$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa File: 466ddae0-395f-40af-ab59-17db1b6352a7.roa (raw, json) Hash identifier: WGUFzOjm6WRSWOHiRwiE0QOO+vq1JS1giy6cQ+M5FzQ= Subject key identifier: EE:D1:26:A4:78:D3:D5:04:6D:6F:6F:15:E6:B9:5A:D1:72:9D:A5:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3134ADC7301B976485365FB113BE636872E28C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa Signing time: Fri 23 May 2025 00:00:24 +0000 ROA not before: Fri 23 May 2025 00:00:24 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 108.175.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:ad:c7:30:1b:97:64:85:36:5f:b1:13:be:63:68:72:e2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:00:24 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=f59198646d1fbffbf0e763cbe1ee96ed609bc2ac90b20bcd96dc731235aa2a71, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:db:11:18:12:fb:c8:08:47:b6:4a:c5:4d: c1:9e:98:5b:16:dd:0a:8d:9b:19:5e:85:2a:1e:c5: 87:8b:10:d5:e8:16:07:a9:9f:62:aa:9d:29:34:a4: d0:2b:e5:75:6c:76:fb:0f:8c:60:51:78:69:50:87: 89:73:4e:8e:ec:de:9d:c9:ac:ac:59:06:3b:88:2e: ad:4d:15:ce:e8:7a:26:3b:37:e2:a5:56:11:95:17: 8e:b0:7c:bb:02:5b:17:fd:54:29:e5:52:1a:ae:ae: 17:43:29:15:15:cc:95:ce:ed:46:74:0a:d8:bd:96: 4e:a0:7d:03:76:5f:72:30:c7:fa:98:37:6f:af:37: 03:1c:af:bf:8e:60:0c:06:69:6b:f3:59:b1:aa:35: ec:c3:53:b6:61:d3:3a:c8:4e:aa:0d:53:09:f2:fc: ba:77:69:b7:64:e6:ce:96:90:da:ea:c9:d5:53:8e: bd:32:0b:23:11:5b:3b:38:b5:68:bf:e0:a1:91:b1: 9f:7c:7f:7e:c6:80:05:e1:ce:29:96:49:fb:ca:8e: 9e:d6:32:a1:04:71:c5:05:6f:c7:24:d7:99:28:48: 0b:e4:cb:7a:02:20:04:0b:53:ab:28:4e:04:8c:32: 4f:f5:06:65:a4:b5:e2:18:0a:82:b4:1e:6e:30:60: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D1:26:A4:78:D3:D5:04:6D:6F:6F:15:E6:B9:5A:D1:72:9D:A5:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:52:28:54:42:06:a9:78:4a:9e:d6:a5:98:b2:45:b6:8e:6d: d3:d1:01:8b:ec:27:66:fd:12:78:c8:38:de:aa:6a:e4:f5:15: 3b:c0:7b:a8:8b:9f:ca:01:83:7f:a3:17:f9:43:56:09:04:25: 03:4c:78:ac:0f:4c:32:e3:44:ec:37:f4:be:59:dc:4b:72:f3: 21:82:43:b7:bb:65:95:7e:dc:2b:78:9c:d6:92:01:19:90:2e: 69:2f:e5:fe:66:10:92:b8:0b:5f:68:e5:55:dd:41:5f:cd:98: a9:c2:29:dd:69:18:a5:67:62:ed:c9:3f:18:3a:85:3a:fb:60: 63:63:da:52:d3:ea:19:50:6c:3c:57:85:a9:52:9f:d9:b6:f5: 1d:6f:b4:22:b1:ff:40:30:70:65:95:e1:26:ab:77:a6:1f:64: 23:19:62:37:aa:b0:e7:80:d8:b6:c0:49:16:b1:fc:a4:a2:2d: 1c:0d:f0:23:1d:a5:3d:94:c6:3d:7b:d1:66:2e:79:a8:7c:18: a9:77:ba:0d:59:ee:cd:92:b2:9c:3d:95:88:dc:97:68:75:51: ce:58:fd:34:51:d1:93:a2:01:43:e5:a8:05:9c:6c:c9:e4:df: 89:69:cd:35:f2:ae:c2:6e:f9:ce:b3:9f:c1:dd:c9:11:a1:6b: a4:9c:74:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITMTStxzAbl2SFNl+xE75jaHLijDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA1MjMwMDAwMjRaFw0yNTA2MjcyMzU5NTla MHoxSTBHBgNVBAUTQGY1OTE5ODY0NmQxZmJmZmJmMGU3NjNjYmUxZWU5NmVkNjA5 YmMyYWM5MGIyMGJjZDk2ZGM3MzEyMzVhYTJhNzExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJd72xEYEvvICEe2SsVNwZ6YWxbdCo2bGV6FKh7Fh4sQ1egW B6mfYqqdKTSk0CvldWx2+w+MYFF4aVCHiXNOjuzencmsrFkGO4gurU0Vzuh6Jjs3 4qVWEZUXjrB8uwJbF/1UKeVSGq6uF0MpFRXMlc7tRnQK2L2WTqB9A3ZfcjDH+pg3 b683Axyvv45gDAZpa/NZsao17MNTtmHTOshOqg1TCfL8undpt2TmzpaQ2urJ1VOO vTILIxFbOzi1aL/goZGxn3x/fsaABeHOKZZJ+8qOntYyoQRxxQVvxyTXmShIC+TL egIgBAtTqyhOBIwyT/UGZaS14hgKgrQebjBghtsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTu0SakeNPVBG1vbxXmuVrRcp2l1jAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNDY2ZGRhZTAtMzk1Zi00MGFmLWFiNTktMTdkYjFiNjM1MmE3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmyvODANBgkqhkiG9w0BAQsFAAOCAQEATVIoVEIGqXhKntalmLJFto5t09EB i+wnZv0SeMg43qpq5PUVO8B7qIufygGDf6MX+UNWCQQlA0x4rA9MMuNE7Df0vlnc S3LzIYJDt7tllX7cK3ic1pIBGZAuaS/l/mYQkrgLX2jlVd1BX82YqcIp3WkYpWdi 7ck/GDqFOvtgY2PaUtPqGVBsPFeFqVKf2bb1HW+0IrH/QDBwZZXhJqt3ph9kIxli N6qw54DYtsBJFrH8pKItHA3wIx2lPZTGPXvRZi55qHwYqXe6DVnuzZKynD2ViNyX aHVRzlj9NFHRk6IBQ+WoBZxsyeTfiWnNNfKuwm75zrOfwd3JEaFrpJx0Xw== -----END CERTIFICATE-----Generated at Sun Jun 1 05:29:31 2025 by rpki-client