$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa File: 4581aa7e-3662-4d82-8138-62b3ca3230ac.roa (raw, json) Hash identifier: 7m4EjmyP9bHcvAxUZjtrWQ0i7OseaTy+VDtDJfvef40= Subject key identifier: 6B:C2:C7:50:0C:F3:01:C3:49:6E:65:3C:BC:A7:54:F3:40:10:DD:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61798E4C2A78A1D48B4A43025D41A96F28E50894 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa Signing time: Wed 07 May 2025 00:11:07 +0000 ROA not before: Wed 07 May 2025 00:11:07 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:79:8e:4c:2a:78:a1:d4:8b:4a:43:02:5d:41:a9:6f:28:e5:08:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:11:07 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=f5914bfa94e88949010a21887e4442d338679637a8288b1d84d12c6c7725384a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:5c:cd:38:12:a2:b8:7e:11:f8:9c:fe:b1: f3:85:9f:37:a5:81:5d:5f:87:40:3d:bc:43:bf:70: db:dc:42:44:3b:4b:bb:ba:92:6c:91:1a:05:2b:80: 89:b0:f0:4b:c2:97:85:39:6b:de:6f:0b:27:c0:35: 2b:ea:94:6e:3e:5d:41:5d:09:15:1c:8a:74:4b:c1: 54:d2:a2:3c:ba:63:ca:53:53:f7:1b:fd:95:f7:65: e0:3f:d0:9c:a3:c4:89:7a:cb:84:63:26:fd:53:15: fe:6c:14:d0:a2:a6:f8:c9:9c:f9:c3:e6:e1:e8:0c: 85:12:3e:7c:9e:40:16:d7:51:d1:86:a6:9e:53:b3: 09:7b:93:cf:8e:b9:1b:ea:66:ac:0c:84:7f:8f:3e: 7d:ae:ac:67:05:0e:fb:ac:7a:39:ae:41:21:af:1b: da:e0:28:71:b8:f8:b4:90:da:38:61:df:43:13:69: c9:22:66:36:c6:a2:2d:99:d3:b0:f2:da:8f:ea:20: f5:ff:56:d9:8f:76:80:cc:1c:f8:28:a5:29:b5:b7: 93:e2:ca:a4:be:af:82:eb:dd:ba:63:a0:33:03:14: f9:fb:61:2a:e3:d6:f1:c1:f4:9d:52:ba:9a:32:59: ae:80:24:e1:85:68:80:81:77:13:ed:3e:a7:b1:45: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C2:C7:50:0C:F3:01:C3:49:6E:65:3C:BC:A7:54:F3:40:10:DD:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581aa7e-3662-4d82-8138-62b3ca3230ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9a:8f:01:cd:d0:27:7b:b0:44:57:d0:b8:21:ec:42:cb:94: f8:a0:84:88:52:0a:a3:3f:3f:da:91:9a:68:00:de:63:03:e9: ae:58:64:6c:12:28:ac:ef:44:9a:2d:10:89:9e:de:ce:99:b0: a9:02:81:ff:3a:b6:5b:73:a0:27:ec:c7:84:37:ee:91:79:6d: a4:89:1c:88:f2:8e:ac:c0:2e:e7:83:04:a2:59:9b:85:28:50: 2a:5a:22:12:d4:12:fc:22:c7:d0:a3:e9:94:bc:e7:c4:21:36: 88:ea:3a:41:01:2c:bb:e6:38:3c:a2:23:41:da:5f:3f:de:f1: f4:ff:94:e6:b8:fc:02:ba:b5:62:46:b4:c6:18:3c:d4:95:67: 13:ff:9f:0b:9f:4b:21:23:79:ea:d6:4a:08:92:be:7a:71:92: 2b:f4:98:0e:a3:b3:2e:d3:1a:19:96:23:33:40:0f:c1:29:c7: e8:17:b6:dd:f2:f9:75:c1:61:af:74:74:b9:ac:ce:53:f0:b9: 84:cf:79:63:73:d8:29:a5:d8:53:86:32:35:d4:92:4d:aa:db: 58:50:be:73:c9:a6:fa:49:21:fa:c6:e6:b3:9f:2c:42:13:79: 8b:b4:3e:18:9a:ac:78:94:63:4d:19:b9:2b:f5:06:83:b4:c1: bd:a3:1a:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYXmOTCp4odSLSkMCXUGpbyjlCJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMTA3WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTkxNGJmYTk0ZTg4OTQ5MDEwYTIxODg3ZTQ0NDJkMzM4 Njc5NjM3YTgyODhiMWQ4NGQxMmM2Yzc3MjUzODRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaP1zNOBKiuH4R+Jz+sfOFnzelgV1fh0A9vEO/cNvcQkQ7 S7u6kmyRGgUrgImw8EvCl4U5a95vCyfANSvqlG4+XUFdCRUcinRLwVTSojy6Y8pT U/cb/ZX3ZeA/0JyjxIl6y4RjJv1TFf5sFNCipvjJnPnD5uHoDIUSPnyeQBbXUdGG pp5Tswl7k8+OuRvqZqwMhH+PPn2urGcFDvusejmuQSGvG9rgKHG4+LSQ2jhh30MT ackiZjbGoi2Z07Dy2o/qIPX/VtmPdoDMHPgopSm1t5PiyqS+r4Lr3bpjoDMDFPn7 YSrj1vHB9J1SupoyWa6AJOGFaICBdxPtPqexRdDbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa8LHUAzzAcNJbmU8vKdU80AQ3T4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1ODFhYTdlLTM2NjItNGQ4Mi04MTM4LTYyYjNjYTMyMzBhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3PwwDQYJKoZIhvcNAQELBQADggEBAESajwHN0Cd7sERX0Lgh7ELLlPig hIhSCqM/P9qRmmgA3mMD6a5YZGwSKKzvRJotEIme3s6ZsKkCgf86tltzoCfsx4Q3 7pF5baSJHIjyjqzALueDBKJZm4UoUCpaIhLUEvwix9Cj6ZS858QhNojqOkEBLLvm ODyiI0HaXz/e8fT/lOa4/AK6tWJGtMYYPNSVZxP/nwufSyEjeerWSgiSvnpxkiv0 mA6jsy7TGhmWIzNAD8Epx+gXtt3y+XXBYa90dLmszlPwuYTPeWNz2Cml2FOGMjXU kk2q21hQvnPJpvpJIfrG5rOfLEITeYu0PhiarHiUY00ZuSv1BoO0wb2jGlc= -----END CERTIFICATE-----Generated at Fri May 16 10:08:28 2025 by rpki-client