$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa File: 34c884bc-661c-40e5-b482-3e818092414c.roa (raw, json) Hash identifier: EutG1fODtgqCVEoVtIXf+pVAsi+E+oJUoHPquuyq6tY= Subject key identifier: DE:06:5A:BD:00:CE:14:1F:FB:30:CE:4D:28:72:BC:56:CB:BB:C1:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 455492DEA83B39D778EF2CDEF56C4977F59BD8B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa Signing time: Tue 24 Jun 2025 00:31:20 +0000 ROA not before: Tue 24 Jun 2025 00:31:20 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:54:92:de:a8:3b:39:d7:78:ef:2c:de:f5:6c:49:77:f5:9b:d8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:31:20 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=c9445736e8b69832d8a79dccd6a3c446af079ec492335afc6bdecb396c50ed85, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:60:92:90:e5:b5:b8:1e:10:98:dd:97:91: 0b:3b:23:97:7b:a9:54:8f:0d:52:82:d8:57:8a:26: 33:a8:a8:fa:c8:44:6e:97:34:72:c0:e4:a6:81:26: 36:5e:f4:44:ce:5e:58:61:5e:40:2b:92:6c:8f:5e: 7f:38:67:82:a9:2b:ed:dc:1a:57:73:09:05:4d:d4: f7:3a:d8:c2:9f:c8:79:4d:ab:51:e7:b0:5b:84:29: f6:2c:49:3b:81:a8:b3:75:10:31:56:3d:7e:09:3d: 4c:6f:ea:f8:85:cb:43:af:63:f0:58:a3:10:99:57: 35:eb:7a:09:94:7c:6a:30:7c:dd:61:d8:c5:62:0f: 66:8f:b1:d2:75:31:de:38:4c:f1:61:85:af:99:0a: 2a:23:03:af:ff:42:a1:ba:50:3e:cc:2e:e1:d0:2e: fc:2e:1e:ba:9c:21:8c:50:74:30:12:42:b7:b3:a5: 7f:09:8a:a4:ef:94:dc:6b:3b:03:b8:32:0c:b9:5b: 70:a1:d4:c8:02:e4:b3:ad:73:71:d3:27:77:2a:60: 27:f6:ca:ff:30:00:bf:82:f3:55:c1:45:d4:08:02: 1b:6e:08:72:ef:f1:08:8c:59:99:7c:94:94:23:44: 95:93:ab:d0:4c:3e:f1:8f:c8:a0:9a:43:27:95:3b: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:06:5A:BD:00:CE:14:1F:FB:30:CE:4D:28:72:BC:56:CB:BB:C1:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.85.0/24 Signature Algorithm: sha256WithRSAEncryption 77:03:17:a2:ab:ba:25:d6:cb:06:56:b9:20:b4:36:84:f7:56: 33:11:a4:f8:c0:4d:ce:7b:3b:d7:f5:8b:a5:fe:a0:9e:0d:91: ad:d7:be:9f:c3:26:18:be:83:b1:0b:51:c1:eb:b0:f9:9b:7e: bb:cb:26:4a:94:92:58:74:5d:54:1a:0a:38:7a:00:7d:4c:39: 0e:be:98:44:52:ed:a8:e1:8d:eb:c6:9f:d1:17:e3:68:05:de: bb:19:3e:2a:47:32:c1:67:06:43:3e:a1:3a:a0:95:73:61:04: d6:2e:e1:ef:3f:7a:95:82:c8:2a:ad:ca:8d:bd:df:b2:4b:f6: e7:69:83:45:73:e8:f3:7c:d7:8c:14:d8:42:27:b0:9e:61:55: a4:12:97:ef:bb:29:90:db:5e:09:50:cf:60:3a:c3:30:44:2f: 07:06:14:91:30:d8:6e:f0:e9:60:39:c4:d6:94:53:be:cf:9e: fb:a8:18:93:8e:c7:fc:52:96:b7:14:49:da:2e:d1:3a:7e:e3: a5:07:4a:19:63:59:b9:59:a0:d4:f9:d0:6b:95:8f:2e:e9:dc: eb:02:b3:40:d2:a1:33:c3:cc:60:ad:24:80:8d:b8:7b:22:25: 53:78:4e:04:68:a4:85:3c:34:2a:e7:11:06:6e:ef:b7:ce:92: 94:0a:66:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURVSS3qg7Odd47yze9WxJd/Wb2LUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAzMTIwWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTQ0NTczNmU4YjY5ODMyZDhhNzlkY2NkNmEzYzQ0NmFm MDc5ZWM0OTIzMzVhZmM2YmRlY2IzOTZjNTBlZDg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUh2CSkOW1uB4QmN2XkQs7I5d7qVSPDVKC2FeKJjOoqPrI RG6XNHLA5KaBJjZe9ETOXlhhXkArkmyPXn84Z4KpK+3cGldzCQVN1Pc62MKfyHlN q1HnsFuEKfYsSTuBqLN1EDFWPX4JPUxv6viFy0OvY/BYoxCZVzXregmUfGowfN1h 2MViD2aPsdJ1Md44TPFhha+ZCiojA6//QqG6UD7MLuHQLvwuHrqcIYxQdDASQrez pX8JiqTvlNxrOwO4Mgy5W3Ch1MgC5LOtc3HTJ3cqYCf2yv8wAL+C81XBRdQIAhtu CHLv8QiMWZl8lJQjRJWTq9BMPvGPyKCaQyeVO0HbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3gZavQDOFB/7MM5NKHK8Vsu7wXMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0Yzg4NGJjLTY2MWMtNDBlNS1iNDgyLTNlODE4MDkyNDE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FUwDQYJKoZIhvcNAQELBQADggEBAHcDF6KruiXWywZWuSC0NoT3VjMR pPjATc57O9f1i6X+oJ4Nka3Xvp/DJhi+g7ELUcHrsPmbfrvLJkqUklh0XVQaCjh6 AH1MOQ6+mERS7ajhjevGn9EX42gF3rsZPipHMsFnBkM+oTqglXNhBNYu4e8/epWC yCqtyo2937JL9udpg0Vz6PN814wU2EInsJ5hVaQSl++7KZDbXglQz2A6wzBELwcG FJEw2G7w6WA5xNaUU77PnvuoGJOOx/xSlrcUSdou0Tp+46UHShljWblZoNT50GuV jy7p3OsCs0DSoTPDzGCtJICNuHsiJVN4TgRopIU8NCrnEQZu77fOkpQKZhY= -----END CERTIFICATE-----Generated at Tue Jul 1 03:39:44 2025 by rpki-client