$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa File: 7dc9f0e1-f459-488b-91a4-d783253227a4.roa (raw, json) Hash identifier: SKlLFAxvPRDJen+Y49zoLzMaif+HpEEwkpemj3XCgtU= Subject key identifier: C5:AF:8F:67:92:8E:FB:EC:D8:E3:D4:68:5A:00:CB:E7:E6:79:C4:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B6CC60F9483B3B67B2FF6ABBA49C26BAA0F320B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa Signing time: Fri 02 May 2025 00:00:30 +0000 ROA not before: Fri 02 May 2025 00:00:30 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6c:c6:0f:94:83:b3:b6:7b:2f:f6:ab:ba:49:c2:6b:aa:0f:32:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:00:30 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=3c9192071f52cf42938ffc1719c3e687754528ae2c179d0931495cb80650e068, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:81:51:91:98:62:cf:dd:89:86:50:d7:41: 2c:05:ac:e7:0d:5c:3d:5f:ee:38:f6:15:a1:f1:9f: 50:84:ce:02:e4:37:32:7e:0d:5f:e0:83:aa:89:81: 61:4c:17:0c:1c:02:cc:7c:7a:b3:67:9f:d6:7a:94: fa:e9:64:9f:57:9b:0e:73:87:25:6e:5d:0f:9c:52: 25:e3:06:be:f1:37:d5:e3:9a:40:48:e2:6e:22:3f: 75:dc:5d:7d:7c:62:7a:a2:f5:0c:2d:07:1f:ff:fe: 46:0d:f5:95:e4:14:82:cb:44:a8:89:cb:97:fb:1d: f6:73:27:c9:a3:40:d8:7b:85:0d:21:5f:e6:83:8d: 11:86:74:30:b9:51:86:47:06:2f:bb:f7:7b:c9:5e: 2f:8a:27:24:f8:f5:62:e6:11:4d:ee:53:e4:1f:2d: c1:5e:54:ae:63:35:47:67:5e:af:fd:3e:12:fe:8f: d2:2a:b2:db:5c:35:26:f0:ce:81:86:00:c7:4f:c9: 56:91:97:c0:21:9f:02:a4:d5:00:20:4e:1c:95:17: 0f:b8:6c:c2:03:df:bb:a2:66:7d:54:6a:05:fd:d3: fb:09:20:27:26:78:77:e0:bf:1d:90:44:28:02:d0: d3:0f:41:44:26:4c:68:64:88:ea:c4:d9:e9:1f:9c: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:8F:67:92:8E:FB:EC:D8:E3:D4:68:5A:00:CB:E7:E6:79:C4:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:9c:ea:d9:ff:55:93:0f:cc:7b:18:2d:9c:3b:1f:ae:3e:6c: db:b5:0c:c3:2f:7f:75:ae:e1:c6:30:a2:d8:b8:af:a3:c1:8f: 5e:5e:f4:e6:23:4d:01:5d:31:4c:bc:50:32:cd:d5:23:8f:71: 2c:18:ce:6a:ca:d2:19:f3:c9:93:fd:6c:ca:d1:ef:14:76:91: 16:f8:9a:6e:0f:33:a2:42:7c:9c:98:56:9c:0e:a5:3e:ad:e1: f1:1d:10:8a:24:dc:6e:c1:3b:f4:a4:f7:36:6a:67:00:96:21: 5c:2c:ab:20:fe:8d:2b:76:af:cb:43:ca:1b:b0:1c:ae:f8:8e: 14:21:e2:2c:ce:c2:89:c2:9b:14:63:26:17:9e:27:68:fd:32: c5:75:dc:16:d4:f6:e7:16:9d:6a:4f:65:5f:df:67:02:e7:59: 9e:6f:d7:fe:02:17:67:15:63:18:bb:49:45:bf:a8:46:a7:68: d5:b3:64:11:71:07:d0:92:8d:7f:ee:0d:7f:f3:e7:55:b4:36: 4b:89:f6:90:60:fc:45:ff:34:7e:e2:ff:dd:56:7a:bc:76:12: 4a:78:8e:d5:5d:97:a8:1a:d6:63:9a:62:32:5f:b7:ea:ac:9f: 10:68:77:ac:33:5a:a5:8d:2e:f2:af:5d:bb:63:e1:c5:81:2c: b3:2e:9c:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW2zGD5SDs7Z7L/aruknCa6oPMgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMDMwWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzkxOTIwNzFmNTJjZjQyOTM4ZmZjMTcxOWMzZTY4Nzc1 NDUyOGFlMmMxNzlkMDkzMTQ5NWNiODA2NTBlMDY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo84FRkZhiz92JhlDXQSwFrOcNXD1f7jj2FaHxn1CEzgLk NzJ+DV/gg6qJgWFMFwwcAsx8erNnn9Z6lPrpZJ9Xmw5zhyVuXQ+cUiXjBr7xN9Xj mkBI4m4iP3XcXX18Ynqi9QwtBx///kYN9ZXkFILLRKiJy5f7HfZzJ8mjQNh7hQ0h X+aDjRGGdDC5UYZHBi+793vJXi+KJyT49WLmEU3uU+QfLcFeVK5jNUdnXq/9PhL+ j9IqsttcNSbwzoGGAMdPyVaRl8AhnwKk1QAgThyVFw+4bMID37uiZn1UagX90/sJ ICcmeHfgvx2QRCgC0NMPQUQmTGhkiOrE2ekfnLOBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxa+PZ5KO++zY49RoWgDL5+Z5xA4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYzlmMGUxLWY0NTktNDg4Yi05MWE0LWQ3ODMyNTMyMjdhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQejANBgkqhkiG9w0BAQsFAAOCAQEAFpzq2f9Vkw/MexgtnDsfrj5s27UM wy9/da7hxjCi2Livo8GPXl705iNNAV0xTLxQMs3VI49xLBjOasrSGfPJk/1sytHv FHaRFviabg8zokJ8nJhWnA6lPq3h8R0QiiTcbsE79KT3NmpnAJYhXCyrIP6NK3av y0PKG7AcrviOFCHiLM7CicKbFGMmF54naP0yxXXcFtT25xadak9lX99nAudZnm/X /gIXZxVjGLtJRb+oRqdo1bNkEXEH0JKNf+4Nf/PnVbQ2S4n2kGD8Rf80fuL/3VZ6 vHYSSniO1V2XqBrWY5piMl+36qyfEGh3rDNapY0u8q9du2PhxYEssy6cwg== -----END CERTIFICATE-----Generated at Sun May 11 17:05:46 2025 by rpki-client