$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa File: 03dd229f-85c7-4158-82b5-da756c839c84.roa (raw, json) Hash identifier: 02Hnt1Lq1zTkEh6DvrgBkCpXUVlox6CuYlZwxZaxyKU= Subject key identifier: 9D:CE:1B:60:35:67:1B:D6:40:AE:F3:54:15:48:58:4B:BB:72:5F:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08B2E2305D4437B58AB453AAE31ACF446B346BD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa Signing time: Fri 23 May 2025 00:10:57 +0000 ROA not before: Fri 23 May 2025 00:10:57 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b2:e2:30:5d:44:37:b5:8a:b4:53:aa:e3:1a:cf:44:6b:34:6b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:10:57 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=d0b8164fad40b33303a8023d9df8f9e988ddd964a8a91d45c7ab76303c9b4b99, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:a6:00:2a:d7:93:18:4a:d4:70:b2:93:44: 13:23:a3:68:9e:93:b4:ff:00:1c:09:cd:95:66:1a: 55:f1:c8:01:58:9f:21:a9:93:11:65:54:91:92:47: 37:87:14:df:57:ee:19:07:35:25:c2:a1:c8:12:b9: 32:82:49:fa:19:38:6a:68:2b:42:ab:fe:66:da:f8: df:86:d5:f8:b2:b8:ef:df:70:ac:ca:a3:d1:39:73: 85:57:f4:28:c6:2a:b2:4b:7b:41:ef:5d:94:86:1a: da:64:56:38:ce:12:70:64:8c:31:ff:ad:57:9f:1f: 5c:b6:81:7c:d6:d6:1f:9d:86:a3:66:40:72:14:fc: 5e:30:f5:b1:4d:29:68:9a:a9:93:ce:ff:db:57:fb: 67:4f:63:c8:49:0f:42:d9:1d:69:06:a0:58:c6:1a: 86:aa:54:c9:75:30:49:6a:e8:c7:9b:ee:84:8d:7a: 0e:c4:70:16:33:3f:f9:1f:6f:83:f2:1a:f6:f4:be: 2a:4c:ef:cd:db:20:22:e2:1e:46:61:9b:2f:02:4a: 1a:69:e0:ff:63:34:58:85:a9:84:19:d3:5d:da:dc: 87:a7:c2:81:4a:78:8b:98:ee:2d:c8:48:c7:fb:dc: 86:6a:a9:20:90:5d:c6:67:e5:87:df:6c:23:89:61: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:1B:60:35:67:1B:D6:40:AE:F3:54:15:48:58:4B:BB:72:5F:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:c9:4b:bd:c8:79:7a:da:9f:a9:82:ba:71:83:88:d6:57:c9: 63:31:d1:c0:d0:58:e3:ed:fc:7b:94:c1:cd:b6:bb:5f:f0:a6: 0b:94:7f:31:b9:27:68:03:60:f9:f5:6e:dd:62:6f:ee:c0:9f: 31:c3:41:d9:7b:73:7a:40:5c:f3:c3:88:7c:a3:6e:79:9f:16: 3a:29:5d:f1:93:16:76:13:62:4d:9b:2b:aa:3e:4a:62:9a:bd: 46:f6:3a:a3:f2:05:5b:f7:75:f8:5d:3d:a4:8b:2b:7e:70:29: af:8f:04:3c:59:a0:d4:58:8e:f5:70:15:f7:db:9e:5e:a8:b3: a0:ce:67:72:f2:05:f2:37:16:a5:11:67:9a:d6:25:f1:9e:a5: 38:3b:3a:85:c6:52:49:42:ea:54:98:c6:42:30:16:c7:0f:85: 67:bd:b0:5b:06:3f:50:3d:5a:8d:1c:dc:fc:fa:de:94:46:90: e9:0b:af:ea:24:2a:de:d4:dd:4f:8b:25:10:e9:f5:25:20:4a: 61:37:3b:ef:57:a3:31:d7:75:ef:79:79:72:f0:94:72:76:1c: ac:5b:5f:c8:5e:7e:21:78:84:d0:ba:e1:3f:a7:67:b9:62:56: b8:37:0a:e6:0e:1a:a3:32:64:53:36:dc:80:86:27:e6:89:42: c7:09:84:87 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCLLiMF1EN7WKtFOq4xrPRGs0a9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAxMDU3WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGI4MTY0ZmFkNDBiMzMzMDNhODAyM2Q5ZGY4ZjllOTg4 ZGRkOTY0YThhOTFkNDVjN2FiNzYzMDNjOWI0Yjk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3g6YAKteTGErUcLKTRBMjo2iek7T/ABwJzZVmGlXxyAFY nyGpkxFlVJGSRzeHFN9X7hkHNSXCocgSuTKCSfoZOGpoK0Kr/mba+N+G1fiyuO/f cKzKo9E5c4VX9CjGKrJLe0HvXZSGGtpkVjjOEnBkjDH/rVefH1y2gXzW1h+dhqNm QHIU/F4w9bFNKWiaqZPO/9tX+2dPY8hJD0LZHWkGoFjGGoaqVMl1MElq6Meb7oSN eg7EcBYzP/kfb4PyGvb0vipM783bICLiHkZhmy8CShpp4P9jNFiFqYQZ013a3Ien woFKeIuY7i3ISMf73IZqqSCQXcZn5YffbCOJYVS9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnc4bYDVnG9ZArvNUFUhYS7tyX0QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZGQyMjlmLTg1YzctNDE1OC04MmI1LWRhNzU2YzgzOWM4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+TANBgkqhkiG9w0BAQsFAAOCAQEApclLvch5etqfqYK6cYOI1lfJYzHR wNBY4+38e5TBzba7X/CmC5R/MbknaANg+fVu3WJv7sCfMcNB2XtzekBc88OIfKNu eZ8WOild8ZMWdhNiTZsrqj5KYpq9RvY6o/IFW/d1+F09pIsrfnApr48EPFmg1FiO 9XAV99ueXqizoM5ncvIF8jcWpRFnmtYl8Z6lODs6hcZSSULqVJjGQjAWxw+FZ72w WwY/UD1ajRzc/PrelEaQ6Quv6iQq3tTdT4slEOn1JSBKYTc771ejMdd173l5cvCU cnYcrFtfyF5+IXiE0LrhP6dnuWJWuDcK5g4aozJkUzbcgIYn5olCxwmEhw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:08 2025 by rpki-client