$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa File: 22f4d3b0-2537-48ed-bf15-840b585b2b11.roa (raw, json) Hash identifier: MfbhNfLGVMILF9kZ2TWiaXVMlLSSYi4napZzNLgvoSI= Subject key identifier: 67:57:E6:0D:69:20:91:0F:D7:78:7D:0B:93:6F:16:0C:A8:DD:89:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07498C8C0B65A5A78C52AFDA6C129085501A533F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa Signing time: Wed 07 May 2025 00:11:03 +0000 ROA not before: Wed 07 May 2025 00:11:03 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:8c:8c:0b:65:a5:a7:8c:52:af:da:6c:12:90:85:50:1a:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:11:03 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=5cf03bc44dacb81c59e06d7f77a76938b9f08fcc0f16d27fa7e28833f02ba9ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:55:2a:3f:30:5b:fa:39:59:6c:af:c6:11: 72:ce:1d:e8:b0:ab:c0:1d:cc:35:0f:f9:08:bf:89: 27:36:02:f1:4d:3f:77:58:4a:bb:ce:05:c3:d8:ef: 89:e8:21:74:d9:d8:9a:22:f3:2f:5a:45:c1:34:aa: fe:46:b0:ea:c9:ae:a4:9a:6c:94:de:67:40:5e:0a: 0d:38:36:9e:0e:8b:0b:f9:76:df:6a:2f:bc:52:92: d4:53:16:d6:05:a3:36:c0:88:9e:c9:4a:33:b3:73: 0c:3a:33:b9:ec:18:4a:9d:da:55:df:60:0f:0c:8e: 7d:2e:11:70:0c:68:4d:5e:b9:36:82:42:df:f3:75: 1c:5e:c8:5d:2e:55:27:26:82:41:8c:19:51:84:48: 35:bc:81:7a:d2:76:b9:6d:62:b3:44:95:b5:d1:3b: 07:cb:b9:fd:a6:bf:83:ed:1d:9a:21:f5:44:ae:fb: f6:90:96:8e:f1:a6:af:b8:73:43:cd:15:71:80:d8: e5:94:25:ff:62:b3:8d:cb:10:a9:1f:2c:c1:3a:1b: 25:55:19:9b:82:00:35:65:37:2f:98:23:b4:7b:85: e1:d0:5e:e4:ba:f9:f0:d7:18:cb:5e:6d:b4:cc:21: a6:cd:5e:e8:cf:23:48:2a:84:cf:9e:4d:59:b9:62: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:E6:0D:69:20:91:0F:D7:78:7D:0B:93:6F:16:0C:A8:DD:89:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22f4d3b0-2537-48ed-bf15-840b585b2b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.235.0/24 Signature Algorithm: sha256WithRSAEncryption 83:1f:6a:b9:88:68:7b:6e:be:2e:a0:84:1a:20:a3:7f:77:8b: e4:3f:10:1a:82:87:ae:3e:e0:77:16:78:ca:a3:e9:0d:05:db: 03:c3:26:78:59:f8:65:2d:64:3b:f8:ca:d5:3e:eb:bd:ca:41: 9c:1e:f2:98:c0:68:14:84:32:01:a8:8e:dd:f6:31:e8:fa:49: ed:a7:df:c2:88:9e:60:cf:73:a5:53:d5:0d:e0:a8:db:0e:3f: 08:6c:a1:8d:9b:97:b5:0a:1e:52:aa:dc:e3:87:d0:54:b0:c4: de:95:85:ff:eb:3a:82:99:d8:fc:a6:5f:83:9f:e9:13:6b:c7: b3:ce:44:de:60:5b:cd:47:09:62:16:0e:35:50:e2:fa:9f:b5: 4d:19:ef:8e:08:5c:1f:86:63:1d:7d:92:2d:5b:12:97:87:53: 28:dd:f2:68:7e:2f:78:33:46:91:d2:f3:4d:4a:94:31:4c:31: 72:a9:91:df:5a:15:8a:d7:b4:ca:f6:aa:c6:a5:fb:16:20:0e: 4b:bb:27:1c:3f:76:ac:46:70:7f:57:c3:7d:f9:8f:3d:a2:24: 3b:3d:43:67:d5:b3:db:01:48:a1:c0:a2:de:23:1d:8a:ef:7f: 61:4a:5f:49:b1:8a:cd:84:0d:02:9e:12:14:2c:a3:5a:78:10: 1f:85:72:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB0mMjAtlpaeMUq/abBKQhVAaUz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMTAzWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2YwM2JjNDRkYWNiODFjNTllMDZkN2Y3N2E3NjkzOGI5 ZjA4ZmNjMGYxNmQyN2ZhN2UyODgzM2YwMmJhOWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUYVUqPzBb+jlZbK/GEXLOHeiwq8AdzDUP+Qi/iSc2AvFN P3dYSrvOBcPY74noIXTZ2Joi8y9aRcE0qv5GsOrJrqSabJTeZ0BeCg04Np4Oiwv5 dt9qL7xSktRTFtYFozbAiJ7JSjOzcww6M7nsGEqd2lXfYA8Mjn0uEXAMaE1euTaC Qt/zdRxeyF0uVScmgkGMGVGESDW8gXrSdrltYrNElbXROwfLuf2mv4PtHZoh9USu +/aQlo7xpq+4c0PNFXGA2OWUJf9is43LEKkfLME6GyVVGZuCADVlNy+YI7R7heHQ XuS6+fDXGMtebbTMIabNXujPI0gqhM+eTVm5YiIVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ1fmDWkgkQ/XeH0Lk28WDKjdid8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyZjRkM2IwLTI1MzctNDhlZC1iZjE1LTg0MGI1ODViMmIxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3OswDQYJKoZIhvcNAQELBQADggEBAIMfarmIaHtuvi6ghBogo393i+Q/ EBqCh64+4HcWeMqj6Q0F2wPDJnhZ+GUtZDv4ytU+673KQZwe8pjAaBSEMgGojt32 Mej6Se2n38KInmDPc6VT1Q3gqNsOPwhsoY2bl7UKHlKq3OOH0FSwxN6Vhf/rOoKZ 2PymX4Of6RNrx7PORN5gW81HCWIWDjVQ4vqftU0Z744IXB+GYx19ki1bEpeHUyjd 8mh+L3gzRpHS801KlDFMMXKpkd9aFYrXtMr2qsal+xYgDku7Jxw/dqxGcH9Xw335 jz2iJDs9Q2fVs9sBSKHAot4jHYrvf2FKX0mxis2EDQKeEhQso1p4EB+Fcu8= -----END CERTIFICATE-----Generated at Sun May 11 19:11:26 2025 by rpki-client