$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf6724f-3a3f-48d4-9f79-c57894a336dd.roa File: 4cf6724f-3a3f-48d4-9f79-c57894a336dd.roa (raw, json) Hash identifier: AAbg2IOvavgHgibvPMSNZ9O7QTsh24NBQiiy85Cwd8A= Subject key identifier: 4B:A6:F8:B8:7D:0D:DA:3E:1E:30:69:8C:A9:67:2E:E7:FB:4C:22:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BD26A13B13677FC33878C7EC47697F6B94E6D67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf6724f-3a3f-48d4-9f79-c57894a336dd.roa Signing time: Mon 16 Jun 2025 15:00:24 +0000 ROA not before: Mon 16 Jun 2025 15:00:24 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d2:6a:13:b1:36:77:fc:33:87:8c:7e:c4:76:97:f6:b9:4e:6d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:00:24 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=2a9e29e946535f498d4131cf39fb19e49d03d31650111c614c801df98168aff3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:c8:3e:38:3b:a0:37:69:ea:c0:a1:ef:a1: 59:fc:cf:9b:e7:57:89:57:7e:0c:a1:e0:e7:35:1e: 52:75:b2:4b:26:05:28:19:55:d2:bf:92:2a:96:e1: 2c:9a:37:6d:fb:ef:a8:61:60:1b:54:82:fe:41:61: 55:d7:b5:8e:9b:c6:e7:e7:86:b0:df:96:67:06:6e: f9:c1:ce:b7:03:71:44:1a:15:a5:02:49:e7:07:aa: be:26:a6:53:31:dc:d8:85:14:50:f4:d2:6e:3e:f4: c6:4b:d7:b3:18:41:82:9a:70:64:d6:f3:e8:5d:61: 4f:78:77:a0:c2:42:eb:f7:4b:9f:87:d8:ec:66:81: 1d:4a:8d:51:61:13:b2:be:f3:ed:78:e0:8f:8a:2b: ed:e0:4f:aa:33:41:21:47:de:9f:88:69:2a:4e:07: 9d:e9:31:07:f1:a6:30:eb:6f:13:9e:64:d3:bf:ac: 85:03:e5:ef:e0:4b:10:04:f1:23:f8:94:5c:7e:10: 5e:09:25:b8:96:ea:ad:9e:b5:09:3f:a9:1d:01:d6: 63:72:53:14:28:a6:1c:2a:11:a7:1a:e2:81:e2:41: 08:0e:f6:ce:5f:20:e5:38:82:71:7a:3d:1e:01:eb: dd:24:0b:14:8a:c6:33:c1:ec:f2:10:82:5d:98:3c: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:F8:B8:7D:0D:DA:3E:1E:30:69:8C:A9:67:2E:E7:FB:4C:22:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf6724f-3a3f-48d4-9f79-c57894a336dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.50.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:eb:d8:af:a4:49:55:4d:fa:05:9c:71:74:aa:fc:31:d7:7f: 26:d9:d1:72:18:80:8f:28:94:fe:26:75:01:8e:3e:ff:87:2f: 30:2e:69:0c:0f:e1:be:ec:86:10:04:44:cc:c2:11:27:6f:e1: b7:f0:7f:ce:17:5c:81:4c:8d:30:1f:29:2a:7e:37:bd:86:30: fc:30:72:f0:c9:3d:ff:60:95:8a:50:c5:2b:94:e5:12:4e:b4: 2d:3a:3b:8f:4c:69:24:62:01:10:1e:1c:24:59:5d:ff:b3:c4: 5b:42:81:7c:3a:83:5a:34:c3:86:85:5d:18:aa:78:43:0a:46: 24:03:bb:56:18:e9:54:ff:6e:c3:3a:d6:4a:6c:3d:08:99:9d: 70:d0:b4:10:fc:5f:f8:52:33:a7:01:70:b1:eb:0d:32:de:0f: eb:e0:35:1b:42:b0:14:14:b3:7b:6d:ce:11:c7:b1:e4:13:a1: 5f:9e:66:6e:14:16:31:a5:97:f6:2d:6d:1a:0c:e7:48:54:99: e1:81:c0:bc:3e:6e:21:cb:2e:4d:42:60:1c:23:6f:18:44:9e: 11:28:9f:d3:9a:a5:e7:a6:e0:bf:ac:37:69:e1:f3:ff:10:ca: e6:d3:06:bf:2e:01:2d:ec:0d:16:f2:7f:c0:9e:d9:36:b9:75: 6d:19:de:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC9JqE7E2d/wzh4x+xHaX9rlObWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUwMDI0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTllMjllOTQ2NTM1ZjQ5OGQ0MTMxY2YzOWZiMTllNDlk MDNkMzE2NTAxMTFjNjE0YzgwMWRmOTgxNjhhZmYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKesg+ODugN2nqwKHvoVn8z5vnV4lXfgyh4Oc1HlJ1sksm BSgZVdK/kiqW4SyaN23776hhYBtUgv5BYVXXtY6bxufnhrDflmcGbvnBzrcDcUQa FaUCSecHqr4mplMx3NiFFFD00m4+9MZL17MYQYKacGTW8+hdYU94d6DCQuv3S5+H 2OxmgR1KjVFhE7K+8+144I+KK+3gT6ozQSFH3p+IaSpOB53pMQfxpjDrbxOeZNO/ rIUD5e/gSxAE8SP4lFx+EF4JJbiW6q2etQk/qR0B1mNyUxQophwqEaca4oHiQQgO 9s5fIOU4gnF6PR4B690kCxSKxjPB7PIQgl2YPJ/lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS6b4uH0N2j4eMGmMqWcu5/tMIuUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjZjY3MjRmLTNhM2YtNDhkNC05Zjc5LWM1Nzg5NGEzMzZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEjIwDQYJKoZIhvcNAQELBQADggEBAB3r2K+kSVVN+gWccXSq/DHXfybZ 0XIYgI8olP4mdQGOPv+HLzAuaQwP4b7shhAERMzCESdv4bfwf84XXIFMjTAfKSp+ N72GMPwwcvDJPf9glYpQxSuU5RJOtC06O49MaSRiARAeHCRZXf+zxFtCgXw6g1o0 w4aFXRiqeEMKRiQDu1YY6VT/bsM61kpsPQiZnXDQtBD8X/hSM6cBcLHrDTLeD+vg NRtCsBQUs3ttzhHHseQToV+eZm4UFjGll/YtbRoM50hUmeGBwLw+biHLLk1CYBwj bxhEnhEon9Oapeem4L+sN2nh8/8QyubTBr8uAS3sDRbyf8Ce2Ta5dW0Z3js= -----END CERTIFICATE-----Generated at Sun Jun 29 08:11:01 2025 by rpki-client