$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa File: cd97473f-265a-4062-bab9-aefacb0e51a0.roa (raw, json) Hash identifier: zjUrn4KptADkQOvfgDtjzFsxtkNT3WT7fQTuVNV7Yk0= Subject key identifier: D4:BD:1A:C4:4B:69:C0:F3:EE:42:CA:39:AB:E3:5A:6E:EC:6A:A4:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37B674635587E70CFC422BE2378119BDF9EE9607 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa Signing time: Wed 21 May 2025 23:08:00 +0000 ROA not before: Wed 21 May 2025 23:08:00 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b6:74:63:55:87:e7:0c:fc:42:2b:e2:37:81:19:bd:f9:ee:96:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 23:08:00 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=9a3991f6e0b40027d9fbc5262278745c7e2027e0fb77878783e455298256635f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:85:34:2d:fc:c5:51:dc:a7:39:0e:c8:d6: 83:92:e8:c5:3b:a6:1d:ae:b9:98:53:23:48:d6:5d: 9c:ed:61:91:a4:03:5b:0c:f3:3d:66:18:3c:93:54: a2:51:8a:53:cf:d6:bf:2e:f3:e2:cc:c8:54:0d:cf: 3a:a7:87:da:11:98:2e:30:32:dd:f8:8b:08:0c:97: 9a:50:41:e1:d2:55:f0:6e:f8:a0:a7:d3:cf:72:f9: 7a:7b:61:6e:1f:f1:4b:03:a8:cf:cb:8c:57:35:d8: 92:06:a7:4f:c1:2c:d4:bf:4c:af:29:a4:d2:95:87: a2:b5:e7:37:4c:6f:5e:f5:61:92:2d:c0:26:49:5c: 96:fc:ad:9e:ca:cb:70:bb:7e:6d:a9:0a:c2:f9:21: 6a:49:02:39:6b:04:47:c1:6a:d4:b1:a1:1d:45:63: a7:11:09:aa:81:dd:a5:c9:c1:a5:bd:34:8f:cd:02: ec:be:4d:02:20:6b:42:02:1f:96:06:ec:77:64:3e: b9:97:d6:ec:ca:7c:eb:54:19:3a:05:fa:05:6a:62: dd:cb:51:52:49:38:02:5c:cc:09:1f:83:c8:75:a3: de:b9:ce:10:06:5e:50:96:f6:26:d7:39:2b:76:44: 34:30:ba:bb:08:64:92:30:05:61:6d:9e:5e:ee:91: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BD:1A:C4:4B:69:C0:F3:EE:42:CA:39:AB:E3:5A:6E:EC:6A:A4:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.209.0/24 Signature Algorithm: sha256WithRSAEncryption 89:6a:4b:29:40:8e:81:81:9b:a6:b4:d4:b2:66:fa:71:ca:55: 6c:0a:aa:08:71:6f:af:f2:0f:d8:a9:21:71:50:e3:67:a7:6d: 38:fe:37:24:f9:ed:53:df:f6:1c:57:b3:83:9b:71:6e:a7:1d: 17:09:33:69:cf:75:cd:00:70:d9:df:1e:a8:2b:b5:7d:30:03: ab:2e:90:f3:fd:81:e9:ef:9e:4d:8f:50:5d:7f:61:7e:f2:9f: a3:dd:bb:aa:8a:c1:3c:c4:9a:86:8e:e8:38:97:fc:a0:e5:bc: 09:a7:a6:7f:cf:e3:01:4c:a2:f2:6a:af:3c:3c:ee:e8:b0:1a: 80:2b:75:76:a9:af:f3:6b:f8:2b:2c:ee:1d:27:b3:ce:fb:61: 55:c1:54:62:cc:b2:e7:fb:2d:3a:1d:2c:1b:d2:00:46:a7:91: 42:e8:70:ef:35:38:b3:9a:35:37:ec:ed:55:66:2d:cc:9f:d8: ed:ac:af:32:62:6f:cc:e7:dc:fa:55:29:d0:b1:af:7c:49:ea: 68:17:0e:0a:dc:bc:3f:e8:bf:d6:cb:44:8c:d1:9d:e0:c9:80: 15:ab:e9:9d:2b:90:7f:c6:fc:b2:ed:a4:5c:5a:7b:4c:9e:ca: 65:b5:fd:26:f1:7e:de:49:f6:9f:56:34:e4:64:02:3b:60:5e: e4:a1:2b:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN7Z0Y1WH5wz8QiviN4EZvfnulgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMjMwODAwWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTM5OTFmNmUwYjQwMDI3ZDlmYmM1MjYyMjc4NzQ1Yzdl MjAyN2UwZmI3Nzg3ODc4M2U0NTUyOTgyNTY2MzVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkfIU0LfzFUdynOQ7I1oOS6MU7ph2uuZhTI0jWXZztYZGk A1sM8z1mGDyTVKJRilPP1r8u8+LMyFQNzzqnh9oRmC4wMt34iwgMl5pQQeHSVfBu +KCn089y+Xp7YW4f8UsDqM/LjFc12JIGp0/BLNS/TK8ppNKVh6K15zdMb171YZIt wCZJXJb8rZ7Ky3C7fm2pCsL5IWpJAjlrBEfBatSxoR1FY6cRCaqB3aXJwaW9NI/N Auy+TQIga0ICH5YG7HdkPrmX1uzKfOtUGToF+gVqYt3LUVJJOAJczAkfg8h1o965 zhAGXlCW9ibXOSt2RDQwursIZJIwBWFtnl7ukTMtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1L0axEtpwPPuQso5q+NabuxqpHowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkOTc0NzNmLTI2NWEtNDA2Mi1iYWI5LWFlZmFjYjBlNTFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFdEwDQYJKoZIhvcNAQELBQADggEBAIlqSylAjoGBm6a01LJm+nHKVWwK qghxb6/yD9ipIXFQ42enbTj+NyT57VPf9hxXs4ObcW6nHRcJM2nPdc0AcNnfHqgr tX0wA6sukPP9genvnk2PUF1/YX7yn6Pdu6qKwTzEmoaO6DiX/KDlvAmnpn/P4wFM ovJqrzw87uiwGoArdXapr/Nr+Css7h0ns877YVXBVGLMsuf7LTodLBvSAEankULo cO81OLOaNTfs7VVmLcyf2O2srzJib8zn3PpVKdCxr3xJ6mgXDgrcvD/ov9bLRIzR neDJgBWr6Z0rkH/G/LLtpFxae0yeymW1/Sbxft5J9p9WNORkAjtgXuShK3E= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:59 2025 by rpki-client