$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa File: 634e4c18-756f-434d-b58c-0c6f036067f6.roa (raw, json) Hash identifier: NC7AJ++yjatyJwPtJuTedW8DJC9xI2k6GO7B4v1wkEQ= Subject key identifier: 6C:7E:D8:33:B7:85:2A:B8:C0:F8:4C:47:86:8B:C5:48:09:F6:80:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 292D1A30D647C6DA46F5938EAB6EEF78389C12DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa Signing time: Fri 30 May 2025 00:00:38 +0000 ROA not before: Fri 30 May 2025 00:00:38 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 162.250.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2d:1a:30:d6:47:c6:da:46:f5:93:8e:ab:6e:ef:78:38:9c:12:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:00:38 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=086b95d171dbbbd2b179a84eb361e49d81635be436a4a5b6aae27b782737321f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:f9:9f:26:8e:8f:40:70:d5:9f:37:14:08: ef:6a:43:95:65:16:b2:58:d8:a3:ac:10:32:b9:30: b1:a1:79:ee:68:8c:bd:61:03:1d:93:d5:f1:03:ab: a4:5e:a4:7b:3e:fa:39:05:86:6e:95:d9:e0:2f:96: 39:fd:6b:df:a2:a3:5c:61:89:a6:14:52:6e:49:63: 3f:80:c2:39:34:7a:b7:8d:24:f9:3f:72:a6:66:91: e6:ea:29:1e:01:0a:43:ea:dd:3e:08:1a:82:30:ab: 3e:f0:b5:cb:82:19:30:bc:4f:57:cb:23:a2:f4:a1: be:ba:38:ca:f9:18:d9:2c:9f:43:06:73:04:bb:43: 12:bb:b8:7e:72:44:21:23:d1:a1:f2:2b:5b:30:bc: 4c:a3:62:08:cc:7e:0a:0d:30:63:94:7b:1e:ef:98: 22:bd:1e:8b:4c:bc:7d:07:ff:2b:87:c4:da:54:e1: 5d:53:03:e2:74:f8:34:78:75:f6:bb:f5:3c:24:ac: bf:07:ed:75:69:dc:c7:87:91:6e:92:ec:86:8a:b0: 53:4e:21:08:ac:c1:47:79:69:4a:cc:11:50:3c:1c: af:47:1f:0f:d4:3d:bb:db:3d:0f:86:7b:e3:0c:33: c4:68:83:b0:90:a1:e0:b1:a1:8e:80:d9:2d:26:88: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7E:D8:33:B7:85:2A:B8:C0:F8:4C:47:86:8B:C5:48:09:F6:80:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.236.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:73:40:f7:ba:67:53:d2:0c:75:c4:18:08:29:5e:58:dd:b9: d5:03:82:00:bf:da:df:a3:d2:d5:e1:a9:b7:c1:77:4e:1f:7c: 25:30:87:49:35:5b:42:5a:5e:93:82:60:29:88:5b:0a:fb:ea: d7:59:f8:23:ab:f3:7e:31:a8:a6:76:a6:64:f0:88:ae:03:5b: 92:3e:d6:9b:26:9f:3b:60:98:41:b0:75:63:cb:1e:18:aa:1a: 3e:47:ac:77:57:02:b2:94:5f:28:81:e6:80:71:ff:d2:fa:03: 90:de:df:71:0a:2f:ed:ce:b7:65:e4:ea:39:87:87:e2:f2:29: 2c:64:52:b0:7b:02:17:71:e9:4a:d0:8a:2b:6e:7e:ba:49:3a: c6:01:64:13:71:ff:17:8b:4c:fc:85:5e:2d:1b:62:af:8f:0c: de:3b:ca:a1:dc:b6:b7:cf:33:aa:09:65:61:60:b0:9a:73:e6: a7:69:38:9d:e3:1a:61:88:0e:a3:e7:a4:bb:02:60:c8:2c:b0: 53:af:92:39:56:a5:74:ea:07:97:02:2d:54:2f:c2:72:ce:ab: 05:04:7e:df:0e:a0:01:a3:a2:43:b0:6d:c1:8d:09:37:45:41: 3c:9e:0a:7b:28:73:78:0e:10:a9:66:80:85:eb:37:4e:2e:26: 07:7c:2c:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKS0aMNZHxtpG9ZOOq27veDicEtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAwMDM4WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODZiOTVkMTcxZGJiYmQyYjE3OWE4NGViMzYxZTQ5ZDgx NjM1YmU0MzZhNGE1YjZhYWUyN2I3ODI3MzczMjFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXKvmfJo6PQHDVnzcUCO9qQ5VlFrJY2KOsEDK5MLGhee5o jL1hAx2T1fEDq6RepHs++jkFhm6V2eAvljn9a9+io1xhiaYUUm5JYz+Awjk0ereN JPk/cqZmkebqKR4BCkPq3T4IGoIwqz7wtcuCGTC8T1fLI6L0ob66OMr5GNksn0MG cwS7QxK7uH5yRCEj0aHyK1swvEyjYgjMfgoNMGOUex7vmCK9HotMvH0H/yuHxNpU 4V1TA+J0+DR4dfa79TwkrL8H7XVp3MeHkW6S7IaKsFNOIQiswUd5aUrMEVA8HK9H Hw/UPbvbPQ+Ge+MMM8Rog7CQoeCxoY6A2S0miMUxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbH7YM7eFKrjA+ExHhovFSAn2gHIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzNGU0YzE4LTc1NmYtNDM0ZC1iNThjLTBjNmYwMzYwNjdmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBAJxzQPe6Z1PSDHXEGAgpXljdudUD ggC/2t+j0tXhqbfBd04ffCUwh0k1W0JaXpOCYCmIWwr76tdZ+COr834xqKZ2pmTw iK4DW5I+1psmnztgmEGwdWPLHhiqGj5HrHdXArKUXyiB5oBx/9L6A5De33EKL+3O t2Xk6jmHh+LyKSxkUrB7Ahdx6UrQiitufrpJOsYBZBNx/xeLTPyFXi0bYq+PDN47 yqHctrfPM6oJZWFgsJpz5qdpOJ3jGmGIDqPnpLsCYMgssFOvkjlWpXTqB5cCLVQv wnLOqwUEft8OoAGjokOwbcGNCTdFQTyeCnsoc3gOEKlmgIXrN04uJgd8LLc= -----END CERTIFICATE-----Generated at Sun Jun 1 04:52:22 2025 by rpki-client