$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa File: aa9b2c74-44be-4506-8c26-0e262e9213ae.roa (raw, json) Hash identifier: Iyo8BUCuctewMhS1uqxnOTM8Pis7XhBRr+G28EljVpI= Subject key identifier: 43:B4:F0:25:DE:A7:11:AE:01:85:F3:F9:83:98:E8:35:9F:32:AD:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50095F2F68966203A68CA85CDAC9613ADBB64B42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa Signing time: Tue 13 May 2025 00:30:56 +0000 ROA not before: Tue 13 May 2025 00:30:56 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:09:5f:2f:68:96:62:03:a6:8c:a8:5c:da:c9:61:3a:db:b6:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:30:56 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=2712a4a38f3fde3e4dfc44a6b8d36a7cb3908824dde1cae87b01f0c2e175e839, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5e:ed:19:65:68:59:b5:83:6f:82:6c:d8:c2: 66:eb:b7:45:08:3d:41:2f:db:b4:54:10:31:60:9a: 0a:fb:20:46:45:20:1f:d2:32:96:e2:9c:b3:86:7b: 6a:b2:c4:2a:72:7f:dd:62:09:35:58:a7:33:49:26: 95:b0:a7:27:a5:71:ec:04:98:ab:ae:e0:2f:c4:a9: 0c:6c:2f:61:95:8c:f9:5f:76:57:fe:46:00:17:b7: 83:23:c1:f0:10:61:24:40:95:7f:df:45:53:0e:7b: 19:56:29:e8:60:f9:91:fd:31:ef:18:be:81:a2:6e: 9d:29:1b:6c:f0:9d:0b:f6:de:4b:59:19:4e:e2:7a: cf:a5:bb:ad:f3:90:38:41:15:70:93:87:1f:e1:ab: ce:f3:10:77:bc:2f:a0:f2:25:a2:8e:d8:16:95:99: 12:04:3e:9e:91:98:e9:af:be:ec:d3:5f:c8:83:b5: 85:c1:28:a0:96:55:78:05:b1:bf:1a:9d:33:a7:89: 1d:57:a5:44:4c:e3:49:6a:f2:d0:54:0a:1a:73:3e: 92:30:fc:91:37:5a:22:5e:eb:d7:01:c9:cc:bb:60: e9:e3:e5:e9:d0:ff:12:35:62:45:89:49:40:4e:9d: 47:ae:4a:35:0f:21:b0:ed:d6:fe:e0:06:eb:0e:2a: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:F0:25:DE:A7:11:AE:01:85:F3:F9:83:98:E8:35:9F:32:AD:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.248.0/21 Signature Algorithm: sha256WithRSAEncryption 72:59:23:f0:4a:3c:5b:89:89:c2:7d:73:06:d9:f3:04:cb:56: ff:d1:6e:b3:e1:3d:e8:bc:da:1c:d2:2d:8e:19:63:34:43:af: b7:32:6f:08:47:2b:8f:9f:b0:3a:2d:c7:0c:bb:30:de:44:85: f3:1a:26:22:f2:20:53:9b:c8:3b:8b:10:eb:77:30:fe:10:4b: ac:89:18:70:ec:93:e8:d7:44:8c:78:77:ad:1c:1b:b8:bd:c6: 98:81:f0:70:f9:ce:c7:51:f7:5f:71:9e:5f:58:c1:fb:4b:20: 76:3e:ff:12:e4:fc:24:f3:0a:b7:b6:24:c9:9a:2b:aa:9e:69: d1:15:b9:44:c1:5d:4d:11:89:6b:f2:e6:63:2f:cf:36:20:fa: c9:b8:e4:d5:10:93:f0:13:a5:96:4a:12:ea:76:9c:55:44:4f: 52:b8:31:54:e2:98:ff:1b:97:84:0c:e6:08:c2:db:a6:ad:2a: 2b:42:01:0e:59:44:8a:ae:9b:90:7d:61:b7:a6:47:af:a1:0c: 96:35:fa:92:9d:ec:eb:54:2a:27:5f:64:7b:54:e2:ee:61:90: 01:2c:40:5e:f5:96:4b:33:91:e7:14:1c:7b:2e:55:7a:2c:aa: d8:28:25:f0:85:2b:60:ab:3f:96:98:86:5f:04:6d:13:e7:31: 05:28:99:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUAlfL2iWYgOmjKhc2slhOtu2S0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAzMDU2WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzEyYTRhMzhmM2ZkZTNlNGRmYzQ0YTZiOGQzNmE3Y2Iz OTA4ODI0ZGRlMWNhZTg3YjAxZjBjMmUxNzVlODM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvXu0ZZWhZtYNvgmzYwmbrt0UIPUEv27RUEDFgmgr7IEZF IB/SMpbinLOGe2qyxCpyf91iCTVYpzNJJpWwpyelcewEmKuu4C/EqQxsL2GVjPlf dlf+RgAXt4MjwfAQYSRAlX/fRVMOexlWKehg+ZH9Me8YvoGibp0pG2zwnQv23ktZ GU7ies+lu63zkDhBFXCThx/hq87zEHe8L6DyJaKO2BaVmRIEPp6RmOmvvuzTX8iD tYXBKKCWVXgFsb8anTOniR1XpURM40lq8tBUChpzPpIw/JE3WiJe69cBycy7YOnj 5enQ/xI1YkWJSUBOnUeuSjUPIbDt1v7gBusOKpqZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ7TwJd6nEa4BhfP5g5joNZ8yrcIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhOWIyYzc0LTQ0YmUtNDUwNi04YzI2LTBlMjYyZTkyMTNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPPFfgwDQYJKoZIhvcNAQELBQADggEBAHJZI/BKPFuJicJ9cwbZ8wTLVv/R brPhPei82hzSLY4ZYzRDr7cybwhHK4+fsDotxwy7MN5EhfMaJiLyIFObyDuLEOt3 MP4QS6yJGHDsk+jXRIx4d60cG7i9xpiB8HD5zsdR919xnl9YwftLIHY+/xLk/CTz Cre2JMmaK6qeadEVuUTBXU0RiWvy5mMvzzYg+sm45NUQk/ATpZZKEup2nFVET1K4 MVTimP8bl4QM5gjC26atKitCAQ5ZRIqum5B9YbemR6+hDJY1+pKd7OtUKidfZHtU 4u5hkAEsQF71lkszkecUHHsuVXosqtgoJfCFK2CrP5aYhl8EbRPnMQUomU4= -----END CERTIFICATE-----Generated at Sun Jun 1 05:13:29 2025 by rpki-client