$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa File: 67513ede-733b-4d8d-92a1-496d530299e4.roa (raw, json) Hash identifier: 11fJD3cGu8o48ePkFi7sATUKxHYB/0re+HUq7IsckQc= Subject key identifier: 03:EA:16:FF:03:CE:92:E5:D6:60:DC:C9:25:1A:4A:55:9E:33:6F:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 523B795E3654A9C75944D0E90CAF1499058EFDA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa Signing time: Mon 16 Jun 2025 15:12:12 +0000 ROA not before: Mon 16 Jun 2025 15:12:12 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.157.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3b:79:5e:36:54:a9:c7:59:44:d0:e9:0c:af:14:99:05:8e:fd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:12:12 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=350486cb86d859825e143bd733318e6422d09313963072da3e2ffed6336735a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:e5:42:79:ba:31:17:c5:6f:d4:d5:23:ec: 52:a4:02:9c:1f:f3:31:91:db:a5:a5:59:3a:e1:34: 8f:7b:e8:b1:4a:2b:d9:eb:d6:0c:4f:cf:3a:b4:60: cc:b2:2c:ef:cd:18:ec:e2:57:ba:6c:0e:32:9d:84: ac:d9:de:a6:2a:df:ec:9d:f2:03:3b:b3:bd:52:ef: 88:6f:66:2e:0e:fd:49:a1:4a:4f:d7:33:e9:5b:4c: 44:ea:a5:65:53:89:d9:e5:60:2e:54:0f:51:a5:3b: b2:07:85:91:9d:ce:14:a5:70:23:7d:75:0f:a3:e9: 45:06:53:88:03:f0:14:a5:d2:98:ea:fe:53:78:3a: a8:11:94:a0:43:e3:a4:9a:ac:cb:a0:7d:ac:21:8b: b6:49:0a:2a:4f:e3:74:23:26:45:21:91:71:9d:90: 79:d3:9a:fb:7a:51:fe:5b:de:66:cf:3a:7e:d7:ac: 57:dc:57:47:f5:aa:b0:4f:f9:d4:e0:d6:65:c5:eb: af:f1:98:5f:72:36:d9:57:df:86:d9:9b:c6:ee:e7: 80:6a:84:13:3a:82:62:9a:35:8a:49:fe:f5:71:40: 40:fa:84:68:43:d4:cf:e4:62:69:03:02:cd:df:33: 72:09:9d:1d:aa:af:f4:ff:ba:c8:5f:04:47:21:41: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EA:16:FF:03:CE:92:E5:D6:60:DC:C9:25:1A:4A:55:9E:33:6F:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.157.64.0/21 Signature Algorithm: sha256WithRSAEncryption 48:f0:ac:99:b1:79:16:bc:9d:d8:3b:81:7d:47:b6:85:f0:99: e2:a3:d6:75:71:44:43:f3:82:8e:5a:e6:fa:63:ab:93:3e:9c: 8f:71:c4:53:ab:63:58:7a:34:de:9a:34:81:33:bd:ea:b0:0f: 57:b2:b4:b9:b6:86:e1:b4:f6:bf:a9:be:ab:a1:45:5c:c8:d7: 04:28:cc:ab:27:4e:c1:6f:a6:2f:40:e9:4a:e6:f9:f5:ef:8e: e6:f9:7e:80:5e:8a:86:5a:b0:c9:57:a0:68:27:9a:2a:e5:ea: 5c:6e:97:77:0b:0e:1b:21:ab:78:85:c1:48:e7:58:25:9b:8c: 72:31:59:38:fa:e2:5a:70:c4:21:a8:4d:c6:80:8f:1c:0e:c5: 2b:23:99:90:3a:d2:da:56:a3:49:e8:23:7c:3e:70:94:b4:1c: 9d:87:23:25:08:c0:ac:7e:50:91:d1:2a:16:37:dd:ed:76:e6: d0:c5:e7:dd:20:4a:81:e4:d6:db:67:1f:a3:e4:2c:25:3c:3a: 89:8b:a9:53:60:93:83:21:60:8d:f2:62:a9:60:ac:7c:fa:6d: f6:ef:f8:a8:e8:75:2a:9c:dc:a3:c5:f6:6f:0c:29:f0:a8:89: bc:01:3d:27:17:b1:e8:28:df:c6:bc:04:d4:39:f5:12:b9:bf: 49:ac:2c:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUjt5XjZUqcdZRNDpDK8UmQWO/aQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUxMjEyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTA0ODZjYjg2ZDg1OTgyNWUxNDNiZDczMzMxOGU2NDIy ZDA5MzEzOTYzMDcyZGEzZTJmZmVkNjMzNjczNWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNGOVCeboxF8Vv1NUj7FKkApwf8zGR26WlWTrhNI976LFK K9nr1gxPzzq0YMyyLO/NGOziV7psDjKdhKzZ3qYq3+yd8gM7s71S74hvZi4O/Umh Sk/XM+lbTETqpWVTidnlYC5UD1GlO7IHhZGdzhSlcCN9dQ+j6UUGU4gD8BSl0pjq /lN4OqgRlKBD46SarMugfawhi7ZJCipP43QjJkUhkXGdkHnTmvt6Uf5b3mbPOn7X rFfcV0f1qrBP+dTg1mXF66/xmF9yNtlX34bZm8bu54BqhBM6gmKaNYpJ/vVxQED6 hGhD1M/kYmkDAs3fM3IJnR2qr/T/ushfBEchQaKNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA+oW/wPOkuXWYNzJJRpKVZ4zb/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3NTEzZWRlLTczM2ItNGQ4ZC05MmExLTQ5NmQ1MzAyOTllNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPAnUAwDQYJKoZIhvcNAQELBQADggEBAEjwrJmxeRa8ndg7gX1HtoXwmeKj 1nVxREPzgo5a5vpjq5M+nI9xxFOrY1h6NN6aNIEzveqwD1eytLm2huG09r+pvquh RVzI1wQozKsnTsFvpi9A6Urm+fXvjub5foBeioZasMlXoGgnmirl6lxul3cLDhsh q3iFwUjnWCWbjHIxWTj64lpwxCGoTcaAjxwOxSsjmZA60tpWo0noI3w+cJS0HJ2H IyUIwKx+UJHRKhY33e125tDF590gSoHk1ttnH6PkLCU8OomLqVNgk4MhYI3yYqlg rHz6bfbv+KjodSqc3KPF9m8MKfCoibwBPScXsego38a8BNQ59RK5v0msLD0= -----END CERTIFICATE-----Generated at Thu Jul 3 17:13:53 2025 by rpki-client