$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa File: 5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa (raw, json) Hash identifier: E1FoEqVY0ILMj2jFKnE8HP02aBZlEwu9tdAuA8Rfxnk= Subject key identifier: 34:F8:46:E1:CA:46:32:E3:C9:76:02:D0:41:EC:27:F7:E1:D5:8C:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 406E04FFC487CDA3524B89CBB7FD618A65399B8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa Signing time: Tue 24 Jun 2025 00:31:56 +0000 ROA not before: Tue 24 Jun 2025 00:31:56 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.255.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6e:04:ff:c4:87:cd:a3:52:4b:89:cb:b7:fd:61:8a:65:39:9b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:31:56 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=1b354a5ff4689a6405a2251884b75f12cc13a713c69b42d94594974bc8bcfc46, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:ed:50:51:15:46:6c:e8:e3:78:44:51:a3: 7c:00:29:e7:af:36:23:af:ee:43:cb:bb:e2:14:2f: 8a:55:c7:06:08:55:1e:5e:df:23:a1:ff:85:48:c8: d3:e4:77:4f:07:be:cd:8b:a6:bf:2e:58:fe:dd:e8: 7d:5d:e2:24:86:2f:50:8e:0d:27:a4:14:a7:82:b6: 9e:1a:c8:6e:d7:9b:f5:b0:06:78:88:a0:04:6f:e2: 49:e4:d2:59:06:d2:4d:4d:79:e7:12:f7:2c:b6:a5: 50:42:8d:fc:f5:b0:96:6d:c5:7d:7b:7a:00:26:50: 59:28:ae:1e:9c:99:ee:92:76:4e:71:68:d3:4b:d3: 8c:6d:ce:21:9e:e5:7a:32:48:d9:a1:49:ca:28:91: 1f:7f:38:df:6e:4a:7d:06:0e:ee:42:ef:7d:c1:dd: 31:f0:7d:2b:f7:ea:58:47:47:26:10:cd:93:18:2c: bf:20:14:5d:7b:29:7f:43:a3:1b:76:4d:31:6e:71: 1a:eb:e9:90:ef:46:cc:53:02:df:c7:89:45:4c:18: a0:5c:d7:b2:35:aa:a6:53:30:01:ab:7a:3e:a5:df: 60:e6:62:de:a6:5f:ae:c2:1d:38:bb:df:83:20:bf: af:24:3b:7a:5f:c2:be:43:b2:cb:96:9b:ed:8a:a4: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:46:E1:CA:46:32:E3:C9:76:02:D0:41:EC:27:F7:E1:D5:8C:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.255.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3d:a2:74:78:a1:0b:d6:1e:fd:0d:05:24:bd:60:19:88:5c:83: 26:4a:ac:79:a1:f3:45:30:18:ea:ec:ba:a3:83:a0:64:d6:45: 83:a7:6b:49:ed:1d:10:ea:d9:64:46:28:cd:35:50:44:f0:89: ae:7b:13:46:70:24:b8:3c:b7:f4:c1:16:ba:f4:ee:d7:2b:36: 50:2e:46:c1:4e:ff:3e:fd:d6:a8:db:cb:e1:1d:54:2f:17:30: 00:74:e7:59:0a:38:20:d9:2e:ff:ad:0e:44:bf:7c:49:fe:05: 80:c4:a6:89:63:2d:87:1a:70:ff:18:8f:6e:74:bd:70:d7:63: 51:36:22:40:c7:ec:0d:03:c9:54:c8:a2:03:eb:2e:86:54:aa: 86:77:b8:e3:af:cd:5a:b0:c3:73:f4:18:a1:cb:37:38:2e:90: f2:f9:bd:96:e8:60:24:ee:5e:e8:73:3b:fd:ba:b0:99:88:e0: 2e:64:5a:c6:6c:3c:63:78:63:b6:5a:66:54:d4:35:d6:b8:d3: c6:c8:1d:69:6e:3c:fd:a9:32:5b:b7:34:99:14:6e:1d:6b:ae: 74:a4:b3:33:cc:b7:d0:39:6b:4a:0d:2e:e5:25:da:6a:de:52: 1b:b3:61:a3:94:b9:53:02:3b:b6:f8:6c:64:61:d7:d2:a6:dc: 05:12:32:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQG4E/8SHzaNSS4nLt/1himU5m48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAzMTU2WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjM1NGE1ZmY0Njg5YTY0MDVhMjI1MTg4NGI3NWYxMmNj MTNhNzEzYzY5YjQyZDk0NTk0OTc0YmM4YmNmYzQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/ie1QURVGbOjjeERRo3wAKeevNiOv7kPLu+IUL4pVxwYI VR5e3yOh/4VIyNPkd08Hvs2Lpr8uWP7d6H1d4iSGL1CODSekFKeCtp4ayG7Xm/Ww BniIoARv4knk0lkG0k1NeecS9yy2pVBCjfz1sJZtxX17egAmUFkorh6cme6Sdk5x aNNL04xtziGe5XoySNmhScookR9/ON9uSn0GDu5C733B3THwfSv36lhHRyYQzZMY LL8gFF17KX9Doxt2TTFucRrr6ZDvRsxTAt/HiUVMGKBc17I1qqZTMAGrej6l32Dm Yt6mX67CHTi734Mgv68kO3pfwr5DssuWm+2KpMGZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNPhG4cpGMuPJdgLQQewn9+HVjMswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmODI0NjZmLTNjNDItNGM1YS1iZGY1LTVjMTZhNTc0MGJkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdC/wAwDQYJKoZIhvcNAQELBQADggEBAD2idHihC9Ye/Q0FJL1gGYhcgyZK rHmh80UwGOrsuqODoGTWRYOna0ntHRDq2WRGKM01UETwia57E0ZwJLg8t/TBFrr0 7tcrNlAuRsFO/z791qjby+EdVC8XMAB051kKOCDZLv+tDkS/fEn+BYDEpoljLYca cP8Yj250vXDXY1E2IkDH7A0DyVTIogPrLoZUqoZ3uOOvzVqww3P0GKHLNzgukPL5 vZboYCTuXuhzO/26sJmI4C5kWsZsPGN4Y7ZaZlTUNda408bIHWluPP2pMlu3NJkU bh1rrnSkszPMt9A5a0oNLuUl2mreUhuzYaOUuVMCO7b4bGRh19Km3AUSMls= -----END CERTIFICATE-----Generated at Sun Jun 29 09:17:51 2025 by rpki-client