$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa File: 679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa (raw, json) Hash identifier: UxDdJQTIbi9P4BXN8D3+tizuSlRK7aJwsMC6TfzqyMg= Subject key identifier: 27:20:D6:DA:63:60:DB:4D:00:2D:80:EC:D9:A2:57:70:D1:1A:E5:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 224A98FCFF7BF862D5AE3E24A455685CF5FE654B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa Signing time: Fri 09 May 2025 00:02:09 +0000 ROA not before: Fri 09 May 2025 00:02:09 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4a:98:fc:ff:7b:f8:62:d5:ae:3e:24:a4:55:68:5c:f5:fe:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:02:09 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=a807e42d8bea618c7d43916fd2078b22db88b83d7202ec1089c647fdad27b337, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:94:16:64:de:cb:98:e1:da:b5:e3:0d:37: 7f:8f:0e:3c:ef:ff:0c:24:60:88:7a:68:24:b1:4e: 06:7d:dd:ea:54:d9:c5:d1:a8:23:3b:e0:98:c3:89: 74:5e:d1:ad:06:6c:8a:3a:43:8b:24:da:12:da:79: cf:76:8b:39:52:df:95:51:bc:27:b4:bb:b4:1f:85: fc:7b:4c:78:8d:5a:78:4b:f3:ac:72:31:7e:cf:e3: 5f:c8:9a:14:da:ef:10:23:1d:59:f6:fc:01:d3:c4: ba:06:6f:16:7b:6f:1f:75:e1:c7:75:5a:24:25:9f: 08:20:c1:99:2a:40:89:3e:dc:56:89:8a:b6:2a:a0: 4a:6e:10:50:2b:27:b2:8b:bb:91:9c:16:f9:4a:70: dc:8e:e3:00:45:b6:1e:ca:95:05:39:18:3e:d2:d1: 4b:60:71:e5:cb:82:98:4e:a8:bc:41:8d:46:0f:47: b4:55:57:d4:87:d4:e5:62:6a:28:34:fe:ca:cf:c4: 17:e0:3d:4a:01:de:23:4b:76:15:26:26:27:17:1d: 76:5e:ae:5a:01:7c:64:00:d2:87:24:8e:39:77:37: 46:62:36:54:36:53:f0:b9:88:c0:2c:f8:cd:fa:47: 10:32:d0:f6:a2:9f:f6:16:ae:cf:a1:47:ca:62:fa: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:D6:DA:63:60:DB:4D:00:2D:80:EC:D9:A2:57:70:D1:1A:E5:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.136.0/23 Signature Algorithm: sha256WithRSAEncryption 25:03:ae:85:0e:f9:ef:04:46:e3:10:de:e8:73:0a:47:92:49: d8:a1:b1:f0:03:30:0c:98:17:9a:b1:eb:82:e4:e8:53:d7:aa: dd:9f:84:41:85:7e:e8:04:54:7d:77:c1:8d:2b:b5:80:f9:e3: e5:7b:7c:c8:d6:ab:1e:da:91:89:1d:f4:e1:63:b1:2c:21:43: da:32:bc:14:5a:8e:e4:0b:b2:ca:5a:14:01:89:cd:98:41:3b: 63:e3:f9:79:ae:d9:fa:3d:5f:b9:79:04:a2:af:7b:6c:43:de: 1d:f4:5c:42:e4:06:f2:dd:b7:88:00:f9:bb:d6:66:81:e3:e7: 3f:c0:82:fc:2c:1e:f7:a2:c5:89:75:2a:d9:af:58:9f:31:98: 78:3d:b3:5d:5c:9d:43:78:b2:5f:6d:f0:97:46:0d:fd:38:36: f6:45:df:73:b1:b8:60:b5:13:48:6b:ee:70:9d:73:eb:45:3e: 33:ac:d7:aa:55:c4:52:93:bd:04:84:19:42:4f:c6:24:b8:74: a6:48:a7:26:f5:ed:8b:c5:ae:18:07:ef:18:61:24:1e:ec:ed: c8:c0:04:e8:e1:61:68:84:a6:e5:68:ef:2b:c1:d6:de:30:fd: e1:3a:05:e0:09:9e:1e:b5:44:93:87:1e:99:77:ca:0d:47:57: 74:80:83:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIkqY/P97+GLVrj4kpFVoXPX+ZUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAwMjA5WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhODA3ZTQyZDhiZWE2MThjN2Q0MzkxNmZkMjA3OGIyMmRi ODhiODNkNzIwMmVjMTA4OWM2NDdmZGFkMjdiMzM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDML5QWZN7LmOHateMNN3+PDjzv/wwkYIh6aCSxTgZ93epU 2cXRqCM74JjDiXRe0a0GbIo6Q4sk2hLaec92izlS35VRvCe0u7Qfhfx7THiNWnhL 86xyMX7P41/ImhTa7xAjHVn2/AHTxLoGbxZ7bx914cd1WiQlnwggwZkqQIk+3FaJ irYqoEpuEFArJ7KLu5GcFvlKcNyO4wBFth7KlQU5GD7S0UtgceXLgphOqLxBjUYP R7RVV9SH1OViaig0/srPxBfgPUoB3iNLdhUmJicXHXZerloBfGQA0ockjjl3N0Zi NlQ2U/C5iMAs+M36RxAy0Pain/YWrs+hR8pi+n+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJyDW2mNg200ALYDs2aJXcNEa5UYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3OWZkMDA1LWIwZWEtNDI5Yy1hMTllLTNiZDhhNmU4N2E1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEogwDQYJKoZIhvcNAQELBQADggEBACUDroUO+e8ERuMQ3uhzCkeSSdih sfADMAyYF5qx64Lk6FPXqt2fhEGFfugEVH13wY0rtYD54+V7fMjWqx7akYkd9OFj sSwhQ9oyvBRajuQLsspaFAGJzZhBO2Pj+Xmu2fo9X7l5BKKve2xD3h30XELkBvLd t4gA+bvWZoHj5z/AgvwsHveixYl1KtmvWJ8xmHg9s11cnUN4sl9t8JdGDf04NvZF 33OxuGC1E0hr7nCdc+tFPjOs16pVxFKTvQSEGUJPxiS4dKZIpyb17YvFrhgH7xhh JB7s7cjABOjhYWiEpuVo7yvB1t4w/eE6BeAJnh61RJOHHpl3yg1HV3SAgxo= -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:56 2025 by rpki-client