$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa File: 285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa (raw, json) Hash identifier: Zcc0TMGqAgIkQo87nPZZ1L6gu9fQjit5yspWAkOtpjg= Subject key identifier: 9A:66:74:78:C4:4A:36:16:BF:E7:85:36:C0:81:5B:6B:7D:0B:CA:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 322F1C75D0821D0987567B7E8B052DE8C22BC228 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa Signing time: Tue 20 May 2025 15:11:27 +0000 ROA not before: Tue 20 May 2025 15:11:27 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2f:1c:75:d0:82:1d:09:87:56:7b:7e:8b:05:2d:e8:c2:2b:c2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:11:27 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=45ebc76455db73867e0d19778ac90d81eef9daffb7e97996877ed78afd16a9d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:9d:6e:a3:bd:af:2e:bd:c2:15:af:3c:0c: df:3a:a6:22:98:36:6e:24:99:bc:23:f2:4a:5c:9b: d1:52:c1:fd:fb:e4:b4:e0:9d:94:c1:06:b4:22:af: 43:62:47:3c:58:bb:58:2c:39:dd:6a:56:41:19:58: cd:cb:c6:38:88:a7:67:73:ff:67:68:85:b5:03:cb: 69:2e:2f:fd:66:57:75:23:87:70:3f:dc:db:48:b7: 94:85:43:ff:7c:43:79:a1:cc:79:01:0d:07:2e:fe: 73:ff:8a:8e:31:65:e9:58:a7:24:a4:6d:ec:4f:01: 83:4a:14:28:81:88:fe:49:5d:6e:1a:92:80:b5:c4: f5:05:8a:bb:83:7a:98:99:c1:50:14:af:7a:3c:ae: e1:47:de:2a:47:12:1a:4b:50:02:4f:af:49:bd:d6: 91:38:18:2f:1b:e3:28:46:65:47:59:86:8d:3d:9b: fa:b2:b1:df:ff:1f:60:99:43:b2:ad:ea:d7:de:23: 92:9f:cb:03:89:ba:35:1e:8e:6a:36:18:55:5e:c2: 83:fc:f9:89:99:0c:36:f1:a1:50:9e:ec:08:10:ec: dd:8c:39:60:71:1d:9d:15:94:b7:6b:7d:8d:73:19: 2a:9d:3c:47:07:7e:02:39:f1:81:dd:53:ba:7d:94: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:66:74:78:C4:4A:36:16:BF:E7:85:36:C0:81:5B:6B:7D:0B:CA:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.36.0/22 Signature Algorithm: sha256WithRSAEncryption d3:7b:c2:48:d0:68:af:42:5a:26:34:fc:a4:42:e4:40:94:9b: 03:97:cc:aa:e6:0d:b3:f5:47:a1:94:b4:03:2d:ad:27:ea:00: dd:c7:7c:33:07:d1:7d:d0:96:46:34:a1:93:a3:7b:7a:e5:11: 1d:a8:3c:74:68:a4:61:7e:be:de:52:27:34:cc:7e:3e:16:6f: a8:80:02:c3:0d:41:54:72:01:78:4a:a4:21:1b:16:91:6b:ce: 7d:79:c4:4f:57:eb:a2:57:e1:b1:44:8e:9c:f6:0c:8e:da:23: e7:61:b0:a5:08:54:bf:47:81:21:e0:d9:86:93:4b:e9:6b:28: d4:9c:c6:50:e3:22:42:35:e3:9d:f7:a5:b6:1f:a7:e9:46:d1: 71:3a:58:c0:2f:a4:d9:4b:a2:49:42:fe:00:a0:9e:ea:29:7a: f5:5b:71:f6:9d:37:68:b3:1e:60:91:94:32:37:3b:f4:56:09: 3d:76:99:fb:5d:f1:e0:c2:34:e4:33:21:aa:25:f4:a8:2d:de: e0:83:17:b5:f4:42:cd:d1:75:db:20:2c:b5:80:38:b0:c3:24: 9f:e7:91:97:e9:8e:40:09:35:39:e5:2d:10:99:02:2e:b6:f4: b1:81:ae:75:bc:58:aa:cb:76:54:98:81:aa:18:4c:10:45:61: 80:21:25:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMi8cddCCHQmHVnt+iwUt6MIrwigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMTI3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWViYzc2NDU1ZGI3Mzg2N2UwZDE5Nzc4YWM5MGQ4MWVl ZjlkYWZmYjdlOTc5OTY4NzdlZDc4YWZkMTZhOWQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC20J1uo72vLr3CFa88DN86piKYNm4kmbwj8kpcm9FSwf37 5LTgnZTBBrQir0NiRzxYu1gsOd1qVkEZWM3LxjiIp2dz/2dohbUDy2kuL/1mV3Uj h3A/3NtIt5SFQ/98Q3mhzHkBDQcu/nP/io4xZelYpySkbexPAYNKFCiBiP5JXW4a koC1xPUFiruDepiZwVAUr3o8ruFH3ipHEhpLUAJPr0m91pE4GC8b4yhGZUdZho09 m/qysd//H2CZQ7Kt6tfeI5KfywOJujUejmo2GFVewoP8+YmZDDbxoVCe7AgQ7N2M OWBxHZ0VlLdrfY1zGSqdPEcHfgI58YHdU7p9lMbRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmmZ0eMRKNha/54U2wIFba30LymQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4NWFkOWY5LTQ2YTQtNDY4Ny1hZWRmLThjNzg2YTdjMDljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJILCQwDQYJKoZIhvcNAQELBQADggEBANN7wkjQaK9CWiY0/KRC5ECUmwOX zKrmDbP1R6GUtAMtrSfqAN3HfDMH0X3QlkY0oZOje3rlER2oPHRopGF+vt5SJzTM fj4Wb6iAAsMNQVRyAXhKpCEbFpFrzn15xE9X66JX4bFEjpz2DI7aI+dhsKUIVL9H gSHg2YaTS+lrKNScxlDjIkI14533pbYfp+lG0XE6WMAvpNlLoklC/gCgnuopevVb cfadN2izHmCRlDI3O/RWCT12mftd8eDCNOQzIaol9Kgt3uCDF7X0Qs3RddsgLLWA OLDDJJ/nkZfpjkAJNTnlLRCZAi629LGBrnW8WKrLdlSYgaoYTBBFYYAhJQQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:57:10 2025 by rpki-client