$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa File: 3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa (raw, json) Hash identifier: C4j8jsddTjdG/KZswpOpKxW8DrRVO3tLQGpUGPfrlIQ= Subject key identifier: F8:EF:45:11:F7:F0:39:74:D8:AE:15:85:58:0E:60:1C:9D:8E:FE:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BEC9691E2159D667D262BEF11AE1A9B29C1A794 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa Signing time: Wed 28 May 2025 00:31:12 +0000 ROA not before: Wed 28 May 2025 00:31:12 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.64.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ec:96:91:e2:15:9d:66:7d:26:2b:ef:11:ae:1a:9b:29:c1:a7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:31:12 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=370b24c1096f64f4f0816babe92e2a22123ee8852f2aec3d03ffb837a9fcff18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:1c:d7:91:79:99:0e:53:1b:f6:8d:0c:f8: f5:87:5f:17:97:d6:c3:19:cc:cb:a9:da:d8:7b:ec: 41:be:cd:a0:ed:d6:2a:05:9c:3d:d3:a1:35:f6:21: cd:46:50:05:ae:22:a5:1a:6a:ee:4f:91:5f:b7:96: 52:be:07:a2:ee:77:a9:37:d3:39:a2:38:40:70:8c: 25:a5:3c:42:a0:25:f7:58:ab:bd:71:c7:8a:73:b0: 51:28:9b:b6:e4:d3:f7:ce:e0:cf:3c:01:60:93:a8: ac:61:66:20:49:6d:53:c9:dc:ff:4a:0e:73:8e:09: 5b:8c:f0:08:e1:91:77:e3:c9:17:6b:da:d0:b8:3c: 13:69:b1:71:03:61:b1:70:7f:1f:0a:59:89:be:c7: 77:02:30:69:de:71:ca:fe:69:74:da:71:8b:93:c8: ec:11:fb:85:80:7c:83:21:07:43:ac:50:f9:ca:76: 02:37:87:49:18:b7:66:85:54:79:73:8b:21:13:d7: 7d:54:1f:6b:4d:d1:f4:f3:93:f0:86:e3:82:af:a7: db:d7:dd:f3:b7:71:09:83:5c:ed:fa:c2:17:8d:66: 64:54:52:f5:3f:52:0b:35:ca:f2:a2:2f:5d:e0:35: 8c:55:dc:28:5b:cd:3f:9f:0e:d1:2f:b4:7e:5e:6c: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EF:45:11:F7:F0:39:74:D8:AE:15:85:58:0E:60:1C:9D:8E:FE:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:90:30:8d:7b:51:f2:a9:b0:5b:d4:5c:5b:f7:50:9d:34:c4: 33:f9:31:ee:06:36:93:82:25:6a:6e:c7:15:98:97:67:20:71: 36:fb:57:c4:2e:24:f8:63:e3:d1:b7:cd:ec:0c:84:7e:eb:b6: 92:ed:ed:68:cf:da:7d:a0:cb:b7:18:e0:56:2c:86:84:41:e4: 29:68:76:5f:d1:a6:ca:fe:33:d9:2e:59:b1:5e:32:76:b4:dc: c0:1a:c9:9d:a4:31:a2:20:c9:33:de:40:d1:d9:2c:6d:a6:fa: d5:cf:d1:82:37:9f:06:7f:ef:a3:fa:10:12:9d:af:b5:89:9a: 92:a3:e8:8d:3b:d4:9d:fd:1d:a2:f0:3a:bf:af:9a:2b:c9:56: 46:74:71:ad:5c:01:20:82:49:71:a5:46:a9:2b:aa:cf:c3:4f: 4c:8b:7c:e2:9b:eb:cb:28:bc:34:7a:1e:45:4c:04:44:15:df: e5:72:b6:45:5d:45:4b:00:5b:08:2b:6a:c2:11:ba:46:8e:fc: 8f:05:80:d2:70:26:ef:63:6f:40:73:68:0c:3e:d6:be:5f:5b: 42:42:be:44:30:b6:44:2e:25:af:88:d1:94:00:45:3e:7e:58: 6c:2b:1d:3d:fe:20:d8:11:a9:0c:53:92:07:09:bd:17:0a:d0: e5:d8:51:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS+yWkeIVnWZ9JivvEa4amynBp5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAzMTEyWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzBiMjRjMTA5NmY2NGY0ZjA4MTZiYWJlOTJlMmEyMjEy M2VlODg1MmYyYWVjM2QwM2ZmYjgzN2E5ZmNmZjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTOBzXkXmZDlMb9o0M+PWHXxeX1sMZzMup2th77EG+zaDt 1ioFnD3ToTX2Ic1GUAWuIqUaau5PkV+3llK+B6Lud6k30zmiOEBwjCWlPEKgJfdY q71xx4pzsFEom7bk0/fO4M88AWCTqKxhZiBJbVPJ3P9KDnOOCVuM8AjhkXfjyRdr 2tC4PBNpsXEDYbFwfx8KWYm+x3cCMGneccr+aXTacYuTyOwR+4WAfIMhB0OsUPnK dgI3h0kYt2aFVHlziyET131UH2tN0fTzk/CG44Kvp9vX3fO3cQmDXO36wheNZmRU UvU/Ugs1yvKiL13gNYxV3ChbzT+fDtEvtH5ebCmNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+O9FEffwOXTYrhWFWA5gHJ2O/gYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmM2ZjZGJmLTllMGYtNGFiYy1hOTAwLWJkMjVlNjYxYzJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5QDANBgkqhkiG9w0BAQsFAAOCAQEAHJAwjXtR8qmwW9RcW/dQnTTEM/kx 7gY2k4Ilam7HFZiXZyBxNvtXxC4k+GPj0bfN7AyEfuu2ku3taM/afaDLtxjgViyG hEHkKWh2X9Gmyv4z2S5ZsV4ydrTcwBrJnaQxoiDJM95A0dksbab61c/RgjefBn/v o/oQEp2vtYmakqPojTvUnf0dovA6v6+aK8lWRnRxrVwBIIJJcaVGqSuqz8NPTIt8 4pvryyi8NHoeRUwERBXf5XK2RV1FSwBbCCtqwhG6Ro78jwWA0nAm72NvQHNoDD7W vl9bQkK+RDC2RC4lr4jRlABFPn5YbCsdPf4g2BGpDFOSBwm9FwrQ5dhRbg== -----END CERTIFICATE-----Generated at Sun Jun 8 15:58:34 2025 by rpki-client