$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa File: abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa (raw, json) Hash identifier: TUibBX5vViOjEP4ccR7ISVOTHuF0QEPd4q6cTd8HVac= Subject key identifier: A2:AD:86:FA:1F:F2:6C:93:4C:A3:04:09:13:B2:8D:42:63:07:59:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F0D8DE18CC42FFD5880D7CC53DF81C7472AF6D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa Signing time: Tue 20 May 2025 00:42:00 +0000 ROA not before: Tue 20 May 2025 00:42:00 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0d:8d:e1:8c:c4:2f:fd:58:80:d7:cc:53:df:81:c7:47:2a:f6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:42:00 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=7c3dd842c6a04d0caef5f89b95c20cde5212d2ef281a3947c76a1a552eb65474, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:f1:db:e5:1a:78:27:e2:af:8c:28:57:0f: bf:cb:2b:92:33:32:cf:48:7c:2a:4d:29:92:52:fd: d2:1f:39:98:da:58:a4:3a:3d:47:4f:8b:f1:d9:0d: 08:4b:98:7c:fc:bb:f2:45:7f:14:fa:30:2d:f4:b0: 07:0f:b2:65:14:cf:8d:1a:de:99:a2:de:3f:5d:1b: 3e:c9:00:0b:3f:0d:1c:bd:62:c4:6b:ae:4d:c8:c3: 2e:53:77:02:69:3e:90:a1:c8:d2:74:f3:7c:f9:b5: 7b:23:93:0f:b5:9b:e8:ec:94:61:be:d6:2d:17:7d: 26:c7:fa:9f:06:f2:17:d6:6b:ed:fe:a3:33:7f:fd: b3:e8:61:58:f8:8f:09:49:5f:90:f7:da:35:e3:7e: be:6c:93:d6:b4:40:76:e0:8a:3a:64:04:ba:c3:62: 12:33:cf:40:dc:10:e9:cb:22:da:c1:39:1f:fb:da: 23:e4:fa:e0:86:23:36:38:95:9f:94:1d:09:27:77: ca:66:c6:bb:cb:e2:c0:3d:22:be:dc:ce:a4:44:2d: bb:3c:40:94:57:26:b0:76:10:d9:03:a1:ef:51:a3: ef:4c:e6:13:14:0f:78:df:dd:09:1c:9b:e6:81:e8: 15:ba:2e:6e:96:d8:5d:60:81:5e:17:5f:45:f7:d4: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:86:FA:1F:F2:6C:93:4C:A3:04:09:13:B2:8D:42:63:07:59:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:b8:a3:82:9f:ae:fc:de:2a:2c:54:23:66:c3:ba:da:27:ff: 5a:0c:0f:ff:4b:91:b2:2f:50:ce:07:28:b0:c7:61:0d:d9:d0: 5f:78:03:cf:af:f7:5a:04:46:d1:a4:a0:cd:f7:0f:39:6f:4e: c6:53:85:29:40:1a:75:df:ff:02:74:5d:e2:aa:9f:8b:33:24: 20:15:c2:68:f2:38:5c:17:a4:25:a5:ea:cc:d4:31:90:68:4d: 79:93:e8:f8:d6:35:28:fa:3a:8d:f2:cd:90:ff:2b:00:8b:ff: 9a:0a:b3:fe:d6:c1:35:7d:3e:ac:e8:3f:ef:1b:b6:57:d3:6f: 08:fa:f7:33:f8:5a:78:93:2a:2b:1b:04:e8:ed:2e:63:68:d3: 29:82:a8:de:a1:49:ee:06:14:4e:7e:be:fd:3b:1a:3b:3f:a4: d1:f4:23:00:a4:6f:7b:b0:00:42:74:9c:d3:c7:d6:40:5e:eb: 5e:0e:0e:29:77:49:3f:83:bd:54:ef:be:68:76:03:1f:89:cf: 54:9b:0e:f0:94:69:8d:67:91:ea:27:ee:9b:a2:ab:2e:9f:0d: 72:ea:f1:31:45:91:0a:32:9d:af:cb:ed:c7:50:02:36:a4:95: f9:e3:6b:35:ed:43:cd:84:c3:72:d1:66:00:fc:15:04:dd:bd: 4c:45:60:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfw2N4YzEL/1YgNfMU9+Bx0cq9tQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA0MjAwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzNkZDg0MmM2YTA0ZDBjYWVmNWY4OWI5NWMyMGNkZTUy MTJkMmVmMjgxYTM5NDdjNzZhMWE1NTJlYjY1NDc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo0/Hb5Rp4J+KvjChXD7/LK5IzMs9IfCpNKZJS/dIfOZja WKQ6PUdPi/HZDQhLmHz8u/JFfxT6MC30sAcPsmUUz40a3pmi3j9dGz7JAAs/DRy9 YsRrrk3Iwy5TdwJpPpChyNJ083z5tXsjkw+1m+jslGG+1i0XfSbH+p8G8hfWa+3+ ozN//bPoYVj4jwlJX5D32jXjfr5sk9a0QHbgijpkBLrDYhIzz0DcEOnLItrBOR/7 2iPk+uCGIzY4lZ+UHQknd8pmxrvL4sA9Ir7czqRELbs8QJRXJrB2ENkDoe9Ro+9M 5hMUD3jf3Qkcm+aB6BW6Lm6W2F1ggV4XX0X31ImfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoq2G+h/ybJNMowQJE7KNQmMHWSQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiZmE4Y2VjLTRmYjQtNDFmYS05MTAxLTJmODNhNGM0NmJiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoIzANBgkqhkiG9w0BAQsFAAOCAQEAmbijgp+u/N4qLFQjZsO62if/WgwP /0uRsi9QzgcosMdhDdnQX3gDz6/3WgRG0aSgzfcPOW9OxlOFKUAadd//AnRd4qqf izMkIBXCaPI4XBekJaXqzNQxkGhNeZPo+NY1KPo6jfLNkP8rAIv/mgqz/tbBNX0+ rOg/7xu2V9NvCPr3M/haeJMqKxsE6O0uY2jTKYKo3qFJ7gYUTn6+/TsaOz+k0fQj AKRve7AAQnSc08fWQF7rXg4OKXdJP4O9VO++aHYDH4nPVJsO8JRpjWeR6ifum6Kr Lp8NcurxMUWRCjKdr8vtx1ACNqSV+eNrNe1DzYTDctFmAPwVBN29TEVgiw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:40 2025 by rpki-client