$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa File: c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa (raw, json) Hash identifier: Rx/4u2ONJBTxoMqLPg84MKVVyAjHTtI5q3X0puM2bEM= Subject key identifier: 3A:8A:1B:E0:64:D6:F3:C4:FE:51:05:67:6B:CE:27:86:45:2E:73:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11C05D60814EC5CF784B93199DEE4A2C5F734E3D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa Signing time: Tue 12 Aug 2025 00:42:04 +0000 ROA not before: Tue 12 Aug 2025 00:42:04 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c0:5d:60:81:4e:c5:cf:78:4b:93:19:9d:ee:4a:2c:5f:73:4e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:42:04 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=d197cce7d626a32de878bdfdc7541102922b23bbc7e85ff230dd0e715aba795d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:21:aa:5e:9b:c9:ce:82:61:4b:4c:e7:9b: 5b:6b:79:64:67:12:69:80:e5:43:d8:89:c4:45:3e: 88:da:08:5b:a5:d4:0f:1c:37:49:17:7a:c5:b6:bf: 7a:21:a3:2e:cb:45:57:00:19:86:bf:d8:b5:71:b0: d3:d8:16:6f:ab:94:b6:12:7e:0e:31:28:00:99:58: 73:b3:e8:c3:26:a5:cb:61:bd:d8:cc:3e:a0:c9:3d: e0:56:f1:80:c2:ef:5d:30:f1:36:55:a9:eb:ad:4c: 7d:90:55:28:fc:77:3d:c4:b8:3d:8a:ba:00:de:75: 77:b2:05:84:e3:76:ae:b3:3f:8f:bb:07:f8:10:79: 26:b9:df:0a:73:7a:d9:98:19:36:06:08:ae:03:cb: 6a:25:83:02:b3:97:20:91:1f:80:d7:cc:39:37:14: 9d:4b:d2:7f:5e:04:0c:83:10:ad:dd:3b:b0:07:51: 23:a4:fa:7f:59:0e:dd:c6:cf:d3:3c:7e:17:a1:0f: ac:d6:df:8e:71:a4:33:e6:bc:6f:61:ea:af:3e:17: 04:43:e0:bf:df:49:db:67:c0:cc:e3:4e:3c:16:51: 16:ed:d3:be:0a:55:49:b0:8f:a9:b0:79:87:10:25: 62:7b:a2:0f:90:e0:f3:38:38:00:eb:dc:02:3a:6d: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8A:1B:E0:64:D6:F3:C4:FE:51:05:67:6B:CE:27:86:45:2E:73:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:1f:59:2c:b1:8c:98:f2:4c:51:bf:7d:1c:5a:42:d0:23:06: dc:fb:0a:91:80:16:c1:b6:ae:00:48:28:32:b9:0b:87:d7:e9: 59:46:9c:1e:b5:d4:49:76:ae:82:fa:c4:79:6a:90:8c:61:a3: 66:45:fa:c4:d0:7d:6f:12:d2:5a:0b:f5:09:6c:91:18:66:55: 20:e4:56:ba:f6:47:91:7a:ae:93:76:14:e8:ee:46:54:42:48: 95:78:75:04:8c:92:fc:89:f7:0e:c3:de:cc:5f:26:be:d1:44: 0a:3b:f4:9c:d3:c0:9b:37:7d:ff:d8:09:b6:3f:bb:d9:76:ba: c2:22:af:d9:34:65:0d:58:fa:bb:ff:5b:b4:2f:00:71:08:0c: ef:3f:72:a2:b4:de:22:25:3b:5e:ae:95:e8:be:cc:b2:a5:07: aa:25:2a:44:3c:af:07:1b:11:fd:e6:5b:54:91:5a:23:5a:ab: 3d:ff:f1:64:ac:ac:a8:41:69:89:4a:3a:a3:e5:90:ae:b0:26: dc:9f:2b:a2:11:4c:ee:3d:fb:30:15:99:ac:60:48:94:cf:9d: de:56:ae:02:24:b6:16:e6:60:cb:49:9b:77:a9:8c:d6:66:9d: bf:0e:e2:a1:1a:e5:bb:c6:a5:86:e9:1e:25:86:6d:b5:c1:91: e9:78:51:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEcBdYIFOxc94S5MZne5KLF9zTj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA0MjA0WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTk3Y2NlN2Q2MjZhMzJkZTg3OGJkZmRjNzU0MTEwMjky MmIyM2JiYzdlODVmZjIzMGRkMGU3MTVhYmE3OTVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZeSGqXpvJzoJhS0znm1treWRnEmmA5UPYicRFPojaCFul 1A8cN0kXesW2v3ohoy7LRVcAGYa/2LVxsNPYFm+rlLYSfg4xKACZWHOz6MMmpcth vdjMPqDJPeBW8YDC710w8TZVqeutTH2QVSj8dz3EuD2KugDedXeyBYTjdq6zP4+7 B/gQeSa53wpzetmYGTYGCK4Dy2olgwKzlyCRH4DXzDk3FJ1L0n9eBAyDEK3dO7AH USOk+n9ZDt3Gz9M8fhehD6zW345xpDPmvG9h6q8+FwRD4L/fSdtnwMzjTjwWURbt 074KVUmwj6mweYcQJWJ7og+Q4PM4OADr3AI6bcUpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOoob4GTW88T+UQVna84nhkUuc9UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxY2JmZjIzLWM1YjctNDAzZC1hNTNjLWJkMjNmYzFiMGEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EAwDQYJKoZIhvcNAQELBQADggEBAC4fWSyxjJjyTFG/fRxaQtAjBtz7 CpGAFsG2rgBIKDK5C4fX6VlGnB611El2roL6xHlqkIxho2ZF+sTQfW8S0loL9Qls kRhmVSDkVrr2R5F6rpN2FOjuRlRCSJV4dQSMkvyJ9w7D3sxfJr7RRAo79JzTwJs3 ff/YCbY/u9l2usIir9k0ZQ1Y+rv/W7QvAHEIDO8/cqK03iIlO16ulei+zLKlB6ol KkQ8rwcbEf3mW1SRWiNaqz3/8WSsrKhBaYlKOqPlkK6wJtyfK6IRTO49+zAVmaxg SJTPnd5WrgIkthbmYMtJm3epjNZmnb8O4qEa5bvGpYbpHiWGbbXBkel4UaM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:18 2025 by rpki-client