$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa File: 40f8ae91-92eb-4054-9a85-d212ce02b957.roa (raw, json) Hash identifier: OgypOEsiEugsK4ICnB00eIEiF5qRzrCj2sznBw9QNhQ= Subject key identifier: 8C:F6:C7:0C:57:D8:0C:28:1E:4E:7E:8F:65:BE:9B:FE:D3:66:F6:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32FEF283E435E58FD0DF0334164F9FA32A0B753C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa Signing time: Sat 17 May 2025 00:01:46 +0000 ROA not before: Sat 17 May 2025 00:01:46 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fe:f2:83:e4:35:e5:8f:d0:df:03:34:16:4f:9f:a3:2a:0b:75:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:01:46 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=d0e72b10e7ff7ec293057bf8ce62560f94cf08b4fecd99af68edf16825ef4250, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:49:ae:85:37:4b:98:ca:92:00:09:ac:d4: 8f:81:37:17:36:dc:b8:a4:8b:41:d2:8f:1b:ca:74: a2:62:48:3b:b9:32:7f:de:55:44:84:75:e7:3a:45: 2b:c3:a1:33:4a:fc:1f:cd:b5:bd:1b:67:a0:b9:04: 03:99:c7:60:70:e3:8c:50:ca:dd:31:d0:6b:63:2e: 79:ad:30:e0:b2:1d:dd:94:04:5c:a6:bb:40:36:66: 17:bb:d5:39:8d:07:ff:28:d9:5a:97:d7:77:70:c6: ca:74:26:dd:40:e8:03:97:7e:dd:9e:24:17:d0:c3: c8:fb:e3:4c:f0:ea:ff:93:7b:9b:0b:5b:ce:b1:83: 49:3b:c8:50:57:30:60:84:6a:bb:bd:cf:b8:34:24: 9a:4a:43:a9:d0:9f:7d:11:58:4b:1e:30:25:21:58: 48:c2:d3:bc:b5:86:3e:1c:74:f1:06:7a:0a:67:4d: c8:e7:40:59:42:94:d2:44:4e:ec:07:ed:61:92:f1: d5:68:f7:ed:fd:6c:83:0c:80:d4:0d:4d:03:8c:0a: 23:5d:ac:0f:a0:96:53:a0:b8:26:cd:18:91:a1:20: b2:8f:f8:c1:a5:f5:ea:05:77:ba:ee:6f:df:84:aa: aa:86:4e:69:dc:56:ab:18:ff:a9:03:b9:16:e6:d5: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:C7:0C:57:D8:0C:28:1E:4E:7E:8F:65:BE:9B:FE:D3:66:F6:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:f4:bf:dd:f9:97:52:30:d6:a6:6a:2b:18:c5:99:2a:9b:03: f9:6c:4e:96:75:79:c4:d2:6b:c8:78:b3:d0:93:eb:f1:9d:2f: 2d:1c:91:59:73:be:6b:72:e4:0d:8b:48:13:f7:cd:2b:79:9d: 0d:50:44:b5:8b:dd:42:68:1d:63:23:10:f6:be:28:0d:11:8a: c8:10:7d:da:67:14:39:9d:ec:6f:17:ad:8b:25:c4:53:f2:72: 8b:f3:6a:9a:ae:44:3c:e3:6b:9e:4b:e7:ee:2c:72:14:7c:c2: 9a:40:7c:5b:79:3e:20:50:67:48:66:80:41:43:32:9a:78:06: c3:50:d8:42:55:63:fa:cc:8d:c8:f9:c0:3a:1b:84:1f:93:82: e9:bb:e9:58:9b:2b:92:3f:89:21:60:56:5a:f9:48:ac:58:89: c6:69:cd:7e:1c:69:c5:54:e4:87:e7:af:2f:33:57:0e:ab:74: 49:16:1a:ef:3e:4d:1e:1b:30:72:c1:e0:7d:3a:84:aa:e8:7e: 16:01:76:2d:ad:07:86:92:1e:34:2e:83:44:b8:fb:d0:5d:2c: 9f:bf:59:f4:7e:f9:06:bc:09:3d:76:d5:d3:89:0b:ff:ac:d6: 67:f0:25:51:50:03:c3:25:37:8e:aa:8b:26:77:cb:6a:83:06: b1:2c:2a:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMv7yg+Q15Y/Q3wM0Fk+foyoLdTwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMTQ2WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGU3MmIxMGU3ZmY3ZWMyOTMwNTdiZjhjZTYyNTYwZjk0 Y2YwOGI0ZmVjZDk5YWY2OGVkZjE2ODI1ZWY0MjUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc4EmuhTdLmMqSAAms1I+BNxc23Liki0HSjxvKdKJiSDu5 Mn/eVUSEdec6RSvDoTNK/B/Ntb0bZ6C5BAOZx2Bw44xQyt0x0GtjLnmtMOCyHd2U BFymu0A2Zhe71TmNB/8o2VqX13dwxsp0Jt1A6AOXft2eJBfQw8j740zw6v+Te5sL W86xg0k7yFBXMGCEaru9z7g0JJpKQ6nQn30RWEseMCUhWEjC07y1hj4cdPEGegpn TcjnQFlClNJETuwH7WGS8dVo9+39bIMMgNQNTQOMCiNdrA+gllOguCbNGJGhILKP +MGl9eoFd7rub9+EqqqGTmncVqsY/6kDuRbm1fudAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjPbHDFfYDCgeTn6PZb6b/tNm9hcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZjhhZTkxLTkyZWItNDA1NC05YTg1LWQyMTJjZTAyYjk1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOdrwgwDQYJKoZIhvcNAQELBQADggEBABv0v935l1Iw1qZqKxjFmSqbA/ls TpZ1ecTSa8h4s9CT6/GdLy0ckVlzvmty5A2LSBP3zSt5nQ1QRLWL3UJoHWMjEPa+ KA0RisgQfdpnFDmd7G8XrYslxFPycovzapquRDzja55L5+4schR8wppAfFt5PiBQ Z0hmgEFDMpp4BsNQ2EJVY/rMjcj5wDobhB+Tgum76VibK5I/iSFgVlr5SKxYicZp zX4cacVU5Ifnry8zVw6rdEkWGu8+TR4bMHLB4H06hKrofhYBdi2tB4aSHjQug0S4 +9BdLJ+/WfR++Qa8CT121dOJC/+s1mfwJVFQA8MlN46qiyZ3y2qDBrEsKq8= -----END CERTIFICATE-----Generated at Wed Jun 4 11:13:21 2025 by rpki-client