$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6577d31e-29f7-48c7-a3af-ce364b210b05.roa File: 6577d31e-29f7-48c7-a3af-ce364b210b05.roa (raw, json) Hash identifier: P00qnUCDMZuCFbfOLW/653av1ZWyrEA0ns+inURhbz0= Subject key identifier: 8E:6F:9F:6E:65:C1:E4:0B:7E:53:49:8C:FB:C1:DE:F3:AF:D8:D0:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A9681C67F96F0EED9C9E71D98BFACD706D5DBD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6577d31e-29f7-48c7-a3af-ce364b210b05.roa Signing time: Fri 02 May 2025 00:01:39 +0000 ROA not before: Fri 02 May 2025 00:01:39 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.233.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:96:81:c6:7f:96:f0:ee:d9:c9:e7:1d:98:bf:ac:d7:06:d5:db:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:01:39 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=4d654ce781a1cb515179a17c42f308aefc248293359aac4826c097248f015a1b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:32:e0:42:d3:80:f8:8b:64:a1:15:17:f7: 5c:80:bb:e1:a3:f0:d7:d1:d6:ff:e0:d9:f7:33:6b: 5d:ef:37:f6:66:9e:5b:cc:7f:87:bf:cf:5f:f8:41: 8d:c0:93:31:75:ce:9b:08:37:f2:d6:8b:45:01:ca: 6b:30:8b:8c:bd:1f:9a:e5:e2:7c:27:dd:b8:70:12: 8b:cc:87:62:33:b9:19:f7:30:cb:aa:85:e7:55:6c: 9f:13:78:42:99:77:b7:7f:f0:00:31:5a:46:3b:c8: 56:d5:7b:20:7c:09:90:49:77:53:0f:ce:f9:2f:38: 07:8d:36:5a:e9:ee:e8:e1:ff:b9:a9:9b:bd:13:1f: d4:55:86:a8:f5:66:36:05:5c:fe:9a:75:b7:98:a2: 6d:77:13:fa:9d:35:cd:0e:33:e1:45:e8:2d:c5:04: 33:5b:8e:28:5c:c6:8c:5d:50:58:c1:b9:46:01:57: 46:d8:81:83:14:45:b0:31:52:02:00:5f:fa:36:28: 92:4b:1a:18:2f:a8:35:0e:c2:e4:8d:98:75:fb:4c: 16:ef:dc:70:29:b1:76:ed:c5:11:09:48:6b:51:45: af:8a:e1:15:04:ca:77:21:fb:6e:97:bd:67:ec:60: 03:c2:00:e9:5a:cc:28:1b:83:a9:0a:ed:ba:0e:1d: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:9F:6E:65:C1:E4:0B:7E:53:49:8C:FB:C1:DE:F3:AF:D8:D0:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6577d31e-29f7-48c7-a3af-ce364b210b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:7a:4c:f4:c2:e9:a3:00:68:ad:04:df:25:52:1f:49:9e:8f: a7:e6:45:dd:e0:60:94:17:97:31:df:a5:75:e8:7f:51:67:dd: c2:a4:e5:7e:31:7f:ae:d8:fa:23:c4:d8:f0:27:a0:46:1b:26: 3f:5b:42:cf:ad:81:7c:04:64:ef:8f:1e:1a:78:7a:77:38:11: d5:a7:2f:b5:dd:f4:c8:dc:eb:e0:e8:73:59:e3:f6:e1:c3:65: 78:0c:24:f6:a7:d0:f9:83:9b:dc:a0:dc:9d:d9:d2:81:a0:12: e5:4e:15:23:30:ee:36:4d:ae:cd:18:05:4d:d3:4d:34:ef:a7: 13:d7:9b:88:b1:d0:9b:c9:d5:0c:11:48:f3:53:0c:aa:f1:e4: 88:0c:9f:9e:f4:58:49:19:15:c8:df:07:40:0c:f4:15:c7:4b: c9:6c:4b:6f:11:31:78:ed:0d:ca:7e:5d:17:83:a1:5c:8b:d4: 5e:5d:b0:e9:a8:93:fa:63:d4:25:67:e9:6f:c5:d7:f9:e8:5e: a4:d8:99:0d:90:f5:0b:39:86:d2:42:bf:ba:1d:53:c2:9c:6d: ca:70:ba:98:1e:ca:a7:d6:e0:61:6d:7b:35:f0:fe:4e:60:19: a5:2e:d8:f7:3c:5b:02:7d:82:a6:24:29:1b:2e:fc:df:e7:ff: 26:02:80:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCpaBxn+W8O7ZyecdmL+s1wbV29YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMTM5WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDY1NGNlNzgxYTFjYjUxNTE3OWExN2M0MmYzMDhhZWZj MjQ4MjkzMzU5YWFjNDgyNmMwOTcyNDhmMDE1YTFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNTDLgQtOA+ItkoRUX91yAu+Gj8NfR1v/g2fcza13vN/Zm nlvMf4e/z1/4QY3AkzF1zpsIN/LWi0UBymswi4y9H5rl4nwn3bhwEovMh2IzuRn3 MMuqhedVbJ8TeEKZd7d/8AAxWkY7yFbVeyB8CZBJd1MPzvkvOAeNNlrp7ujh/7mp m70TH9RVhqj1ZjYFXP6adbeYom13E/qdNc0OM+FF6C3FBDNbjihcxoxdUFjBuUYB V0bYgYMURbAxUgIAX/o2KJJLGhgvqDUOwuSNmHX7TBbv3HApsXbtxREJSGtRRa+K 4RUEynch+26XvWfsYAPCAOlazCgbg6kK7boOHZc7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjm+fbmXB5At+U0mM+8He86/Y0HwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1NzdkMzFlLTI5ZjctNDhjNy1hM2FmLWNlMzY0YjIxMGIwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP6TANBgkqhkiG9w0BAQsFAAOCAQEArHpM9MLpowBorQTfJVIfSZ6Pp+ZF 3eBglBeXMd+ldeh/UWfdwqTlfjF/rtj6I8TY8CegRhsmP1tCz62BfARk748eGnh6 dzgR1acvtd30yNzr4OhzWeP24cNleAwk9qfQ+YOb3KDcndnSgaAS5U4VIzDuNk2u zRgFTdNNNO+nE9ebiLHQm8nVDBFI81MMqvHkiAyfnvRYSRkVyN8HQAz0FcdLyWxL bxExeO0Nyn5dF4OhXIvUXl2w6aiT+mPUJWfpb8XX+ehepNiZDZD1CzmG0kK/uh1T wpxtynC6mB7Kp9bgYW17NfD+TmAZpS7Y9zxbAn2CpiQpGy783+f/JgKAVw== -----END CERTIFICATE-----Generated at Sun May 11 03:36:22 2025 by rpki-client