$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa File: 3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa (raw, json) Hash identifier: +lU0NN93ULF1AFuT7f7lxtUKH4jooEKrVZpB05vTn8I= Subject key identifier: 5D:C3:D5:7D:E8:08:90:A4:52:59:59:59:CF:48:F6:E8:69:81:A1:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34871506C9ADFB9874AC2C547D2680AAC87F0990 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa Signing time: Mon 26 May 2025 15:00:42 +0000 ROA not before: Mon 26 May 2025 15:00:42 +0000 ROA not after: Mon 30 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.62.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:87:15:06:c9:ad:fb:98:74:ac:2c:54:7d:26:80:aa:c8:7f:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 26 15:00:42 2025 GMT Not After : Jun 30 23:59:59 2025 GMT Subject: serialNumber=8a26563a00887827fcfb16f66a535783fcb40895d0ea83e8b37189476fa25c58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:c8:cd:d7:cc:0c:e4:ba:da:c7:cf:70:cc: d3:a4:89:3a:8e:a5:1b:a1:7c:3a:40:7c:92:c8:60: 52:93:ab:8c:cb:e7:cd:b4:25:7a:6c:dc:77:0f:3d: 02:c5:b6:64:ec:63:5b:f7:0f:be:fb:8b:ab:95:22: f3:17:22:61:14:18:2f:c9:cc:87:af:98:28:ef:6d: 35:bd:3e:94:20:fa:45:93:ba:6f:75:2c:2e:1e:14: dd:a6:cd:47:99:7a:06:ac:f4:ab:a3:37:53:a6:e6: 8e:5f:da:5e:5b:59:57:43:41:fa:91:31:30:da:a3: b2:d7:7c:b5:e4:35:71:dd:a8:86:10:65:e3:96:3c: c1:b4:1b:9d:5a:1a:07:aa:da:a4:af:67:ba:fd:b9: 10:ae:65:d4:b1:c5:b7:ef:2a:a4:d5:de:03:02:02: 95:bc:bc:01:6e:3f:ba:27:23:00:e7:77:55:89:e1: 88:b9:1b:a0:c5:f2:99:83:29:f8:c7:ae:22:2c:89: f9:c9:97:6f:bb:07:fe:01:1a:ce:aa:26:93:12:9c: ab:c9:de:38:0f:c8:7d:49:94:45:7e:11:fc:5f:5b: 5f:88:28:c8:02:69:64:97:19:1d:a9:5f:bc:f1:62: 41:04:97:19:22:9b:20:29:79:92:f8:6d:98:6d:cd: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:D5:7D:E8:08:90:A4:52:59:59:59:CF:48:F6:E8:69:81:A1:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.62.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8e:1f:82:21:2f:64:5a:86:6b:c7:33:d8:40:5f:fd:89:ce:6a: ec:e0:f0:e0:06:c4:d8:64:5c:d7:91:ff:c0:b6:a1:56:7a:83: 2e:c0:b6:cf:1f:ed:66:d4:1b:3b:53:bd:a1:f5:17:69:dd:01: 36:ac:5d:80:8a:be:15:0a:c8:bd:70:fd:49:3d:65:57:83:65: 8f:64:fe:ab:46:32:80:a3:c7:98:20:8f:5f:8b:8b:f0:61:fd: b4:01:4f:91:3c:27:c2:c8:04:2b:d7:d7:57:46:df:6c:97:de: a9:66:26:a4:88:d6:0e:77:27:f1:f1:8e:5f:7a:cc:0e:8b:7a: 92:0b:f5:9f:58:4a:a6:17:2b:7a:4b:c6:23:5a:39:fc:82:05: 07:87:4e:1a:13:1f:1b:33:e8:fa:d1:95:4e:24:22:e1:1b:18: ef:e1:b3:82:11:96:42:5c:84:c7:df:b3:3f:f6:81:ba:97:20: 8b:59:f1:fe:14:fa:1c:d9:18:14:77:b1:a3:1d:c4:da:58:fe: ea:d1:c3:71:35:a5:bf:58:63:7a:4e:3f:63:07:ad:cc:46:7e: 9c:b1:de:7f:09:fc:aa:9d:ff:ea:ea:3c:c4:ec:7f:5e:3e:09: d3:3c:95:fe:35:23:ba:5d:f7:d3:ea:18:01:94:db:e5:ef:dc: 7e:55:05:03 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNIcVBsmt+5h0rCxUfSaAqsh/CZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI2MTUwMDQyWhcNMjUwNjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTI2NTYzYTAwODg3ODI3ZmNmYjE2ZjY2YTUzNTc4M2Zj YjQwODk1ZDBlYTgzZThiMzcxODk0NzZmYTI1YzU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD8sjN18wM5Lrax89wzNOkiTqOpRuhfDpAfJLIYFKTq4zL 5820JXps3HcPPQLFtmTsY1v3D777i6uVIvMXImEUGC/JzIevmCjvbTW9PpQg+kWT um91LC4eFN2mzUeZegas9KujN1Om5o5f2l5bWVdDQfqRMTDao7LXfLXkNXHdqIYQ ZeOWPMG0G51aGgeq2qSvZ7r9uRCuZdSxxbfvKqTV3gMCApW8vAFuP7onIwDnd1WJ 4Yi5G6DF8pmDKfjHriIsifnJl2+7B/4BGs6qJpMSnKvJ3jgPyH1JlEV+EfxfW1+I KMgCaWSXGR2pX7zxYkEElxkimyApeZL4bZhtzfZbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXcPVfegIkKRSWVlZz0j26GmBoeEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2NDhkZmIzLTNmYmEtNDRjMy1hMDA1LWY4ZmQ1OTMwZjliMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENPjANBgkqhkiG9w0BAQsFAAOCAQEAjh+CIS9kWoZrxzPYQF/9ic5q7ODw 4AbE2GRc15H/wLahVnqDLsC2zx/tZtQbO1O9ofUXad0BNqxdgIq+FQrIvXD9ST1l V4Nlj2T+q0YygKPHmCCPX4uL8GH9tAFPkTwnwsgEK9fXV0bfbJfeqWYmpIjWDncn 8fGOX3rMDot6kgv1n1hKphcrekvGI1o5/IIFB4dOGhMfGzPo+tGVTiQi4RsY7+Gz ghGWQlyEx9+zP/aBupcgi1nx/hT6HNkYFHexox3E2lj+6tHDcTWlv1hjek4/Ywet zEZ+nLHefwn8qp3/6uo8xOx/Xj4J0zyV/jUjul330+oYAZTb5e/cflUFAw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:29:21 2025 by rpki-client