$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa File: 3b05ff04-a050-4f23-a421-c71257af8dbd.roa (raw, json) Hash identifier: /cKG6n7DiFZ8NvKy7yoSELp91nF24t/SeVxz9+oxvTA= Subject key identifier: AC:AA:6F:BF:66:D9:21:E3:6A:D4:28:99:C5:62:2D:E8:AA:12:BE:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7760FFE67C8F52A8D2BC0CB2FEE83E5263956A1D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa Signing time: Wed 25 Jun 2025 00:11:15 +0000 ROA not before: Wed 25 Jun 2025 00:11:15 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:60:ff:e6:7c:8f:52:a8:d2:bc:0c:b2:fe:e8:3e:52:63:95:6a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 25 00:11:15 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=298b79fcfa168684daf17e57dd554be8f40a2086a3a78fb7438e9332877f8ce1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:6e:81:f0:ad:43:87:98:d2:04:08:f9:97: 5a:53:cb:d9:30:dc:79:47:db:7a:f4:2b:16:c5:d7: 8b:54:37:e0:d9:7a:ac:d8:b4:64:b5:5e:16:52:b5: a9:85:5a:a9:4e:3b:5f:2f:8a:47:c9:da:4c:b0:26: 38:a9:ce:d6:94:25:be:6e:43:e3:7e:3c:28:20:a8: 4f:80:d0:05:6f:bf:fe:24:db:33:60:7d:9c:13:e2: 5d:b8:26:6d:de:d1:df:69:93:88:d8:73:39:93:4a: 41:fe:de:a3:64:06:fd:c0:ed:39:f5:f5:4a:ef:4e: 14:f6:2b:93:51:0b:b4:78:aa:fd:c0:d5:ec:65:9f: a8:bf:2b:46:15:63:18:40:6f:8b:07:ab:ef:a3:56: e4:7b:cb:01:2b:c5:ad:1a:a2:11:12:73:ae:a7:67: 69:00:73:f2:00:50:28:ee:f6:3e:cd:70:65:c3:a5: 16:38:be:b3:55:77:b1:64:db:88:6e:dd:46:e2:ac: d2:b7:d1:01:ec:70:f1:9b:fd:fb:89:63:d9:8c:c7: 53:ff:ae:0b:91:96:bc:fe:75:1d:69:e2:66:45:76: b7:c9:66:7a:14:79:4d:c6:3f:82:da:de:ed:9c:92: 5e:78:c8:e8:15:99:bb:69:3a:dc:84:d9:c2:c1:77: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:6F:BF:66:D9:21:E3:6A:D4:28:99:C5:62:2D:E8:AA:12:BE:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.96.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:86:dd:18:4c:04:8b:9a:be:85:bf:28:b2:45:6a:c6:5e:1d: b8:c6:90:58:51:7c:f6:5e:69:ae:ed:1f:5e:70:3f:98:f2:53: e3:44:a2:37:51:14:82:af:a2:49:75:99:f9:b4:ec:45:df:1e: d5:92:f6:aa:1e:23:55:21:c2:3c:f3:8d:5a:e9:e0:77:50:93: bb:75:0d:d8:f5:51:15:28:23:4c:a2:1a:13:e8:7d:ae:f0:61: fd:b5:6f:f4:80:3c:9e:fa:a0:48:29:d7:cc:4b:80:ab:39:a9: 11:93:f5:0f:bd:2f:b4:44:93:4f:fe:82:19:a0:8b:ac:fa:28: 01:fe:44:f1:03:7a:53:27:c2:72:cb:52:39:cd:b9:5f:73:89: 74:8c:ea:2f:99:bc:e7:45:c7:6a:a3:51:e0:0f:4c:e7:b9:c6: 3f:63:d5:9d:28:57:3a:cd:05:51:fe:4f:d6:c7:7c:50:13:be: 22:43:2c:af:1f:a2:55:01:9f:ee:6a:f6:56:a4:81:16:f4:1a: d8:0e:b0:fb:1e:7b:ab:c4:d1:56:00:06:b6:f3:a1:db:78:21: 82:d7:89:45:19:9a:1e:59:86:0e:8f:84:f6:d8:2b:47:55:4b: f3:8f:ae:b8:b3:15:78:34:ac:b8:4d:37:9b:ae:35:e4:75:b1: 89:e6:fc:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd2D/5nyPUqjSvAyy/ug+UmOVah0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI1MDAxMTE1WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOThiNzlmY2ZhMTY4Njg0ZGFmMTdlNTdkZDU1NGJlOGY0 MGEyMDg2YTNhNzhmYjc0MzhlOTMzMjg3N2Y4Y2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe4G6B8K1Dh5jSBAj5l1pTy9kw3HlH23r0KxbF14tUN+DZ eqzYtGS1XhZStamFWqlOO18vikfJ2kywJjipztaUJb5uQ+N+PCggqE+A0AVvv/4k 2zNgfZwT4l24Jm3e0d9pk4jYczmTSkH+3qNkBv3A7Tn19UrvThT2K5NRC7R4qv3A 1exln6i/K0YVYxhAb4sHq++jVuR7ywErxa0aohESc66nZ2kAc/IAUCju9j7NcGXD pRY4vrNVd7Fk24hu3UbirNK30QHscPGb/fuJY9mMx1P/rguRlrz+dR1p4mZFdrfJ ZnoUeU3GP4La3u2ckl54yOgVmbtpOtyE2cLBd2kBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrKpvv2bZIeNq1CiZxWIt6KoSvm4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMDVmZjA0LWEwNTAtNGYyMy1hNDIxLWM3MTI1N2FmOGRiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMIWAwDQYJKoZIhvcNAQELBQADggEBAIyG3RhMBIuavoW/KLJFasZeHbjG kFhRfPZeaa7tH15wP5jyU+NEojdRFIKvokl1mfm07EXfHtWS9qoeI1UhwjzzjVrp 4HdQk7t1Ddj1URUoI0yiGhPofa7wYf21b/SAPJ76oEgp18xLgKs5qRGT9Q+9L7RE k0/+ghmgi6z6KAH+RPEDelMnwnLLUjnNuV9ziXSM6i+ZvOdFx2qjUeAPTOe5xj9j 1Z0oVzrNBVH+T9bHfFATviJDLK8folUBn+5q9lakgRb0GtgOsPsee6vE0VYABrbz odt4IYLXiUUZmh5Zhg6PhPbYK0dVS/OPrrizFXg0rLhNN5uuNeR1sYnm/Ok= -----END CERTIFICATE-----Generated at Sun Jun 29 03:44:05 2025 by rpki-client