$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa File: 5b59b775-668d-4eff-a5fc-13102f0cb266.roa (raw, json) Hash identifier: 6Yo2z1xs+UF+09qZLifCcEsdUj26jHBglZ1ips8aSYw= Subject key identifier: D3:D8:EE:E2:F1:D8:CA:6F:AD:82:BB:E6:28:8A:8B:38:DD:10:AA:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 149A8EC6B9242B22674B97D2AE491245FDAF37E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa Signing time: Tue 24 Jun 2025 00:01:49 +0000 ROA not before: Tue 24 Jun 2025 00:01:49 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9a:8e:c6:b9:24:2b:22:67:4b:97:d2:ae:49:12:45:fd:af:37:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:01:49 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=e7bf1fe58ef1d360d851d8a10a63c562a61369247ae65b3396a0f2bc96a9d2e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:1e:bc:78:c6:81:dd:c1:a5:5a:42:58:28: d9:9f:45:75:7d:12:90:32:e6:26:24:67:c6:9b:7e: b2:26:05:6a:12:1f:42:ad:6f:07:36:58:bd:5e:52: 9e:5b:7d:a1:d9:05:d0:36:9b:98:a9:e7:e7:6b:ab: 8b:9d:30:a5:39:7e:a5:24:d5:40:3f:b9:6a:4d:86: e1:54:5a:5d:66:dc:6e:0b:53:0a:38:3c:fc:32:38: f4:11:68:ec:f4:c9:b7:38:de:55:ff:41:6a:09:00: c3:0b:d5:46:03:db:41:32:c9:fb:a1:06:fa:63:19: d6:f8:48:fa:22:e3:a9:90:bd:14:70:87:49:e6:49: 00:90:75:bb:af:96:c0:eb:41:a6:e8:14:c5:23:64: d0:58:9d:0f:f7:4d:aa:99:2f:89:af:01:52:01:92: ab:09:fc:e3:ca:1a:04:39:40:09:23:13:2f:f0:76: d4:17:c5:56:d2:e0:04:c0:e6:4c:e8:68:63:e1:35: 56:62:f1:fd:ef:e8:e8:9c:51:ea:de:cd:57:b7:40: d4:4b:97:77:97:19:a4:fd:3d:b8:6d:35:20:19:4b: f3:29:00:9d:16:91:fa:21:1a:8f:00:2f:4d:2a:f7: a8:ab:0e:35:3e:75:a3:1b:f6:16:83:99:1c:45:79: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:EE:E2:F1:D8:CA:6F:AD:82:BB:E6:28:8A:8B:38:DD:10:AA:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:69:41:98:9f:78:82:fc:97:61:f1:cf:62:f6:4c:a3:fd:05: ab:fa:8e:3c:de:db:ef:d3:7a:17:c8:1c:a2:87:d7:36:2c:83: 8e:9f:3f:24:2a:33:92:2b:e2:44:99:8c:a1:ec:28:48:ba:e9: 9a:da:b5:18:19:54:3b:18:f4:ce:84:03:84:f9:ed:22:32:c9: ea:f2:cb:a8:33:90:16:3f:8b:53:5f:5d:d4:08:31:6c:75:5c: 23:32:b8:09:d1:cd:e3:3c:ed:f8:4a:01:63:08:f8:ec:69:69: 55:aa:66:e1:ca:f4:5d:07:e1:79:fb:55:8b:a1:37:df:b3:93: 39:95:11:63:9c:b0:95:28:f7:60:cd:5d:2a:ad:09:ca:bc:98: 14:38:fe:e5:2f:5e:46:0a:73:cd:8b:8f:84:a3:6a:ae:95:9d: bd:f7:57:06:48:aa:fc:84:85:83:a0:57:0b:ad:42:b7:34:2c: f2:1d:f0:5d:03:d4:59:67:8a:ee:77:d7:ab:4c:db:fb:64:d3: f2:3c:23:9c:80:d5:25:2c:29:c0:d1:93:9d:ea:53:cc:40:46: d0:c7:67:0f:18:60:5b:36:f3:2f:17:d1:e8:70:d0:e0:fd:99: de:05:17:06:e3:79:fc:72:48:a9:1f:cf:cd:f5:52:be:ce:87: 36:01:1e:f4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFJqOxrkkKyJnS5fSrkkSRf2vN+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAwMTQ5WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2JmMWZlNThlZjFkMzYwZDg1MWQ4YTEwYTYzYzU2MmE2 MTM2OTI0N2FlNjViMzM5NmEwZjJiYzk2YTlkMmU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBqR68eMaB3cGlWkJYKNmfRXV9EpAy5iYkZ8abfrImBWoS H0Ktbwc2WL1eUp5bfaHZBdA2m5ip5+drq4udMKU5fqUk1UA/uWpNhuFUWl1m3G4L Uwo4PPwyOPQRaOz0ybc43lX/QWoJAMML1UYD20EyyfuhBvpjGdb4SPoi46mQvRRw h0nmSQCQdbuvlsDrQaboFMUjZNBYnQ/3TaqZL4mvAVIBkqsJ/OPKGgQ5QAkjEy/w dtQXxVbS4ATA5kzoaGPhNVZi8f3v6OicUerezVe3QNRLl3eXGaT9PbhtNSAZS/Mp AJ0WkfohGo8AL00q96irDjU+daMb9haDmRxFed3HAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU09ju4vHYym+tgrvmKIqLON0QqnAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViNTliNzc1LTY2OGQtNGVmZi1hNWZjLTEzMTAyZjBjYjI2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDGhDANBgkqhkiG9w0BAQsFAAOCAQEAPGlBmJ94gvyXYfHPYvZMo/0Fq/qO PN7b79N6F8gcoofXNiyDjp8/JCozkiviRJmMoewoSLrpmtq1GBlUOxj0zoQDhPnt IjLJ6vLLqDOQFj+LU19d1AgxbHVcIzK4CdHN4zzt+EoBYwj47GlpVapm4cr0XQfh eftVi6E337OTOZURY5ywlSj3YM1dKq0JyryYFDj+5S9eRgpzzYuPhKNqrpWdvfdX Bkiq/ISFg6BXC61CtzQs8h3wXQPUWWeK7nfXq0zb+2TT8jwjnIDVJSwpwNGTnepT zEBG0MdnDxhgWzbzLxfR6HDQ4P2Z3gUXBuN5/HJIqR/PzfVSvs6HNgEe9A== -----END CERTIFICATE-----Generated at Sun Jun 29 09:06:14 2025 by rpki-client