$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa File: d892466d-c02f-45c4-85be-dbde337ce172.roa (raw, json) Hash identifier: kTfxyGIaE4DzRbUWzJNy1NT/z2B5QjeZfUvvPZzMPto= Subject key identifier: 0C:83:4A:7A:33:E9:E1:8B:4A:3A:0B:DF:A9:F6:44:EC:0C:7D:6D:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D1420E9C9FE741012C74F464338F0F7F70B86B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa Signing time: Wed 21 May 2025 00:00:29 +0000 ROA not before: Wed 21 May 2025 00:00:29 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 167.241.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:14:20:e9:c9:fe:74:10:12:c7:4f:46:43:38:f0:f7:f7:0b:86:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:00:29 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=47c5481178c7c2d46d2fb138cd688519e3a9c9311bb57bfabcc1c196aa4ad9c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:28:da:18:11:6f:0d:ad:22:b4:df:a2:28: f8:38:d9:be:c4:14:d2:eb:18:09:f2:83:92:e8:f3: bd:ac:2e:22:02:a8:87:47:f7:55:10:6e:36:67:64: b1:ce:08:8e:dc:f7:f2:34:a1:d6:19:09:44:af:07: ff:42:c7:13:2b:14:4f:77:a7:ac:40:b7:cf:4c:c3: 69:7d:25:21:90:00:18:8f:e0:22:f1:c1:fc:56:fc: 06:b0:1c:8a:a1:a1:9e:25:da:5f:e0:53:10:12:d9: 29:da:34:82:1f:45:30:10:a5:38:34:f9:8f:74:f1: b3:d5:3a:a4:3a:2d:84:37:49:36:e2:b5:24:af:4d: ec:a3:8e:4e:eb:a8:a1:0f:49:ca:24:a4:0b:58:ed: ad:3a:c4:80:10:34:be:97:83:a4:ca:9d:4a:c8:a7: b4:ff:bb:0b:76:29:97:de:ff:3f:9d:ff:f9:4d:b4: 63:8f:d2:ad:ac:1c:82:de:82:7e:a3:7a:cc:94:17: 42:cd:8d:f8:56:d0:81:66:cd:e7:02:de:d6:29:94: 1f:04:f0:37:b3:f8:99:c2:d1:75:89:9c:21:a7:c7: 48:8f:a6:4b:ae:6b:51:51:91:86:4f:cf:f7:99:8f: 5e:72:1e:70:ee:98:4a:4c:be:38:5b:83:99:f9:20: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:83:4A:7A:33:E9:E1:8B:4A:3A:0B:DF:A9:F6:44:EC:0C:7D:6D:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.241.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:c1:d7:e5:da:3c:0b:92:ee:c7:04:dc:5d:e2:4f:80:ce:11: e9:63:07:66:9a:6b:fb:36:db:a8:1f:cd:27:27:99:7d:38:ba: 6b:57:eb:ad:a4:3a:bd:c8:77:cc:fc:85:73:78:63:6c:16:9e: b0:55:1a:a6:3a:31:05:48:4e:04:cf:56:51:d0:7e:ef:ee:56: e5:a8:17:14:f3:35:88:e9:69:55:40:98:4e:f6:40:25:b0:90: 1a:6a:ce:a0:41:65:19:80:21:37:e4:08:b7:cb:a9:86:b1:73: 77:82:a8:65:a5:19:d6:66:54:d0:6f:44:9a:56:a9:61:67:0f: 13:d3:65:c7:65:31:c4:f8:5d:e4:7f:28:e0:e4:ae:93:36:09: 62:07:eb:8a:9e:9f:a2:f5:e5:48:8d:ba:ba:82:5c:b0:c0:61: c5:34:a8:28:63:27:28:99:f8:64:73:84:75:e7:62:45:e9:6a: f5:ae:97:f7:a6:be:69:9d:cf:3e:ce:4c:f3:96:30:3d:4e:f6: 25:13:55:f2:1e:31:07:11:13:65:72:55:b6:93:db:44:fb:38: 6f:87:af:09:ff:0a:e7:e0:18:bd:a7:05:ad:02:c2:de:c9:5b: 29:e9:bc:bb:1e:fc:7b:61:1b:00:6d:2e:92:e8:3b:02:15:23: 21:42:cf:ba -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULRQg6cn+dBASx09GQzjw9/cLhrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAwMDI5WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2M1NDgxMTc4YzdjMmQ0NmQyZmIxMzhjZDY4ODUxOWUz YTljOTMxMWJiNTdiZmFiY2MxYzE5NmFhNGFkOWM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjMSjaGBFvDa0itN+iKPg42b7EFNLrGAnyg5Lo872sLiIC qIdH91UQbjZnZLHOCI7c9/I0odYZCUSvB/9CxxMrFE93p6xAt89Mw2l9JSGQABiP 4CLxwfxW/AawHIqhoZ4l2l/gUxAS2SnaNIIfRTAQpTg0+Y908bPVOqQ6LYQ3STbi tSSvTeyjjk7rqKEPScokpAtY7a06xIAQNL6Xg6TKnUrIp7T/uwt2KZfe/z+d//lN tGOP0q2sHILegn6jesyUF0LNjfhW0IFmzecC3tYplB8E8Dez+JnC0XWJnCGnx0iP pkuua1FRkYZPz/eZj15yHnDumEpMvjhbg5n5IPsdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDINKejPp4YtKOgvfqfZE7Ax9bQAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4OTI0NjZkLWMwMmYtNDVjNC04NWJlLWRiZGUzMzdjZTE3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCn8TANBgkqhkiG9w0BAQsFAAOCAQEAb8HX5do8C5LuxwTcXeJPgM4R6WMH Zppr+zbbqB/NJyeZfTi6a1frraQ6vch3zPyFc3hjbBaesFUapjoxBUhOBM9WUdB+ 7+5W5agXFPM1iOlpVUCYTvZAJbCQGmrOoEFlGYAhN+QIt8uphrFzd4KoZaUZ1mZU 0G9EmlapYWcPE9Nlx2UxxPhd5H8o4OSukzYJYgfrip6fovXlSI26uoJcsMBhxTSo KGMnKJn4ZHOEdediRelq9a6X96a+aZ3PPs5M85YwPU72JRNV8h4xBxETZXJVtpPb RPs4b4evCf8K5+AYvacFrQLC3slbKem8ux78e2EbAG0ukug7AhUjIULPug== -----END CERTIFICATE-----Generated at Sun Jun 1 04:23:27 2025 by rpki-client