$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/802dd918-8d70-4326-af2f-e982eb27726f.roa File: 802dd918-8d70-4326-af2f-e982eb27726f.roa (raw, json) Hash identifier: Bfp/s2JyAVu72fRD7kUkTmUATtvmy8F/uOvdogJUCJE= Subject key identifier: A7:22:67:EE:44:87:6E:7E:49:5B:58:A0:35:64:DF:24:FA:FB:0F:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FF8403F1C34827FEAAC23AC07F0FD8B0050F047 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/802dd918-8d70-4326-af2f-e982eb27726f.roa Signing time: Wed 07 May 2025 00:21:28 +0000 ROA not before: Wed 07 May 2025 00:21:28 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f8:40:3f:1c:34:82:7f:ea:ac:23:ac:07:f0:fd:8b:00:50:f0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:21:28 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=95a7acc80c9b39d1105d7f7de6d3807c9d9dc3b722c8d19e59db58683eaa4a3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:69:66:24:f4:61:55:2a:25:0d:24:85:f6: 07:9d:01:72:fd:59:a6:32:22:14:46:f1:ae:8e:51: 15:95:0c:24:7f:65:75:d0:a9:dd:69:61:a3:fe:2e: 12:e1:b2:16:d2:15:15:c2:2d:49:d1:21:4c:36:60: c3:94:92:dc:98:7a:93:cf:e3:39:a8:b8:84:b9:98: 5a:3a:29:65:b3:69:ba:0a:7e:e3:88:83:82:66:b3: 1a:de:62:e4:95:e0:d4:1e:49:20:70:71:7b:2e:4b: 60:0c:3f:b8:03:37:c0:a3:4d:7f:15:d6:9f:c3:3d: ab:b5:8c:3f:9c:5c:89:39:38:40:5f:a1:02:ed:ae: b5:9c:c9:cd:4a:dd:8f:f5:8b:d3:ee:9d:42:b3:ef: 4f:b9:a2:ab:02:25:95:86:d1:10:3b:28:23:df:80: d2:1b:a5:09:55:2d:a3:52:2f:3e:9e:8f:a0:cd:9e: f4:c0:2e:34:a1:4c:60:d9:f8:3b:99:68:c8:db:a0: ec:6c:b3:a3:db:ed:9c:72:e1:63:d9:6f:e8:cd:ad: 6e:1b:ef:af:a4:87:e5:db:12:44:31:35:ac:7c:71: e8:2d:a4:22:37:65:65:84:cb:0c:37:c4:88:fc:9f: 7a:b7:2b:80:a2:fe:98:3b:86:62:9f:8e:88:29:d9: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:22:67:EE:44:87:6E:7E:49:5B:58:A0:35:64:DF:24:FA:FB:0F:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/802dd918-8d70-4326-af2f-e982eb27726f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.180.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:f2:0a:63:3d:11:fb:ba:ab:7a:c2:f7:75:53:08:75:16:bc: 15:f3:e6:23:6d:a4:d3:b8:24:5b:5a:49:ae:7b:bf:df:e4:f7: 00:01:dc:32:04:0b:74:7e:6c:34:53:cf:f9:b5:24:65:73:cd: a2:b2:12:d6:ce:f7:68:c9:61:be:dd:fb:da:dd:ee:9b:b6:34: 91:69:a9:98:5a:fc:a3:b6:9d:14:27:71:b3:85:d3:13:1e:5d: 0f:c7:40:b4:60:66:17:b0:f0:14:ef:0d:49:89:20:82:c5:a6: 19:47:03:ba:c1:5d:e9:8b:6c:ab:39:c4:0b:da:ea:64:56:b9: 33:f6:3a:c4:f8:6b:a8:5b:93:ab:94:f2:e4:d7:2a:85:91:ba: 49:25:67:d2:e9:07:1b:14:c9:64:bb:5a:0a:5c:d7:80:fb:ef: 3f:28:97:b6:29:87:09:83:fc:3a:eb:4d:35:ea:44:09:23:7d: 27:75:1c:3d:98:4f:1b:73:f9:17:1a:98:2f:54:48:8a:bd:94: de:2a:cd:cd:fa:c8:86:ee:82:00:86:4c:46:f4:b3:aa:68:0f: 56:ae:76:15:1d:96:d3:20:a5:10:93:15:2f:a5:0f:d5:75:e4: 1e:e1:5e:3a:db:07:fb:93:39:cc:a4:af:3b:9f:2e:8b:6f:1a: 6a:ba:cf:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL/hAPxw0gn/qrCOsB/D9iwBQ8EcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAyMTI4WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWE3YWNjODBjOWIzOWQxMTA1ZDdmN2RlNmQzODA3Yzlk OWRjM2I3MjJjOGQxOWU1OWRiNTg2ODNlYWE0YTNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9K2lmJPRhVSolDSSF9gedAXL9WaYyIhRG8a6OURWVDCR/ ZXXQqd1pYaP+LhLhshbSFRXCLUnRIUw2YMOUktyYepPP4zmouIS5mFo6KWWzaboK fuOIg4JmsxreYuSV4NQeSSBwcXsuS2AMP7gDN8CjTX8V1p/DPau1jD+cXIk5OEBf oQLtrrWcyc1K3Y/1i9PunUKz70+5oqsCJZWG0RA7KCPfgNIbpQlVLaNSLz6ej6DN nvTALjShTGDZ+DuZaMjboOxss6Pb7Zxy4WPZb+jNrW4b76+kh+XbEkQxNax8cegt pCI3ZWWEyww3xIj8n3q3K4Ci/pg7hmKfjogp2SFpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpyJn7kSHbn5JW1igNWTfJPr7DxwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwMmRkOTE4LThkNzAtNDMyNi1hZjJmLWU5ODJlYjI3NzI2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIyEbQwDQYJKoZIhvcNAQELBQADggEBABvyCmM9Efu6q3rC93VTCHUWvBXz 5iNtpNO4JFtaSa57v9/k9wAB3DIEC3R+bDRTz/m1JGVzzaKyEtbO92jJYb7d+9rd 7pu2NJFpqZha/KO2nRQncbOF0xMeXQ/HQLRgZhew8BTvDUmJIILFphlHA7rBXemL bKs5xAva6mRWuTP2OsT4a6hbk6uU8uTXKoWRukklZ9LpBxsUyWS7Wgpc14D77z8o l7YphwmD/DrrTTXqRAkjfSd1HD2YTxtz+RcamC9USIq9lN4qzc36yIbuggCGTEb0 s6poD1audhUdltMgpRCTFS+lD9V15B7hXjrbB/uTOcykrzufLotvGmq6zyM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:04 2025 by rpki-client