$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314dad8e-5e1a-4fa2-a8fc-e0055d7f9c10.roa File: 314dad8e-5e1a-4fa2-a8fc-e0055d7f9c10.roa (raw, json) Hash identifier: i9rWYJvEbUwhoBkxTwDd3vxAZyjLxMdhxqTvGemAF0A= Subject key identifier: F6:9D:49:A9:EC:A4:37:70:AC:1D:67:2B:F4:1A:F1:52:AA:F9:2D:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E1AB12C3564D627DC2A64D6831BBA447810A3E1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314dad8e-5e1a-4fa2-a8fc-e0055d7f9c10.roa Signing time: Fri 23 May 2025 00:22:06 +0000 ROA not before: Fri 23 May 2025 00:22:06 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.234.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:b1:2c:35:64:d6:27:dc:2a:64:d6:83:1b:ba:44:78:10:a3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:22:06 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=582a365399a5486b5218a1b6888d68613a68a9f691bcd52aeb42a1215926f381, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:43:94:dc:38:5a:99:19:41:b8:b2:53:02: 8d:47:9a:07:bf:eb:cf:fe:94:1d:e1:33:88:bd:25: b2:9a:22:a9:64:ca:20:db:74:b2:10:80:c2:df:d1: 6b:01:f1:7a:60:69:54:32:30:36:a9:44:eb:18:7a: 45:3b:a4:dd:2d:6f:32:49:90:53:ac:95:2f:a6:67: e3:96:8c:3c:02:c4:33:4a:c6:d2:83:5b:87:7a:4e: 8b:92:c8:7e:d7:69:8f:93:8b:1e:1b:7f:7a:29:07: 1a:01:97:62:3b:0d:01:fc:92:0f:b4:0b:4a:ab:3c: 01:bc:bd:15:2a:aa:04:fd:21:67:fa:da:f5:7c:27: fd:3a:45:37:97:c9:8e:15:cc:a4:17:60:8e:b5:d9: 4d:9b:d5:54:fc:08:4d:56:51:ba:e9:1e:9c:8d:f2: 7d:ea:c5:66:b2:e2:7b:bf:ab:dc:98:b3:c2:24:28: f7:af:1c:3a:7b:a5:cb:26:30:41:ff:f2:5b:c7:de: 3b:3e:d6:cc:85:7b:fa:1b:fb:71:71:07:b0:66:a9: 81:33:f7:ab:dc:0f:ef:74:e4:24:21:2a:f7:3f:8d: 3d:bd:1f:83:73:b8:40:97:71:63:0e:0f:18:b0:27: ab:00:c4:de:ea:20:77:25:dc:fc:c3:ed:34:4e:c8: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:49:A9:EC:A4:37:70:AC:1D:67:2B:F4:1A:F1:52:AA:F9:2D:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314dad8e-5e1a-4fa2-a8fc-e0055d7f9c10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.234.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7b:89:92:88:b5:86:44:87:06:9d:34:85:5b:28:b4:c3:e1:6a: 52:a1:bf:cd:aa:0e:a8:28:a1:60:55:b0:8f:58:4b:48:65:db: a8:90:6f:e4:5a:4c:21:ad:91:e1:af:d0:1d:8e:f4:6a:5a:2a: 48:5b:87:eb:43:0d:1c:86:d3:84:e0:cd:30:6a:83:73:36:cf: 85:f7:b9:0a:9e:bd:3f:fc:4e:56:e1:f1:4e:95:83:bb:51:24: 56:f7:85:0a:4b:ee:1c:ec:7d:95:15:e1:6d:66:e1:79:d3:74: a8:5a:67:56:f5:c3:0b:df:0b:ca:01:96:cb:bd:56:d5:cc:4d: 12:ee:ac:a2:d8:52:01:1b:39:c5:65:f4:cf:5c:21:c0:dc:57: e0:ec:48:3e:0e:26:15:7e:4c:04:16:1a:c2:ce:8b:c6:2c:18: 3b:1f:6f:95:6c:9d:e7:81:ae:40:6a:94:da:4b:08:ce:b1:e1: 4e:d2:59:1d:90:08:16:bd:7a:d3:a2:98:48:a2:42:2a:36:00: c8:03:29:13:cf:bd:e4:17:98:82:98:9f:6e:7a:63:c4:e8:04: a0:68:af:01:80:46:62:c5:61:81:b1:ce:8b:6f:04:f7:10:02: 17:2b:ed:9c:25:7b:32:07:1c:cd:95:89:19:0c:2f:f5:c8:34: d9:61:27:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDhqxLDVk1ifcKmTWgxu6RHgQo+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAyMjA2WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODJhMzY1Mzk5YTU0ODZiNTIxOGExYjY4ODhkNjg2MTNh NjhhOWY2OTFiY2Q1MmFlYjQyYTEyMTU5MjZmMzgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWO0OU3DhamRlBuLJTAo1Hmge/68/+lB3hM4i9JbKaIqlk yiDbdLIQgMLf0WsB8XpgaVQyMDapROsYekU7pN0tbzJJkFOslS+mZ+OWjDwCxDNK xtKDW4d6TouSyH7XaY+Tix4bf3opBxoBl2I7DQH8kg+0C0qrPAG8vRUqqgT9IWf6 2vV8J/06RTeXyY4VzKQXYI612U2b1VT8CE1WUbrpHpyN8n3qxWay4nu/q9yYs8Ik KPevHDp7pcsmMEH/8lvH3js+1syFe/ob+3FxB7BmqYEz96vcD+905CQhKvc/jT29 H4NzuECXcWMODxiwJ6sAxN7qIHcl3PzD7TROyFXlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9p1JqeykN3CsHWcr9BrxUqr5LWkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxNGRhZDhlLTVlMWEtNGZhMi1hOGZjLWUwMDU1ZDdmOWMxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo6jANBgkqhkiG9w0BAQsFAAOCAQEAe4mSiLWGRIcGnTSFWyi0w+FqUqG/ zaoOqCihYFWwj1hLSGXbqJBv5FpMIa2R4a/QHY70aloqSFuH60MNHIbThODNMGqD czbPhfe5Cp69P/xOVuHxTpWDu1EkVveFCkvuHOx9lRXhbWbhedN0qFpnVvXDC98L ygGWy71W1cxNEu6sothSARs5xWX0z1whwNxX4OxIPg4mFX5MBBYaws6LxiwYOx9v lWyd54GuQGqU2ksIzrHhTtJZHZAIFr1606KYSKJCKjYAyAMpE8+95BeYgpifbnpj xOgEoGivAYBGYsVhgbHOi28E9xACFyvtnCV7MgcczZWJGQwv9cg02WEn8w== -----END CERTIFICATE-----Generated at Sun Jun 1 04:33:44 2025 by rpki-client