$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35a9e4b-ebac-411d-8b6f-87da4243b24a.roa File: b35a9e4b-ebac-411d-8b6f-87da4243b24a.roa (raw, json) Hash identifier: aDdIP1XOk7VOwyZOYVx9ph3VyNrTlldZWeDA2yYaOaE= Subject key identifier: D3:58:85:23:10:72:42:E6:17:E4:AC:E9:E0:88:05:81:B1:0B:9D:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53CA5FB9352931429D21CCBFDCB58CA73FE0CA7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35a9e4b-ebac-411d-8b6f-87da4243b24a.roa Signing time: Mon 12 May 2025 15:11:01 +0000 ROA not before: Mon 12 May 2025 15:11:01 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:5f:b9:35:29:31:42:9d:21:cc:bf:dc:b5:8c:a7:3f:e0:ca:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:11:01 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=d59c19db8eb58105a7c1e6d8b0dd36731d156eda246021fca7be09628dd4d394, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:6f:98:e7:28:fd:ab:c8:4b:93:97:af:18: 40:9b:74:41:c5:23:71:ad:02:72:21:78:b1:f1:ad: d2:b4:2a:9e:af:a1:66:44:24:42:14:1e:8c:15:4e: 3a:02:58:af:ef:b1:1a:71:19:cd:c8:8c:ba:e5:98: c6:19:9f:9b:b6:15:8e:f2:af:86:92:5a:4b:f2:c4: 3f:ea:c4:35:f0:7c:44:12:71:42:f6:1f:b9:e0:db: 4a:32:88:7b:c7:c2:b8:67:b0:c4:8a:b9:8c:d1:66: d4:ed:fe:dd:c5:4a:90:30:fa:70:17:9e:a1:21:f8: 8a:80:21:bc:e7:ad:b1:19:fc:ea:e1:77:2d:d2:47: d0:bf:39:83:e5:01:a0:00:46:7a:d0:0b:02:8d:e5: aa:0e:e6:f9:72:68:22:83:9e:0f:2b:3c:9e:c2:f3: bb:01:6f:b6:29:4d:5c:dc:c6:d4:cf:1a:2e:73:7f: 9b:06:07:35:e9:1d:e8:fd:04:2a:c4:96:b4:95:d9: 0c:f6:a2:a7:97:bb:43:13:cb:cf:8a:5b:eb:7f:34: 9f:4c:e4:11:f8:8b:e1:74:b2:07:c8:62:b1:dc:b2: 96:66:78:f6:bb:e1:ea:59:63:80:0f:72:aa:77:5d: ed:94:f5:c1:77:ec:38:13:5c:09:0b:4f:e6:71:60: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:85:23:10:72:42:E6:17:E4:AC:E9:E0:88:05:81:B1:0B:9D:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35a9e4b-ebac-411d-8b6f-87da4243b24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:5a:30:7d:cd:88:d6:0f:9b:a6:44:56:40:5a:99:b7:fc:23: c8:7b:9c:61:e4:a1:a1:73:a1:6f:86:44:2d:a0:13:71:5d:9c: 6d:ad:fa:d2:9a:08:2e:c1:a7:3b:af:45:ca:00:34:d0:81:86: ec:d1:bb:7c:2c:6c:78:2c:66:43:85:79:5d:dc:b9:da:ab:da: e4:d1:bb:f6:54:c6:e2:49:54:81:cc:fc:7c:80:e5:5e:c0:ca: 7b:16:7c:0f:f1:ba:06:67:6d:03:3e:a4:24:e4:1e:a4:44:9e: cb:20:7f:c8:9e:8c:06:99:48:18:c3:9c:52:3e:63:3a:e7:16: 1b:aa:5a:a6:27:df:47:f4:11:55:7b:92:e2:1a:e6:dc:ee:5c: f3:88:3d:7b:7a:e1:3e:fb:06:b3:9d:8a:c7:74:5d:cb:e7:4c: ef:86:97:06:91:ec:a6:3c:8d:52:ea:12:3e:86:24:e4:9a:76: 59:51:1f:31:1e:a8:09:2e:d1:d8:61:26:41:17:ff:63:ab:ad: 1b:56:b8:26:7c:62:04:b4:e6:c4:80:2e:29:1e:34:59:11:65: 08:11:65:ba:0c:d7:b2:c3:29:a8:b2:55:ab:d1:c2:99:0f:e4: 75:e7:3b:da:fd:6f:fd:68:03:24:dd:07:da:a4:d9:31:49:f9: 96:ed:7b:0f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU8pfuTUpMUKdIcy/3LWMpz/gyn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUxMTAxWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTljMTlkYjhlYjU4MTA1YTdjMWU2ZDhiMGRkMzY3MzFk MTU2ZWRhMjQ2MDIxZmNhN2JlMDk2MjhkZDRkMzk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8jW+Y5yj9q8hLk5evGECbdEHFI3GtAnIheLHxrdK0Kp6v oWZEJEIUHowVTjoCWK/vsRpxGc3IjLrlmMYZn5u2FY7yr4aSWkvyxD/qxDXwfEQS cUL2H7ng20oyiHvHwrhnsMSKuYzRZtTt/t3FSpAw+nAXnqEh+IqAIbznrbEZ/Orh dy3SR9C/OYPlAaAARnrQCwKN5aoO5vlyaCKDng8rPJ7C87sBb7YpTVzcxtTPGi5z f5sGBzXpHej9BCrElrSV2Qz2oqeXu0MTy8+KW+t/NJ9M5BH4i+F0sgfIYrHcspZm ePa74epZY4APcqp3Xe2U9cF37DgTXAkLT+ZxYPm5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU01iFIxByQuYX5Kzp4IgFgbELnRswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNWE5ZTRiLWViYWMtNDExZC04YjZmLTg3ZGE0MjQzYjI0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANmjANBgkqhkiG9w0BAQsFAAOCAQEAiVowfc2I1g+bpkRWQFqZt/wjyHuc YeShoXOhb4ZELaATcV2cba360poILsGnO69FygA00IGG7NG7fCxseCxmQ4V5Xdy5 2qva5NG79lTG4klUgcz8fIDlXsDKexZ8D/G6BmdtAz6kJOQepESeyyB/yJ6MBplI GMOcUj5jOucWG6papiffR/QRVXuS4hrm3O5c84g9e3rhPvsGs52Kx3Rdy+dM74aX BpHspjyNUuoSPoYk5Jp2WVEfMR6oCS7R2GEmQRf/Y6utG1a4JnxiBLTmxIAuKR40 WRFlCBFlugzXssMpqLJVq9HCmQ/kdec72v1v/WgDJN0H2qTZMUn5lu17Dw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:45 2025 by rpki-client