$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa File: 3c569629-a4ef-463e-a6a6-70022ce4aea3.roa (raw, json) Hash identifier: V3NrdkFZjD6wHf+UBSVtc3holZjIOMmwGJ8t1DTklMk= Subject key identifier: BA:E1:0D:21:D3:A2:31:96:9A:D0:EC:16:BB:FD:0F:07:8B:9E:2E:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D95553450D41CD5A7B474DCA68E99D1D488B56C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa Signing time: Fri 23 May 2025 00:22:03 +0000 ROA not before: Fri 23 May 2025 00:22:03 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:55:34:50:d4:1c:d5:a7:b4:74:dc:a6:8e:99:d1:d4:88:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:22:03 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=690459565af3df2fed9e1eb375a03596ca4844ab4190530343052933c2c4b306, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:21:1c:a2:98:7a:ee:d1:ae:63:6f:96:47: 4c:f9:98:33:a0:ac:be:e0:f2:a4:1a:f3:58:26:8d: 74:57:4a:57:1a:84:0f:68:be:30:cd:eb:f7:47:0c: 24:53:3a:4d:7a:ef:2e:c6:e1:33:b8:79:f2:8f:e9: d0:bf:7d:d7:45:6c:84:ec:5e:a4:bb:11:92:51:5d: 5a:c1:52:55:e0:a8:84:16:df:ae:11:72:65:e8:36: cc:f8:89:7f:8b:19:b0:12:1b:a7:ee:b8:9e:2d:49: b0:a4:c1:30:6a:3c:df:b1:e7:d3:b8:5b:66:1a:c0: 19:9a:99:19:e4:ce:a0:20:01:82:d4:63:b5:00:80: e6:28:e8:c0:3c:89:59:2a:ca:87:3a:88:48:c9:f5: d0:6c:b1:64:6c:2b:30:68:2d:90:da:5b:aa:9b:69: 6a:76:34:f4:fd:f0:c7:1a:f9:cb:fd:83:fa:41:3e: 3f:69:0a:fa:2a:b3:47:61:da:a6:fb:f3:6d:c0:8c: cc:2c:a0:5f:77:0c:5f:f4:c5:40:7a:db:63:31:59: dc:b1:7c:5f:ce:1f:62:f8:36:d2:2f:cb:8c:d0:a7: b0:a9:12:97:73:bb:88:17:9f:be:6b:b6:f2:4a:3c: 55:69:a8:bc:b7:20:aa:5a:8e:64:4d:55:ab:1e:52: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:0D:21:D3:A2:31:96:9A:D0:EC:16:BB:FD:0F:07:8B:9E:2E:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.64.0/18 Signature Algorithm: sha256WithRSAEncryption 8a:e7:06:cd:ca:d0:5e:85:07:4c:7c:0a:9d:50:82:36:8c:2b: c0:71:d1:79:d1:2f:df:5f:c5:1b:58:e0:4f:ef:be:9a:04:bc: 1e:5d:16:be:69:5f:f1:0b:66:eb:c4:4d:65:21:b9:47:86:72: 9f:98:cd:58:d4:f5:25:f7:93:a5:ac:aa:79:f7:64:44:03:3c: 33:43:f0:f9:00:f8:2b:e0:a8:82:54:8f:e4:d4:47:5e:c7:e6: 6e:88:82:b1:d4:8b:ba:89:ec:83:71:61:70:60:01:cd:65:d2: 25:d1:c9:f9:cd:e8:dc:07:97:20:c5:be:bc:50:fe:ba:89:86: 5f:c7:23:a8:19:c2:11:07:ed:7d:4e:e2:53:37:81:3f:e8:55: af:5b:fb:8d:db:cf:2a:fa:6a:cf:d2:dd:a3:cd:d2:16:c0:c6: 66:da:00:4f:9e:f6:94:b5:4a:9a:46:c3:cb:5c:b4:bc:0e:3b: 78:c4:24:d6:29:b4:d7:6d:cc:22:56:ba:15:40:cb:ab:f0:a2: f6:de:7d:c1:3e:8d:20:33:39:d1:cd:e5:2f:8a:b9:65:d7:0e: 46:1c:8b:40:77:67:6a:b4:7c:f1:14:68:9a:d8:98:ba:74:44: 84:19:9e:ba:25:c1:8d:5e:3f:0b:01:01:20:e5:bd:80:cd:52: de:69:cf:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZVVNFDUHNWntHTcpo6Z0dSItWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAyMjAzWhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTA0NTk1NjVhZjNkZjJmZWQ5ZTFlYjM3NWEwMzU5NmNh NDg0NGFiNDE5MDUzMDM0MzA1MjkzM2MyYzRiMzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw+iEcoph67tGuY2+WR0z5mDOgrL7g8qQa81gmjXRXSlca hA9ovjDN6/dHDCRTOk167y7G4TO4efKP6dC/fddFbITsXqS7EZJRXVrBUlXgqIQW 364RcmXoNsz4iX+LGbASG6fuuJ4tSbCkwTBqPN+x59O4W2YawBmamRnkzqAgAYLU Y7UAgOYo6MA8iVkqyoc6iEjJ9dBssWRsKzBoLZDaW6qbaWp2NPT98Mca+cv9g/pB Pj9pCvoqs0dh2qb7823AjMwsoF93DF/0xUB622MxWdyxfF/OH2L4NtIvy4zQp7Cp Epdzu4gXn75rtvJKPFVpqLy3IKpajmRNVaseUgT/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuuENIdOiMZaa0OwWu/0PB4ueLnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjNTY5NjI5LWE0ZWYtNDYzZS1hNmE2LTcwMDIyY2U0YWVhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYjNkAwDQYJKoZIhvcNAQELBQADggEBAIrnBs3K0F6FB0x8Cp1QgjaMK8Bx 0XnRL99fxRtY4E/vvpoEvB5dFr5pX/ELZuvETWUhuUeGcp+YzVjU9SX3k6Wsqnn3 ZEQDPDND8PkA+CvgqIJUj+TUR17H5m6IgrHUi7qJ7INxYXBgAc1l0iXRyfnN6NwH lyDFvrxQ/rqJhl/HI6gZwhEH7X1O4lM3gT/oVa9b+43bzyr6as/S3aPN0hbAxmba AE+e9pS1SppGw8tctLwOO3jEJNYptNdtzCJWuhVAy6vwovbefcE+jSAzOdHN5S+K uWXXDkYci0B3Z2q0fPEUaJrYmLp0RIQZnrolwY1ePwsBASDlvYDNUt5pz+4= -----END CERTIFICATE-----Generated at Sun Jun 1 04:57:11 2025 by rpki-client