$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa File: 6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa (raw, json) Hash identifier: m4fpHqzBEF/SRvlRJ8sszRhR0MpbUt4qShN0C3r6eMI= Subject key identifier: DF:94:D4:A6:62:31:54:77:37:5C:A8:E9:56:CA:75:0D:25:D6:1E:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 348F120A02852B4EABB05E1985D3E433378BD111 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa Signing time: Mon 19 May 2025 17:00:27 +0000 ROA not before: Mon 19 May 2025 17:00:27 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.51.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8f:12:0a:02:85:2b:4e:ab:b0:5e:19:85:d3:e4:33:37:8b:d1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:00:27 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=90231a4e0684b6fc9744464da9173c9f3af05d51cdfccaae916c7a9d7981b788, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:15:31:a5:8a:fe:a0:94:e4:be:1f:cf:69: e9:96:b0:7c:f2:20:f6:fb:1e:5d:26:54:1a:a3:af: 51:d6:b4:39:d5:f2:c8:b2:d2:e8:9d:70:21:df:7b: a5:02:1c:d2:5f:6f:d9:3d:4a:04:fd:15:c3:24:20: ff:68:00:49:75:80:ed:bc:e7:5a:3a:9b:4d:66:8b: 32:4d:6d:81:00:6a:88:f6:f0:cc:5c:92:f8:15:2a: 7e:0c:b6:f3:9b:e4:b9:ae:33:98:7e:83:4f:f9:38: 4f:33:c8:a4:23:63:ad:1a:1a:9b:50:cc:c0:6a:32: 3c:b3:e1:b4:8a:18:ea:d6:bc:fe:21:4b:00:ae:80: aa:ba:47:f4:eb:30:2a:5a:c3:08:2c:7d:fb:ab:35: d6:e5:e7:5c:71:6f:39:23:45:9a:d2:fd:b7:27:c6: d3:f9:05:0f:67:9a:a7:17:9f:2f:99:53:7e:ed:b7: 26:d3:0c:d1:cc:e2:35:1d:9e:8d:94:a2:97:e3:29: 31:c0:34:ba:35:4a:9b:e2:0e:f3:d2:c1:cb:47:2d: 5a:18:03:62:99:ce:70:0c:19:53:29:28:7a:42:36: 94:d0:65:53:4f:ee:e1:89:70:85:7a:7b:d3:e8:13: f1:87:cf:dd:65:df:fe:01:61:c9:ff:6b:14:9d:5b: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:D4:A6:62:31:54:77:37:5C:A8:E9:56:CA:75:0D:25:D6:1E:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.51.32.0/22 Signature Algorithm: sha256WithRSAEncryption a4:1e:14:71:a0:be:03:7a:95:60:0a:fa:db:f0:70:25:49:52: 27:10:86:05:42:6b:35:ab:f0:b0:d7:94:aa:b3:5c:b0:45:e3: 00:aa:93:b2:c1:7e:e5:35:0c:87:e8:a6:7e:da:8e:a0:4a:34: 61:a4:97:8d:a7:8f:19:e6:03:55:95:d2:4b:2a:bc:f2:3d:da: 9f:f5:b5:21:9c:95:65:72:bb:69:2b:e5:32:1b:16:e8:02:8c: 79:ca:32:a6:a3:52:a9:9c:f7:7e:6f:21:3e:04:42:6d:3c:2a: 5b:77:03:7d:a8:59:89:df:2c:ac:8e:2f:42:b0:a6:a7:76:1f: fb:e1:9a:f1:7a:93:9c:e1:1a:9b:a3:aa:f1:29:be:66:6a:b4: da:de:9a:a2:a3:dd:a5:2f:b7:39:2a:d6:0b:af:b8:3c:7b:e2: 56:50:35:d9:a3:0d:bd:9a:dc:1e:d0:34:85:21:61:21:e2:f8: c3:7d:85:14:75:f1:2d:9e:17:dd:95:eb:ec:b2:54:c9:25:8d: ed:3a:77:5a:03:bf:4c:03:ca:ac:3b:c9:7e:92:4d:df:20:ff: b0:fe:ac:fb:aa:9d:ae:ae:df:45:92:af:12:6c:27:b0:01:07: 33:e4:a7:ca:0d:25:13:3f:d3:90:72:0a:00:7f:de:ab:46:89: 98:3c:ba:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNI8SCgKFK06rsF4ZhdPkMzeL0REwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTcwMDI3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDIzMWE0ZTA2ODRiNmZjOTc0NDQ2NGRhOTE3M2M5ZjNh ZjA1ZDUxY2RmY2NhYWU5MTZjN2E5ZDc5ODFiNzg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV5hUxpYr+oJTkvh/PaemWsHzyIPb7Hl0mVBqjr1HWtDnV 8siy0uidcCHfe6UCHNJfb9k9SgT9FcMkIP9oAEl1gO2851o6m01mizJNbYEAaoj2 8MxckvgVKn4MtvOb5LmuM5h+g0/5OE8zyKQjY60aGptQzMBqMjyz4bSKGOrWvP4h SwCugKq6R/TrMCpawwgsffurNdbl51xxbzkjRZrS/bcnxtP5BQ9nmqcXny+ZU37t tybTDNHM4jUdno2UopfjKTHANLo1SpviDvPSwctHLVoYA2KZznAMGVMpKHpCNpTQ ZVNP7uGJcIV6e9PoE/GHz91l3/4BYcn/axSdW3VfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU35TUpmIxVHc3XKjpVsp1DSXWHsowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjMmZkMWEyLTc4YWYtNGE4Ny05ODAyLTBiZGNlZTJkOTUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQMyAwDQYJKoZIhvcNAQELBQADggEBAKQeFHGgvgN6lWAK+tvwcCVJUicQ hgVCazWr8LDXlKqzXLBF4wCqk7LBfuU1DIfopn7ajqBKNGGkl42njxnmA1WV0ksq vPI92p/1tSGclWVyu2kr5TIbFugCjHnKMqajUqmc935vIT4EQm08Klt3A32oWYnf LKyOL0Kwpqd2H/vhmvF6k5zhGpujqvEpvmZqtNremqKj3aUvtzkq1guvuDx74lZQ NdmjDb2a3B7QNIUhYSHi+MN9hRR18S2eF92V6+yyVMklje06d1oDv0wDyqw7yX6S Td8g/7D+rPuqna6u30WSrxJsJ7ABBzPkp8oNJRM/05ByCgB/3qtGiZg8urM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:51:30 2025 by rpki-client