$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69644a12-03d8-4112-9ef8-1852d3f0b9a4.roa File: 69644a12-03d8-4112-9ef8-1852d3f0b9a4.roa (raw, json) Hash identifier: enYhmnmqIA1T7iYlt+eHHl69GBFyvFXYXSW7jlgxoq4= Subject key identifier: 04:2F:0B:5D:C3:75:B9:6A:41:07:A0:87:53:66:C7:E6:C7:D2:ED:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2817452DB45CB3F683BA6D8AB8B8381C680415AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69644a12-03d8-4112-9ef8-1852d3f0b9a4.roa Signing time: Sat 24 May 2025 00:20:14 +0000 ROA not before: Sat 24 May 2025 00:20:14 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.2.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:17:45:2d:b4:5c:b3:f6:83:ba:6d:8a:b8:b8:38:1c:68:04:15:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:20:14 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=4f5143c5ec9cd67bf1300115f527c83aa147d8817f11703b86f408911ead4229, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:59:fe:e7:ce:e3:dd:c5:e3:f1:09:5e:13: c1:ff:29:85:73:9b:71:86:99:89:95:b1:5f:00:71: 10:f8:30:7f:01:b9:39:d6:29:87:5a:90:d6:3c:8b: 45:90:1c:ab:30:9d:90:c8:ac:df:60:d7:e0:d2:91: 2b:ce:ab:bb:7a:8d:bf:33:44:b3:41:35:1a:45:0b: c0:56:5a:ae:2a:69:ce:59:02:6f:3f:8e:8f:30:4a: 84:8b:07:2f:87:ef:39:7a:7d:55:2c:a9:c6:98:d2: ee:10:c3:f7:c9:db:88:8d:52:86:b6:fc:51:f0:78: 26:ec:d7:c3:2b:3b:cd:93:c0:c6:f8:c9:8b:e2:70: f4:2b:82:74:c1:97:e3:6f:8a:e0:e5:a6:d9:54:3d: 68:fa:7a:0f:b1:5d:ab:82:44:12:2a:74:29:25:f0: de:8c:e3:c2:a2:32:85:08:09:33:6c:a4:a1:42:f1: 7b:2c:38:c2:df:95:15:a3:86:c9:5b:56:18:3c:7b: 32:fd:fc:e1:53:eb:24:6d:c2:69:05:9f:52:2c:1d: e3:7e:bf:66:df:be:87:9d:2e:3c:e8:b0:00:4d:56: 10:b1:08:ab:5e:d5:75:b0:51:81:78:c0:c5:99:03: 05:37:16:fb:57:ca:64:5a:11:ac:f9:c6:59:3a:2f: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:0B:5D:C3:75:B9:6A:41:07:A0:87:53:66:C7:E6:C7:D2:ED:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69644a12-03d8-4112-9ef8-1852d3f0b9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.0.0/17 Signature Algorithm: sha256WithRSAEncryption 43:28:e8:13:85:46:3c:29:2d:28:2b:75:53:45:2b:e1:41:30: 34:16:e3:e2:97:39:8c:18:6b:bd:4c:c1:4c:ff:68:2e:aa:68: 08:59:76:6b:92:c4:12:eb:77:35:f3:a2:93:9e:5a:e4:07:c0: f6:ce:6e:39:86:d8:ad:08:d8:b7:f1:d1:4b:6a:69:3e:00:ee: 13:a9:80:f4:2d:a2:f5:7b:9c:92:b3:33:a6:df:1d:38:88:47: ee:5d:e5:1f:bb:88:01:e4:3e:f8:3c:19:2a:c7:94:3f:14:52: 8f:10:99:b1:a7:39:8b:7f:86:7c:c7:5a:9c:9b:b2:0d:88:47: bd:75:cb:d4:b3:c1:46:07:17:1e:b5:ea:b3:85:06:61:9e:e3: c6:21:53:b6:2f:0b:5e:e2:c8:c0:7a:95:9f:d5:22:53:9e:20: dc:a3:9d:7a:4b:29:94:8c:d4:59:77:e8:9c:92:87:9e:22:50: f4:f1:64:9b:95:39:f3:94:be:59:01:fd:52:0b:51:2b:b6:28: 92:16:c2:ff:1b:5c:67:e1:d6:19:d6:5b:0c:df:b8:e4:fa:be: 72:1e:e7:75:84:55:ee:6d:26:71:02:04:6c:ca:b3:c5:12:3e: 7c:9c:63:ba:b0:3d:9a:03:3b:23:2d:f8:e0:b4:f4:ab:48:46: d4:98:69:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKBdFLbRcs/aDum2KuLg4HGgEFa8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAyMDE0WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjUxNDNjNWVjOWNkNjdiZjEzMDAxMTVmNTI3YzgzYWEx NDdkODgxN2YxMTcwM2I4NmY0MDg5MTFlYWQ0MjI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCovFn+587j3cXj8QleE8H/KYVzm3GGmYmVsV8AcRD4MH8B uTnWKYdakNY8i0WQHKswnZDIrN9g1+DSkSvOq7t6jb8zRLNBNRpFC8BWWq4qac5Z Am8/jo8wSoSLBy+H7zl6fVUsqcaY0u4Qw/fJ24iNUoa2/FHweCbs18MrO82TwMb4 yYvicPQrgnTBl+NviuDlptlUPWj6eg+xXauCRBIqdCkl8N6M48KiMoUICTNspKFC 8XssOMLflRWjhslbVhg8ezL9/OFT6yRtwmkFn1IsHeN+v2bfvoedLjzosABNVhCx CKte1XWwUYF4wMWZAwU3FvtXymRaEaz5xlk6LzgNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBC8LXcN1uWpBB6CHU2bH5sfS7Y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5NjQ0YTEyLTAzZDgtNDExMi05ZWY4LTE4NTJkM2YwYjlhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdLAgAwDQYJKoZIhvcNAQELBQADggEBAEMo6BOFRjwpLSgrdVNFK+FBMDQW 4+KXOYwYa71MwUz/aC6qaAhZdmuSxBLrdzXzopOeWuQHwPbObjmG2K0I2Lfx0Utq aT4A7hOpgPQtovV7nJKzM6bfHTiIR+5d5R+7iAHkPvg8GSrHlD8UUo8QmbGnOYt/ hnzHWpybsg2IR711y9SzwUYHFx616rOFBmGe48YhU7YvC17iyMB6lZ/VIlOeINyj nXpLKZSM1Fl36JySh54iUPTxZJuVOfOUvlkB/VILUSu2KJIWwv8bXGfh1hnWWwzf uOT6vnIe53WEVe5tJnECBGzKs8USPnycY7qwPZoDOyMt+OC09KtIRtSYabE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:51:45 2025 by rpki-client