$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa File: 3a08c855-4cd4-4fa5-b780-8a773463b987.roa (raw, json) Hash identifier: xgWoeXwM5JW2c6JzT3/JoQ39dA5CdM7ecvZl7qe4kPo= Subject key identifier: E6:2C:01:25:10:F0:B1:4F:5E:DA:85:E4:09:EF:40:B7:5A:91:56:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62537322EC5AE077BD648680EE5468CB37D65FA1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa Signing time: Tue 06 May 2025 00:10:52 +0000 ROA not before: Tue 06 May 2025 00:10:52 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.148.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:53:73:22:ec:5a:e0:77:bd:64:86:80:ee:54:68:cb:37:d6:5f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:10:52 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=185d9f218c89e04b7dd2de87a18ecb92ee2b604aede64ed2cb077a401c9967ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4f:7b:fd:22:13:69:ae:92:e1:37:3a:18:78: 2a:41:bc:08:31:51:8a:69:3a:4b:a3:43:2a:7f:5f: 45:12:15:fb:61:40:e6:1e:a5:e5:ff:10:02:96:05: 9b:e6:4d:e7:01:b2:e6:77:17:96:e6:43:50:09:11: 8b:c5:d1:27:c5:7f:40:a1:fc:42:f8:20:a3:43:46: 51:5d:ab:a1:9b:a4:d2:17:fd:81:6c:86:6d:63:3c: 1a:b8:59:18:b9:41:ee:3f:16:32:9b:2b:fe:60:59: e6:9f:bb:69:1b:8a:28:49:2e:f8:43:57:40:d6:95: 72:b1:2c:2f:0c:34:1e:2d:be:e9:d9:34:53:bd:34: 1a:ef:1e:19:a0:f7:99:1e:18:8f:a5:6e:82:82:e0: f9:16:99:ab:97:92:fa:04:43:93:38:95:0e:47:0d: 79:79:c2:71:f2:a9:33:69:65:ae:97:81:6a:cb:02: 18:40:08:f3:32:66:b1:95:17:37:a5:04:11:fd:ea: e3:21:80:23:cb:9e:15:c6:cd:ac:f8:9c:84:17:d8: 56:43:46:a9:6a:39:bf:4f:b4:45:83:81:fd:1e:d0: 88:fd:67:35:26:dc:41:e0:c5:bd:a3:d2:e1:a8:ee: 4b:b8:23:c6:b4:41:8e:89:fd:a3:49:7f:73:c6:55: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2C:01:25:10:F0:B1:4F:5E:DA:85:E4:09:EF:40:B7:5A:91:56:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.16.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:c3:11:a1:46:1e:04:96:72:5c:5e:d1:7b:dd:2d:19:51:f4: d0:61:50:93:5f:3b:03:09:3b:a6:d6:49:f8:4b:3d:db:ea:a4: a5:d2:72:11:95:1a:73:35:77:35:cc:92:85:ac:3a:f3:31:97: 4a:d8:81:60:f1:54:22:06:80:7d:90:b8:b7:90:17:1a:e8:94: b3:0f:2d:44:bf:7b:e1:91:82:76:01:d8:c6:86:ee:88:37:c3: 18:c7:a2:18:af:0e:7b:05:90:3b:a3:95:3d:6a:a7:ed:5b:02: a7:b9:78:99:7e:69:a5:bf:1e:f8:07:46:25:b6:57:70:5a:a1: e5:6b:39:9f:55:49:78:9d:ab:25:bf:63:21:54:6d:bb:b7:c3: 62:23:a6:32:da:b9:7b:41:34:e7:2e:ca:af:c1:c9:88:6a:78: 03:42:db:45:c1:4a:04:ee:20:67:88:7e:89:7e:6b:48:27:c3: 07:94:6a:89:32:35:3c:fe:ed:a1:10:e1:23:ba:c2:7c:bd:b6: 45:1f:b2:bc:91:b8:c3:d3:08:af:22:36:80:03:99:5f:d1:72: 9d:6e:8d:b3:5b:1f:dc:6b:7c:bb:a4:10:cc:22:8f:f4:a4:9b: 37:c7:f8:11:33:c2:86:c1:21:28:26:b1:74:d0:08:57:a7:14: b0:a3:7e:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYlNzIuxa4He9ZIaA7lRoyzfWX6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA2MDAxMDUyWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODVkOWYyMThjODllMDRiN2RkMmRlODdhMThlY2I5MmVl MmI2MDRhZWRlNjRlZDJjYjA3N2E0MDFjOTk2N2FlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdT3v9IhNprpLhNzoYeCpBvAgxUYppOkujQyp/X0USFfth QOYepeX/EAKWBZvmTecBsuZ3F5bmQ1AJEYvF0SfFf0Ch/EL4IKNDRlFdq6GbpNIX /YFshm1jPBq4WRi5Qe4/FjKbK/5gWeafu2kbiihJLvhDV0DWlXKxLC8MNB4tvunZ NFO9NBrvHhmg95keGI+lboKC4PkWmauXkvoEQ5M4lQ5HDXl5wnHyqTNpZa6XgWrL AhhACPMyZrGVFzelBBH96uMhgCPLnhXGzaz4nIQX2FZDRqlqOb9PtEWDgf0e0Ij9 ZzUm3EHgxb2j0uGo7ku4I8a0QY6J/aNJf3PGVQVNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5iwBJRDwsU9e2oXkCe9At1qRVg0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhMDhjODU1LTRjZDQtNGZhNS1iNzgwLThhNzczNDYzYjk4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASXlBAwDQYJKoZIhvcNAQELBQADggEBAI/DEaFGHgSWclxe0XvdLRlR9NBh UJNfOwMJO6bWSfhLPdvqpKXSchGVGnM1dzXMkoWsOvMxl0rYgWDxVCIGgH2QuLeQ FxrolLMPLUS/e+GRgnYB2MaG7og3wxjHohivDnsFkDujlT1qp+1bAqe5eJl+aaW/ HvgHRiW2V3BaoeVrOZ9VSXidqyW/YyFUbbu3w2IjpjLauXtBNOcuyq/ByYhqeANC 20XBSgTuIGeIfol+a0gnwweUaokyNTz+7aEQ4SO6wny9tkUfsryRuMPTCK8iNoAD mV/Rcp1ujbNbH9xrfLukEMwij/SkmzfH+BEzwobBISgmsXTQCFenFLCjfns= -----END CERTIFICATE-----Generated at Sun May 11 15:39:46 2025 by rpki-client