$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa File: 6a62da10-7a91-4f00-8d90-807e784a45e8.roa (raw, json) Hash identifier: uCLPoQZelPTq63V6lM6vEckkwRTuVOy1b8BP9Q1woTc= Subject key identifier: A5:BB:33:E0:A1:57:A7:6E:3E:4A:78:9B:CA:EA:0C:F1:7C:2F:E7:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C2C08F03F5218F69831449B9CF8D708D0047049 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa Signing time: Mon 31 Mar 2025 15:21:26 +0000 ROA not before: Mon 31 Mar 2025 15:21:26 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:08:f0:3f:52:18:f6:98:31:44:9b:9c:f8:d7:08:d0:04:70:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:21:26 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:44:9d:bb:c2:bf:68:e5:61:12:4b:3b:28: 04:f8:18:7f:d8:9a:8a:62:1c:81:bf:d0:2c:27:18: 97:1f:f8:c8:f9:bb:e2:46:9f:43:65:7a:35:23:b5: 16:74:3e:de:ba:6a:43:f9:57:60:ad:aa:dc:a8:03: 1f:b2:24:2b:c9:e6:e7:89:cc:d8:d4:d4:b5:b3:ae: 74:e7:4c:ef:d4:1a:e2:f1:11:0e:fa:d9:28:dd:8d: 95:23:fa:ea:6f:58:dd:4c:07:c2:20:98:92:00:2b: f4:0f:7f:2d:99:4c:85:6e:b7:06:47:f1:75:8f:63: 4c:ac:db:4b:b6:cf:35:c0:2a:9b:dd:15:7d:34:f0: 7d:0c:47:3f:b5:b8:94:f4:f3:e9:c2:86:d5:74:f8: 2e:90:eb:f0:94:b4:33:85:0a:07:4f:5d:75:71:29: f6:71:55:17:2a:b8:f6:8d:03:a7:74:2c:81:f6:11: 0f:f5:78:1d:19:c0:a4:3d:5c:51:95:96:21:3f:42: 00:b4:ef:e4:b8:f2:7f:31:8e:d4:64:17:c7:88:fb: 95:f1:e9:c3:50:94:26:8e:28:34:95:2e:38:be:80: a6:7d:0c:0a:a5:cb:ba:d3:3f:e2:60:57:a1:aa:e5: 11:55:bc:72:29:55:d6:78:e1:b4:c1:f2:dd:80:bc: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BB:33:E0:A1:57:A7:6E:3E:4A:78:9B:CA:EA:0C:F1:7C:2F:E7:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.96.0/19 Signature Algorithm: sha256WithRSAEncryption c8:ca:82:d4:7e:60:3e:fb:2e:65:7e:d0:38:92:09:85:d5:dc: 3c:29:a5:a8:d3:36:c8:ba:11:78:8e:ab:ab:94:12:d3:f9:b6: ea:6d:31:c1:5a:0e:26:31:00:9c:4a:3b:6f:3f:87:fa:3c:f0: 54:0a:ab:8f:00:5b:e2:2e:d1:85:b6:1c:f2:f2:00:0f:cc:df: 2e:8d:51:40:b9:2e:aa:f3:db:4a:d9:c8:41:a3:25:1d:76:d4: dc:1f:f7:0a:aa:2d:97:e6:86:f8:72:f7:03:8f:6b:73:a5:e6: f5:a7:73:5e:ac:f6:df:c7:b9:54:3f:5a:cf:72:fe:8c:93:67: f0:f2:79:b7:b8:64:37:50:8f:9a:38:29:99:e9:5e:d9:6e:be: 19:89:9b:a5:c9:70:76:49:e6:5c:09:ec:22:cb:f7:e9:d1:15: a9:09:4e:19:75:d8:62:16:8b:18:83:a8:cc:92:4a:58:11:2d: 20:68:1d:82:2f:27:90:27:be:cc:50:31:e6:0b:89:98:c8:91: 85:b5:5d:97:ae:ed:30:0d:7f:87:8a:ba:cf:54:44:c3:62:17: ed:2b:21:b7:3e:0d:6d:19:f5:d9:26:e3:0f:70:ab:6f:97:7e: c1:86:27:e8:ed:3e:a9:37:99:d0:74:66:72:67:10:09:d6:1a: 2d:2d:9a:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHCwI8D9SGPaYMUSbnPjXCNAEcEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUyMTI2WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzRjZDcwYWJhMmQ5ZGIzYWQ3Y2I2Y2M1NDM1Y2ZhNTNi NTRmMTQ4ODcyYjg4YTI5NDJlYmQ3MjNjNGFhMjRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1ykSdu8K/aOVhEks7KAT4GH/YmopiHIG/0CwnGJcf+Mj5 u+JGn0NlejUjtRZ0Pt66akP5V2CtqtyoAx+yJCvJ5ueJzNjU1LWzrnTnTO/UGuLx EQ762SjdjZUj+upvWN1MB8IgmJIAK/QPfy2ZTIVutwZH8XWPY0ys20u2zzXAKpvd FX008H0MRz+1uJT08+nChtV0+C6Q6/CUtDOFCgdPXXVxKfZxVRcquPaNA6d0LIH2 EQ/1eB0ZwKQ9XFGVliE/QgC07+S48n8xjtRkF8eI+5Xx6cNQlCaOKDSVLji+gKZ9 DAqly7rTP+JgV6Gq5RFVvHIpVdZ44bTB8t2AvECHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpbsz4KFXp24+SnibyuoM8Xwv53AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhNjJkYTEwLTdhOTEtNGYwMC04ZDkwLTgwN2U3ODRhNDVlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXF2AwDQYJKoZIhvcNAQELBQADggEBAMjKgtR+YD77LmV+0DiSCYXV3Dwp pajTNsi6EXiOq6uUEtP5tuptMcFaDiYxAJxKO28/h/o88FQKq48AW+Iu0YW2HPLy AA/M3y6NUUC5Lqrz20rZyEGjJR121Nwf9wqqLZfmhvhy9wOPa3Ol5vWnc16s9t/H uVQ/Ws9y/oyTZ/Dyebe4ZDdQj5o4KZnpXtluvhmJm6XJcHZJ5lwJ7CLL9+nRFakJ Thl12GIWixiDqMySSlgRLSBoHYIvJ5AnvsxQMeYLiZjIkYW1XZeu7TANf4eKus9U RMNiF+0rIbc+DW0Z9dkm4w9wq2+XfsGGJ+jtPqk3mdB0ZnJnEAnWGi0tmj8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:34 2025 by rpki-client