$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05112af9-edc2-463f-88f6-9c849e7e66a0.roa File: 05112af9-edc2-463f-88f6-9c849e7e66a0.roa (raw, json) Hash identifier: bBwDYHgWPHZFTDxppJgbG6QeI7b0VYXojwAByEl2kO0= Subject key identifier: B5:62:0F:70:57:9C:CD:53:9D:0F:BB:34:45:10:0C:C3:B3:88:10:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06C36D7D6D842CEDB59CDA30B6DD76D17B98C449 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05112af9-edc2-463f-88f6-9c849e7e66a0.roa Signing time: Mon 05 May 2025 15:22:21 +0000 ROA not before: Mon 05 May 2025 15:22:21 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c3:6d:7d:6d:84:2c:ed:b5:9c:da:30:b6:dd:76:d1:7b:98:c4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:22:21 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=cca02581ec4c050bc7952cfab24bd1f3759cadda5ce574e213e84605ef0bbf3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:d8:94:45:ee:7a:68:86:58:19:ef:e2:a5: 71:94:73:e9:9b:63:33:8d:90:99:3a:c1:73:bb:e6: c8:da:3a:4b:eb:63:6c:38:71:4f:dd:bf:38:94:c8: 7d:e1:c3:7b:9d:fa:ea:d5:ce:78:fc:62:1c:47:f1: 8a:5e:ca:e4:c0:66:44:fd:be:ec:56:53:99:31:a2: bd:73:51:2d:2d:ae:d0:3b:e5:00:0b:17:4d:9d:56: 88:77:fe:c9:d5:26:b2:e6:fa:3f:b7:39:50:84:13: d9:b7:8a:27:bf:5a:5b:ec:71:ce:53:e0:8f:1d:2f: b7:35:03:f0:0b:1f:2f:45:23:f7:3d:56:9b:47:c3: bd:bc:bf:a4:60:ce:6e:1e:6f:22:07:1b:ec:5b:44: 1b:91:d6:8c:dd:a0:50:31:83:fe:38:5e:d0:82:3a: f5:ce:9f:ad:c8:a4:a9:77:7c:8a:14:bc:68:84:ea: 93:83:d8:2a:ee:1d:ba:68:24:b6:1e:fe:5e:34:e5: bc:45:44:63:14:cd:c4:5a:22:bb:6b:e1:8f:08:62: 92:20:e2:d0:7d:5e:e2:31:e5:37:f9:2e:4b:96:84: 10:cc:3a:ab:bd:4f:e2:fe:5b:37:a1:a2:1e:43:7e: 09:72:7f:f0:9f:04:b4:7e:d3:d1:35:ad:0d:ac:05: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:0F:70:57:9C:CD:53:9D:0F:BB:34:45:10:0C:C3:B3:88:10:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05112af9-edc2-463f-88f6-9c849e7e66a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:05:bb:ef:ce:cc:d8:b9:ea:48:46:72:ec:e5:d3:dc:93:84: 74:f2:eb:3a:d4:20:86:97:e6:4c:59:fe:d1:e6:4f:b5:5e:97: 39:c6:fd:b6:75:e9:47:96:13:94:9b:95:57:76:f4:3c:a3:a1: 2b:ab:7d:1b:11:ef:72:dd:fb:60:83:0b:b6:3a:34:b9:80:3b: e3:57:c2:3c:08:16:fc:04:22:7f:2d:8a:ea:ac:e8:46:9e:ff: 93:9d:0c:c6:1c:15:93:c1:9f:55:58:75:54:7a:d0:b1:e4:59: a4:05:fe:91:24:74:8c:45:2c:f3:e8:a9:cd:6d:56:35:2b:50: 33:36:50:b2:30:b7:1c:3a:b7:2d:4b:b9:99:11:d9:69:81:7c: 82:98:5e:d6:17:3f:6b:42:82:5c:d1:0f:02:d7:18:f9:52:8e: 5b:5f:b8:ca:86:d7:ba:31:20:c2:2b:35:8d:41:7d:5e:ba:ec: 6b:fd:f8:7f:c5:c0:0f:f5:4f:5d:01:cb:7a:ce:d0:13:16:7b: 7b:6c:ee:43:43:a5:04:f9:60:98:d7:d1:20:b2:cb:4e:3c:63: 48:c5:cb:0c:7f:0f:d5:73:a4:e0:d0:35:1c:f6:e6:9d:66:51: 13:17:aa:a3:e9:1d:9d:c3:02:9a:92:1c:78:74:62:78:78:5e: 47:bb:16:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBsNtfW2ELO21nNowtt120XuYxEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUyMjIxWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2EwMjU4MWVjNGMwNTBiYzc5NTJjZmFiMjRiZDFmMzc1 OWNhZGRhNWNlNTc0ZTIxM2U4NDYwNWVmMGJiZjNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR7diURe56aIZYGe/ipXGUc+mbYzONkJk6wXO75sjaOkvr Y2w4cU/dvziUyH3hw3ud+urVznj8YhxH8YpeyuTAZkT9vuxWU5kxor1zUS0trtA7 5QALF02dVoh3/snVJrLm+j+3OVCEE9m3iie/Wlvscc5T4I8dL7c1A/ALHy9FI/c9 VptHw728v6Rgzm4ebyIHG+xbRBuR1ozdoFAxg/44XtCCOvXOn63IpKl3fIoUvGiE 6pOD2CruHbpoJLYe/l405bxFRGMUzcRaIrtr4Y8IYpIg4tB9XuIx5Tf5LkuWhBDM Oqu9T+L+Wzehoh5Dfglyf/CfBLR+09E1rQ2sBVsDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtWIPcFeczVOdD7s0RRAMw7OIEOowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1MTEyYWY5LWVkYzItNDYzZi04OGY2LTljODQ5ZTdlNjZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EQwDQYJKoZIhvcNAQELBQADggEBAFsFu+/OzNi56khGcuzl09yThHTy 6zrUIIaX5kxZ/tHmT7VelznG/bZ16UeWE5SblVd29DyjoSurfRsR73Ld+2CDC7Y6 NLmAO+NXwjwIFvwEIn8tiuqs6Eae/5OdDMYcFZPBn1VYdVR60LHkWaQF/pEkdIxF LPPoqc1tVjUrUDM2ULIwtxw6ty1LuZkR2WmBfIKYXtYXP2tCglzRDwLXGPlSjltf uMqG17oxIMIrNY1BfV667Gv9+H/FwA/1T10By3rO0BMWe3ts7kNDpQT5YJjX0SCy y048Y0jFywx/D9VzpODQNRz25p1mURMXqqPpHZ3DApqSHHh0Ynh4Xke7Fpk= -----END CERTIFICATE-----Generated at Mon May 5 20:17:10 2025 by rpki-client