$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa File: 3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa (raw, json) Hash identifier: N0RWHnPHw9dyM90qAm5cUfHWTFpcRZC2oHRGO14lM1U= Subject key identifier: E6:EB:B6:C7:64:1A:8E:28:DA:FE:0E:37:97:BE:67:FF:D2:40:4B:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E43F9008090066514A3B057F191F118A7FEB31A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa Signing time: Sat 24 May 2025 00:11:02 +0000 ROA not before: Sat 24 May 2025 00:11:02 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 46.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:43:f9:00:80:90:06:65:14:a3:b0:57:f1:91:f1:18:a7:fe:b3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:11:02 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=9f72c76f0d450084855ef58d535197c116b463063b172f34c6fb5447eb49a619, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:ee:82:df:06:0a:25:c4:9a:53:8f:d6:b4: 03:b8:ab:2b:ca:2a:27:b0:80:14:1d:7c:48:77:7d: e2:c7:15:9a:21:3c:c4:fd:5c:c6:92:dd:49:63:fa: c8:02:13:cb:cb:c3:77:53:b2:01:93:3f:63:08:27: f2:5e:a1:82:42:92:a2:83:d7:7f:9e:67:1f:68:42: ec:3d:da:6f:53:c9:c1:f7:cf:34:23:61:81:1b:e2: aa:cf:ab:00:b7:df:7e:6d:b5:eb:c4:a3:6a:9c:d0: 03:c5:6d:e2:e4:9e:43:aa:41:83:10:34:62:40:2e: 0a:9a:30:67:a2:2d:e8:3b:70:5c:a0:ca:cc:c9:73: f1:49:0d:12:3e:f8:e2:0b:f1:5c:f2:55:00:e2:ee: 38:a9:cf:70:ca:b0:6d:97:0d:1a:46:85:bd:c7:28: fd:cd:33:2c:7c:8c:56:ca:e9:92:a2:25:45:c4:3a: b7:04:c7:b6:c9:c6:0f:c1:0e:0e:90:f9:18:28:c0: a9:98:ae:e2:1d:05:05:f2:51:1e:62:f7:39:fb:fe: e3:7d:01:eb:06:1c:ca:cc:9b:fb:87:8f:48:fa:a8: 70:0f:48:d9:00:af:e5:82:63:36:91:1a:12:72:7c: 35:99:e5:4e:db:e1:42:79:5a:9c:56:ce:1b:6a:e9: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EB:B6:C7:64:1A:8E:28:DA:FE:0E:37:97:BE:67:FF:D2:40:4B:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:8b:62:cf:3f:ae:0e:a2:6b:df:af:5d:25:59:ad:52:6d:3a: 1f:17:f8:51:b9:8a:fc:e3:ea:1f:61:5e:8b:b1:83:05:6c:2d: 8a:2d:ee:00:84:1b:28:d7:a5:64:17:06:df:4d:97:74:d0:63: 37:3a:4c:f0:a4:f1:23:70:20:0c:fa:1b:a8:07:ed:e4:73:18: cd:ee:5a:fb:30:d6:11:8a:8a:08:a3:3d:43:ce:54:c6:fb:02: 7d:46:49:95:b5:55:aa:5b:15:47:43:2e:e4:7a:82:31:d3:43: 13:4f:73:d7:6f:ae:7c:64:f4:51:33:3b:26:ac:0e:2b:54:ea: a6:03:9e:91:12:68:8e:93:16:b4:fa:cd:64:7c:65:44:1a:4b: 61:a6:c7:ca:92:ba:20:ad:1b:05:53:81:a7:c6:75:fa:bd:73: fd:3d:25:6d:7c:84:39:eb:36:71:3d:89:7f:ec:12:62:a2:be: 83:17:8d:d1:dc:ad:9f:9a:e4:81:99:0a:a1:ff:42:a2:ba:d6: 96:06:37:12:c5:a1:a5:60:94:4f:c5:36:29:9b:59:b7:ab:2d: 6e:e2:ea:72:d1:24:8b:a1:c1:3b:7b:c9:57:1a:65:d8:36:03: 93:c4:25:d9:00:99:21:1c:ef:f8:95:18:0f:83:28:5c:0b:98: 9c:d7:7c:2d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTkP5AICQBmUUo7BX8ZHxGKf+sxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAxMTAyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjcyYzc2ZjBkNDUwMDg0ODU1ZWY1OGQ1MzUxOTdjMTE2 YjQ2MzA2M2IxNzJmMzRjNmZiNTQ0N2ViNDlhNjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfcO6C3wYKJcSaU4/WtAO4qyvKKiewgBQdfEh3feLHFZoh PMT9XMaS3Ulj+sgCE8vLw3dTsgGTP2MIJ/JeoYJCkqKD13+eZx9oQuw92m9TycH3 zzQjYYEb4qrPqwC3335ttevEo2qc0APFbeLknkOqQYMQNGJALgqaMGeiLeg7cFyg yszJc/FJDRI++OIL8VzyVQDi7jipz3DKsG2XDRpGhb3HKP3NMyx8jFbK6ZKiJUXE OrcEx7bJxg/BDg6Q+RgowKmYruIdBQXyUR5i9zn7/uN9AesGHMrMm/uHj0j6qHAP SNkAr+WCYzaRGhJyfDWZ5U7b4UJ5WpxWzhtq6ZkZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5uu2x2Qajija/g43l75n/9JASz4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMGE4YjQ2LWY4YTYtNGYwMy04MWNjLWU0MjgxN2E2YTgyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAu1zANBgkqhkiG9w0BAQsFAAOCAQEADItizz+uDqJr369dJVmtUm06Hxf4 UbmK/OPqH2Fei7GDBWwtii3uAIQbKNelZBcG302XdNBjNzpM8KTxI3AgDPobqAft 5HMYze5a+zDWEYqKCKM9Q85UxvsCfUZJlbVVqlsVR0Mu5HqCMdNDE09z12+ufGT0 UTM7JqwOK1TqpgOekRJojpMWtPrNZHxlRBpLYabHypK6IK0bBVOBp8Z1+r1z/T0l bXyEOes2cT2Jf+wSYqK+gxeN0dytn5rkgZkKof9CorrWlgY3EsWhpWCUT8U2KZtZ t6stbuLqctEki6HBO3vJVxpl2DYDk8Ql2QCZIRzv+JUYD4MoXAuYnNd8LQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:04 2025 by rpki-client