$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa File: 61d0d1a8-1d1a-4b6a-be79-09198325212d.roa (raw, json) Hash identifier: EW+A5v3bQyeQi+CnEb7KCW5FAsq63A1SkcZ5bAl9zUs= Subject key identifier: B5:54:B3:09:10:8E:6E:F3:B3:27:29:E1:38:12:90:42:6F:82:4B:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66BA56394A33682B7BDCA1781AC5FD034B2A4D1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa Signing time: Sat 03 May 2025 00:41:28 +0000 ROA not before: Sat 03 May 2025 00:41:28 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 65.4.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ba:56:39:4a:33:68:2b:7b:dc:a1:78:1a:c5:fd:03:4b:2a:4d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:41:28 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=309d16e407366023ce9d45dda8dcc7517f115ad9a91ef84d256e295b86b3f315, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:c0:24:10:7e:12:e5:9d:be:52:e8:43:a3: 7b:dc:13:49:ec:65:8c:e9:66:e0:d7:38:5e:cb:95: 44:17:d7:a7:b9:e7:97:98:dd:05:57:61:0a:77:fb: 68:d4:06:f7:fe:e8:64:51:24:4b:f4:5c:48:9a:53: b9:7b:e8:4a:8b:b6:f1:f1:27:48:b0:96:24:e5:43: 56:ae:63:83:07:f5:c4:a3:0f:62:37:25:04:2e:ff: 7b:72:07:80:80:92:2e:21:5b:59:85:81:b1:27:1c: 23:f2:a3:91:23:e5:e4:fc:8e:ef:c8:d7:51:3d:33: 74:1b:d2:96:a7:9c:ae:f9:ce:1e:7f:65:e4:f8:06: f3:ff:dd:d0:10:ee:2c:e2:64:e5:34:3c:db:b0:55: dd:32:73:27:d4:a0:ad:cf:c6:d8:e4:2e:4c:92:cf: 98:26:96:22:d2:c8:b0:cd:69:05:0c:b0:b5:55:68: c2:d4:6c:ea:12:3a:05:6a:69:d7:f8:51:1c:40:8c: 89:fb:4d:a9:6c:25:de:48:bb:32:d4:16:a8:f5:d3: ec:f0:a5:75:62:33:7b:15:c0:b2:05:51:97:2a:30: 3a:63:1d:e0:39:2b:ea:25:e7:19:34:9f:d7:ac:c5: 8b:9a:ce:88:02:27:63:ae:06:23:29:53:3a:36:07: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:B3:09:10:8E:6E:F3:B3:27:29:E1:38:12:90:42:6F:82:4B:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.4.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:00:8c:c1:74:a7:ff:12:ff:1c:17:b7:e8:4b:3e:a9:71:48: 61:f9:d5:10:33:52:c8:94:dc:c1:39:81:3e:cf:9f:ee:61:d6: 7c:79:27:fa:fd:28:5d:f1:5b:9b:86:47:4c:56:8b:db:29:d7: 03:79:07:aa:43:6d:21:9b:ea:87:38:65:42:9e:ee:b2:f4:08: 18:2d:20:00:9c:32:87:52:14:0c:79:09:7d:52:1c:6a:ed:70: 4e:b2:ad:e0:f6:03:bd:22:24:af:43:a5:0f:53:4e:11:bb:98: 25:9e:35:4c:37:7d:47:ff:ee:47:43:fb:d6:89:77:11:71:1a: f7:33:b5:89:34:e6:0b:6b:af:06:1d:3c:57:19:57:6c:5b:56: 32:ee:0a:02:17:1a:6c:06:b5:10:3a:7e:72:17:cb:67:a8:ec: 66:29:07:62:3c:55:ae:98:e0:8e:95:32:1e:ff:98:e4:0e:7f: e2:8b:12:db:f6:e3:0b:9a:2b:58:7a:14:ae:43:9f:e8:da:e8: b2:42:78:54:ec:c2:6f:1c:b1:de:76:b4:48:6f:d1:c3:fa:da: 24:e2:c5:7f:fd:95:76:4f:0c:88:0a:65:88:f6:8c:62:4f:8f: e9:64:18:5e:ca:40:6c:78:f8:85:41:de:f4:c9:c1:3e:32:65: 9b:25:52:0f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZrpWOUozaCt73KF4GsX9A0sqTR8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA0MTI4WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDlkMTZlNDA3MzY2MDIzY2U5ZDQ1ZGRhOGRjYzc1MTdm MTE1YWQ5YTkxZWY4NGQyNTZlMjk1Yjg2YjNmMzE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ4MAkEH4S5Z2+UuhDo3vcE0nsZYzpZuDXOF7LlUQX16e5 55eY3QVXYQp3+2jUBvf+6GRRJEv0XEiaU7l76EqLtvHxJ0iwliTlQ1auY4MH9cSj D2I3JQQu/3tyB4CAki4hW1mFgbEnHCPyo5Ej5eT8ju/I11E9M3Qb0pannK75zh5/ ZeT4BvP/3dAQ7iziZOU0PNuwVd0ycyfUoK3PxtjkLkySz5gmliLSyLDNaQUMsLVV aMLUbOoSOgVqadf4URxAjIn7TalsJd5IuzLUFqj10+zwpXViM3sVwLIFUZcqMDpj HeA5K+ol5xk0n9esxYuazogCJ2OuBiMpUzo2B+vdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtVSzCRCObvOzJynhOBKQQm+CS84wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxZDBkMWE4LTFkMWEtNGI2YS1iZTc5LTA5MTk4MzI1MjEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBBBDANBgkqhkiG9w0BAQsFAAOCAQEAhgCMwXSn/xL/HBe36Es+qXFIYfnV EDNSyJTcwTmBPs+f7mHWfHkn+v0oXfFbm4ZHTFaL2ynXA3kHqkNtIZvqhzhlQp7u svQIGC0gAJwyh1IUDHkJfVIcau1wTrKt4PYDvSIkr0OlD1NOEbuYJZ41TDd9R//u R0P71ol3EXEa9zO1iTTmC2uvBh08VxlXbFtWMu4KAhcabAa1EDp+chfLZ6jsZikH YjxVrpjgjpUyHv+Y5A5/4osS2/bjC5orWHoUrkOf6NroskJ4VOzCbxyx3na0SG/R w/raJOLFf/2Vdk8MiApliPaMYk+P6WQYXspAbHj4hUHe9MnBPjJlmyVSDw== -----END CERTIFICATE-----Generated at Mon May 5 05:11:01 2025 by rpki-client