$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa File: 72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa (raw, json) Hash identifier: lKiqg5wpAQSCPK4MtluX+2ULy6mKH13pHxicijW+16c= Subject key identifier: BC:9F:81:1E:28:21:E7:B0:68:96:0C:07:1D:FB:57:C9:FA:2D:D2:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48D01F3350A0EDEE39D8D889C028245603AB948F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa Signing time: Mon 19 May 2025 17:10:20 +0000 ROA not before: Mon 19 May 2025 17:10:20 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d0:1f:33:50:a0:ed:ee:39:d8:d8:89:c0:28:24:56:03:ab:94:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:10:20 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=4971825440cdf4c2e4ffc08e966fa07fcaa2fec1bc455f4b5a214cc244749223, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:d6:33:cc:78:ba:e1:89:22:22:44:69:2e: e5:c2:c2:ad:23:5c:a6:65:35:28:e0:fa:e0:f4:9a: ff:df:f6:77:6d:76:f9:e8:c2:0c:7c:e5:43:92:10: 71:9c:dd:bb:1c:b7:b5:1f:ca:f7:a8:e0:02:86:e4: e0:bf:86:79:31:4f:3f:4d:c6:94:31:1f:a9:11:2b: bc:74:97:ee:36:8d:6b:f7:f7:aa:88:cd:14:40:a7: de:19:99:78:27:57:27:04:e4:a8:30:d9:6a:06:30: 47:db:04:a6:44:14:e0:3a:9e:c5:eb:0b:f6:af:03: 46:3a:99:6a:10:bd:36:8d:63:c9:ff:90:02:88:43: 35:15:1c:b0:00:07:22:73:8f:c9:e6:f2:d3:72:77: 47:8e:4d:67:1d:b1:ce:d4:40:dc:09:0d:fc:76:6e: 4b:46:61:1a:d8:be:66:e3:6f:db:1e:a9:74:5c:fe: b4:39:a0:43:6a:21:d3:53:77:b5:b2:8a:1b:bd:22: 87:05:e0:ec:e0:ac:92:01:75:4f:fd:c4:89:dc:cf: 64:73:23:4c:aa:e6:bb:e0:89:9a:77:48:f1:b2:22: 14:2d:9f:18:2b:42:1e:eb:08:81:42:63:64:ee:0d: 18:40:9d:b1:f6:fa:e6:ca:76:7b:02:86:15:01:2c: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9F:81:1E:28:21:E7:B0:68:96:0C:07:1D:FB:57:C9:FA:2D:D2:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:0c:33:e2:2c:81:16:47:84:ed:f5:0b:e9:3a:50:df:a5:f6: 1c:9f:10:fc:f4:19:35:fe:3d:d0:71:3e:33:f4:68:e4:46:d5: 93:57:e8:9a:16:ac:85:0f:be:10:2c:85:15:4e:e2:99:7b:38: f7:5e:09:2c:4e:58:fd:cd:6f:e2:a0:69:77:b0:21:8b:be:6b: d7:89:7f:6b:e5:21:65:3c:32:f5:98:fc:b4:13:54:32:33:e9: 78:d9:42:99:f3:11:1d:b1:42:65:38:b6:6e:39:2b:e0:d8:b8: fb:62:04:46:5e:ad:1a:d2:cf:03:be:c0:2c:a6:7c:90:a7:5d: 0c:0f:b8:0a:df:17:9a:7c:0f:4a:1a:5f:db:d8:e9:d6:d4:15: 8a:57:b2:06:b6:f8:f3:59:55:d2:a7:fe:bb:2f:36:06:53:a4: d9:80:e3:1f:0b:c4:99:29:a9:d1:8a:d5:bf:88:9e:75:bd:b4: 63:3c:8f:8b:bd:35:43:66:6c:40:16:fd:85:75:a6:b7:3b:3d: aa:5c:fa:89:48:96:99:0b:e8:73:2c:d8:2c:42:21:b2:16:d7: b9:ec:b7:92:c7:1a:14:2a:19:7a:a5:9b:d8:81:5f:05:0c:c2: c3:d6:fd:b3:12:6b:41:f9:ba:21:d9:23:f6:f9:b3:00:95:82: 8c:af:5d:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSNAfM1Cg7e452NiJwCgkVgOrlI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTcxMDIwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTcxODI1NDQwY2RmNGMyZTRmZmMwOGU5NjZmYTA3ZmNh YTJmZWMxYmM0NTVmNGI1YTIxNGNjMjQ0NzQ5MjIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCietYzzHi64YkiIkRpLuXCwq0jXKZlNSjg+uD0mv/f9ndt dvnowgx85UOSEHGc3bsct7Ufyveo4AKG5OC/hnkxTz9NxpQxH6kRK7x0l+42jWv3 96qIzRRAp94ZmXgnVycE5Kgw2WoGMEfbBKZEFOA6nsXrC/avA0Y6mWoQvTaNY8n/ kAKIQzUVHLAAByJzj8nm8tNyd0eOTWcdsc7UQNwJDfx2bktGYRrYvmbjb9seqXRc /rQ5oENqIdNTd7Wyihu9IocF4OzgrJIBdU/9xIncz2RzI0yq5rvgiZp3SPGyIhQt nxgrQh7rCIFCY2TuDRhAnbH2+ubKdnsChhUBLF9/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvJ+BHigh57BolgwHHftXyfot0qYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyMjE5YmEyLThlZWUtNGMzNC04MjI0LWE4ZjVjY2MyNTNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFIQwDQYJKoZIhvcNAQELBQADggEBAG4MM+IsgRZHhO31C+k6UN+l9hyf EPz0GTX+PdBxPjP0aORG1ZNX6JoWrIUPvhAshRVO4pl7OPdeCSxOWP3Nb+KgaXew IYu+a9eJf2vlIWU8MvWY/LQTVDIz6XjZQpnzER2xQmU4tm45K+DYuPtiBEZerRrS zwO+wCymfJCnXQwPuArfF5p8D0oaX9vY6dbUFYpXsga2+PNZVdKn/rsvNgZTpNmA 4x8LxJkpqdGK1b+InnW9tGM8j4u9NUNmbEAW/YV1prc7Papc+olIlpkL6HMs2CxC IbIW17nst5LHGhQqGXqlm9iBXwUMwsPW/bMSa0H5uiHZI/b5swCVgoyvXYo= -----END CERTIFICATE-----Generated at Wed Jun 4 11:23:25 2025 by rpki-client