$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c4b87-7029-431d-9016-293dbfd25de5.roa File: 559c4b87-7029-431d-9016-293dbfd25de5.roa (raw, json) Hash identifier: iRfpJdeOAcQdbkBGokcDllAYNuZy4c43oSVklqRcbnE= Subject key identifier: 1C:74:08:1A:66:B2:68:9A:8C:7B:77:55:D4:0E:9A:7D:DF:8C:3A:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E66355E230533CE2DEA777E6742C0E4FA10CB1A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c4b87-7029-431d-9016-293dbfd25de5.roa Signing time: Mon 19 May 2025 16:41:11 +0000 ROA not before: Mon 19 May 2025 16:41:11 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:66:35:5e:23:05:33:ce:2d:ea:77:7e:67:42:c0:e4:fa:10:cb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:41:11 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=d72ef1f20c528f0183a7281d11072ab23f2620f8a6c44ef69cba5a2b87489f27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:86:d2:b0:ab:a2:8e:cf:65:cc:ff:12:81: 85:25:5e:e1:ea:73:1f:a3:9d:a1:cd:46:b1:3f:01: 63:cc:a2:35:09:0d:08:9f:f0:9d:08:a4:af:b4:d9: a9:f7:11:3b:0d:41:aa:12:69:22:ef:25:0e:95:d2: 3a:5f:4e:5d:ba:97:48:12:94:04:14:fb:09:e3:ab: df:cd:c7:01:97:88:2c:e5:67:29:89:96:c4:74:35: ca:71:fb:7c:27:0f:fd:f0:70:fd:f0:70:86:65:03: 77:6d:56:5c:ac:49:cf:c9:ef:cb:66:8a:1c:f9:ad: 04:9d:bf:c2:9d:9d:ab:2f:d3:ea:4b:05:39:f4:29: a1:24:28:50:37:47:2d:e7:d5:cb:79:08:a1:ab:72: b4:f0:90:72:91:b0:7a:4e:d9:ab:07:e5:55:c0:ad: d0:f8:60:04:23:cc:dc:84:f4:8b:1f:00:0c:84:28: b1:5e:b0:b6:94:76:31:d5:d9:47:0d:0e:a1:5a:8f: 95:03:2d:22:04:4f:67:00:1e:b2:0e:74:4f:f2:2a: ea:30:03:ed:8a:18:e4:db:32:ef:15:93:39:71:54: 2d:17:c2:a5:83:88:04:81:cb:62:84:d4:f2:84:55: 34:f3:ba:7f:2c:20:5c:18:dc:21:75:32:7e:f1:9c: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:08:1A:66:B2:68:9A:8C:7B:77:55:D4:0E:9A:7D:DF:8C:3A:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c4b87-7029-431d-9016-293dbfd25de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.144.0/20 Signature Algorithm: sha256WithRSAEncryption bb:97:c8:2d:47:da:f6:82:33:d4:95:fb:cd:26:fa:b2:3b:57: dd:92:50:79:c7:74:55:97:79:57:cb:6c:a4:48:28:9b:98:a0: ef:b5:9f:33:33:3f:87:1f:3d:28:cf:d6:67:c2:5d:3c:27:ee: c9:c7:ab:f8:60:88:57:4d:69:b2:3b:cc:fe:f0:07:e2:d2:c5: 94:3b:4c:0b:93:b2:c1:c1:7e:83:46:f9:39:d5:93:80:59:6c: 2f:47:e6:31:70:22:d7:16:40:41:97:f8:51:85:43:66:9f:6c: 36:04:cf:f6:1c:cf:5c:cd:a3:85:e7:a1:e7:e5:1e:0e:69:d5: 5e:59:12:8a:d5:1b:11:6a:26:fc:4a:3e:5c:e3:fd:f4:17:82: 64:5f:23:9b:c2:ff:88:d9:54:25:28:e0:45:26:4b:de:20:cb: 2c:24:8b:dc:bc:af:e9:2f:4c:9d:f5:30:95:28:64:06:91:46: 87:e8:a8:e0:64:42:16:8d:f8:c7:12:33:40:75:ac:ee:11:7b: ae:f2:7d:85:19:3f:31:3d:0d:db:f3:d6:ba:d1:c0:e1:a6:49: f3:44:2f:cd:26:67:e4:9d:a5:19:65:a3:51:c6:f7:f0:0e:59: 75:7a:b1:49:c8:aa:c8:6a:b8:ed:20:57:e5:13:70:e6:80:96: de:1e:08:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXmY1XiMFM84t6nd+Z0LA5PoQyxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTY0MTExWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzJlZjFmMjBjNTI4ZjAxODNhNzI4MWQxMTA3MmFiMjNm MjYyMGY4YTZjNDRlZjY5Y2JhNWEyYjg3NDg5ZjI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLjYbSsKuijs9lzP8SgYUlXuHqcx+jnaHNRrE/AWPMojUJ DQif8J0IpK+02an3ETsNQaoSaSLvJQ6V0jpfTl26l0gSlAQU+wnjq9/NxwGXiCzl ZymJlsR0Ncpx+3wnD/3wcP3wcIZlA3dtVlysSc/J78tmihz5rQSdv8Kdnasv0+pL BTn0KaEkKFA3Ry3n1ct5CKGrcrTwkHKRsHpO2asH5VXArdD4YAQjzNyE9IsfAAyE KLFesLaUdjHV2UcNDqFaj5UDLSIET2cAHrIOdE/yKuowA+2KGOTbMu8VkzlxVC0X wqWDiASBy2KE1PKEVTTzun8sIFwY3CF1Mn7xnFmRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHHQIGmayaJqMe3dV1A6afd+MOsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1OWM0Yjg3LTcwMjktNDMxZC05MDE2LTI5M2RiZmQyNWRlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFJAwDQYJKoZIhvcNAQELBQADggEBALuXyC1H2vaCM9SV+80m+rI7V92S UHnHdFWXeVfLbKRIKJuYoO+1nzMzP4cfPSjP1mfCXTwn7snHq/hgiFdNabI7zP7w B+LSxZQ7TAuTssHBfoNG+TnVk4BZbC9H5jFwItcWQEGX+FGFQ2afbDYEz/Ycz1zN o4XnoeflHg5p1V5ZEorVGxFqJvxKPlzj/fQXgmRfI5vC/4jZVCUo4EUmS94gyywk i9y8r+kvTJ31MJUoZAaRRofoqOBkQhaN+McSM0B1rO4Re67yfYUZPzE9Ddvz1rrR wOGmSfNEL80mZ+SdpRllo1HG9/AOWXV6sUnIqshquO0gV+UTcOaAlt4eCFM= -----END CERTIFICATE-----Generated at Sun Jun 1 05:12:48 2025 by rpki-client