$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b56b07-06fe-484a-b001-47f7de67e97c.roa File: 79b56b07-06fe-484a-b001-47f7de67e97c.roa (raw, json) Hash identifier: rvW9AYm07ZIPLYsfQd2dveso9E5UTQRCizp5cFVI3m8= Subject key identifier: FC:E7:7D:E9:06:BF:04:2F:CD:DD:DB:9F:DC:E9:C0:8C:5A:BE:70:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 111AD05ADEC45C1778C7F5A4E515DD6783B7DB6E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b56b07-06fe-484a-b001-47f7de67e97c.roa Signing time: Sat 24 May 2025 00:00:22 +0000 ROA not before: Sat 24 May 2025 00:00:22 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.228.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1a:d0:5a:de:c4:5c:17:78:c7:f5:a4:e5:15:dd:67:83:b7:db:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:00:22 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=d713fa8ee712763dec510bd09c9f74d4b5b61bc798b40c7ca2ee1f19eac1a903, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:24:35:02:18:29:71:e9:fe:60:32:24:b7: 8d:45:58:73:c4:b5:4c:f5:8d:54:c1:2b:e6:bb:5d: 69:45:aa:c8:c2:24:5a:1e:71:b7:3b:bb:34:a9:4a: d7:8b:34:83:2c:3e:06:37:4d:7d:e9:4b:d9:8a:63: 00:79:84:24:07:eb:b2:f5:7d:f5:e1:dd:7f:4c:82: 0d:07:d7:98:9a:a9:10:01:06:db:c6:03:b6:c2:0a: 0f:43:10:bf:f1:79:2f:85:8c:55:6e:a8:e8:02:4f: 6a:48:04:9a:3f:d7:cd:de:d5:3d:fb:e3:b5:3f:85: 33:b0:21:db:b2:d6:1a:00:44:56:35:0b:d3:28:16: eb:0b:1f:4f:46:06:58:9a:1c:56:44:8f:70:14:48: 6b:1e:43:05:b2:69:da:c0:0e:a4:ab:a9:d2:7b:84: cc:26:b7:db:84:29:6e:3e:ba:79:8c:16:c1:e7:3d: f2:fe:19:91:73:62:b3:4e:16:ab:06:a8:45:6d:cb: 37:78:16:e6:c6:85:31:4e:6b:ed:ee:74:f6:9a:48: 89:0b:e5:2f:c4:2d:cf:6f:d4:d4:34:37:52:f8:ab: 01:be:dd:d7:3a:33:69:dc:31:e4:ac:36:9c:e0:54: 4e:d7:98:6f:4e:bc:ae:70:95:97:38:eb:b8:cb:20: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:7D:E9:06:BF:04:2F:CD:DD:DB:9F:DC:E9:C0:8C:5A:BE:70:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b56b07-06fe-484a-b001-47f7de67e97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.228.194.0/24 Signature Algorithm: sha256WithRSAEncryption 46:b3:fe:5b:33:be:a1:45:57:e8:a1:8f:92:56:39:71:58:68: 2e:86:42:fb:96:4d:04:43:e4:fb:a4:9a:07:25:6e:ce:e3:2b: 5a:9d:98:2e:09:2e:8b:15:bc:b4:32:6d:bd:49:f5:03:23:ce: f8:f7:80:b4:89:3a:90:45:c2:b5:82:62:62:ff:f4:90:7a:44: de:1e:59:56:99:18:fa:1e:d2:43:77:74:1d:61:bf:ab:b9:e6: e7:18:05:ad:61:83:e7:26:7e:d6:8a:b4:b9:7f:1b:72:15:76: 1d:9d:1b:8b:c0:d1:d4:41:a9:91:3c:e4:12:e5:01:91:19:1d: d5:ec:28:dd:05:e2:64:5a:a5:41:85:4d:e0:5a:e5:c1:65:eb: 42:90:60:37:c3:34:18:4b:49:08:c5:97:0b:e4:08:18:33:33: b3:c5:87:4c:df:36:5b:07:21:9d:a9:71:75:49:b4:df:be:7e: 12:3a:f3:30:18:62:79:9f:df:d9:81:0e:14:c2:f3:b4:cc:5f: e5:32:b5:b2:6a:8e:5f:8e:92:7b:2e:0f:1d:8b:d8:68:51:55: 72:da:9c:15:02:72:a8:74:60:57:e3:e8:fc:75:c5:b4:8c:ff: 78:9c:d0:e9:0e:b0:74:90:7a:07:e6:8b:b7:4d:0e:9b:bc:94: 74:04:10:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUERrQWt7EXBd4x/Wk5RXdZ4O3224wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAwMDIyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzEzZmE4ZWU3MTI3NjNkZWM1MTBiZDA5YzlmNzRkNGI1 YjYxYmM3OThiNDBjN2NhMmVlMWYxOWVhYzFhOTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu7SQ1Ahgpcen+YDIkt41FWHPEtUz1jVTBK+a7XWlFqsjC JFoecbc7uzSpSteLNIMsPgY3TX3pS9mKYwB5hCQH67L1ffXh3X9Mgg0H15iaqRAB BtvGA7bCCg9DEL/xeS+FjFVuqOgCT2pIBJo/183e1T3747U/hTOwIduy1hoARFY1 C9MoFusLH09GBliaHFZEj3AUSGseQwWyadrADqSrqdJ7hMwmt9uEKW4+unmMFsHn PfL+GZFzYrNOFqsGqEVtyzd4FubGhTFOa+3udPaaSIkL5S/ELc9v1NQ0N1L4qwG+ 3dc6M2ncMeSsNpzgVE7XmG9OvK5wlZc467jLINtbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/Od96Qa/BC/N3duf3OnAjFq+cHEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5YjU2YjA3LTA2ZmUtNDg0YS1iMDAxLTQ3ZjdkZTY3ZTk3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX5MIwDQYJKoZIhvcNAQELBQADggEBAEaz/lszvqFFV+ihj5JWOXFYaC6G QvuWTQRD5Pukmgclbs7jK1qdmC4JLosVvLQybb1J9QMjzvj3gLSJOpBFwrWCYmL/ 9JB6RN4eWVaZGPoe0kN3dB1hv6u55ucYBa1hg+cmftaKtLl/G3IVdh2dG4vA0dRB qZE85BLlAZEZHdXsKN0F4mRapUGFTeBa5cFl60KQYDfDNBhLSQjFlwvkCBgzM7PF h0zfNlsHIZ2pcXVJtN++fhI68zAYYnmf39mBDhTC87TMX+UytbJqjl+OknsuDx2L 2GhRVXLanBUCcqh0YFfj6Px1xbSM/3ic0OkOsHSQegfmi7dNDpu8lHQEEE8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:29:25 2025 by rpki-client