$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa File: 2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa (raw, json) Hash identifier: HuhnzlNDCy+xbrrGdvj7IhV+62sadfJ3WcLNjz3Tpz0= Subject key identifier: 5F:ED:10:60:29:24:24:58:7A:58:9C:B2:53:CE:BB:CB:C2:A8:E4:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FC588E5FCC99D940A9CE8FF0EC4910BECA226E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa Signing time: Fri 25 Apr 2025 00:20:15 +0000 ROA not before: Fri 25 Apr 2025 00:20:15 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c5:88:e5:fc:c9:9d:94:0a:9c:e8:ff:0e:c4:91:0b:ec:a2:26:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:20:15 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8449cd8b41afd44e028e4a769f88c5ce1f64d9fe61d8cceff7e64129bef04173, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:04:63:21:68:1f:f0:ad:b6:c6:a8:39:fe: 45:29:f9:27:dc:17:2b:ad:70:b3:97:2c:d6:1e:ad: 2d:29:49:4b:01:82:fa:7d:7e:89:25:a4:ff:d2:65: de:24:e4:fa:e9:86:4b:d0:76:a1:1e:2b:02:ef:7c: 48:5f:eb:3d:ad:f5:03:9a:d0:dc:5c:0e:b5:ab:2e: d8:ee:7b:27:21:56:c7:7e:af:18:ce:88:20:7b:c1: cd:f6:3d:b9:88:89:f4:49:d6:d2:72:78:9d:41:76: 3a:76:79:8f:0b:23:2c:38:5b:92:3b:81:44:32:41: 94:83:2c:93:4c:57:07:49:e8:f9:a4:e6:5b:67:10: 4e:fb:f3:d8:ae:80:f7:cf:cb:d1:08:ef:5c:67:35: 21:46:66:3d:71:2d:2b:a4:dd:8c:b5:bf:b9:d3:42: 59:b2:c3:2f:2f:72:94:37:6e:94:7a:6b:65:fb:48: 13:3d:5e:8c:d2:12:37:fc:9d:11:f1:89:20:73:cf: f9:af:3d:be:28:9f:6a:47:82:12:dc:9d:36:74:41: 11:59:d2:76:bf:d1:4c:3f:9f:3e:b2:33:4e:c8:af: a3:c6:3a:da:9e:0a:22:11:6d:c1:4c:42:de:46:48: 36:16:fa:07:68:f1:ea:93:39:c8:a0:eb:85:d4:24: 72:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:10:60:29:24:24:58:7A:58:9C:B2:53:CE:BB:CB:C2:A8:E4:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bdaf169-4fbb-49ff-aba9-b2618670f6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6b:1e:a2:ac:f0:b7:42:32:d2:83:81:c4:9a:d2:43:e3:e5:05: 54:29:e1:f8:5c:be:e8:36:ac:c8:d7:41:4c:7a:a9:b0:91:4d: 3e:0e:1a:08:95:01:ea:37:35:1c:2a:71:96:b4:bf:3d:1e:95: 60:a6:24:04:d9:7b:fe:13:b2:ca:f4:f6:90:55:6f:86:74:f4: e0:f0:e6:3f:0f:d2:57:72:5b:29:d5:32:f9:a7:ec:bf:1e:93: 33:a7:f6:6e:b4:24:98:28:a7:97:7b:0c:bf:30:12:29:ff:d5: 06:fd:44:24:bd:09:66:e3:42:3f:e7:e9:14:79:c0:90:0e:41: cc:84:12:8c:ad:d4:01:96:ee:a3:ea:dc:0f:b4:59:ba:67:ce: df:3a:a1:31:69:47:50:00:9c:f5:1a:2c:70:cd:32:eb:08:ef: d3:97:e5:28:5d:05:e0:96:ee:0a:0b:dd:6d:ca:1f:19:ab:9e: de:ea:b4:12:84:66:e2:5b:7b:38:e7:a1:8d:f4:19:6b:16:3a: 6c:57:76:89:4b:99:6d:83:d1:d6:1f:c4:92:ab:08:4a:62:93: 97:0c:69:8e:5b:ef:02:4b:d3:5d:5a:ac:81:c6:7d:ec:3b:87: 34:fb:df:e6:b0:74:1e:1f:d9:af:66:de:53:c0:23:34:ce:d6: 87:6d:fd:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX8WI5fzJnZQKnOj/DsSRC+yiJuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMDE1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDQ5Y2Q4YjQxYWZkNDRlMDI4ZTRhNzY5Zjg4YzVjZTFm NjRkOWZlNjFkOGNjZWZmN2U2NDEyOWJlZjA0MTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxwARjIWgf8K22xqg5/kUp+SfcFyutcLOXLNYerS0pSUsB gvp9foklpP/SZd4k5PrphkvQdqEeKwLvfEhf6z2t9QOa0NxcDrWrLtjueychVsd+ rxjOiCB7wc32PbmIifRJ1tJyeJ1Bdjp2eY8LIyw4W5I7gUQyQZSDLJNMVwdJ6Pmk 5ltnEE7789iugPfPy9EI71xnNSFGZj1xLSuk3Yy1v7nTQlmywy8vcpQ3bpR6a2X7 SBM9XozSEjf8nRHxiSBzz/mvPb4on2pHghLcnTZ0QRFZ0na/0Uw/nz6yM07Ir6PG OtqeCiIRbcFMQt5GSDYW+gdo8eqTOcig64XUJHLhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX+0QYCkkJFh6WJyyU867y8Ko5H4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZGFmMTY5LTRmYmItNDlmZi1hYmE5LWIyNjE4NjcwZjZjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfM7IAwDQYJKoZIhvcNAQELBQADggEBAGseoqzwt0Iy0oOBxJrSQ+PlBVQp 4fhcvug2rMjXQUx6qbCRTT4OGgiVAeo3NRwqcZa0vz0elWCmJATZe/4Tssr09pBV b4Z09ODw5j8P0ldyWynVMvmn7L8ekzOn9m60JJgop5d7DL8wEin/1Qb9RCS9CWbj Qj/n6RR5wJAOQcyEEoyt1AGW7qPq3A+0Wbpnzt86oTFpR1AAnPUaLHDNMusI79OX 5ShdBeCW7goL3W3KHxmrnt7qtBKEZuJbezjnoY30GWsWOmxXdolLmW2D0dYfxJKr CEpik5cMaY5b7wJL011arIHGfew7hzT73+awdB4f2a9m3lPAIzTO1odt/as= -----END CERTIFICATE-----Generated at Tue May 13 18:58:35 2025 by rpki-client