$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa File: f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa (raw, json) Hash identifier: Qaj1+v224BqFpCauvKYrXq0fakeHS1rBjIpRgIz/KkQ= Subject key identifier: 46:D3:83:68:12:F7:85:8A:C6:20:63:78:F5:93:86:98:44:11:D4:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A911AF520A74849550EC5627C0FD6DE04D4A899 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa Signing time: Tue 20 May 2025 00:20:31 +0000 ROA not before: Tue 20 May 2025 00:20:31 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 216.182.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:91:1a:f5:20:a7:48:49:55:0e:c5:62:7c:0f:d6:de:04:d4:a8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:20:31 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=d4abb5b4aec6fef2f933d190f455ffd2f6e1370f9bc7faced52efa73fdaff02e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:69:c5:12:14:d9:10:8c:5c:8b:ac:4c:ae: ed:90:b7:1b:5e:b7:9f:c7:6f:e9:e4:31:6b:e9:1f: ae:c8:d8:ac:8b:0f:9e:91:49:45:ba:3d:3c:00:b3: 6f:93:51:5e:05:ae:ec:aa:f4:07:2a:c3:12:63:4b: cd:69:e6:7c:1c:19:ae:04:5a:c8:dc:bb:42:bd:98: 4d:d7:42:bf:91:7b:3f:18:6a:45:cb:0f:d1:ed:63: 3f:f0:b8:16:c2:7f:ca:d5:06:c2:75:31:a0:41:fd: 09:f0:dd:8b:80:24:15:df:7e:e4:a9:5f:f9:12:7a: 08:9c:e9:fd:72:d4:cc:6a:98:2e:b5:e4:ad:29:dd: 80:fa:18:ca:9b:bc:33:67:1c:26:8e:28:0a:03:c6: d3:c4:be:f8:8e:9c:cd:e5:a7:6b:c6:e4:54:0f:b7: 13:f4:06:bf:91:d5:70:a4:39:76:a6:5e:5c:6b:92: 77:ce:e2:0e:8d:3d:c4:5e:55:20:21:11:a9:9b:ca: 60:71:47:2a:63:a0:cf:e6:fc:87:5d:84:9e:cb:c4: 72:92:a7:63:fc:d5:ed:1a:4c:44:5f:cd:7d:a0:fd: fe:63:8b:34:c7:25:4b:e8:f1:51:ae:90:5b:5e:68: 87:bf:21:a1:a3:28:a9:ce:39:11:d9:09:8a:fd:38: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D3:83:68:12:F7:85:8A:C6:20:63:78:F5:93:86:98:44:11:D4:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.232.0/22 Signature Algorithm: sha256WithRSAEncryption b4:a8:d4:c4:6c:b7:d0:43:d7:d7:d5:e5:b9:eb:ab:3d:6c:66: af:97:ac:a0:7b:9a:bf:68:41:1b:4d:16:3c:be:a1:a9:88:78: 7b:76:08:5e:d7:e2:1e:89:43:d7:14:3c:41:b1:5b:e3:58:45: 5d:e0:ce:04:c6:23:1b:6c:f9:58:17:fc:04:38:39:e4:3d:d4: 7c:d1:24:cb:1a:e0:fb:7f:a7:eb:88:dd:59:c8:d2:4b:72:65: cf:53:ba:ad:e5:ea:5c:a7:26:22:33:d5:7b:92:c7:84:e4:4f: 43:9a:19:87:7b:9a:f9:5a:7a:36:2c:49:9a:0e:fd:fb:0a:58: cc:2f:20:5d:35:b3:ec:d7:97:61:bb:66:e0:35:01:84:f8:01: ce:8d:f5:86:92:d8:43:6b:36:df:88:eb:9e:81:5a:53:e8:9d: 33:31:b7:bf:38:e0:4d:93:c3:1d:77:77:a1:2c:ab:a5:39:2a: 79:58:85:e8:36:0e:c7:c8:09:05:fc:e7:bd:7b:5c:15:fe:23: 0f:da:a1:38:55:fb:92:19:58:29:dd:96:a2:2f:fb:38:7a:7f: 4f:a6:35:be:cd:e4:96:39:5f:2d:e9:90:a8:a7:f8:5a:01:b3: d3:ce:25:bd:79:b1:1d:25:cc:41:17:4b:00:1b:50:75:d3:30: de:1a:35:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGpEa9SCnSElVDsVifA/W3gTUqJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAyMDMxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGFiYjViNGFlYzZmZWYyZjkzM2QxOTBmNDU1ZmZkMmY2 ZTEzNzBmOWJjN2ZhY2VkNTJlZmE3M2ZkYWZmMDJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCli2nFEhTZEIxci6xMru2Qtxtet5/Hb+nkMWvpH67I2KyL D56RSUW6PTwAs2+TUV4Fruyq9AcqwxJjS81p5nwcGa4EWsjcu0K9mE3XQr+Rez8Y akXLD9HtYz/wuBbCf8rVBsJ1MaBB/Qnw3YuAJBXffuSpX/kSegic6f1y1MxqmC61 5K0p3YD6GMqbvDNnHCaOKAoDxtPEvviOnM3lp2vG5FQPtxP0Br+R1XCkOXamXlxr knfO4g6NPcReVSAhEambymBxRypjoM/m/IddhJ7LxHKSp2P81e0aTERfzX2g/f5j izTHJUvo8VGukFteaIe/IaGjKKnOORHZCYr9OCtZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURtODaBL3hYrGIGN49ZOGmEQR1HEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2ZGYwOTM5LTdjYzMtNDE5Ni1iNGVhLWQ0MWQ0ZmI0NDMxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALYtugwDQYJKoZIhvcNAQELBQADggEBALSo1MRst9BD19fV5bnrqz1sZq+X rKB7mr9oQRtNFjy+oamIeHt2CF7X4h6JQ9cUPEGxW+NYRV3gzgTGIxts+VgX/AQ4 OeQ91HzRJMsa4Pt/p+uI3VnI0ktyZc9Tuq3l6lynJiIz1XuSx4TkT0OaGYd7mvla ejYsSZoO/fsKWMwvIF01s+zXl2G7ZuA1AYT4Ac6N9YaS2ENrNt+I656BWlPonTMx t7844E2Twx13d6Esq6U5KnlYheg2DsfICQX85717XBX+Iw/aoThV+5IZWCndlqIv +zh6f0+mNb7N5JY5Xy3pkKin+FoBs9POJb15sR0lzEEXSwAbUHXTMN4aNXI= -----END CERTIFICATE-----Generated at Sun Jun 1 04:52:17 2025 by rpki-client