$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa File: a07397dc-3051-482a-957d-ed3a4c2859b6.roa (raw, json) Hash identifier: wjba2F+yZ5AjVGcknANcqnasBY+PnpwziqV5TCHO9Zw= Subject key identifier: B2:DB:7F:12:18:80:26:C2:89:FF:47:13:E4:66:FF:48:65:87:48:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 083517851D6593E76E9596D8DA2020A920C4EF9A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa Signing time: Tue 20 May 2025 15:22:29 +0000 ROA not before: Tue 20 May 2025 15:22:29 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.80.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:17:85:1d:65:93:e7:6e:95:96:d8:da:20:20:a9:20:c4:ef:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:22:29 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=b1259e00812acf0aef3de31206ae4c1b205eb3836e11edf86660ff94daf5128b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:ba:81:67:8c:6d:61:37:65:59:a9:bc:c5: 72:c2:3f:0f:b0:9d:2e:41:dc:c8:d6:f4:0c:a7:f5: 00:ba:5b:9c:5f:4e:ad:16:36:c2:db:78:d7:0a:45: 96:4e:26:a1:51:1a:ce:80:83:02:f4:8f:52:c2:f7: 8a:d2:f0:42:5c:a9:eb:c9:8b:7c:46:42:d9:cb:0e: 60:07:73:8c:b8:cd:ed:12:2d:ca:f4:a2:af:e2:ea: 52:f5:0a:00:7d:e4:46:d1:6c:30:92:b6:34:2e:e0: 22:a9:02:18:11:45:47:ae:58:cb:d4:85:7e:45:06: d1:7d:da:05:7f:fb:09:e5:88:73:13:59:52:ec:e4: 90:7f:f2:36:db:42:45:84:9c:e1:8a:70:6a:cf:3a: f1:ac:20:8e:6f:8a:a1:1d:2f:1b:ce:02:41:49:89: 00:05:ca:a5:10:9b:08:4b:4a:8a:4b:a8:db:b9:ae: af:4b:d3:d3:c8:ea:17:66:51:82:46:35:7d:cf:a1: cc:70:27:a0:7b:b7:60:2f:3c:6c:5e:fa:70:41:15: ba:32:a7:53:ba:56:ce:6b:ee:9a:13:d7:89:19:49: eb:95:dd:2d:30:bc:07:ea:05:4f:84:87:76:c6:74: 2d:bf:04:50:21:25:72:42:bf:b5:f1:47:7a:40:88: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DB:7F:12:18:80:26:C2:89:FF:47:13:E4:66:FF:48:65:87:48:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.80.0.0/13 Signature Algorithm: sha256WithRSAEncryption 84:00:1b:f1:5f:99:e3:4d:49:60:fd:cb:d2:b0:ab:b7:26:05: 71:ca:3c:ac:a6:db:58:e5:b9:cc:7b:29:81:9d:a0:76:94:ae: 52:de:c2:d5:ce:a9:1e:d8:01:91:1a:39:9e:b3:8b:23:9e:d4: ca:b1:c3:10:de:4b:0a:88:99:53:f9:7f:90:be:dd:68:fd:42: cc:75:ac:0e:65:69:ff:de:f0:50:b1:50:c4:a2:42:a4:67:6c: d7:81:90:75:0f:72:57:34:f1:e5:62:96:b7:76:33:23:3d:9e: 23:4e:32:c9:66:0f:11:e2:f3:2c:04:19:43:04:2f:6f:1b:b8: d0:ee:42:3b:66:dd:f4:10:42:7c:be:2f:91:d2:4c:40:11:46: f0:6f:22:34:07:21:6e:52:8b:af:c7:3f:45:78:55:c8:26:e4: 0b:24:67:01:72:6f:85:f3:f8:eb:d9:b4:85:ec:60:1f:6f:d8: 3c:15:88:58:48:03:c4:68:71:43:df:54:d7:99:c5:92:9e:1e: b3:6a:9a:71:e4:71:f5:2c:68:b0:7e:1c:ea:94:a5:c8:d0:11: 9f:3f:9c:4b:a4:73:94:83:a5:1c:46:b6:37:82:ac:a6:d1:3c: cf:28:f3:4d:98:e8:2f:c8:a3:1b:d1:10:86:20:d5:89:56:77: b0:e2:4d:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCDUXhR1lk+dulZbY2iAgqSDE75owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUyMjI5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTI1OWUwMDgxMmFjZjBhZWYzZGUzMTIwNmFlNGMxYjIw NWViMzgzNmUxMWVkZjg2NjYwZmY5NGRhZjUxMjhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX/LqBZ4xtYTdlWam8xXLCPw+wnS5B3MjW9Ayn9QC6W5xf Tq0WNsLbeNcKRZZOJqFRGs6AgwL0j1LC94rS8EJcqevJi3xGQtnLDmAHc4y4ze0S Lcr0oq/i6lL1CgB95EbRbDCStjQu4CKpAhgRRUeuWMvUhX5FBtF92gV/+wnliHMT WVLs5JB/8jbbQkWEnOGKcGrPOvGsII5viqEdLxvOAkFJiQAFyqUQmwhLSopLqNu5 rq9L09PI6hdmUYJGNX3PocxwJ6B7t2AvPGxe+nBBFboyp1O6Vs5r7poT14kZSeuV 3S0wvAfqBU+Eh3bGdC2/BFAhJXJCv7XxR3pAiEo/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUstt/EhiAJsKJ/0cT5Gb/SGWHSEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNzM5N2RjLTMwNTEtNDgyYS05NTdkLWVkM2E0YzI4NTliNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNiUDANBgkqhkiG9w0BAQsFAAOCAQEAhAAb8V+Z401JYP3L0rCrtyYFcco8 rKbbWOW5zHspgZ2gdpSuUt7C1c6pHtgBkRo5nrOLI57UyrHDEN5LCoiZU/l/kL7d aP1CzHWsDmVp/97wULFQxKJCpGds14GQdQ9yVzTx5WKWt3YzIz2eI04yyWYPEeLz LAQZQwQvbxu40O5CO2bd9BBCfL4vkdJMQBFG8G8iNAchblKLr8c/RXhVyCbkCyRn AXJvhfP469m0hexgH2/YPBWIWEgDxGhxQ99U15nFkp4es2qaceRx9SxosH4c6pSl yNARnz+cS6RzlIOlHEa2N4KsptE8zyjzTZjoL8ijG9EQhiDViVZ3sOJNwg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:01:21 2025 by rpki-client