$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa File: 77f68970-d1fc-44f1-b19a-60ec049cd06a.roa (raw, json) Hash identifier: 6OGplqNPp4t2N2v5Cap6HinVYvrOtsuirHwBEEivyzc= Subject key identifier: 00:D5:E4:B0:83:8F:55:B3:CF:47:1B:6F:DF:95:7A:96:DE:93:77:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 349D1B6C1937823C80261A95BC2DF2DD39CEC647 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa Signing time: Tue 20 May 2025 00:52:02 +0000 ROA not before: Tue 20 May 2025 00:52:02 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.153.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9d:1b:6c:19:37:82:3c:80:26:1a:95:bc:2d:f2:dd:39:ce:c6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:52:02 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=09f3a34df45323448adba784a6181757ee655df17c8567a8cfdc163328476aa0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:e0:b0:d7:03:40:c4:f5:8c:8d:4b:84:8a: 68:c0:08:21:e0:6e:20:6b:bf:c5:c5:4e:3a:35:bc: 88:ff:01:ea:0f:2d:d7:95:a4:3a:2a:1f:d4:70:66: 85:99:82:91:94:c1:ab:8c:2e:8c:9e:4f:41:f9:88: e4:e0:fb:3c:62:ac:a9:d4:11:1e:9f:e9:14:7d:96: c8:78:ba:dc:3e:96:9b:56:d0:a6:14:c0:70:63:20: af:e6:dd:c3:24:6e:53:5e:dd:14:30:46:e4:9b:3b: b6:cd:8a:ad:d2:88:c3:33:27:b7:86:c2:4d:34:b8: 55:60:80:4a:18:dc:24:a0:a9:5e:ae:45:25:ef:4a: 3a:60:db:10:0e:72:64:ab:0d:7b:20:6d:ad:d7:48: 02:72:c6:b7:8f:32:c3:29:66:21:5d:f4:07:1a:99: 98:35:95:b3:65:bc:05:7b:aa:72:72:9f:28:e2:32: 0c:89:26:56:ec:1b:d6:ca:db:46:03:65:c2:7b:14: 84:06:9c:26:8f:fd:6c:ed:b2:cd:54:f9:76:52:9a: 34:e3:c2:87:47:8c:29:91:b7:19:30:96:c9:31:8b: bc:d6:a4:93:6c:58:03:6e:d3:83:7b:c7:de:70:9c: 90:9e:37:29:d0:00:62:29:ef:7b:d3:91:1f:b2:9a: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:E4:B0:83:8F:55:B3:CF:47:1B:6F:DF:95:7A:96:DE:93:77:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:30:3f:12:0f:cb:58:ed:4a:2d:75:3d:e3:d6:48:22:df:60: fa:be:a4:94:b8:ea:ef:83:de:cc:9f:ac:45:11:0c:0f:39:36: 12:21:cc:be:36:59:0b:20:02:9d:90:62:1f:9e:c5:29:31:c1: e8:58:36:8f:b5:2b:44:a0:09:23:d9:cb:64:23:b3:86:a8:0b: 6d:bf:c0:d3:45:4a:81:9d:04:1a:bb:b9:6d:0e:ab:48:b9:f7: 6e:57:b6:66:f4:fe:1f:06:af:f7:57:e9:04:13:f9:68:a4:b6: 67:13:22:bb:3b:36:eb:b6:83:85:c5:3e:cc:bb:49:b4:05:8d: 17:3e:e0:e2:65:c4:06:eb:a0:19:3e:73:95:f1:2f:a8:96:c6: 14:a2:7b:fc:9c:92:66:31:1e:7c:bb:d8:ab:dc:e2:5b:46:58: 10:2d:f6:30:86:39:03:c0:f4:57:b2:2f:61:25:4c:65:82:e1: 6e:fa:d1:05:e7:01:3a:92:65:7e:99:ab:2c:5d:e6:54:1e:6a: 74:e2:c2:8b:a4:b1:53:e8:63:e5:24:53:4d:97:9b:12:36:68: 60:7f:58:37:cc:38:39:57:d4:49:de:f2:c2:80:cd:bb:27:22: fe:10:7d:d4:91:0a:d3:6d:c6:37:12:8a:67:dd:be:54:b5:0d: 04:7c:95:0e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNJ0bbBk3gjyAJhqVvC3y3TnOxkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA1MjAyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWYzYTM0ZGY0NTMyMzQ0OGFkYmE3ODRhNjE4MTc1N2Vl NjU1ZGYxN2M4NTY3YThjZmRjMTYzMzI4NDc2YWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu3+Cw1wNAxPWMjUuEimjACCHgbiBrv8XFTjo1vIj/AeoP LdeVpDoqH9RwZoWZgpGUwauMLoyeT0H5iOTg+zxirKnUER6f6RR9lsh4utw+lptW 0KYUwHBjIK/m3cMkblNe3RQwRuSbO7bNiq3SiMMzJ7eGwk00uFVggEoY3CSgqV6u RSXvSjpg2xAOcmSrDXsgba3XSAJyxrePMsMpZiFd9AcamZg1lbNlvAV7qnJynyji MgyJJlbsG9bK20YDZcJ7FIQGnCaP/Wztss1U+XZSmjTjwodHjCmRtxkwlskxi7zW pJNsWANu04N7x95wnJCeNynQAGIp73vTkR+ymuafAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUANXksIOPVbPPRxtv35V6lt6Td5IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc3ZjY4OTcwLWQxZmMtNDRmMS1iMTlhLTYwZWMwNDljZDA2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4mTANBgkqhkiG9w0BAQsFAAOCAQEAiDA/Eg/LWO1KLXU949ZIIt9g+r6k lLjq74PezJ+sRREMDzk2EiHMvjZZCyACnZBiH57FKTHB6Fg2j7UrRKAJI9nLZCOz hqgLbb/A00VKgZ0EGru5bQ6rSLn3ble2ZvT+Hwav91fpBBP5aKS2ZxMiuzs267aD hcU+zLtJtAWNFz7g4mXEBuugGT5zlfEvqJbGFKJ7/JySZjEefLvYq9ziW0ZYEC32 MIY5A8D0V7IvYSVMZYLhbvrRBecBOpJlfpmrLF3mVB5qdOLCi6SxU+hj5SRTTZeb EjZoYH9YN8w4OVfUSd7ywoDNuyci/hB91JEK023GNxKKZ92+VLUNBHyVDg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:53 2025 by rpki-client