$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/457366f1-9555-4d30-aa1a-611497f9130e.roa File: 457366f1-9555-4d30-aa1a-611497f9130e.roa (raw, json) Hash identifier: +Qi52QjMvPZlzvcYf8/BJpLiXOvDOHfvwuDt69zpodI= Subject key identifier: 1B:EB:9A:E4:C8:58:79:B8:1D:30:9D:12:58:6D:F3:AB:81:3C:A3:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CAAC0C17DC27889078E2B2E4302642DB93224CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/457366f1-9555-4d30-aa1a-611497f9130e.roa Signing time: Sat 17 May 2025 00:00:16 +0000 ROA not before: Sat 17 May 2025 00:00:16 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:aa:c0:c1:7d:c2:78:89:07:8e:2b:2e:43:02:64:2d:b9:32:24:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:00:16 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=6a247e1bac55faa886753c22107f1d1f6056ec9efe2066b26a0fa415ea646205, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:1a:ad:2a:ad:1e:fd:20:aa:e6:df:1c:b6: 2e:72:c4:df:cf:cf:1f:f3:6a:59:bd:a8:b6:17:9a: 6c:ed:66:52:a9:d2:5c:65:67:c8:2c:61:f7:98:be: 6c:d5:46:22:0d:e3:ea:b8:7c:da:70:d3:14:b3:3f: 3f:68:34:ae:0b:a2:ab:db:3b:d2:e8:25:bb:dc:e3: 8b:3f:ec:02:8b:8b:4a:03:19:c3:b6:f1:61:86:c8: 3e:66:6c:1c:ca:3d:8c:c7:46:88:fb:6b:93:94:f3: 8d:e4:e8:6d:8a:39:a5:86:d0:2f:7d:12:54:38:36: 3e:4f:24:e4:ba:54:49:17:32:b7:5c:6d:0a:f5:99: 86:34:9a:d2:1d:f5:5d:d4:d7:24:0b:8b:85:74:58: 07:fc:9e:1f:bc:a1:14:3d:db:8a:ef:55:6e:c3:77: 69:a1:31:9e:51:97:92:b1:23:6a:63:8a:a5:7c:63: 6e:16:94:a5:11:03:32:ff:7d:c2:e2:69:7e:e8:43: 30:4d:80:cf:26:cc:ad:76:67:93:cb:a0:27:5e:26: 74:25:50:d0:2c:e6:e6:1c:a3:91:7c:20:aa:ea:e6: de:a4:f6:ee:cd:4e:a0:5d:c7:95:bd:90:7a:f4:89: a1:f4:a1:8f:8c:3d:f7:95:9b:46:1b:e7:88:67:7f: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:9A:E4:C8:58:79:B8:1D:30:9D:12:58:6D:F3:AB:81:3C:A3:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/457366f1-9555-4d30-aa1a-611497f9130e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.12.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:4a:2d:98:3a:bd:e2:b5:18:38:c9:49:e7:53:f8:3f:1e:b0: bd:9b:de:f1:b7:31:42:a0:70:1c:24:b6:4f:70:57:c1:f6:27: 64:66:8b:83:50:fa:21:f8:fd:ef:57:02:e2:b3:bf:58:5c:b6: cf:68:9a:d5:6f:a4:86:3e:e4:2b:3d:39:76:89:a6:ae:b2:3f: 41:94:20:b3:7d:f2:5b:d0:03:91:c9:45:c2:b2:01:f3:68:51: 39:ec:38:0b:d0:a3:96:ba:e3:f7:1d:70:32:a4:63:07:a3:84: 16:ee:4f:5e:09:7e:c3:60:4a:0d:c4:20:a6:e5:cc:47:f6:c4: 2c:24:5a:11:09:e1:0d:80:2e:f3:35:dd:58:0a:63:ea:71:4f: 13:27:61:ce:18:25:34:50:79:85:ec:f5:38:90:5e:a3:7a:37: ca:97:ef:02:98:af:14:94:a9:16:e2:cb:b2:36:97:8d:16:ba: 5a:34:a9:38:5d:c0:55:66:94:2e:18:39:be:70:bb:56:00:e7: ea:34:ae:bc:2b:fd:bf:69:52:0b:61:9b:c9:6f:c2:32:c1:c2: 02:f4:32:ed:09:f5:48:a4:92:b3:df:a8:e7:da:aa:eb:94:fb: b8:86:00:bb:69:b7:f5:86:d3:4c:ea:93:ac:16:9d:f1:4b:11: d1:dc:6e:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTKrAwX3CeIkHjisuQwJkLbkyJMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMDE2WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTI0N2UxYmFjNTVmYWE4ODY3NTNjMjIxMDdmMWQxZjYw NTZlYzllZmUyMDY2YjI2YTBmYTQxNWVhNjQ2MjA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc1RqtKq0e/SCq5t8cti5yxN/Pzx/zalm9qLYXmmztZlKp 0lxlZ8gsYfeYvmzVRiIN4+q4fNpw0xSzPz9oNK4LoqvbO9LoJbvc44s/7AKLi0oD GcO28WGGyD5mbBzKPYzHRoj7a5OU843k6G2KOaWG0C99ElQ4Nj5PJOS6VEkXMrdc bQr1mYY0mtId9V3U1yQLi4V0WAf8nh+8oRQ924rvVW7Dd2mhMZ5Rl5KxI2pjiqV8 Y24WlKURAzL/fcLiaX7oQzBNgM8mzK12Z5PLoCdeJnQlUNAs5uYco5F8IKrq5t6k 9u7NTqBdx5W9kHr0iaH0oY+MPfeVm0Yb54hnfy27AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG+ua5MhYebgdMJ0SWG3zq4E8o6UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1NzM2NmYxLTk1NTUtNGQzMC1hYTFhLTYxMTQ5N2Y5MTMwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBsgwwDQYJKoZIhvcNAQELBQADggEBABpKLZg6veK1GDjJSedT+D8esL2b 3vG3MUKgcBwktk9wV8H2J2Rmi4NQ+iH4/e9XAuKzv1hcts9omtVvpIY+5Cs9OXaJ pq6yP0GUILN98lvQA5HJRcKyAfNoUTnsOAvQo5a64/cdcDKkYwejhBbuT14JfsNg Sg3EIKblzEf2xCwkWhEJ4Q2ALvM13VgKY+pxTxMnYc4YJTRQeYXs9TiQXqN6N8qX 7wKYrxSUqRbiy7I2l40Wulo0qThdwFVmlC4YOb5wu1YA5+o0rrwr/b9pUgthm8lv wjLBwgL0Mu0J9UikkrPfqOfaquuU+7iGALtpt/WG00zqk6wWnfFLEdHcboE= -----END CERTIFICATE-----Generated at Sun Jun 1 05:26:30 2025 by rpki-client