$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa File: 4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa (raw, json) Hash identifier: BVhflmi1m+pHGWzUGJCMhvLk5XNmh6beO76X/a2rPDo= Subject key identifier: D4:92:72:03:3B:33:60:C7:24:F6:12:1D:1E:C0:03:83:B3:D4:64:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BC73394668741F738B4023A96292C45CB6A8538 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa Signing time: Tue 01 Jul 2025 00:12:17 +0000 ROA not before: Tue 01 Jul 2025 00:12:17 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.12.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c7:33:94:66:87:41:f7:38:b4:02:3a:96:29:2c:45:cb:6a:85:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:12:17 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=ce0aa324cc9f32208ac1bcb12302da17b129004ef93729974cc10e3b0af17142, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:5c:4e:5b:25:c8:f9:df:7a:33:31:ef:5c: 85:5c:f8:55:29:bd:af:f5:45:34:03:4c:45:66:bf: c1:41:5a:0f:1b:38:66:b2:8b:2b:20:75:1a:3d:e0: d4:77:0e:aa:9c:c6:e3:11:37:08:e7:7d:a9:6d:be: e8:0d:95:f7:db:e9:90:8c:10:de:8b:7e:84:04:95: 0c:f3:57:c3:76:3f:9d:0a:46:05:c7:4e:1c:86:10: 9e:2e:34:5a:57:ef:8f:cd:6b:f9:1e:c7:89:ce:55: 0a:54:5e:d5:c8:53:cc:17:2d:43:4d:38:ae:fa:ec: a0:0a:82:a1:ab:b6:15:09:72:c6:52:8d:cc:03:a3: cd:63:d6:f4:a8:c3:0d:6a:d0:e5:f7:18:3a:2d:78: 6a:c4:56:a2:6b:b1:2c:d0:7d:32:aa:c3:7a:ee:8f: d4:00:2e:63:aa:b8:2d:9a:e1:6c:fb:17:c9:e4:70: 6a:89:ae:af:90:90:82:78:1a:11:0d:62:d3:0a:00: bf:eb:9f:2d:f6:16:0a:1a:28:a5:86:9d:0e:43:c6: 56:db:3d:2f:d0:50:ef:5a:be:43:ee:2e:98:94:26: a3:ba:c0:47:c0:61:6e:0a:59:f8:5c:40:fe:ba:a9: 99:b5:1c:9f:79:2f:53:54:90:a2:59:79:08:fc:49: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:72:03:3B:33:60:C7:24:F6:12:1D:1E:C0:03:83:B3:D4:64:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.12.58.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:79:0e:05:dd:d0:2d:65:2c:0a:b1:25:44:57:1d:09:49:98: 1f:e9:3b:41:a7:1d:6c:ce:cd:64:f3:8a:7e:15:ff:fb:16:16: 93:f5:a8:df:5a:f2:44:de:c5:97:2d:33:34:2c:52:c5:93:71: 54:af:70:83:79:65:7a:f3:e3:2f:ac:f5:e5:7c:24:83:7b:90: 09:61:c4:d0:e8:bd:b9:c1:9d:81:8c:a4:b9:07:8f:ec:6b:16: 80:7e:c4:6a:58:57:9e:8e:b6:88:1f:87:0d:81:84:49:02:a5: 4f:48:09:4f:dd:54:f3:56:dd:9c:0b:76:8d:c8:87:42:44:08: ef:51:92:33:56:64:93:2f:d2:96:9b:fd:73:6c:d2:bd:db:5e: 9c:4f:52:b2:31:76:6f:9e:a2:8a:c8:dd:4b:4c:b3:5e:92:93: 5a:87:44:c6:89:29:41:8e:43:75:14:b4:50:39:10:ef:4d:33: 36:22:08:f0:8b:84:f3:e8:0e:30:46:5e:bb:d3:90:66:2f:4b: ac:55:82:25:6c:e7:3e:a0:43:bf:1c:ca:0e:98:64:a6:ea:ff: 72:ad:21:f2:25:14:56:f9:e5:47:a6:1b:21:6b:59:bb:42:51: 0f:c7:b2:4d:c6:1e:7a:e9:70:64:1a:33:f7:63:95:3e:32:a4: 71:65:53:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS8czlGaHQfc4tAI6liksRctqhTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAxMjE3WhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTBhYTMyNGNjOWYzMjIwOGFjMWJjYjEyMzAyZGExN2Ix MjkwMDRlZjkzNzI5OTc0Y2MxMGUzYjBhZjE3MTQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFfVxOWyXI+d96MzHvXIVc+FUpva/1RTQDTEVmv8FBWg8b OGayiysgdRo94NR3DqqcxuMRNwjnfaltvugNlffb6ZCMEN6LfoQElQzzV8N2P50K RgXHThyGEJ4uNFpX74/Na/kex4nOVQpUXtXIU8wXLUNNOK767KAKgqGrthUJcsZS jcwDo81j1vSoww1q0OX3GDoteGrEVqJrsSzQfTKqw3ruj9QALmOquC2a4Wz7F8nk cGqJrq+QkIJ4GhENYtMKAL/rny32FgoaKKWGnQ5DxlbbPS/QUO9avkPuLpiUJqO6 wEfAYW4KWfhcQP66qZm1HJ95L1NUkKJZeQj8ScWdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1JJyAzszYMck9hIdHsADg7PUZPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkNTRhZDc0LTI3MDQtNDVkOS04Y2E0LWIxY2VjN2IwM2Y3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABODDowDQYJKoZIhvcNAQELBQADggEBAHx5DgXd0C1lLAqxJURXHQlJmB/p O0GnHWzOzWTzin4V//sWFpP1qN9a8kTexZctMzQsUsWTcVSvcIN5ZXrz4y+s9eV8 JIN7kAlhxNDovbnBnYGMpLkHj+xrFoB+xGpYV56Otogfhw2BhEkCpU9ICU/dVPNW 3ZwLdo3Ih0JECO9RkjNWZJMv0pab/XNs0r3bXpxPUrIxdm+eoorI3UtMs16Sk1qH RMaJKUGOQ3UUtFA5EO9NMzYiCPCLhPPoDjBGXrvTkGYvS6xVgiVs5z6gQ78cyg6Y ZKbq/3KtIfIlFFb55UemGyFrWbtCUQ/Hsk3GHnrpcGQaM/djlT4ypHFlU8s= -----END CERTIFICATE-----Generated at Wed Jul 2 02:06:07 2025 by rpki-client