$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa File: 4f822f75-fc14-46c1-a803-e47f23928368.roa (raw, json) Hash identifier: b6GbzlWgPiLjaKmA+mefOZk2XNx71zFZuSDOyy4u3qs= Subject key identifier: 6E:48:4C:F2:1D:75:7B:B4:F8:78:C5:50:03:A6:C2:70:F6:3A:34:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0504A4A3A71BBE4608A048A64158DD7B0DA1A7C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa Signing time: Mon 28 Apr 2025 15:11:11 +0000 ROA not before: Mon 28 Apr 2025 15:11:11 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:04:a4:a3:a7:1b:be:46:08:a0:48:a6:41:58:dd:7b:0d:a1:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:11:11 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=a2096421cabf93ec2c35d0532c8aee19244978a5787eb89fc5fac102c8e85ec6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:8d:3f:c3:e0:e5:68:2d:4f:db:ea:da:30: 2c:9a:4d:1a:56:70:88:c7:32:28:39:cd:a4:72:57: 66:b2:6e:fb:30:1c:bd:d9:ab:54:69:54:96:25:c9: 34:3b:65:04:07:38:6d:ee:f0:27:b3:34:db:30:c8: 16:62:20:32:75:de:84:c3:28:5c:04:5a:8e:bd:ca: 39:5e:9b:df:60:3c:3e:22:49:8a:55:1d:a0:ce:5e: 28:cf:68:7d:02:7d:ee:b5:8a:96:33:19:ca:2b:c8: 31:86:59:51:45:eb:63:de:65:29:6b:58:aa:08:6f: 97:15:fb:ba:ae:28:54:09:7c:c8:34:00:da:39:9e: 1b:e6:df:09:c0:30:0b:b2:d6:78:69:17:ec:d3:5b: a4:b2:cb:33:f2:04:a2:ae:f6:f4:88:9b:44:0a:86: 1a:11:95:f0:12:04:06:47:f5:d6:86:70:0f:07:a7: 59:6f:66:b5:d6:5e:b3:34:16:34:0d:2f:db:1a:18: 61:ae:76:48:16:77:3e:6c:a8:78:ec:e6:4d:63:3d: d7:fe:d8:38:6b:9a:cb:0a:eb:1f:03:83:0d:02:cc: 4b:9b:d6:5d:66:24:54:90:ba:1b:96:e8:79:31:33: ed:f2:53:51:14:d4:52:88:97:ca:a4:26:21:3e:c6: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:4C:F2:1D:75:7B:B4:F8:78:C5:50:03:A6:C2:70:F6:3A:34:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.131.0/24 Signature Algorithm: sha256WithRSAEncryption 75:13:27:dd:94:29:70:b0:6b:4d:5b:ac:ea:f0:0f:22:a5:15: 04:13:a6:7e:c5:5c:b8:e0:5d:1a:d8:8d:02:3d:92:8b:a1:b1: 48:b7:b3:17:75:ef:89:70:c6:4c:ce:3e:54:b5:f4:c1:1e:ba: 0f:2e:b4:28:38:f7:55:5a:20:50:3d:3b:ec:1d:8c:23:51:7d: c1:c8:41:e0:1e:e9:87:b9:dc:1b:0f:04:4d:ba:a2:31:84:cf: d4:fd:9c:06:04:ea:60:77:d1:ad:85:e4:57:58:41:e1:4d:b7: ac:e4:95:4b:66:9d:90:7a:6f:b7:9d:8a:09:b4:92:ee:31:ee: 35:d2:9f:cf:18:6f:a6:d8:90:60:1c:ee:b5:82:c8:ee:40:84: 1b:d6:c5:2e:83:1a:c6:8d:b1:65:a4:ff:3a:f6:d3:81:3e:83: 8e:85:88:1b:6f:3e:d2:6b:76:3a:7b:63:00:1c:eb:7a:ad:03: e9:14:1a:08:b9:17:f8:61:3a:50:4c:01:c8:cd:ea:c8:9a:78: d3:75:d2:8e:18:de:10:9e:fd:ec:fb:e9:e4:e6:2d:e1:a9:e3: 83:1e:8a:8d:fb:a6:33:37:b5:71:23:ab:24:18:2d:bc:7b:a2: 17:89:9b:75:0f:b3:fe:6a:f3:e1:c7:1d:c4:b2:44:b2:7d:22: 77:c4:45:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBQSko6cbvkYIoEimQVjdew2hp8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMTExWhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjA5NjQyMWNhYmY5M2VjMmMzNWQwNTMyYzhhZWUxOTI0 NDk3OGE1Nzg3ZWI4OWZjNWZhYzEwMmM4ZTg1ZWM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Po0/w+DlaC1P2+raMCyaTRpWcIjHMig5zaRyV2aybvsw HL3Zq1RpVJYlyTQ7ZQQHOG3u8CezNNswyBZiIDJ13oTDKFwEWo69yjlem99gPD4i SYpVHaDOXijPaH0Cfe61ipYzGcoryDGGWVFF62PeZSlrWKoIb5cV+7quKFQJfMg0 ANo5nhvm3wnAMAuy1nhpF+zTW6SyyzPyBKKu9vSIm0QKhhoRlfASBAZH9daGcA8H p1lvZrXWXrM0FjQNL9saGGGudkgWdz5sqHjs5k1jPdf+2DhrmssK6x8Dgw0CzEub 1l1mJFSQuhuW6HkxM+3yU1EU1FKIl8qkJiE+xsa/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbkhM8h11e7T4eMVQA6bCcPY6NEwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmODIyZjc1LWZjMTQtNDZjMS1hODAzLWU0N2YyMzkyODM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroMwDQYJKoZIhvcNAQELBQADggEBAHUTJ92UKXCwa01brOrwDyKlFQQT pn7FXLjgXRrYjQI9kouhsUi3sxd174lwxkzOPlS19MEeug8utCg491VaIFA9O+wd jCNRfcHIQeAe6Ye53BsPBE26ojGEz9T9nAYE6mB30a2F5FdYQeFNt6zklUtmnZB6 b7edigm0ku4x7jXSn88Yb6bYkGAc7rWCyO5AhBvWxS6DGsaNsWWk/zr204E+g46F iBtvPtJrdjp7YwAc63qtA+kUGgi5F/hhOlBMAcjN6siaeNN10o4Y3hCe/ez76eTm LeGp44Meio37pjM3tXEjqyQYLbx7oheJm3UPs/5q8+HHHcSyRLJ9InfEReM= -----END CERTIFICATE-----Generated at Sun May 11 19:04:03 2025 by rpki-client