$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa File: 49e7f049-4165-46be-93c5-a7a2d7f454dd.roa (raw, json) Hash identifier: 0hGaHm9yWWwFSvNy6x5heOosof2qsCGu0RjQxwPRqmM= Subject key identifier: C0:7E:00:B5:58:C7:B1:F2:3D:42:DD:F3:14:07:24:11:F2:BA:17:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E6FA574F392DE64224FF028346A1682ED2DE098 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa Signing time: Fri 09 May 2025 00:20:57 +0000 ROA not before: Fri 09 May 2025 00:20:57 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6f:a5:74:f3:92:de:64:22:4f:f0:28:34:6a:16:82:ed:2d:e0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:57 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=318457ff60d95d1dd1d195781f71df929045690743f8a0f43eee4eeb13504478, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:0a:ce:42:50:44:25:7e:a2:ad:e4:51:bb: 88:de:89:92:9d:c5:40:0a:df:14:53:bf:3f:7f:c8: 10:3f:3c:b7:b5:67:b5:68:18:5d:99:6e:90:3e:5d: 31:74:b9:ac:91:d1:d5:8b:49:69:cc:64:26:01:64: cd:76:7c:aa:09:e6:27:f0:e7:cd:cf:b5:e2:08:47: b9:5e:8e:06:e9:f2:e0:e8:33:5c:91:1a:9d:b3:b4: cc:fb:e5:34:f4:4f:a6:d4:80:91:b1:6b:60:ba:bc: c9:42:7b:ec:dc:68:5a:72:3f:b0:6a:5f:a8:df:3d: b5:25:8b:4c:15:00:dd:a9:e4:cb:d4:35:7d:b8:a8: 40:39:9b:37:40:82:00:8c:03:4e:ed:8c:6d:5c:4e: 6d:b6:f3:88:82:53:8e:77:d1:56:07:a9:bc:af:8d: 08:fd:30:ef:cb:24:de:38:53:5b:c1:e2:da:4c:70: 4e:ef:e4:db:c5:3a:2f:73:df:29:a8:56:d3:d5:69: 6b:dc:9d:67:44:9b:8c:83:ba:4c:bb:0c:db:68:60: bf:0d:8d:30:6f:b7:00:80:6d:21:76:5f:d8:7d:41: 86:34:b8:64:53:0a:e9:7c:2c:64:19:0c:47:3f:62: a5:03:6d:62:4b:07:29:4b:e5:cc:fb:a9:7f:9c:eb: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:00:B5:58:C7:B1:F2:3D:42:DD:F3:14:07:24:11:F2:BA:17:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 22:85:49:45:a9:93:8d:97:9d:91:99:ac:8a:1e:8c:51:46:55: f1:24:43:fb:d7:ed:f9:91:ef:41:d0:eb:47:75:d3:ca:51:a5: 1c:90:52:f7:15:44:04:13:93:55:8e:d1:22:5b:71:cd:51:f0: 40:0f:af:be:83:a3:fc:25:20:8a:e4:19:73:fe:32:7b:1b:a4: 17:f9:f0:e2:07:8b:31:bf:7d:e6:a1:58:99:0a:13:1c:63:70: 2d:cd:8b:f3:9e:92:53:9d:d1:20:1d:e6:6f:39:13:ad:3d:18: 5e:54:dd:66:a4:c9:34:04:a5:32:de:e8:5b:7f:f0:5c:07:24: 73:b8:c6:13:3b:b1:86:17:ef:ea:9a:83:21:4f:08:fe:43:f4: d8:9a:8d:ff:ce:81:2d:4f:ef:f3:18:3b:61:bf:63:6c:00:82: da:c6:a2:50:2f:aa:e5:1c:cd:de:e5:01:ec:b4:5d:a9:d8:1b: 81:06:5f:4c:ae:88:a4:91:ea:68:cb:79:23:4f:9a:75:42:8c: 65:a4:c9:9a:cf:2e:14:ac:04:ef:65:c2:f1:4e:af:09:ab:7e: 66:8a:5f:7e:7f:f8:ca:4c:52:44:e2:5f:da:b4:7b:ad:ee:58: a0:1e:1d:0e:39:28:d9:2f:c0:f3:da:ff:4b:63:e5:2c:3a:7c: d1:a2:a8:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfm+ldPOS3mQiT/AoNGoWgu0t4JgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAyMDU3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTg0NTdmZjYwZDk1ZDFkZDFkMTk1NzgxZjcxZGY5Mjkw NDU2OTA3NDNmOGEwZjQzZWVlNGVlYjEzNTA0NDc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyuwrOQlBEJX6ireRRu4jeiZKdxUAK3xRTvz9/yBA/PLe1 Z7VoGF2ZbpA+XTF0uayR0dWLSWnMZCYBZM12fKoJ5ifw583PteIIR7lejgbp8uDo M1yRGp2ztMz75TT0T6bUgJGxa2C6vMlCe+zcaFpyP7BqX6jfPbUli0wVAN2p5MvU NX24qEA5mzdAggCMA07tjG1cTm2284iCU4530VYHqbyvjQj9MO/LJN44U1vB4tpM cE7v5NvFOi9z3ymoVtPVaWvcnWdEm4yDuky7DNtoYL8NjTBvtwCAbSF2X9h9QYY0 uGRTCul8LGQZDEc/YqUDbWJLBylL5cz7qX+c68EnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwH4AtVjHsfI9Qt3zFAckEfK6FyEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZTdmMDQ5LTQxNjUtNDZiZS05M2M1LWE3YTJkN2Y0NTRkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW4SOAwDQYJKoZIhvcNAQELBQADggEBACKFSUWpk42XnZGZrIoejFFGVfEk Q/vX7fmR70HQ60d108pRpRyQUvcVRAQTk1WO0SJbcc1R8EAPr76Do/wlIIrkGXP+ MnsbpBf58OIHizG/feahWJkKExxjcC3Ni/OeklOd0SAd5m85E609GF5U3WakyTQE pTLe6Ft/8FwHJHO4xhM7sYYX7+qagyFPCP5D9Niajf/OgS1P7/MYO2G/Y2wAgtrG olAvquUczd7lAey0XanYG4EGX0yuiKSR6mjLeSNPmnVCjGWkyZrPLhSsBO9lwvFO rwmrfmaKX35/+MpMUkTiX9q0e63uWKAeHQ45KNkvwPPa/0tj5Sw6fNGiqCw= -----END CERTIFICATE-----Generated at Sun May 11 14:56:11 2025 by rpki-client