$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa File: f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa (raw, json) Hash identifier: VMNKsjYhE5Q2R9eW/H2LZP11jJEbmp0puXEXNXHAECU= Subject key identifier: 32:29:90:B2:49:70:9E:44:73:F9:CC:21:3E:54:7F:8F:56:AB:59:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74D4C0D2AB78E14B9D02F49F2492B4BB97352D84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa Signing time: Wed 21 May 2025 00:10:31 +0000 ROA not before: Wed 21 May 2025 00:10:31 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.36.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:c0:d2:ab:78:e1:4b:9d:02:f4:9f:24:92:b4:bb:97:35:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:10:31 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=6c98d118ae1e4f26b9f3bc77fc07ec40fbc89f3926c1b6eef6675ed2ae6566eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:49:aa:0c:d8:93:44:a4:78:c0:a2:2a:72:48: 91:87:f5:22:65:15:38:12:7a:72:b1:81:9c:b0:54: 2b:45:b4:0f:04:d5:8e:eb:a6:73:14:3c:37:7a:86: a6:0c:8f:c0:c6:d9:23:d8:d6:5b:47:b0:f4:c6:13: fc:a4:bd:c4:f1:21:0a:1d:66:60:23:fc:2b:1c:d6: 4f:3a:18:dd:ce:65:81:7b:86:59:8f:1f:76:28:fe: 20:d7:da:08:2b:d4:f5:a9:9f:ab:43:91:9f:0c:97: 42:f1:1d:b5:22:21:b0:e4:73:df:42:72:44:14:5c: 33:f7:1b:f8:88:4b:9d:01:8b:a2:80:e2:d4:7d:69: 18:66:1f:9f:65:08:c2:c7:a1:c0:72:1c:4f:38:0d: fd:ae:43:d8:39:5e:c3:9d:6d:42:ee:ca:49:ea:56: e2:e6:72:58:3c:5c:05:dc:7e:04:43:44:bb:cd:40: f2:72:af:75:b8:5b:e0:19:26:1b:04:de:2a:2c:ea: 08:0b:86:eb:2c:20:ca:26:73:0f:38:38:26:74:77: 05:95:01:9c:ea:52:3c:1b:5f:29:5f:9f:bf:d1:7f: 40:f8:df:90:38:3e:04:c8:c5:65:75:a5:ea:c8:07: 8f:fa:24:77:5f:1b:fc:f3:17:25:c8:cd:3d:10:76: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:29:90:B2:49:70:9E:44:73:F9:CC:21:3E:54:7F:8F:56:AB:59:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.36.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:2b:e1:29:53:24:f1:9b:7f:a6:08:49:62:17:3c:87:a1:b4: c6:5c:18:87:ca:52:08:28:85:91:e6:ee:d5:da:37:1e:7c:b4: 9b:79:03:9f:03:9c:71:b5:27:67:60:3f:75:fe:94:3f:a9:f5: 1e:22:de:ef:29:33:b9:54:b8:c1:5e:8c:df:0d:95:fc:0f:c1: c5:15:8d:51:45:46:40:a8:36:fc:29:cf:66:3e:49:20:68:04: 48:7a:5a:3e:d6:3f:bf:d7:62:c3:96:a8:ee:bc:68:48:2b:2b: 21:28:3f:18:0a:d8:25:b9:0f:e6:80:b5:db:e1:12:04:1c:6c: 8e:4e:20:ff:b6:1e:07:37:3b:6a:ad:76:05:cc:3b:7d:0f:5e: 35:b6:2f:c5:5e:04:5f:21:19:30:52:7a:06:da:4e:77:38:83: 9b:6d:6d:77:f0:e2:21:78:bb:02:07:c2:92:53:5d:22:2c:a3: 08:df:d7:fa:c6:b0:c8:2f:df:0c:36:65:23:48:c6:8e:7d:10: 82:1e:e6:7c:f2:c4:f8:02:9f:fd:62:3b:ee:53:e0:93:d9:4f: ef:bf:8a:c9:f4:b8:0e:30:57:84:9c:eb:61:86:80:bd:bd:f0: a4:a6:87:52:3d:1d:c8:37:cc:00:aa:d0:57:1f:48:34:ba:e1: d0:86:c1:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdNTA0qt44UudAvSfJJK0u5c1LYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAxMDMxWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Yzk4ZDExOGFlMWU0ZjI2YjlmM2JjNzdmYzA3ZWM0MGZi Yzg5ZjM5MjZjMWI2ZWVmNjY3NWVkMmFlNjU2NmViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoSaoM2JNEpHjAoipySJGH9SJlFTgSenKxgZywVCtFtA8E 1Y7rpnMUPDd6hqYMj8DG2SPY1ltHsPTGE/ykvcTxIQodZmAj/Csc1k86GN3OZYF7 hlmPH3Yo/iDX2ggr1PWpn6tDkZ8Ml0LxHbUiIbDkc99CckQUXDP3G/iIS50Bi6KA 4tR9aRhmH59lCMLHocByHE84Df2uQ9g5XsOdbULuyknqVuLmclg8XAXcfgRDRLvN QPJyr3W4W+AZJhsE3ios6ggLhussIMomcw84OCZ0dwWVAZzqUjwbXylfn7/Rf0D4 35A4PgTIxWV1perIB4/6JHdfG/zzFyXIzT0QdnuPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMimQsklwnkRz+cwhPlR/j1arWSswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYTZlMmUyLTY0ZWYtNDVlNi1iNmE4LTlhNTgzMGVlMmFkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjJDANBgkqhkiG9w0BAQsFAAOCAQEAeCvhKVMk8Zt/pghJYhc8h6G0xlwY h8pSCCiFkebu1do3Hny0m3kDnwOccbUnZ2A/df6UP6n1HiLe7ykzuVS4wV6M3w2V /A/BxRWNUUVGQKg2/CnPZj5JIGgESHpaPtY/v9diw5ao7rxoSCsrISg/GArYJbkP 5oC12+ESBBxsjk4g/7YeBzc7aq12Bcw7fQ9eNbYvxV4EXyEZMFJ6BtpOdziDm21t d/DiIXi7AgfCklNdIiyjCN/X+sawyC/fDDZlI0jGjn0Qgh7mfPLE+AKf/WI77lPg k9lP77+KyfS4DjBXhJzrYYaAvb3wpKaHUj0dyDfMAKrQVx9INLrh0IbBzw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:52 2025 by rpki-client