$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13970ea4-f118-48e5-8fdb-916f9a7e0989.roa File: 13970ea4-f118-48e5-8fdb-916f9a7e0989.roa (raw, json) Hash identifier: 0pI6S/kGQN1eb7Rj2cEVa4Zd565L9UZaPk4aBZPyqGY= Subject key identifier: C6:AB:44:40:A3:CB:F1:39:84:6B:06:E7:B2:60:72:D4:54:16:6A:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A55A98E4A01B6833E9C53ECF49A0D88EE0A2D9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13970ea4-f118-48e5-8fdb-916f9a7e0989.roa Signing time: Fri 25 Apr 2025 00:20:19 +0000 ROA not before: Fri 25 Apr 2025 00:20:19 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:a9:8e:4a:01:b6:83:3e:9c:53:ec:f4:9a:0d:88:ee:0a:2d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:20:19 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=db718ae8a02a9fb2d08c40936a0b3ecb98917c49665445b337818439f90818a7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:58:f2:03:0f:08:d4:93:a0:e9:20:43:0e: 57:04:f5:9b:b1:12:4a:59:e4:4d:8b:38:3d:d3:37: b2:3e:ec:13:e8:a1:31:64:c9:a9:c1:10:75:f8:d7: 7e:2f:a7:71:59:45:2b:54:02:9c:94:e7:b6:96:61: 17:be:d1:f1:c3:23:db:97:38:4d:8c:d8:a7:56:0f: 12:31:45:df:69:11:c4:16:17:20:25:3b:16:ab:b5: f6:32:15:11:05:02:4e:e8:4b:58:ca:99:22:93:9a: 07:b8:29:5f:bb:6e:a7:4e:ba:85:50:1f:33:88:16: 85:6b:cc:a8:21:ea:43:23:c4:7c:82:0c:38:a4:21: 78:a0:70:b8:a5:50:d7:45:fb:76:5c:3d:cc:72:62: 9a:17:6e:d7:d1:21:3a:46:22:7c:ba:34:9d:c6:63: 8e:db:ff:2d:12:72:7a:cb:b4:e9:c2:19:17:53:f6: 70:46:1b:b8:7b:d7:11:38:72:9a:fd:cb:9c:23:c5: 76:23:b3:11:01:d3:61:3b:12:fb:b8:47:4e:ff:2b: 2b:50:02:28:42:db:97:42:00:95:e9:e3:01:eb:6b: 06:4c:46:a9:95:8a:70:cc:9d:43:73:1a:8f:d3:81: 14:11:57:b8:bc:9b:cf:0a:eb:49:34:80:df:c9:82: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:44:40:A3:CB:F1:39:84:6B:06:E7:B2:60:72:D4:54:16:6A:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13970ea4-f118-48e5-8fdb-916f9a7e0989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.128.0/18 Signature Algorithm: sha256WithRSAEncryption 68:ed:5b:51:07:3b:a1:1b:88:a7:44:7e:aa:23:d0:7f:c7:af: 41:58:6b:78:2e:2b:69:c5:db:5f:a4:29:42:a1:06:f1:1c:14: bf:7a:3f:6e:28:6b:36:40:09:13:c2:29:69:bd:bd:d9:91:0d: 0f:38:2e:18:3d:a6:cc:61:d6:83:c8:eb:45:1e:49:8a:1d:0b: 8d:61:5b:6b:5e:38:9d:3a:9d:11:f2:58:bf:cb:23:0d:6b:c6: 3d:e3:c4:fb:5a:45:7b:fd:4e:2f:08:67:83:13:38:df:29:37: ff:f0:c0:80:4a:a7:a0:a7:e5:cb:7c:4b:64:c5:4c:d9:de:17: 9f:cd:61:be:4b:8f:13:95:b9:d4:6f:5f:71:2f:7f:c2:68:52: f3:53:e0:81:fb:32:94:0f:49:97:05:84:9e:fd:f4:ee:37:3e: 10:9a:30:ca:ba:f6:e2:68:3f:4f:70:2e:27:18:cc:b6:30:88: 14:51:27:fb:bf:07:5f:de:f6:ac:28:70:80:d3:b4:55:44:fe: 9b:b7:9d:c8:97:28:5d:58:bb:0b:44:c5:15:8d:cd:88:96:24: 53:99:10:fe:84:90:1d:1d:fe:21:bf:c2:bf:c2:92:c7:f2:65: f2:00:76:c1:49:49:88:48:aa:49:eb:62:3f:34:84:76:26:e3: ca:39:1f:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUClWpjkoBtoM+nFPs9JoNiO4KLZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMDE5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjcxOGFlOGEwMmE5ZmIyZDA4YzQwOTM2YTBiM2VjYjk4 OTE3YzQ5NjY1NDQ1YjMzNzgxODQzOWY5MDgxOGE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0GFjyAw8I1JOg6SBDDlcE9ZuxEkpZ5E2LOD3TN7I+7BPo oTFkyanBEHX4134vp3FZRStUApyU57aWYRe+0fHDI9uXOE2M2KdWDxIxRd9pEcQW FyAlOxartfYyFREFAk7oS1jKmSKTmge4KV+7bqdOuoVQHzOIFoVrzKgh6kMjxHyC DDikIXigcLilUNdF+3ZcPcxyYpoXbtfRITpGIny6NJ3GY47b/y0ScnrLtOnCGRdT 9nBGG7h71xE4cpr9y5wjxXYjsxEB02E7Evu4R07/KytQAihC25dCAJXp4wHrawZM RqmVinDMnUNzGo/TgRQRV7i8m88K60k0gN/Jgm3LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxqtEQKPL8TmEawbnsmBy1FQWaigwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzOTcwZWE0LWYxMTgtNDhlNS04ZmRiLTkxNmY5YTdlMDk4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbM7IAwDQYJKoZIhvcNAQELBQADggEBAGjtW1EHO6EbiKdEfqoj0H/Hr0FY a3guK2nF21+kKUKhBvEcFL96P24oazZACRPCKWm9vdmRDQ84Lhg9psxh1oPI60Ue SYodC41hW2teOJ06nRHyWL/LIw1rxj3jxPtaRXv9Ti8IZ4MTON8pN//wwIBKp6Cn 5ct8S2TFTNneF5/NYb5LjxOVudRvX3Evf8JoUvNT4IH7MpQPSZcFhJ799O43PhCa MMq69uJoP09wLicYzLYwiBRRJ/u/B1/e9qwocIDTtFVE/pu3nciXKF1YuwtExRWN zYiWJFOZEP6EkB0d/iG/wr/CksfyZfIAdsFJSYhIqknrYj80hHYm48o5H+Y= -----END CERTIFICATE-----Generated at Mon May 5 07:01:02 2025 by rpki-client