$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14c4e7a7-8562-4d0f-abae-93619bdf103a.roa File: 14c4e7a7-8562-4d0f-abae-93619bdf103a.roa (raw, json) Hash identifier: DjkjzNccqQfJ6yvR+ZRywIpJxdGLlpsLdfLC48u+VuM= Subject key identifier: 48:54:ED:EC:AE:53:59:EA:34:5B:80:B4:BE:D6:64:79:C9:9D:46:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 216F6C4D1E58F79AAE37768EC22273AF0C680970 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14c4e7a7-8562-4d0f-abae-93619bdf103a.roa Signing time: Wed 28 May 2025 00:41:27 +0000 ROA not before: Wed 28 May 2025 00:41:27 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.238.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:6c:4d:1e:58:f7:9a:ae:37:76:8e:c2:22:73:af:0c:68:09:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:41:27 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=0dc77e9770b30110a3a79db43609999dfa69af5ed1bd54ebbe64b3758b763d31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:38:d9:d7:65:e4:db:96:d2:ba:84:6b:18: 9e:5f:b4:40:f2:4a:99:62:a1:d5:bb:d8:64:c0:30: e0:4f:db:16:76:9a:d0:74:30:c9:c5:a8:be:c1:53: 25:e7:00:4a:af:cd:f2:10:e5:d0:51:34:e9:f3:49: 9f:66:d8:48:e3:19:b0:ac:06:17:96:42:62:08:1e: ac:c6:5a:43:0f:32:b8:7f:a5:59:d3:6a:fc:54:b5: 72:ca:f5:5f:53:33:78:45:16:c6:10:ec:74:2f:d7: 0c:c7:74:78:1f:b0:4d:f5:07:99:2a:20:a7:ce:05: ca:59:b7:c9:fd:d8:78:89:45:59:62:18:97:24:36: d5:13:9a:1d:e8:8a:a3:c8:1a:80:68:e6:b4:f6:43: 59:6f:4e:ec:aa:28:0c:ce:d1:92:85:e1:3c:bb:3b: d6:23:14:05:c2:2d:9f:0f:5b:2e:0d:53:ab:83:a5: 61:8e:c4:5c:fe:ed:93:29:2c:14:d8:68:50:bb:cd: 17:04:77:a8:21:a8:3b:8c:3b:02:38:f3:fd:fc:83: 7e:c7:39:e8:93:d7:15:98:11:01:33:33:a0:a0:5d: 34:de:7c:8f:76:bf:7c:9d:6e:cf:fd:18:3d:7f:33: 68:35:94:43:f9:a9:5a:b9:03:3c:1b:5b:85:4b:f7: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:54:ED:EC:AE:53:59:EA:34:5B:80:B4:BE:D6:64:79:C9:9D:46:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14c4e7a7-8562-4d0f-abae-93619bdf103a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.238.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:38:f0:b7:fe:87:87:67:1d:b9:ae:c3:50:07:ae:ab:00:3c: 96:a3:05:23:64:7a:58:9d:b3:71:00:f5:b1:5d:0d:de:cd:6c: a3:12:eb:96:7f:9f:3f:d6:62:c9:8f:1d:fd:ad:4a:36:1b:7d: f4:a0:6d:f9:39:e8:2e:2a:ab:07:b2:48:00:8c:c1:35:98:9a: a9:24:51:24:d6:03:41:29:9e:55:cc:fc:79:52:44:b8:79:54: 5a:cf:d4:a4:bc:58:60:17:49:c2:8e:ee:2e:4c:08:06:49:81: b3:1c:10:c9:14:e4:66:ee:1e:2a:41:ef:59:6f:73:62:d4:73: 5e:d7:63:3d:a2:96:0d:57:1c:91:ac:04:16:ae:a8:2e:2b:05: 84:6b:67:c5:9a:d3:6b:b5:c2:7e:7f:50:f0:51:16:ec:51:05: ed:ea:37:9d:5b:5c:47:6e:4b:87:c1:12:12:2d:00:a0:72:7e: 06:c4:fa:21:66:ac:8b:f2:63:60:b1:5c:72:5b:b7:4c:0d:c2: e7:4b:6b:c9:bd:0b:06:66:c8:45:f6:8b:03:70:82:13:80:da: 00:7e:35:04:f8:95:65:c7:12:84:d3:9a:e8:00:a9:08:d5:d8: 24:bc:8b:a2:39:ed:0b:17:a6:b6:f0:82:34:ea:2f:45:3f:fd: 9f:ad:18:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIW9sTR5Y95quN3aOwiJzrwxoCXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDA0MTI3WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGM3N2U5NzcwYjMwMTEwYTNhNzlkYjQzNjA5OTk5ZGZh NjlhZjVlZDFiZDU0ZWJiZTY0YjM3NThiNzYzZDMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3IzjZ12Xk25bSuoRrGJ5ftEDySpliodW72GTAMOBP2xZ2 mtB0MMnFqL7BUyXnAEqvzfIQ5dBRNOnzSZ9m2EjjGbCsBheWQmIIHqzGWkMPMrh/ pVnTavxUtXLK9V9TM3hFFsYQ7HQv1wzHdHgfsE31B5kqIKfOBcpZt8n92HiJRVli GJckNtUTmh3oiqPIGoBo5rT2Q1lvTuyqKAzO0ZKF4Ty7O9YjFAXCLZ8PWy4NU6uD pWGOxFz+7ZMpLBTYaFC7zRcEd6ghqDuMOwI48/38g37HOeiT1xWYEQEzM6CgXTTe fI92v3ydbs/9GD1/M2g1lEP5qVq5AzwbW4VL93LHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSFTt7K5TWeo0W4C0vtZkecmdRqQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0YzRlN2E3LTg1NjItNGQwZi1hYmFlLTkzNjE5YmRmMTAzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZM7gAwDQYJKoZIhvcNAQELBQADggEBAF048Lf+h4dnHbmuw1AHrqsAPJaj BSNkelids3EA9bFdDd7NbKMS65Z/nz/WYsmPHf2tSjYbffSgbfk56C4qqweySACM wTWYmqkkUSTWA0EpnlXM/HlSRLh5VFrP1KS8WGAXScKO7i5MCAZJgbMcEMkU5Gbu HipB71lvc2LUc17XYz2ilg1XHJGsBBauqC4rBYRrZ8Wa02u1wn5/UPBRFuxRBe3q N51bXEduS4fBEhItAKByfgbE+iFmrIvyY2CxXHJbt0wNwudLa8m9CwZmyEX2iwNw ghOA2gB+NQT4lWXHEoTTmugAqQjV2CS8i6I57QsXprbwgjTqL0U//Z+tGC0= -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:50 2025 by rpki-client