$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa File: c7e48273-d97f-45e2-9820-48c08d0db4f5.roa (raw, json) Hash identifier: 0u1Z2D3RXAd1jb3c3KsBeG44QZ3RUhTpxvVW3Xhd9Cc= Subject key identifier: 3E:32:C5:F6:D0:2E:F7:5B:4B:01:CB:DD:BB:5A:6F:8B:35:F2:65:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 047FFB672B4F622A2EC7BE35D26035B6E31BF63C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa Signing time: Fri 09 May 2025 00:00:07 +0000 ROA not before: Fri 09 May 2025 00:00:07 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7f:fb:67:2b:4f:62:2a:2e:c7:be:35:d2:60:35:b6:e3:1b:f6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:00:07 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=d0b7543c47f482a0f74172b11d2642d31f5d5a5e3017c87766d0fc63f6d39862, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:56:bf:17:8e:8f:2a:40:74:50:31:cd:c9: 3d:6f:07:9b:4c:72:62:82:c3:f2:d4:10:d4:79:43: cd:87:a3:79:75:07:94:5d:08:d9:4a:9a:4b:2e:0f: 70:54:8a:ac:32:ce:b7:ae:4f:7f:90:e8:95:11:3b: 0b:7c:68:3f:6d:0f:89:6c:8d:4a:6c:79:ee:27:1a: b2:a9:85:96:6e:92:5a:5a:e7:07:17:52:73:58:a6: 1d:31:59:20:53:35:15:cb:39:7e:2e:4d:d6:71:8e: c6:0a:cf:b3:57:c0:e5:19:9a:b0:3d:37:e1:7a:84: 0e:36:19:6e:5c:30:70:79:36:6b:66:03:c0:42:39: c8:77:d5:34:91:83:ff:7f:78:46:2c:91:7f:5f:cc: d2:4c:36:a6:2d:5e:2b:bb:0f:22:ef:bd:09:2c:58: a9:58:46:6a:75:9b:fd:d2:1b:f5:14:c5:d7:9f:12: 6b:7b:00:c8:4b:3c:52:a4:52:ac:5a:b6:08:cb:36: 22:ad:57:4e:4c:ca:05:a4:ca:cd:4c:18:13:b5:ea: e9:69:80:81:83:93:ec:fe:f4:56:73:49:63:49:8c: 1b:d1:f6:c0:dc:d2:bf:7c:58:bb:13:4e:a1:10:78: 9f:a8:17:99:0e:ef:55:5e:c6:4d:66:e9:f8:f5:41: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:C5:F6:D0:2E:F7:5B:4B:01:CB:DD:BB:5A:6F:8B:35:F2:65:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.254.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3d:a6:ec:09:07:a2:a1:3f:5c:42:9a:41:3b:78:ec:71:7b: ef:d0:70:f6:1d:53:aa:ed:07:a5:01:83:c0:59:a8:5e:57:28: 4c:56:00:c3:f7:06:b3:a1:75:ed:d7:46:89:c7:1a:ce:f8:ca: e2:bf:cf:9c:30:c9:5a:5d:3a:0b:3e:d0:a2:a7:b3:7a:e3:b4: 3f:3b:b5:a8:77:49:ac:1f:1b:86:61:da:25:c7:73:17:f1:84: 6a:53:7a:be:01:69:e0:38:ab:f0:d7:d3:8a:8e:71:c2:c1:24: 3c:67:64:cf:3c:05:75:a7:99:52:90:7a:58:df:3f:67:ae:df: 0f:d1:fd:90:5d:3a:fd:bc:97:04:4c:4a:84:9e:5f:67:c6:1b: 92:dd:0f:2b:a5:10:12:87:4c:73:78:58:f8:85:5a:42:cc:d7: 87:c4:f2:cb:e2:cd:19:2a:52:e7:d4:dc:0a:dc:5a:b0:00:dd: 34:90:1c:13:94:41:24:71:0f:1d:6e:4e:8c:54:a5:2a:d3:3a: 5d:79:2d:fe:4c:4e:6b:9b:93:41:4e:81:0a:97:27:0f:8a:96: e5:29:31:e3:89:71:e7:ae:e4:a9:b2:30:2b:25:a0:b7:61:d5: 98:d8:32:c6:ad:f2:b1:6c:8c:15:31:9f:b7:01:4a:12:44:94: 04:d3:34:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBH/7ZytPYioux7410mA1tuMb9jwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAwMDA3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGI3NTQzYzQ3ZjQ4MmEwZjc0MTcyYjExZDI2NDJkMzFm NWQ1YTVlMzAxN2M4Nzc2NmQwZmM2M2Y2ZDM5ODYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNz1a/F46PKkB0UDHNyT1vB5tMcmKCw/LUENR5Q82Ho3l1 B5RdCNlKmksuD3BUiqwyzreuT3+Q6JUROwt8aD9tD4lsjUpsee4nGrKphZZuklpa 5wcXUnNYph0xWSBTNRXLOX4uTdZxjsYKz7NXwOUZmrA9N+F6hA42GW5cMHB5Nmtm A8BCOch31TSRg/9/eEYskX9fzNJMNqYtXiu7DyLvvQksWKlYRmp1m/3SG/UUxdef Emt7AMhLPFKkUqxatgjLNiKtV05MygWkys1MGBO16ulpgIGDk+z+9FZzSWNJjBvR 9sDc0r98WLsTTqEQeJ+oF5kO71Vexk1m6fj1Qb53AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPjLF9tAu91tLAcvdu1pvizXyZSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ZTQ4MjczLWQ5N2YtNDVlMi05ODIwLTQ4YzA4ZDBkYjRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEv4wDQYJKoZIhvcNAQELBQADggEBAB49puwJB6KhP1xCmkE7eOxxe+/Q cPYdU6rtB6UBg8BZqF5XKExWAMP3BrOhde3XRonHGs74yuK/z5wwyVpdOgs+0KKn s3rjtD87tah3SawfG4Zh2iXHcxfxhGpTer4BaeA4q/DX04qOccLBJDxnZM88BXWn mVKQeljfP2eu3w/R/ZBdOv28lwRMSoSeX2fGG5LdDyulEBKHTHN4WPiFWkLM14fE 8svizRkqUufU3ArcWrAA3TSQHBOUQSRxDx1uToxUpSrTOl15Lf5MTmubk0FOgQqX Jw+KluUpMeOJceeu5KmyMCsloLdh1ZjYMsat8rFsjBUxn7cBShJElATTNL8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:00 2025 by rpki-client