$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a168d90-2841-493c-9062-7688b3e332a6.roa File: 6a168d90-2841-493c-9062-7688b3e332a6.roa (raw, json) Hash identifier: jnTz4sf79hCIAJa5m6e8WWZKNGcqpBEXBDzG8whdigM= Subject key identifier: 71:71:EE:FC:72:86:6E:16:FE:B5:51:32:23:8A:27:8A:B5:A8:2E:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B55963F065633A2673F78679FC2A0BA15F7BFE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a168d90-2841-493c-9062-7688b3e332a6.roa Signing time: Mon 19 May 2025 16:40:58 +0000 ROA not before: Mon 19 May 2025 16:40:58 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:55:96:3f:06:56:33:a2:67:3f:78:67:9f:c2:a0:ba:15:f7:bf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:40:58 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=c9a7a49c7b09c120324c035dd411b3efefa33f5bdb18471ebdcb9d21210e3594, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:4f:dc:a7:65:e5:37:1a:46:34:98:6a:fb: 8f:84:50:f0:4c:fe:ba:2b:92:c3:43:22:c4:6e:70: 57:5a:6b:71:a3:f6:90:88:fb:ac:ad:55:a2:96:08: 24:2e:47:7f:61:bc:36:45:7d:bb:b7:16:17:fb:89: 42:39:8f:0b:2c:83:fa:00:c4:b6:98:fd:fc:66:e9: 0c:55:29:0a:88:3d:34:7f:9b:f5:fb:62:8b:26:8d: 16:81:cd:d3:d1:e1:a9:25:be:0e:1d:46:50:a5:a5: 45:3c:9f:12:83:d2:24:57:9a:a2:32:58:d8:20:ce: d6:49:77:5a:52:3a:51:ff:7e:f0:2c:ab:dc:99:c5: 34:32:bc:9c:ba:80:37:cf:56:d5:ab:63:45:e6:71: 3c:3b:76:b6:2b:c1:ee:b6:c4:a0:86:7c:bd:11:df: ca:95:41:a7:f9:2f:5e:b8:df:ef:c1:79:ee:8e:c9: e9:10:85:99:89:25:66:75:49:ca:26:7c:f6:0a:b5: 13:c5:c9:2f:af:a3:9a:84:2d:c5:4f:5b:85:db:39: d4:83:05:3b:3e:3f:05:ae:ce:ab:5b:d7:1c:a9:34: ec:2c:2a:a5:af:33:b8:44:7d:e8:fd:e3:02:70:21: a1:34:18:5d:13:b4:7a:30:a6:df:04:f2:f2:cd:37: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:EE:FC:72:86:6E:16:FE:B5:51:32:23:8A:27:8A:B5:A8:2E:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a168d90-2841-493c-9062-7688b3e332a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.80.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:71:4d:3e:55:67:e6:21:b9:f9:1c:32:6c:56:7b:37:05:58: dd:c7:c9:aa:ca:ac:4e:bf:7d:e6:95:8a:ba:4c:80:ed:a8:08: 56:c6:c2:59:21:f6:62:a2:76:fd:c3:ef:83:e3:ac:41:fb:b7: 26:ba:37:ef:eb:e6:39:63:95:9a:df:0e:4f:1c:90:9d:97:a9: 1c:fc:98:81:07:2d:69:40:22:79:48:a1:84:1f:e1:2a:7b:07: cf:ef:d1:3b:9a:98:63:5e:a0:52:50:01:46:ba:7f:d1:f0:77: be:ca:d7:8b:d8:79:c4:a3:ff:99:25:48:85:cb:53:e3:56:62: ef:9a:3f:76:2b:2b:ae:15:d7:a9:85:9d:3e:c8:d2:fa:36:aa: 3b:f9:66:b2:a0:d3:80:14:29:6d:83:77:49:d0:e6:7c:7a:53: ba:da:c0:0e:95:40:b9:77:08:84:48:d9:d1:6a:72:3a:2c:b4: 84:43:a4:fc:42:7a:2f:70:c8:8a:a7:0a:0d:df:71:37:95:ce: c5:b9:7f:f2:e4:73:97:2d:77:cd:a5:46:b5:68:24:5d:c4:57: 7d:39:7c:2f:54:8c:70:69:aa:6b:c5:42:32:81:1d:99:f5:d4: d6:7c:23:a2:ba:77:90:b0:76:27:77:24:d1:89:f1:45:9e:5b: 8b:07:4c:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG1WWPwZWM6JnP3hnn8KguhX3v+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTY0MDU4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWE3YTQ5YzdiMDljMTIwMzI0YzAzNWRkNDExYjNlZmVm YTMzZjViZGIxODQ3MWViZGNiOWQyMTIxMGUzNTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtS0/cp2XlNxpGNJhq+4+EUPBM/rorksNDIsRucFdaa3Gj 9pCI+6ytVaKWCCQuR39hvDZFfbu3Fhf7iUI5jwssg/oAxLaY/fxm6QxVKQqIPTR/ m/X7YosmjRaBzdPR4aklvg4dRlClpUU8nxKD0iRXmqIyWNggztZJd1pSOlH/fvAs q9yZxTQyvJy6gDfPVtWrY0XmcTw7drYrwe62xKCGfL0R38qVQaf5L1643+/Bee6O yekQhZmJJWZ1ScomfPYKtRPFyS+vo5qELcVPW4XbOdSDBTs+PwWuzqtb1xypNOws KqWvM7hEfej94wJwIaE0GF0TtHowpt8E8vLNNyJDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcXHu/HKGbhb+tVEyI4onirWoLi0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhMTY4ZDkwLTI4NDEtNDkzYy05MDYyLTc2ODhiM2UzMzJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFVAwDQYJKoZIhvcNAQELBQADggEBABtxTT5VZ+YhufkcMmxWezcFWN3H yarKrE6/feaVirpMgO2oCFbGwlkh9mKidv3D74PjrEH7tya6N+/r5jljlZrfDk8c kJ2XqRz8mIEHLWlAInlIoYQf4Sp7B8/v0TuamGNeoFJQAUa6f9Hwd77K14vYecSj /5klSIXLU+NWYu+aP3YrK64V16mFnT7I0vo2qjv5ZrKg04AUKW2Dd0nQ5nx6U7ra wA6VQLl3CIRI2dFqcjostIRDpPxCei9wyIqnCg3fcTeVzsW5f/Lkc5ctd82lRrVo JF3EV305fC9UjHBpqmvFQjKBHZn11NZ8I6K6d5Cwdid3JNGJ8UWeW4sHTJE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:56:15 2025 by rpki-client