$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa File: 4ba35884-742e-42ee-a410-8e26638067ef.roa (raw, json) Hash identifier: pNhWo5zzrHWEsCKY9142ZMeWybwmrSuNeqR4pcrsM4U= Subject key identifier: B1:EA:D0:87:E7:8B:9F:87:93:DF:A0:3C:D5:59:3F:71:0D:F7:DE:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37A9390E061AB60EA08EAAC36734B16ED68A7FB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa Signing time: Fri 27 Jun 2025 00:10:23 +0000 ROA not before: Fri 27 Jun 2025 00:10:23 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a9:39:0e:06:1a:b6:0e:a0:8e:aa:c3:67:34:b1:6e:d6:8a:7f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:10:23 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=2332ba79697cb08169c174a407dc09e5713de1223a109a73cf538a07d32efd09, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:78:27:c2:3e:ef:ec:d0:bd:f2:50:f0:ed: ce:f6:fa:36:1a:4f:2c:d4:c4:bf:c6:dc:98:96:b3: f6:77:e1:42:bc:92:16:d5:1d:99:ff:e4:b9:09:85: b1:7b:af:f6:d6:55:b2:74:ff:0b:4c:9d:cd:37:10: 2a:1b:ce:b0:57:b4:46:62:18:26:2d:96:48:f0:d1: e1:bc:1d:0a:aa:48:55:ea:37:87:3d:8b:a7:e7:16: bc:60:85:f2:97:36:6c:10:b1:a6:cd:63:c4:32:f9: 06:e7:4b:a0:3e:af:75:8d:61:e9:fe:38:9e:46:16: ef:43:91:c3:15:41:cd:68:bf:0c:d6:5a:50:3a:72: bb:1a:6c:b4:52:33:30:a5:ae:29:d6:62:12:e7:ec: 9d:95:93:88:42:c7:d1:20:a1:9c:3a:a5:58:d0:31: 51:83:7e:29:bd:5b:62:76:5f:79:ad:bd:78:59:9b: e9:54:c1:0e:f2:de:88:fb:70:61:5b:03:47:f3:0a: ff:a5:20:c9:9a:94:e6:1a:b4:47:d9:6d:d3:43:73: 5d:12:7d:28:cc:39:85:4d:b2:2c:75:a0:8a:24:da: 57:a3:b6:93:10:35:69:46:db:ce:ad:7c:bf:d2:c5: 22:be:76:03:7e:a4:d3:92:27:8c:36:69:af:8d:b1: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EA:D0:87:E7:8B:9F:87:93:DF:A0:3C:D5:59:3F:71:0D:F7:DE:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ba35884-742e-42ee-a410-8e26638067ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.48.0/20 Signature Algorithm: sha256WithRSAEncryption 91:36:6f:5a:cc:05:12:d1:50:55:58:f4:8e:26:73:64:07:9e: 64:34:29:94:16:6b:06:d6:ba:c2:ae:bb:d1:83:9a:32:e1:73: 28:1d:d0:9f:ae:7e:5c:2b:bb:6d:24:3f:59:1c:de:b7:3d:bf: c4:fa:4d:87:f8:56:8c:1d:dc:a3:4d:de:dc:01:a1:e1:35:06: 34:d0:8d:5d:2e:ed:6f:ed:b3:4a:e1:7e:39:ff:19:54:e4:b6: 6c:95:7f:fb:d4:39:76:7e:1a:64:11:90:0e:e5:b8:e1:25:dd: c6:60:f6:9e:fb:3d:b1:01:97:48:73:e3:60:4c:dc:a8:bb:44: 46:a2:31:6a:35:03:c4:26:0c:a1:e0:bf:99:e4:75:1b:84:b6: 6e:ec:a5:e4:dd:28:fd:1b:d5:70:0b:99:96:7e:c8:f6:0d:1c: a6:db:47:3e:f3:1b:81:4a:80:5a:08:16:20:1a:64:e6:35:95: 53:fe:c5:9e:51:f7:d7:48:4d:a3:6a:bd:20:30:ab:db:9d:f2: ca:73:4e:8a:de:41:0a:2b:3b:b0:7b:b9:e2:73:82:ab:59:e2: 53:25:a6:c7:0a:3f:30:e8:e8:d3:c6:37:20:c1:8c:c4:a5:eb: f2:70:fd:d1:33:af:fc:3c:7f:54:bc:45:f2:01:80:06:98:b3: c8:16:c0:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN6k5DgYatg6gjqrDZzSxbtaKf7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAxMDIzWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzMyYmE3OTY5N2NiMDgxNjljMTc0YTQwN2RjMDllNTcx M2RlMTIyM2ExMDlhNzNjZjUzOGEwN2QzMmVmZDA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK0Hgnwj7v7NC98lDw7c72+jYaTyzUxL/G3JiWs/Z34UK8 khbVHZn/5LkJhbF7r/bWVbJ0/wtMnc03ECobzrBXtEZiGCYtlkjw0eG8HQqqSFXq N4c9i6fnFrxghfKXNmwQsabNY8Qy+QbnS6A+r3WNYen+OJ5GFu9DkcMVQc1ovwzW WlA6crsabLRSMzClrinWYhLn7J2Vk4hCx9EgoZw6pVjQMVGDfim9W2J2X3mtvXhZ m+lUwQ7y3oj7cGFbA0fzCv+lIMmalOYatEfZbdNDc10SfSjMOYVNsix1oIok2lej tpMQNWlG286tfL/SxSK+dgN+pNOSJ4w2aa+NsZN3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUserQh+eLn4eT36A81Vk/cQ333qQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiYTM1ODg0LTc0MmUtNDJlZS1hNDEwLThlMjY2MzgwNjdlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNkDAwDQYJKoZIhvcNAQELBQADggEBAJE2b1rMBRLRUFVY9I4mc2QHnmQ0 KZQWawbWusKuu9GDmjLhcygd0J+uflwru20kP1kc3rc9v8T6TYf4Vowd3KNN3twB oeE1BjTQjV0u7W/ts0rhfjn/GVTktmyVf/vUOXZ+GmQRkA7luOEl3cZg9p77PbEB l0hz42BM3Ki7REaiMWo1A8QmDKHgv5nkdRuEtm7speTdKP0b1XALmZZ+yPYNHKbb Rz7zG4FKgFoIFiAaZOY1lVP+xZ5R99dITaNqvSAwq9ud8spzToreQQorO7B7ueJz gqtZ4lMlpscKPzDo6NPGNyDBjMSl6/Jw/dEzr/w8f1S8RfIBgAaYs8gWwKU= -----END CERTIFICATE-----Generated at Wed Jul 2 23:34:48 2025 by rpki-client