$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b68d99-38f8-4e40-b69d-a58254fd3e25.roa File: c4b68d99-38f8-4e40-b69d-a58254fd3e25.roa (raw, json) Hash identifier: jfoqgeI/7Fz8aYRSu+5g0PJ3J7tzbqFWq7AMU3AAjCs= Subject key identifier: 8A:2A:CD:B9:9D:C9:3F:67:C6:48:36:76:A9:58:B3:72:C9:BF:BB:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CE17499D140EBCF12298327E2D37B19722F639D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b68d99-38f8-4e40-b69d-a58254fd3e25.roa Signing time: Tue 13 May 2025 00:41:17 +0000 ROA not before: Tue 13 May 2025 00:41:17 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e1:74:99:d1:40:eb:cf:12:29:83:27:e2:d3:7b:19:72:2f:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:41:17 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=166dd314eac6bc88c46b8ed1e02254fe776567e5e8020f5147147463e80386e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:a7:39:0e:4c:95:44:81:d9:b0:89:75:06: 4c:50:53:f8:8d:88:55:d2:62:f9:21:97:6e:43:b8: 29:5d:ff:d6:9b:bb:2a:54:05:96:04:48:37:1d:80: ca:f7:ef:c2:0d:3e:06:12:4c:b3:a8:86:50:30:89: 91:73:47:d1:e6:1b:8d:35:81:cd:1f:3b:b9:ec:66: 26:38:23:63:0c:04:88:a8:1c:d6:0a:e4:a5:8e:07: 70:13:27:87:e0:05:3f:89:40:28:3a:f3:30:8b:27: cf:4d:bc:ff:2b:45:fb:d2:85:73:b2:b4:05:0d:d3: cb:07:2a:cd:c5:9d:38:b8:54:77:64:f8:81:18:5c: ce:cf:49:a9:0e:63:e8:82:cd:72:e1:f1:db:db:33: e8:2d:f2:f0:2d:1b:f1:f6:d9:33:cf:f4:1f:9b:b1: 30:10:4a:b3:c6:ca:38:5e:0c:5a:54:25:2b:38:ad: 85:52:60:44:e0:86:0f:fe:20:00:ce:9b:9e:92:00: a4:37:75:83:57:9a:d1:62:0d:ad:57:f0:e0:57:5e: 2d:d9:c8:1f:0e:12:89:23:b6:b9:57:0b:72:2d:f6: 01:70:db:b6:85:98:4e:a4:d7:d7:f4:54:07:48:a4: e7:1f:2b:ab:33:80:f7:ab:24:77:62:0b:be:6d:bc: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:CD:B9:9D:C9:3F:67:C6:48:36:76:A9:58:B3:72:C9:BF:BB:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b68d99-38f8-4e40-b69d-a58254fd3e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.145.0/24 Signature Algorithm: sha256WithRSAEncryption c2:a7:91:89:e0:24:a7:27:7b:dc:b7:ec:bb:3d:52:ec:46:e6: ac:72:fb:1f:ec:eb:b5:c7:2c:47:97:26:be:38:cd:fc:b0:98: 0b:00:d5:61:a3:4b:a1:e2:a1:70:2b:f5:c4:04:cc:4b:22:4c: c0:81:28:50:7f:7b:e2:63:ab:dc:45:3a:fe:9b:10:7b:a2:a2: 28:f5:94:f7:ad:1b:cb:fb:05:14:a3:83:87:ca:53:42:e2:9a: d5:da:47:df:61:d4:a1:fa:df:34:88:d1:f5:41:a1:26:14:94: 92:b6:16:39:e4:fb:c1:bd:3c:b2:99:0f:4a:fc:ac:bc:b3:53: b5:e7:97:61:07:48:f5:16:a6:88:c2:40:f0:fb:da:be:38:3d: 14:2f:00:bd:c3:0d:6b:84:8c:db:4a:92:42:76:22:33:2b:cb: 87:de:86:c7:0b:ba:8b:96:4d:dc:20:b1:5b:17:ad:18:87:41: 58:78:7f:34:a2:85:5b:4d:50:a8:1b:35:f6:fb:3e:37:29:04: 03:96:11:e2:da:d7:0a:7d:82:ef:02:34:67:50:92:40:ed:b4: 21:c8:75:6e:43:44:e6:27:7b:74:49:a3:06:c5:a2:c9:2b:b3: 37:12:da:6e:ad:f5:5c:47:b2:3f:0e:97:11:eb:38:d0:e5:1e: d2:01:d1:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPOF0mdFA688SKYMn4tN7GXIvY50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDA0MTE3WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjZkZDMxNGVhYzZiYzg4YzQ2YjhlZDFlMDIyNTRmZTc3 NjU2N2U1ZTgwMjBmNTE0NzE0NzQ2M2U4MDM4NmU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFRac5DkyVRIHZsIl1BkxQU/iNiFXSYvkhl25DuCld/9ab uypUBZYESDcdgMr378INPgYSTLOohlAwiZFzR9HmG401gc0fO7nsZiY4I2MMBIio HNYK5KWOB3ATJ4fgBT+JQCg68zCLJ89NvP8rRfvShXOytAUN08sHKs3FnTi4VHdk +IEYXM7PSakOY+iCzXLh8dvbM+gt8vAtG/H22TPP9B+bsTAQSrPGyjheDFpUJSs4 rYVSYETghg/+IADOm56SAKQ3dYNXmtFiDa1X8OBXXi3ZyB8OEokjtrlXC3It9gFw 27aFmE6k19f0VAdIpOcfK6szgPerJHdiC75tvB6TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiirNuZ3JP2fGSDZ2qVizcsm/u2swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0YjY4ZDk5LTM4ZjgtNGU0MC1iNjlkLWE1ODI1NGZkM2UyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAvpEwDQYJKoZIhvcNAQELBQADggEBAMKnkYngJKcne9y37Ls9UuxG5qxy +x/s67XHLEeXJr44zfywmAsA1WGjS6HioXAr9cQEzEsiTMCBKFB/e+Jjq9xFOv6b EHuioij1lPetG8v7BRSjg4fKU0LimtXaR99h1KH63zSI0fVBoSYUlJK2Fjnk+8G9 PLKZD0r8rLyzU7Xnl2EHSPUWpojCQPD72r44PRQvAL3DDWuEjNtKkkJ2IjMry4fe hscLuouWTdwgsVsXrRiHQVh4fzSihVtNUKgbNfb7PjcpBAOWEeLa1wp9gu8CNGdQ kkDttCHIdW5DROYne3RJowbFoskrszcS2m6t9VxHsj8OlxHrONDlHtIB0WM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:37:32 2025 by rpki-client