$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a87e6de-abd8-4be0-a610-ec23b4c9818c.roa File: 4a87e6de-abd8-4be0-a610-ec23b4c9818c.roa (raw, json) Hash identifier: eBQut7rlN31GTrPec+HYBC0OLvELTbgXewgFqlHd6Ow= Subject key identifier: 2B:02:92:8B:22:9B:FD:6B:FC:CA:66:60:A1:A9:92:29:33:7F:91:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 448FE1DF7C295350DEDA2BDC0E8E6F866D2973EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a87e6de-abd8-4be0-a610-ec23b4c9818c.roa Signing time: Mon 26 May 2025 15:00:45 +0000 ROA not before: Mon 26 May 2025 15:00:45 +0000 ROA not after: Mon 30 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8f:e1:df:7c:29:53:50:de:da:2b:dc:0e:8e:6f:86:6d:29:73:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 26 15:00:45 2025 GMT Not After : Jun 30 23:59:59 2025 GMT Subject: serialNumber=ba620e230ea861b3eaa3224ad4580e07f0ca46da910058752e96dbfc6206c20f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:bc:28:80:c4:61:0e:9d:9a:c6:fd:fe:1c: 69:53:e8:05:75:42:e1:59:d7:09:08:7b:d4:8a:b8: bd:72:78:b8:a9:53:c1:f2:19:24:b6:13:13:ac:f1: 57:41:4d:30:67:d9:b0:05:41:29:b0:26:3e:92:fb: 13:0f:5b:da:2f:12:ad:58:c7:b2:f8:59:cc:48:a7: c3:2a:56:04:f6:03:3d:a3:e7:b8:1d:7f:85:a2:dc: 3c:78:3f:e3:e5:fd:d6:51:51:99:b7:f8:43:c7:2c: 56:5f:fd:f8:1c:6a:09:7e:be:02:64:82:df:3b:4d: 2f:c5:2b:04:a2:e7:00:0e:04:72:26:f3:8a:aa:61: cc:2c:65:b0:54:f6:be:4e:bf:58:dc:8d:b2:3c:90: 4b:ac:5c:69:30:75:1f:bf:a7:d0:72:72:04:b4:c3: 75:d7:52:9a:4a:bc:37:a6:f6:dc:0a:4b:74:58:6b: 8a:ba:8c:e5:29:f8:ee:23:91:b3:94:23:98:60:20: a5:a3:aa:05:fc:aa:73:07:c6:3a:4e:6a:6a:46:f1: 11:61:a4:67:8e:d3:b0:8b:25:33:bc:4f:e3:b6:b7: 72:9e:5c:57:8f:14:6a:b3:91:84:6e:16:dc:a3:02: 0c:30:f2:7e:1e:94:4e:d3:bd:c5:fa:38:95:69:b4: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:02:92:8B:22:9B:FD:6B:FC:CA:66:60:A1:A9:92:29:33:7F:91:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a87e6de-abd8-4be0-a610-ec23b4c9818c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:d6:30:1d:4b:db:88:3e:a4:c2:d9:18:18:e0:6d:6f:09:b4: 7e:78:d1:70:65:61:9c:7e:fb:a0:65:c7:f0:29:d0:42:b1:ad: a0:5e:e2:b9:a5:a6:41:10:38:89:e4:4c:70:b9:a6:de:9c:20: 10:af:e0:06:b3:97:ec:44:16:df:0f:f3:dd:31:f9:b7:11:0d: 0b:25:0f:ae:0f:35:d4:7f:1e:77:d4:85:ee:0d:6b:ba:24:2a: 18:e6:eb:94:6c:b0:f6:5a:7b:79:c0:58:37:1b:cd:fa:a9:f8: bb:f3:97:0c:a7:e3:b9:b6:ad:53:37:4e:e6:1b:70:e8:18:06: 02:03:c9:80:7d:9d:71:91:d0:b8:09:57:c8:f2:1c:c2:35:31: 9a:81:8f:20:d8:01:22:d1:20:5a:22:5f:9f:4e:3e:6e:f1:5b: 8e:7b:26:30:68:81:9a:bc:b0:fe:d2:52:af:87:9e:37:bf:58: 5f:af:ac:19:f1:71:44:bd:d8:27:8d:36:ca:98:05:71:b0:ca: e7:f3:84:6c:95:c2:84:53:09:b5:f3:f2:ec:d6:9e:8e:88:66: 4f:98:61:6a:83:a0:ef:d3:ce:77:39:e7:eb:de:5f:67:5a:d0: 0d:36:01:ac:f8:62:9c:3a:46:2e:5c:6e:e7:bd:01:8d:ea:e0: 93:63:a8:09 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURI/h33wpU1De2ivcDo5vhm0pc+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI2MTUwMDQ1WhcNMjUwNjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTYyMGUyMzBlYTg2MWIzZWFhMzIyNGFkNDU4MGUwN2Yw Y2E0NmRhOTEwMDU4NzUyZTk2ZGJmYzYyMDZjMjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl97wogMRhDp2axv3+HGlT6AV1QuFZ1wkIe9SKuL1yeLip U8HyGSS2ExOs8VdBTTBn2bAFQSmwJj6S+xMPW9ovEq1Yx7L4WcxIp8MqVgT2Az2j 57gdf4Wi3Dx4P+Pl/dZRUZm3+EPHLFZf/fgcagl+vgJkgt87TS/FKwSi5wAOBHIm 84qqYcwsZbBU9r5Ov1jcjbI8kEusXGkwdR+/p9BycgS0w3XXUppKvDem9twKS3RY a4q6jOUp+O4jkbOUI5hgIKWjqgX8qnMHxjpOampG8RFhpGeO07CLJTO8T+O2t3Ke XFePFGqzkYRuFtyjAgww8n4elE7TvcX6OJVptFcbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKwKSiyKb/Wv8ymZgoamSKTN/kX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhODdlNmRlLWFiZDgtNGJlMC1hNjEwLWVjMjNiNGM5ODE4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCrzANBgkqhkiG9w0BAQsFAAOCAQEAttYwHUvbiD6kwtkYGOBtbwm0fnjR cGVhnH77oGXH8CnQQrGtoF7iuaWmQRA4ieRMcLmm3pwgEK/gBrOX7EQW3w/z3TH5 txENCyUPrg811H8ed9SF7g1ruiQqGObrlGyw9lp7ecBYNxvN+qn4u/OXDKfjubat UzdO5htw6BgGAgPJgH2dcZHQuAlXyPIcwjUxmoGPINgBItEgWiJfn04+bvFbjnsm MGiBmryw/tJSr4eeN79YX6+sGfFxRL3YJ402ypgFcbDK5/OEbJXChFMJtfPy7Nae johmT5hhaoOg79POdznn695fZ1rQDTYBrPhinDpGLlxu570Bjergk2OoCQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:12 2025 by rpki-client