$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa File: c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json) Hash identifier: sDC2qRsaQsVJhdsED94ZVe0RxM5FB6bv+egqAsLSu+Y= Subject key identifier: 0E:9A:0C:15:06:5D:4D:DC:79:C6:83:37:8F:3B:52:91:0B:3A:D9:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C95A950832439C7E0D4B37F561F32BA8A80D583 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa Signing time: Tue 27 May 2025 00:11:03 +0000 ROA not before: Tue 27 May 2025 00:11:03 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.165.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:95:a9:50:83:24:39:c7:e0:d4:b3:7f:56:1f:32:ba:8a:80:d5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:11:03 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=3455d86f14cbc9d23e42aff5efbd9e7ad43d872eee2422f874da96807d19a3ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:05:c5:48:9c:d3:b6:08:f9:da:58:95:ca: 5d:8d:26:52:1c:16:9d:4b:df:10:78:2b:54:c3:81: 1d:88:6a:49:53:eb:b3:97:13:14:90:83:39:b1:2a: 57:f7:d1:11:34:6f:90:55:d2:05:37:f7:9c:46:28: 1b:f9:86:4c:62:36:99:a5:43:53:8b:0b:3c:ba:3d: 7a:27:f7:ae:4e:6e:9a:15:fe:4a:d5:85:3a:af:cf: 79:3c:0f:58:2b:7e:e6:4d:9e:ee:1d:b8:72:ba:54: bf:d4:16:1a:99:3d:32:36:c8:86:ef:21:91:e4:d1: 95:09:fc:04:08:21:24:33:3e:20:5a:10:e6:a6:42: ea:ea:6a:82:21:b5:50:a7:c3:ed:03:62:97:2b:1f: 12:65:d5:6f:04:49:43:e3:be:15:28:44:7b:46:d4: 38:80:10:97:16:7b:b9:1a:67:b0:d9:7a:c0:32:5a: 25:77:51:0f:ea:34:e1:9a:d9:a3:02:b8:0c:4c:c2: c6:d5:b0:91:a4:f8:94:ef:9e:2a:84:30:70:a2:44: 20:9c:00:8d:70:f3:e5:50:c0:51:1d:71:75:f9:d4: bd:63:50:b7:e9:61:a0:51:61:9f:fc:cd:df:53:d6: ad:8b:60:89:78:07:0b:00:0a:a6:a1:f9:6f:4f:b9: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:0C:15:06:5D:4D:DC:79:C6:83:37:8F:3B:52:91:0B:3A:D9:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:d8:fd:fd:51:b8:5d:c8:f7:8c:5c:4e:5b:b9:ae:1c:97:37: 16:87:af:4e:4e:aa:0c:02:35:ed:dc:8e:2e:47:36:8b:60:f7: f3:ae:64:b6:01:4e:06:36:13:b0:44:fd:9e:cb:f8:2b:31:8a: 8f:b4:8f:f4:d4:8f:5e:15:e8:a7:30:e6:22:d3:ef:f6:29:46: d3:a9:1a:36:4a:b8:e4:2f:35:f0:49:fe:b3:ce:9b:9c:3d:d3: 2d:ae:af:b8:c4:d4:1c:24:e2:e4:ac:a7:99:06:39:50:a6:b4: 15:3d:72:93:2f:c5:fc:ab:d3:0b:7b:e1:97:43:d5:4d:cd:45: 20:16:94:8f:a5:df:3d:ce:c6:c0:8a:e5:73:4e:5c:cc:55:99: 19:ab:8a:90:f9:85:37:73:f8:8a:3e:8d:29:48:9c:66:ed:be: c8:bf:4e:57:63:28:52:78:5c:76:4a:aa:d3:2e:50:72:8e:55: 8f:c9:6d:43:34:5a:56:04:e5:29:c3:2b:e8:bb:ba:8c:1e:93: 47:97:1e:e5:6e:04:ef:0e:e8:1f:d1:c2:7f:63:b6:d6:1e:b8: 37:ad:fe:fd:fb:d9:9b:d2:80:af:19:24:be:0f:4b:91:2a:b8: e2:5e:79:21:68:1e:be:cd:d7:89:37:34:71:b6:df:37:84:8d: 6c:98:ee:39 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXJWpUIMkOcfg1LN/Vh8yuoqA1YMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAxMTAzWhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDU1ZDg2ZjE0Y2JjOWQyM2U0MmFmZjVlZmJkOWU3YWQ0 M2Q4NzJlZWUyNDIyZjg3NGRhOTY4MDdkMTlhM2VjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0GQXFSJzTtgj52liVyl2NJlIcFp1L3xB4K1TDgR2IaklT 67OXExSQgzmxKlf30RE0b5BV0gU395xGKBv5hkxiNpmlQ1OLCzy6PXon965ObpoV /krVhTqvz3k8D1grfuZNnu4duHK6VL/UFhqZPTI2yIbvIZHk0ZUJ/AQIISQzPiBa EOamQurqaoIhtVCnw+0DYpcrHxJl1W8ESUPjvhUoRHtG1DiAEJcWe7kaZ7DZesAy WiV3UQ/qNOGa2aMCuAxMwsbVsJGk+JTvniqEMHCiRCCcAI1w8+VQwFEdcXX51L1j ULfpYaBRYZ/8zd9T1q2LYIl4BwsACqah+W9PucLhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDpoMFQZdTdx5xoM3jztSkQs62SMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4NmVlM2RmLTYxZjMtNGFiMS04MjhiLTllODk3ZjVlMjdiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpTANBgkqhkiG9w0BAQsFAAOCAQEAc9j9/VG4Xcj3jFxOW7muHJc3Foev Tk6qDAI17dyOLkc2i2D3865ktgFOBjYTsET9nsv4KzGKj7SP9NSPXhXopzDmItPv 9ilG06kaNkq45C818En+s86bnD3TLa6vuMTUHCTi5KynmQY5UKa0FT1yky/F/KvT C3vhl0PVTc1FIBaUj6XfPc7GwIrlc05czFWZGauKkPmFN3P4ij6NKUicZu2+yL9O V2MoUnhcdkqq0y5Qco5Vj8ltQzRaVgTlKcMr6Lu6jB6TR5ce5W4E7w7oH9HCf2O2 1h64N63+/fvZm9KArxkkvg9LkSq44l55IWgevs3XiTc0cbbfN4SNbJjuOQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:34 2025 by rpki-client