$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa File: c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa (raw, json) Hash identifier: QkMk3ZQ97yfW0yEYyyfeuqCwDj5T0B7hQ6MgojV9kbE= Subject key identifier: 0A:6B:30:2D:2D:59:A8:4B:A7:F6:D8:BC:B8:FB:3D:B6:62:5C:27:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B291DF34772A169441FE70C9CEF2D38191D8152 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa Signing time: Wed 28 May 2025 00:31:40 +0000 ROA not before: Wed 28 May 2025 00:31:40 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.123.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:29:1d:f3:47:72:a1:69:44:1f:e7:0c:9c:ef:2d:38:19:1d:81:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:31:40 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=0f9af0137e9e46b642dff8d0e3ce627c99050c67dc72d6b84e6a5c556e7c7c4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:d6:1c:43:87:28:f1:44:e9:7a:09:2b:3a: 36:c8:3d:1b:c8:71:86:e1:ef:78:66:db:21:5f:54: fb:c5:81:bb:9c:e7:3e:96:ef:6c:75:22:79:81:de: 0f:e4:7e:2e:d7:39:70:e5:34:fa:19:9e:94:dc:50: 99:56:77:d1:c9:1d:37:44:6f:82:53:9d:04:77:97: f7:c1:a6:cd:68:f0:4b:2b:ac:63:a1:55:7d:f6:29: 11:94:22:37:c6:2f:f2:f1:d8:ff:6a:7b:66:42:20: a5:18:64:28:2d:15:6e:ce:4f:31:df:d3:35:74:be: 5b:b3:bc:bd:e6:1d:9f:f9:56:37:4a:a8:33:7e:2b: 39:14:b3:fb:29:2d:18:44:c9:a5:17:ad:42:5d:03: 7d:a6:db:66:07:ff:44:e2:e8:55:10:ef:7b:77:8c: 34:1e:18:24:c0:8e:25:f4:9a:05:98:f0:a7:54:3f: 0d:cb:3c:1e:0e:c0:4d:cb:c1:1f:4c:cb:ff:08:3f: c1:77:6b:e3:4e:2b:fa:5f:71:9b:1b:83:01:39:56: 2b:4e:90:bd:d9:2a:27:ed:24:70:ac:61:e4:c0:25: 8c:00:1d:a3:a0:2a:44:2c:4f:84:2f:58:aa:b0:79: d9:5c:43:e1:51:f1:44:f4:77:b5:ad:bf:81:b4:6c: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:30:2D:2D:59:A8:4B:A7:F6:D8:BC:B8:FB:3D:B6:62:5C:27:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.123.0.0/16 Signature Algorithm: sha256WithRSAEncryption d0:74:a3:b6:a1:0e:ba:fc:9a:4f:61:7a:a0:b8:4f:d9:f0:c8: 8c:e7:ea:cb:d7:29:20:0e:3a:06:d4:f2:8d:16:29:ac:1e:50: 1b:64:8a:85:5a:b0:08:fb:1a:a2:86:c0:bf:7f:cf:ce:4c:1f: 1b:e5:45:90:31:fc:97:b8:c5:8f:44:43:81:93:12:1d:cd:75: 96:ed:a6:5d:2a:61:67:75:d2:0e:d8:d7:10:61:90:e1:49:3a: 1d:4c:42:7d:5f:88:dc:f8:bc:d0:2b:f8:45:d4:c2:96:85:98: ae:3c:58:c8:3c:58:a2:d6:96:55:cc:6f:db:62:3a:86:1c:dc: 23:b9:3b:06:c3:bc:f9:c5:3c:1e:f7:ba:3e:dc:ed:19:54:45: a9:6a:fc:7e:10:ba:ef:c3:48:20:bc:e3:9b:f8:b3:c0:50:e3: b2:ef:27:e2:2f:d9:ca:35:56:c6:b2:30:4d:99:a7:23:48:1e: cf:38:94:0c:1a:af:8b:7d:48:4c:f7:ff:62:9e:fa:fd:80:eb: 50:58:2f:20:4f:f5:59:f0:05:a7:3b:07:50:a0:06:c2:1f:34: 3c:fe:4d:0f:97:22:62:00:a4:69:7f:63:bb:35:da:69:c1:15: 33:45:4a:8e:77:d9:19:aa:68:a8:73:b8:aa:09:49:7d:a3:30: 8b:f0:c0:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCykd80dyoWlEH+cMnO8tOBkdgVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAzMTQwWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjlhZjAxMzdlOWU0NmI2NDJkZmY4ZDBlM2NlNjI3Yzk5 MDUwYzY3ZGM3MmQ2Yjg0ZTZhNWM1NTZlN2M3YzRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRqdYcQ4co8UTpegkrOjbIPRvIcYbh73hm2yFfVPvFgbuc 5z6W72x1InmB3g/kfi7XOXDlNPoZnpTcUJlWd9HJHTdEb4JTnQR3l/fBps1o8Esr rGOhVX32KRGUIjfGL/Lx2P9qe2ZCIKUYZCgtFW7OTzHf0zV0vluzvL3mHZ/5VjdK qDN+KzkUs/spLRhEyaUXrUJdA32m22YH/0Ti6FUQ73t3jDQeGCTAjiX0mgWY8KdU Pw3LPB4OwE3LwR9My/8IP8F3a+NOK/pfcZsbgwE5VitOkL3ZKiftJHCsYeTAJYwA HaOgKkQsT4QvWKqwedlcQ+FR8UT0d7Wtv4G0bND5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCmswLS1ZqEun9ti8uPs9tmJcJ/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1YzNhNTE2LTIyNzItNGE3YS1iNmRlLTkyYWI5OTFiNGI0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ezANBgkqhkiG9w0BAQsFAAOCAQEA0HSjtqEOuvyaT2F6oLhP2fDIjOfq y9cpIA46BtTyjRYprB5QG2SKhVqwCPsaoobAv3/PzkwfG+VFkDH8l7jFj0RDgZMS Hc11lu2mXSphZ3XSDtjXEGGQ4Uk6HUxCfV+I3Pi80Cv4RdTCloWYrjxYyDxYotaW Vcxv22I6hhzcI7k7BsO8+cU8Hve6PtztGVRFqWr8fhC678NIILzjm/izwFDjsu8n 4i/ZyjVWxrIwTZmnI0gezziUDBqvi31ITPf/Yp76/YDrUFgvIE/1WfAFpzsHUKAG wh80PP5ND5ciYgCkaX9juzXaacEVM0VKjnfZGapoqHO4qglJfaMwi/DAPA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:28 2025 by rpki-client