$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b7d941-1ac7-43d4-b920-75a6c88d6532.roa File: 22b7d941-1ac7-43d4-b920-75a6c88d6532.roa (raw, json) Hash identifier: 9i2aQdwJqsCXTGmicUh5qpL1V6yoy8h7fdxMLmnAnOw= Subject key identifier: 3D:A3:E0:31:09:14:3A:46:08:37:06:27:0F:2A:B5:6E:75:D4:C3:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 043C68B9B7653BA4A5EFC728BAC95839EB45229D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b7d941-1ac7-43d4-b920-75a6c88d6532.roa Signing time: Mon 28 Apr 2025 15:11:05 +0000 ROA not before: Mon 28 Apr 2025 15:11:05 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3c:68:b9:b7:65:3b:a4:a5:ef:c7:28:ba:c9:58:39:eb:45:22:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:11:05 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=b2a44a24dc3efe98d88878146bbaec1763ad61160f9a44c5cd89de656380daa1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:ff:70:fd:0f:e4:49:1d:c0:b2:33:0d:52: 5f:4e:75:77:01:a7:34:a9:fc:f1:4f:76:11:19:2a: 5b:82:f6:ce:04:71:18:76:8f:ba:18:86:c0:4d:be: 44:04:81:03:d8:2c:10:f8:00:3e:76:d9:07:a4:ca: a4:0d:78:86:35:cc:70:ce:1a:ec:b3:8b:43:b1:f2: 64:c5:ef:e8:ca:b1:65:77:95:65:8c:a7:9b:5f:00: 2e:eb:58:53:8b:cb:92:b5:d7:2a:83:cf:61:5f:04: 3a:74:84:0d:37:2a:bd:da:2f:e4:76:80:73:87:b4: ab:3f:6f:13:86:1e:47:a3:b6:00:f5:51:45:13:60: 46:a6:4c:02:19:e5:74:bb:eb:29:e1:ee:20:02:dd: 1a:32:7b:f3:51:6d:4c:0f:bb:8a:e9:1e:96:7f:27: 4c:75:2e:48:fb:de:7f:f6:87:58:02:43:27:28:ad: 94:3d:a4:4a:a0:0c:62:b8:eb:09:33:8b:32:c9:fc: e6:82:99:86:94:b2:74:9a:1a:a1:3b:b5:76:4a:07: ce:df:97:9c:00:94:b3:cb:ef:5b:42:ce:c1:a0:6b: 59:e5:f0:2a:46:d8:53:3f:d8:ee:86:e0:ed:18:d4: be:43:26:b1:5a:4a:86:1d:46:8e:22:dd:c6:31:6e: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A3:E0:31:09:14:3A:46:08:37:06:27:0F:2A:B5:6E:75:D4:C3:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b7d941-1ac7-43d4-b920-75a6c88d6532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption 92:4a:15:b6:e7:a8:1e:63:60:d5:dd:a4:43:8b:d6:d0:35:43: b4:5b:fe:64:81:7a:a5:31:13:4e:38:42:97:36:ad:a0:97:82: 6a:f1:39:fb:e0:d8:86:fb:d1:cb:9f:3e:1c:36:f0:a4:45:ac: b9:2e:d0:0c:27:87:be:54:9e:28:01:cc:95:6c:b0:dc:3a:86: b3:b2:48:9a:a6:b2:6f:61:f3:62:06:48:29:d4:35:27:5e:34: 15:8c:b7:54:72:00:e1:c8:c3:ef:5d:40:35:70:75:65:71:fb: 21:17:70:e2:2d:5b:6a:3d:f4:3a:ef:6d:98:85:f2:95:24:83: 88:af:34:db:21:9f:95:dc:ae:94:3d:85:f4:a0:5b:4a:82:ac: f8:8a:55:d4:5c:c7:ab:41:6a:e4:55:31:ce:9e:73:95:8d:e4: 81:fb:2a:58:ff:52:45:78:98:fe:d0:a3:89:de:42:fb:ea:72: 0a:f3:8b:ed:81:5c:49:ee:20:00:bd:ab:62:96:0a:80:7b:13: 60:56:2c:6b:6d:ba:2b:21:2c:f1:cc:67:b8:ab:1c:f8:18:f8: 1a:96:49:c1:f9:8d:93:68:30:fc:e9:85:70:24:6b:15:08:83: 81:92:06:28:92:8f:9d:65:3c:82:e8:20:d3:df:86:1d:5d:cb: 82:0f:be:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBDxoubdlO6Sl78couslYOetFIp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMTA1WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmE0NGEyNGRjM2VmZTk4ZDg4ODc4MTQ2YmJhZWMxNzYz YWQ2MTE2MGY5YTQ0YzVjZDg5ZGU2NTYzODBkYWExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK1f9w/Q/kSR3AsjMNUl9OdXcBpzSp/PFPdhEZKluC9s4E cRh2j7oYhsBNvkQEgQPYLBD4AD522QekyqQNeIY1zHDOGuyzi0Ox8mTF7+jKsWV3 lWWMp5tfAC7rWFOLy5K11yqDz2FfBDp0hA03Kr3aL+R2gHOHtKs/bxOGHkejtgD1 UUUTYEamTAIZ5XS76ynh7iAC3Roye/NRbUwPu4rpHpZ/J0x1Lkj73n/2h1gCQyco rZQ9pEqgDGK46wkzizLJ/OaCmYaUsnSaGqE7tXZKB87fl5wAlLPL71tCzsGga1nl 8CpG2FM/2O6G4O0Y1L5DJrFaSoYdRo4i3cYxbtqlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPaPgMQkUOkYINwYnDyq1bnXUw2IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYjdkOTQxLTFhYzctNDNkNC1iOTIwLTc1YTZjODhkNjUzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAJJKFbbnqB5jYNXdpEOL1tA1Q7Rb /mSBeqUxE044Qpc2raCXgmrxOfvg2Ib70cufPhw28KRFrLku0Awnh75UnigBzJVs sNw6hrOySJqmsm9h82IGSCnUNSdeNBWMt1RyAOHIw+9dQDVwdWVx+yEXcOItW2o9 9DrvbZiF8pUkg4ivNNshn5XcrpQ9hfSgW0qCrPiKVdRcx6tBauRVMc6ec5WN5IH7 Klj/UkV4mP7Qo4neQvvqcgrzi+2BXEnuIAC9q2KWCoB7E2BWLGttuishLPHMZ7ir HPgY+BqWScH5jZNoMPzphXAkaxUIg4GSBiiSj51lPILoINPfhh1dy4IPvvc= -----END CERTIFICATE-----Generated at Sat May 10 07:18:09 2025 by rpki-client