$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b538b35-6896-4666-ad39-c00d62847b87.roa File: 8b538b35-6896-4666-ad39-c00d62847b87.roa (raw, json) Hash identifier: GfOS+ZCF+/di4liNptwcIFswW+dfMV2kS3ZelOM//AU= Subject key identifier: 4C:84:49:DE:84:B0:23:D5:35:58:2C:74:D3:6F:7E:7E:45:62:0D:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 088261A97CCED05B9AF976F766104100094B73D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b538b35-6896-4666-ad39-c00d62847b87.roa Signing time: Wed 16 Jul 2025 00:21:01 +0000 ROA not before: Wed 16 Jul 2025 00:21:01 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.21.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:82:61:a9:7c:ce:d0:5b:9a:f9:76:f7:66:10:41:00:09:4b:73:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:21:01 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=4b137853b0b99ce915fe974bd728df763279e67f57ac491adcd4549c8cb649dd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:0b:90:7c:b8:28:37:d9:95:a7:eb:7f:0f: 04:8e:22:4a:86:cf:2f:fc:8f:2b:6f:64:b2:6b:86: 63:9f:e8:22:cc:b1:73:c3:89:ab:98:d2:b9:64:23: 1b:a0:35:04:19:c5:7e:e6:77:a2:d6:bc:7a:68:e7: c5:ac:96:de:61:2d:b5:57:78:fa:14:54:77:3f:27: 30:32:72:92:f8:ad:9b:15:d8:e5:01:85:de:fe:09: c4:97:d7:07:97:6b:f3:d5:90:6b:73:c3:20:a5:75: 42:3b:4d:cb:8b:18:ad:96:40:83:54:cc:c0:fb:16: 16:48:b0:cc:4d:29:3b:c6:1c:ff:20:8a:f6:bc:40: 40:3a:59:47:8d:aa:dd:a3:42:95:fa:7e:aa:a7:32: 88:03:09:4a:5a:82:27:c8:db:18:15:a4:12:bb:51: 38:4c:09:42:d0:46:b1:2c:8e:5a:29:e2:08:14:b1: 38:85:fd:10:52:28:5d:50:80:43:9a:b3:cf:cd:bc: 9a:66:84:36:bc:f8:58:a9:cd:3e:28:71:c8:8b:fe: cb:40:82:17:d1:71:fd:83:3c:f6:df:87:cb:a8:7c: 72:1e:f5:f5:ca:9e:3b:5e:3e:93:8a:99:a7:73:8e: 69:b3:6f:3e:6b:ac:c9:61:47:a4:b7:ee:b4:2d:22: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:84:49:DE:84:B0:23:D5:35:58:2C:74:D3:6F:7E:7E:45:62:0D:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b538b35-6896-4666-ad39-c00d62847b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption d0:10:2a:6c:10:94:47:58:ec:cd:5c:bf:0c:6d:9a:d8:04:37: b6:3b:9e:c4:8f:96:a6:e2:22:10:08:e4:71:f2:a2:90:59:1f: 05:19:ed:2f:2e:3c:c0:44:f5:84:4e:e5:37:df:8d:53:39:de: 5b:c6:40:61:7b:78:cd:a9:f2:a1:34:e9:ed:43:25:21:8a:1b: db:5e:b7:77:66:f1:34:71:fb:53:c9:9b:36:1d:7f:5c:ba:1e: 3b:a7:5e:9b:75:34:c8:29:51:90:96:c6:06:75:7d:fb:c6:85: e2:6d:90:48:bc:a1:88:14:21:c6:2c:65:b3:8e:26:b3:09:93: a1:e2:85:8b:a8:af:e2:bc:6a:d2:f2:8c:f5:ae:09:07:a7:73: 6e:4e:a7:d2:38:cd:f7:58:ea:33:3b:c8:7d:e6:85:2e:cc:a8: 3c:ad:a6:f8:0d:22:af:72:20:8a:65:7c:28:0f:5f:6d:32:52: 20:19:e4:90:dd:3c:84:91:c8:be:6b:50:e3:d6:21:ba:12:ab: 14:57:35:ab:17:e2:5b:93:85:d6:b3:83:02:a5:36:25:0c:c8: fa:5b:0e:e0:e5:65:b8:1c:f4:49:92:11:b6:00:a8:37:9b:4c: 13:4b:e0:d1:eb:70:6d:8b:80:b9:52:88:f4:42:75:1a:03:f2: fc:61:90:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCIJhqXzO0Fua+Xb3ZhBBAAlLc9cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAyMTAxWhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjEzNzg1M2IwYjk5Y2U5MTVmZTk3NGJkNzI4ZGY3NjMy NzllNjdmNTdhYzQ5MWFkY2Q0NTQ5YzhjYjY0OWRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5sAuQfLgoN9mVp+t/DwSOIkqGzy/8jytvZLJrhmOf6CLM sXPDiauY0rlkIxugNQQZxX7md6LWvHpo58Wslt5hLbVXePoUVHc/JzAycpL4rZsV 2OUBhd7+CcSX1weXa/PVkGtzwyCldUI7TcuLGK2WQINUzMD7FhZIsMxNKTvGHP8g iva8QEA6WUeNqt2jQpX6fqqnMogDCUpagifI2xgVpBK7UThMCULQRrEsjlop4ggU sTiF/RBSKF1QgEOas8/NvJpmhDa8+FipzT4occiL/stAghfRcf2DPPbfh8uofHIe 9fXKnjtePpOKmadzjmmzbz5rrMlhR6S37rQtIjgtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTIRJ3oSwI9U1WCx0029+fkViDQ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNTM4YjM1LTY4OTYtNDY2Ni1hZDM5LWMwMGQ2Mjg0N2I4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbCFUAwDQYJKoZIhvcNAQELBQADggEBANAQKmwQlEdY7M1cvwxtmtgEN7Y7 nsSPlqbiIhAI5HHyopBZHwUZ7S8uPMBE9YRO5TffjVM53lvGQGF7eM2p8qE06e1D JSGKG9tet3dm8TRx+1PJmzYdf1y6HjunXpt1NMgpUZCWxgZ1ffvGheJtkEi8oYgU IcYsZbOOJrMJk6HihYuor+K8atLyjPWuCQenc25Op9I4zfdY6jM7yH3mhS7MqDyt pvgNIq9yIIplfCgPX20yUiAZ5JDdPISRyL5rUOPWIboSqxRXNasX4luThdazgwKl NiUMyPpbDuDlZbgc9EmSEbYAqDebTBNL4NHrcG2LgLlSiPRCdRoD8vxhkM4= -----END CERTIFICATE-----Generated at Fri Aug 8 19:23:21 2025 by rpki-client