7b:27:11: ea:1c:10:7e:94:b8:a4:88:34:33:58:8e:ea:55:9e:7a:2c:ea: f6:79:8e:ce:6e:9e:d4:4a:80:87:24:6e:9d:f1:7b:bf:10:68: 66:b3:98:7d:c1:f5:16:d2:11:f1:29:ce:29:e0:31:98:1b:97: 47:04:7f:4f:ab:8e:b4:14:00:ea:f1:eb:cf:28:72:70:e1:67: 85:e2:d4:12:82:4e:5b:46:c1:b9:4e:02:ae:32:35:9c:61:95: 95:9f:fc:9e:89:05:00:31:4a:d7:41:d5:0b:9d:72:37:21:f0: ee:39:11:b3:e6:cd:3b:4f:8e:4a:04:62:1c:1f:16:84:6c:32: ac:64:92:53:1d:20:1c:c5:cc:ec:e6:60:79:ae:2a:d7:d9:68: e8:76:51:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFAlOxjjx390I2sN3X/xafhQsHdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI2MDAxMTM2WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTdiNGIxZmE5NzI4YzY1M2Q3NTliYTIxMjI2MGIxMzY1 MjJkMWQ4NWQ3MzRkNmI2OTBjODIwOGIzYzk1MTA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCRP4QZEEHNI7/DxKzcUP+LFleawU8gr4X2IRldX8dhcKT BR0ySazFYncg4vpK7MViYAcvaXV8WsTICstf/+KgQUAjTVXd7P1Y6YifiIlkkkX0 PbSrg+480rQmaaofhMxtdHg0DTBCSC9WbNr7wrKPIE6BhBZvSJ5IIsZcq+pqAkOR n3Qk49QjU6cv6ktOjt5k6irJINeGr3YWiCSUEC/pbMaqlKCNCWNNsl/S/kirJ3aM ab5TymYdIdx+YJX3MqfJkENk76bzn1qirz9f22AdFVjmmxmzUtGC9xtiauX8ENyp DILOozAqBsgcyMdoG0EjD0IMoa4VzU3AGLTSV5uDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnrRHidmqjTyEoPGNO+L3qqWFJtowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZDEwNDQzLTBiOTYtNDUwYi04YTU4LTBkYTJiNGFkNzAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdAUgAwDQYJKoZIhvcNAQELBQADggEBACX6EvFJIN3NVfby6VamM6x88nBK RwCRIlJ5RKl1aldGrcYhlIR0K6RZ/wLMu5LPQC7x/7nkB9Exj42MmFAh+lE79o2w lLKP57e8WfxGJUb71/uZ4uEyOdnGsJYei4k4KjRsSdmfts/HHXsnEeocEH6UuKSI NDNYjupVnnos6vZ5js5untRKgIckbp3xe78QaGazmH3B9RbSEfEpzingMZgbl0cE f0+rjrQUAOrx688ocnDhZ4Xi1BKCTltGwblOAq4yNZxhlZWf/J6JBQAxStdB1Qud cjch8O45EbPmzTtPjkoEYhwfFoRsMqxkklMdIBzFzOzmYHmuKtfZaOh2UY0= -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:28 2025 by rpki-client