$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa File: eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa (raw, json) Hash identifier: HEFc0hGHWUQpzCtsVYhRv6z0qCNkFP8b3mmDX8onerY= Subject key identifier: 89:A8:D7:C9:ED:C8:10:C3:8E:39:5B:E1:2C:80:6C:AE:55:11:15:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5442867D496186BD14141473458A6B3122F654C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa Signing time: Tue 20 May 2025 15:12:35 +0000 ROA not before: Tue 20 May 2025 15:12:35 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:42:86:7d:49:61:86:bd:14:14:14:73:45:8a:6b:31:22:f6:54:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:12:35 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=41715c352c0506f09b388bb1feff341838f0cc16c8f037cdc18e100331e8f5b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:d6:10:85:07:6b:21:21:3d:43:8a:ff:62: 06:21:bb:34:62:31:b8:e6:eb:4b:6a:31:e0:e3:93: 09:b0:99:03:b4:e2:bd:51:50:94:1c:ff:a7:31:92: d3:46:03:96:ed:96:ab:12:b5:ef:e5:c6:e7:70:6a: f5:3b:61:8e:f4:fe:2f:ea:97:57:28:70:d1:af:39: 05:ed:8c:1e:94:93:9f:2a:95:ed:1f:13:40:db:52: e5:91:89:23:cb:11:c2:06:05:69:35:6a:34:5f:47: 84:3f:a6:92:6a:08:ec:f3:e2:6f:70:9f:0f:9b:94: d7:0c:b3:76:49:cb:48:b6:6c:27:9d:cf:ea:9f:cc: da:60:92:e1:ea:bd:ac:da:0e:db:52:bf:ff:f2:14: a9:08:38:3d:8c:a1:53:97:ea:56:21:90:7f:62:0e: a4:aa:54:ac:ac:05:a7:03:de:15:f8:61:93:13:04: 99:d3:03:9a:7f:b3:ac:2a:29:b6:ca:7d:22:9b:6e: a8:81:34:64:c3:0c:91:c8:6d:d0:37:b9:63:0f:76: 28:bb:d3:0a:10:10:86:54:40:36:5f:3a:59:17:76: 2b:6d:ee:dd:0f:11:7f:91:61:5d:cb:9e:6e:59:ec: 15:a4:9b:92:4d:1f:8d:95:8d:8c:1a:e1:22:88:9c: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:D7:C9:ED:C8:10:C3:8E:39:5B:E1:2C:80:6C:AE:55:11:15:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.200.0/21 Signature Algorithm: sha256WithRSAEncryption c7:cc:35:b0:79:4f:60:de:79:f6:e0:12:98:d5:c4:7b:dc:33: 66:c9:68:d5:0e:c8:6a:2f:c8:a9:7d:d6:2c:10:b3:b7:65:f7: 61:fc:19:62:03:b4:eb:bc:2b:7c:6b:d5:c3:17:fc:8c:94:b1: 79:da:77:ea:1d:e2:35:d5:87:11:76:45:fa:51:c0:2a:36:60: 25:07:29:96:8d:38:a6:26:2d:83:18:60:81:79:fb:04:41:79: 99:bf:b6:31:9a:58:72:ab:3a:74:3e:b3:7b:10:e9:89:0b:57: 2f:98:4d:77:a2:aa:ce:b4:36:5e:6c:20:7f:e7:67:28:5b:10: a5:24:67:80:42:58:a9:07:cf:de:71:a5:f9:8f:e2:85:ab:48: 0f:c5:93:ff:77:35:cc:b2:36:ab:a8:b7:b7:fb:79:ac:dd:f1: 8f:31:6d:5c:3f:18:e0:b3:f3:0b:75:fd:64:78:00:13:12:47: 99:c3:a6:21:cc:27:71:5d:45:74:91:22:ad:0d:62:a2:fc:7e: 94:4e:94:f8:81:5f:40:3f:dc:bb:3f:d0:b3:6d:77:cf:4a:63: 43:8c:34:d4:0d:d8:ff:8e:1f:3f:33:54:59:d2:30:a5:fe:9d: c9:c1:41:0a:7a:f3:c6:ac:76:c5:93:0e:3f:23:ac:7d:6c:a5: fa:07:44:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVEKGfUlhhr0UFBRzRYprMSL2VMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMjM1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTcxNWMzNTJjMDUwNmYwOWIzODhiYjFmZWZmMzQxODM4 ZjBjYzE2YzhmMDM3Y2RjMThlMTAwMzMxZThmNWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuF9YQhQdrISE9Q4r/YgYhuzRiMbjm60tqMeDjkwmwmQO0 4r1RUJQc/6cxktNGA5btlqsSte/lxudwavU7YY70/i/ql1cocNGvOQXtjB6Uk58q le0fE0DbUuWRiSPLEcIGBWk1ajRfR4Q/ppJqCOzz4m9wnw+blNcMs3ZJy0i2bCed z+qfzNpgkuHqvazaDttSv//yFKkIOD2MoVOX6lYhkH9iDqSqVKysBacD3hX4YZMT BJnTA5p/s6wqKbbKfSKbbqiBNGTDDJHIbdA3uWMPdii70woQEIZUQDZfOlkXditt 7t0PEX+RYV3Lnm5Z7BWkm5JNH42VjYwa4SKInJ+zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiajXye3IEMOOOVvhLIBsrlURFbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViNDgyY2YzLTA5NWItNDNlNC04ZWRiLTNiOGI1N2JlZGVjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANG4MgwDQYJKoZIhvcNAQELBQADggEBAMfMNbB5T2DeefbgEpjVxHvcM2bJ aNUOyGovyKl91iwQs7dl92H8GWIDtOu8K3xr1cMX/IyUsXnad+od4jXVhxF2RfpR wCo2YCUHKZaNOKYmLYMYYIF5+wRBeZm/tjGaWHKrOnQ+s3sQ6YkLVy+YTXeiqs60 Nl5sIH/nZyhbEKUkZ4BCWKkHz95xpfmP4oWrSA/Fk/93NcyyNquot7f7eazd8Y8x bVw/GOCz8wt1/WR4ABMSR5nDpiHMJ3FdRXSRIq0NYqL8fpROlPiBX0A/3Ls/0LNt d89KY0OMNNQN2P+OHz8zVFnSMKX+ncnBQQp688asdsWTDj8jrH1spfoHRAI= -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:38 2025 by rpki-client