$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa File: 1ca07e02-81c0-42bd-b83a-ff51138805a0.roa (raw, json) Hash identifier: Ha0uDMtAZIybKKM9K/xnxsFHd+20XwVQj9ZN8jjYk3Q= Subject key identifier: 29:C3:1D:DC:BD:C0:A9:34:91:DB:A6:6D:49:E1:22:37:FA:97:28:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54EDDDEE8443CE73C0331A95DB328FCC26FCAEBE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa Signing time: Mon 16 Jun 2025 15:41:26 +0000 ROA not before: Mon 16 Jun 2025 15:41:26 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ed:dd:ee:84:43:ce:73:c0:33:1a:95:db:32:8f:cc:26:fc:ae:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:41:26 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=4b629203a0c9ac63f48b9a28ef9ee1abf58efd3a05fcffe88ed6b7bf05c66bde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:4b:55:81:f8:bf:f9:51:c3:b7:38:e0:70: 2e:41:23:6d:48:0e:10:0a:28:83:0f:95:da:7d:fc: 02:34:fd:5b:96:8b:e9:ef:be:21:9f:2e:5f:f3:cd: b0:9f:83:4c:ed:c2:39:f9:b2:19:7d:6d:7b:6d:48: 98:50:89:2c:73:75:5d:6a:8f:2c:00:4e:cb:2f:06: 7a:a2:37:b6:c8:c3:70:5d:00:d9:6f:f5:44:71:6d: 3f:ef:a9:86:c3:cb:40:24:b0:0f:63:06:6b:02:41: 73:93:d0:73:d5:c2:e8:b4:9e:8f:b2:e1:9c:50:56: 7c:24:3b:b7:89:52:3b:37:b2:70:4f:3d:97:69:48: b9:e5:6f:27:b4:1f:47:cf:b2:ec:b0:03:d5:bc:8d: b5:22:3a:fd:6a:f2:3c:29:6b:8b:61:3e:23:c3:85: 84:f0:a3:9d:bc:2a:11:43:47:1b:2f:23:30:c2:71: de:e6:ab:f0:2c:c6:d2:9f:e6:33:7b:e8:de:6d:7b: 0c:35:7f:e7:37:61:d2:5c:b7:35:26:13:ea:b9:2c: 88:63:3b:1a:51:70:32:a1:b5:ea:aa:ad:9b:23:a9: 02:8d:5b:0b:b0:17:8f:ac:bd:49:76:96:e3:2c:32: 84:dc:60:1d:3a:9d:1a:b4:a0:74:ff:19:3f:b0:f9: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:1D:DC:BD:C0:A9:34:91:DB:A6:6D:49:E1:22:37:FA:97:28:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.214.0/24 Signature Algorithm: sha256WithRSAEncryption 76:b3:85:5e:b5:35:ad:cb:df:30:39:eb:3d:01:dd:17:03:3e: 1b:b1:06:f6:44:6a:67:2f:99:c0:e3:cb:aa:74:ed:ff:39:b2: 9a:ba:ac:2d:9d:68:bd:7e:a1:c5:f9:fa:23:80:53:38:21:42: e9:7a:2b:82:cf:ff:0f:f2:86:d5:04:57:b3:e1:ab:f2:d1:e9: ac:42:1d:a8:79:0d:5f:44:11:76:3f:f2:fe:82:68:cd:d4:e6: 22:23:34:0e:54:2d:0a:35:fd:5e:07:dc:7f:9a:1c:6e:3c:dd: fc:e8:f9:bc:a8:2d:a9:fb:d7:8f:fc:02:65:50:06:ea:c9:4e: c0:d0:b9:55:87:3a:b5:04:31:99:df:51:ad:f4:d9:7f:b5:e7: 14:a7:71:73:d0:25:74:d6:a5:15:b1:e6:da:57:85:b4:c7:b1: 2e:e3:79:53:9c:7c:04:50:52:31:b1:e2:6d:1e:4b:0f:90:de: a6:87:4d:53:39:f3:69:63:ca:42:b4:87:f9:93:3d:6d:50:37: 9f:02:66:1c:22:cc:63:e3:1b:ea:e6:81:d1:0e:20:60:0b:ec: 72:69:b6:8d:72:41:c0:81:be:7b:0d:06:93:1d:3e:1a:e6:d2: 73:8a:97:0e:8d:36:33:1e:47:38:34:84:3f:f7:a4:92:15:b2: d6:e0:a0:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVO3d7oRDznPAMxqV2zKPzCb8rr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTU0MTI2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjYyOTIwM2EwYzlhYzYzZjQ4YjlhMjhlZjllZTFhYmY1 OGVmZDNhMDVmY2ZmZTg4ZWQ2YjdiZjA1YzY2YmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCflEtVgfi/+VHDtzjgcC5BI21IDhAKKIMPldp9/AI0/VuW i+nvviGfLl/zzbCfg0ztwjn5shl9bXttSJhQiSxzdV1qjywATssvBnqiN7bIw3Bd ANlv9URxbT/vqYbDy0AksA9jBmsCQXOT0HPVwui0no+y4ZxQVnwkO7eJUjs3snBP PZdpSLnlbye0H0fPsuywA9W8jbUiOv1q8jwpa4thPiPDhYTwo528KhFDRxsvIzDC cd7mq/AsxtKf5jN76N5teww1f+c3YdJctzUmE+q5LIhjOxpRcDKhteqqrZsjqQKN WwuwF4+svUl2luMsMoTcYB06nRq0oHT/GT+w+SaRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKcMd3L3AqTSR26ZtSeEiN/qXKGgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjYTA3ZTAyLTgxYzAtNDJiZC1iODNhLWZmNTExMzg4MDVhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFANYwDQYJKoZIhvcNAQELBQADggEBAHazhV61Na3L3zA56z0B3RcDPhux BvZEamcvmcDjy6p07f85spq6rC2daL1+ocX5+iOAUzghQul6K4LP/w/yhtUEV7Ph q/LR6axCHah5DV9EEXY/8v6CaM3U5iIjNA5ULQo1/V4H3H+aHG483fzo+byoLan7 14/8AmVQBurJTsDQuVWHOrUEMZnfUa302X+15xSncXPQJXTWpRWx5tpXhbTHsS7j eVOcfARQUjGx4m0eSw+Q3qaHTVM582ljykK0h/mTPW1QN58CZhwizGPjG+rmgdEO IGAL7HJpto1yQcCBvnsNBpMdPhrm0nOKlw6NNjMeRzg0hD/3pJIVstbgoBo= -----END CERTIFICATE-----Generated at Sun Jun 29 04:27:25 2025 by rpki-client