$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa File: f003f8b3-3437-44b7-a0b7-0988bc303328.roa (raw, json) Hash identifier: P+lPwnBnDr7SUutUisQHzpIpe8P2NEUD6X5srGMRC6Y= Subject key identifier: 36:64:20:95:D4:69:04:61:60:AE:DF:B9:63:ED:DD:2E:39:C1:59:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5825131369053FBDD320015BF90C347D3D318FFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa Signing time: Wed 28 May 2025 00:20:36 +0000 ROA not before: Wed 28 May 2025 00:20:36 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.8.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:13:13:69:05:3f:bd:d3:20:01:5b:f9:0c:34:7d:3d:31:8f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:20:36 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=9daa5c9d38b5b2efe228ce6fb8c47716409967df4a2636087500aa56a925871b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:de:51:cb:78:97:44:64:df:36:03:a7:c7: c9:3d:e6:bd:3a:f6:08:49:c2:09:d0:63:bb:5e:fa: 9d:9e:79:cd:83:25:06:31:bd:3c:ba:ce:89:09:d0: cf:92:11:db:aa:3c:da:33:b2:90:a4:ed:dd:03:d6: 6c:aa:32:ba:7b:21:43:4f:f3:b6:30:27:a8:8c:9f: 24:33:a2:52:c5:6e:3e:9c:29:8a:d7:ac:83:54:b7: a4:fb:5f:61:22:2a:dd:b7:d6:87:f3:19:f2:3e:10: cb:a4:55:ae:54:28:6a:02:20:88:79:b7:fe:cc:63: e4:62:c6:b0:da:9f:30:e0:a7:33:7f:03:2f:cd:12: 94:37:ae:ce:23:a9:e7:f8:2c:be:4e:60:e1:b4:a9: 3c:61:0a:10:29:15:cd:e9:1a:ad:fe:18:74:03:7f: 0c:69:f4:6e:1c:1d:1f:76:ef:09:2f:a8:98:3a:87: b9:b3:2f:b3:c3:00:91:a8:08:db:07:41:e1:32:4a: d8:5a:2e:0b:06:0f:39:f5:62:8e:25:f4:15:67:bd: 34:d3:9f:9c:5e:b4:77:27:ba:c8:32:5d:5d:36:ef: 94:9f:36:b6:4b:c9:a6:a9:f4:b2:38:d9:26:d5:20: 90:38:a3:6f:81:51:82:5d:35:5e:dc:a7:a9:99:dd: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:20:95:D4:69:04:61:60:AE:DF:B9:63:ED:DD:2E:39:C1:59:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f003f8b3-3437-44b7-a0b7-0988bc303328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:2f:6e:37:2c:af:f7:a9:57:96:b5:e0:39:69:d6:4d:f7:ed: 29:b7:99:bb:c1:72:cc:e5:f0:4d:45:31:1c:e5:a4:8b:9c:23: cf:a4:88:87:6b:79:91:84:4d:f7:11:8a:df:73:9d:94:04:99: 83:da:4a:9e:b7:35:80:d7:f7:85:15:a1:22:ae:cf:27:c8:ab: da:da:fd:e8:97:16:19:9c:62:04:6b:e5:ab:ca:89:6a:0d:08: e7:c7:f6:f7:b4:02:5b:a5:cd:9a:9c:c7:57:d5:63:84:90:b8: c4:ae:f5:d4:0a:51:c4:fb:40:02:72:87:c7:39:03:d9:89:6e: a5:e6:f8:6c:35:5f:d3:da:e0:43:3f:73:70:d7:bb:8c:ce:14: 64:61:63:77:20:c4:12:59:d2:02:51:74:d1:97:28:7c:d2:c4: bb:ab:86:7e:b5:f7:60:91:b1:8f:21:be:22:a4:26:26:57:42: d0:3c:94:e4:2d:6a:89:de:a0:cd:61:7a:a4:79:5f:59:af:4c: aa:db:43:dd:ac:9e:62:ef:8a:32:22:96:3e:e5:ab:80:ee:e6: 1b:57:0c:a0:1f:2d:8b:f6:12:d7:af:c9:e6:1c:69:f5:bf:d5: f6:f3:04:fc:7c:0d:b2:14:e1:9e:f5:74:2c:ef:96:10:5d:48: 5f:f0:85:b9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWCUTE2kFP73TIAFb+Qw0fT0xj/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAyMDM2WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGFhNWM5ZDM4YjViMmVmZTIyOGNlNmZiOGM0NzcxNjQw OTk2N2RmNGEyNjM2MDg3NTAwYWE1NmE5MjU4NzFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDafd5Ry3iXRGTfNgOnx8k95r069ghJwgnQY7te+p2eec2D JQYxvTy6zokJ0M+SEduqPNozspCk7d0D1myqMrp7IUNP87YwJ6iMnyQzolLFbj6c KYrXrINUt6T7X2EiKt231ofzGfI+EMukVa5UKGoCIIh5t/7MY+RixrDanzDgpzN/ Ay/NEpQ3rs4jqef4LL5OYOG0qTxhChApFc3pGq3+GHQDfwxp9G4cHR927wkvqJg6 h7mzL7PDAJGoCNsHQeEySthaLgsGDzn1Yo4l9BVnvTTTn5xetHcnusgyXV0275Sf NrZLyaap9LI42SbVIJA4o2+BUYJdNV7cp6mZ3frBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNmQgldRpBGFgrt+5Y+3dLjnBWfswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMDNmOGIzLTM0MzctNDRiNy1hMGI3LTA5ODhiYzMwMzMyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2CDANBgkqhkiG9w0BAQsFAAOCAQEAjS9uNyyv96lXlrXgOWnWTfftKbeZ u8FyzOXwTUUxHOWki5wjz6SIh2t5kYRN9xGK33OdlASZg9pKnrc1gNf3hRWhIq7P J8ir2tr96JcWGZxiBGvlq8qJag0I58f297QCW6XNmpzHV9VjhJC4xK711ApRxPtA AnKHxzkD2Ylupeb4bDVf09rgQz9zcNe7jM4UZGFjdyDEElnSAlF00ZcofNLEu6uG frX3YJGxjyG+IqQmJldC0DyU5C1qid6gzWF6pHlfWa9MqttD3ayeYu+KMiKWPuWr gO7mG1cMoB8ti/YS16/J5hxp9b/V9vME/HwNshThnvV0LO+WEF1IX/CFuQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:37:34 2025 by rpki-client