$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce2ce4c-04db-4c09-979d-8531a9b21d23.roa File: 7ce2ce4c-04db-4c09-979d-8531a9b21d23.roa (raw, json) Hash identifier: xk+83L6wpVSi3GGPJ2/vawaxC7U4+kjKD1VclDf5EeA= Subject key identifier: A4:49:10:89:1C:3E:14:E8:27:D7:76:84:67:4E:F3:09:B7:05:C8:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D05D57798714D26B01EE7B1C91CAB091A642B67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce2ce4c-04db-4c09-979d-8531a9b21d23.roa Signing time: Wed 07 May 2025 00:11:11 +0000 ROA not before: Wed 07 May 2025 00:11:11 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 398378 IP address blocks: 35.33.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:05:d5:77:98:71:4d:26:b0:1e:e7:b1:c9:1c:ab:09:1a:64:2b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:11:11 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=c99381e30387e0cec78e634c25a3d2f73a96ee298ca00dcc43c139abbbf2e534, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:6d:dd:68:53:3e:a6:b3:f8:f3:f1:80:37: 91:66:31:0f:1a:b4:75:16:2d:f1:96:4b:c1:95:f8: b9:22:62:4c:7a:2c:e6:88:bc:96:6a:57:97:10:88: df:a4:87:27:39:1d:99:c9:18:47:44:ff:17:3a:ef: 5f:39:c3:52:50:e4:8d:3c:4b:1f:47:f8:c5:22:de: 7f:b2:5a:33:9d:e8:d0:60:0e:4b:57:56:a7:92:32: 41:e4:c8:a5:5e:dc:2e:dd:82:16:fe:fd:c5:4e:d1: 99:09:71:3a:ea:ce:01:9a:ba:34:a1:dc:59:8e:dc: ef:25:15:1e:45:8e:09:40:5e:01:f6:90:92:35:25: 16:90:0d:73:bd:b3:83:64:06:01:c5:31:89:68:01: 61:ce:25:85:f6:8a:df:28:0b:cf:90:c6:b3:b5:f1: 20:af:85:e5:c5:f1:9d:88:e6:ca:8b:14:2d:0c:83: 5a:0d:0a:a6:44:92:0c:53:bd:ec:b2:53:8e:33:b3: dd:63:a3:66:df:9b:c7:ed:d5:ff:ad:0f:8a:de:8a: 3f:03:66:f2:b8:e3:aa:80:da:05:c7:d2:92:16:f1: 34:f0:f3:2b:91:a6:20:46:08:fa:66:18:b4:07:8f: 03:19:29:08:f0:fb:fc:34:ce:f6:10:52:52:ea:4e: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:49:10:89:1C:3E:14:E8:27:D7:76:84:67:4E:F3:09:B7:05:C8:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce2ce4c-04db-4c09-979d-8531a9b21d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.33.128.0/17 Signature Algorithm: sha256WithRSAEncryption 66:5f:25:07:ca:e9:dd:57:7a:73:0f:cd:a2:17:09:c4:79:71: 65:72:21:80:fa:35:44:a8:3c:00:91:46:5d:26:56:6d:b0:0d: 34:6b:18:43:02:3b:da:0c:d2:4d:2f:76:cf:19:c8:1a:f2:e1: 4a:fe:46:8c:cd:3b:ce:96:d1:39:d7:ed:30:46:ee:29:e4:de: 1e:71:70:82:b8:de:ae:19:73:55:17:7e:ab:00:c2:e6:d8:72: fe:df:26:71:56:ed:a6:85:bc:74:62:88:d1:5f:24:78:c3:f0: 39:42:49:b3:d0:3b:01:3f:19:b0:c2:2b:78:45:a9:f1:7a:00: 91:5a:72:7f:4b:7b:0d:0b:bc:71:a5:4e:8b:89:b4:7c:28:2e: b0:b5:ce:30:e7:2a:ae:8d:9a:75:75:f6:63:f0:4c:7d:df:e1: 4e:7d:7f:90:a6:cb:f5:78:a6:a5:a9:f8:c5:51:06:7b:6b:50: 1a:cf:86:f8:44:f8:7d:70:29:b3:18:c0:2a:b2:3e:1d:ae:0b: fb:0a:43:96:ff:47:8a:f5:41:22:e5:15:46:b5:48:44:96:5f: fc:3d:3e:5d:fd:5b:4a:9a:8b:12:dc:79:7c:48:19:3f:5c:04: 14:4f:f1:90:ec:9f:15:0e:ef:e5:a3:93:9d:b0:e8:58:27:32: c9:8d:dc:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQXVd5hxTSawHuexyRyrCRpkK2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMTExWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTkzODFlMzAzODdlMGNlYzc4ZTYzNGMyNWEzZDJmNzNh OTZlZTI5OGNhMDBkY2M0M2MxMzlhYmJiZjJlNTM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2gG3daFM+prP48/GAN5FmMQ8atHUWLfGWS8GV+LkiYkx6 LOaIvJZqV5cQiN+khyc5HZnJGEdE/xc67185w1JQ5I08Sx9H+MUi3n+yWjOd6NBg DktXVqeSMkHkyKVe3C7dghb+/cVO0ZkJcTrqzgGaujSh3FmO3O8lFR5FjglAXgH2 kJI1JRaQDXO9s4NkBgHFMYloAWHOJYX2it8oC8+QxrO18SCvheXF8Z2I5sqLFC0M g1oNCqZEkgxTveyyU44zs91jo2bfm8ft1f+tD4reij8DZvK446qA2gXH0pIW8TTw 8yuRpiBGCPpmGLQHjwMZKQjw+/w0zvYQUlLqTmvrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpEkQiRw+FOgn13aEZ07zCbcFyMIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjZTJjZTRjLTA0ZGItNGMwOS05NzlkLTg1MzFhOWIyMWQyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjIYAwDQYJKoZIhvcNAQELBQADggEBAGZfJQfK6d1XenMPzaIXCcR5cWVy IYD6NUSoPACRRl0mVm2wDTRrGEMCO9oM0k0vds8ZyBry4Ur+RozNO86W0TnX7TBG 7ink3h5xcIK43q4Zc1UXfqsAwubYcv7fJnFW7aaFvHRiiNFfJHjD8DlCSbPQOwE/ GbDCK3hFqfF6AJFacn9Lew0LvHGlTouJtHwoLrC1zjDnKq6NmnV19mPwTH3f4U59 f5Cmy/V4pqWp+MVRBntrUBrPhvhE+H1wKbMYwCqyPh2uC/sKQ5b/R4r1QSLlFUa1 SESWX/w9Pl39W0qaixLceXxIGT9cBBRP8ZDsnxUO7+Wjk52w6FgnMsmN3HI= -----END CERTIFICATE-----Generated at Sun May 11 17:28:49 2025 by rpki-client