$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ef99212-35bd-4738-b84a-e75c421221ab.roa File: 7ef99212-35bd-4738-b84a-e75c421221ab.roa (raw, json) Hash identifier: 8La0NITAYW64ek+uxrEZgEEmCSx2AFiM76Az8tfq4Wc= Subject key identifier: 5E:D7:F3:42:A6:38:F0:D9:3E:46:95:6A:DC:4D:76:3E:7B:3C:94:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22410C1CFFE4063B340BDC836B3359D0C3CDAA6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ef99212-35bd-4738-b84a-e75c421221ab.roa Signing time: Tue 29 Apr 2025 00:21:51 +0000 ROA not before: Tue 29 Apr 2025 00:21:51 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 71.145.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:41:0c:1c:ff:e4:06:3b:34:0b:dc:83:6b:33:59:d0:c3:cd:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:21:51 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=66ffca7e8cebbdaa7015a1e141692340af07e1e7f62745cbae79a142554799c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:67:04:a6:35:06:5d:ab:a6:74:f4:fa:92: 97:4a:62:e4:bc:88:b3:b1:74:c8:f0:16:e2:dd:78: a4:50:ed:47:b7:7a:69:a6:b2:a5:96:23:dc:3d:11: 31:fd:62:78:74:84:a4:be:87:51:f3:d8:c4:9a:c1: e6:75:10:1c:fd:df:6c:cf:48:03:c2:94:6b:a8:9d: 71:18:6c:86:3f:56:2d:6c:1e:43:37:84:91:47:3c: 2d:f3:f6:a4:af:04:64:4c:88:6c:3d:88:bc:46:0f: ec:63:1c:29:26:24:4e:9b:29:13:14:4c:d5:7a:a4: ff:7f:29:92:df:66:e0:bd:0a:fd:d1:f5:73:18:4f: 42:69:3e:37:36:57:a4:7b:21:ae:ba:b5:e9:e8:8c: 77:59:d2:80:91:f2:f0:74:9d:ae:52:fa:bf:c0:b0: 62:b0:c0:84:20:a4:ff:a3:ee:87:4a:6e:0b:47:bf: 36:d7:d9:05:78:40:ac:b6:6e:52:97:bc:11:9e:84: 29:b5:99:f4:9f:02:a3:f3:1c:d9:d2:d2:37:5c:50: 75:7d:90:9d:8d:9f:02:54:47:42:45:53:35:06:d4: 14:b1:52:9a:cf:15:8d:61:c9:e6:d2:87:9a:e0:65: 5f:08:8c:f8:3e:20:71:ac:f4:93:8c:9a:48:47:53: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D7:F3:42:A6:38:F0:D9:3E:46:95:6A:DC:4D:76:3E:7B:3C:94:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ef99212-35bd-4738-b84a-e75c421221ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.145.128.0/18 Signature Algorithm: sha256WithRSAEncryption 71:32:ce:d1:dc:a9:42:6d:32:72:5a:69:27:9d:a7:fa:6f:57: 65:5c:83:a9:16:b1:4c:f7:3d:8b:d3:66:c3:e2:e6:bc:c8:e7: dc:03:ed:de:77:6f:2d:3d:65:db:e4:4e:93:dd:f5:d9:f7:4c: eb:26:ff:b0:25:fb:53:a0:0b:6c:75:0d:23:6b:a6:ff:e8:54: 5f:ac:5b:02:6b:7a:e7:29:3c:c7:db:52:79:38:6d:b7:5b:06: b5:3e:1d:42:62:81:e5:b5:31:fa:b8:ce:3e:52:ba:df:b2:56: c5:b3:3b:0e:d7:18:4c:1e:b6:33:cd:b0:14:6b:f1:53:19:7a: 1d:07:d0:b6:44:5d:24:24:a8:35:14:00:c8:b7:82:89:5c:90: 58:ff:d9:24:39:a4:10:7f:97:03:e9:e2:b7:26:fb:5d:ac:f4: 5e:54:31:b7:21:17:18:4b:44:4a:7d:cd:3a:d4:f3:ca:d2:0c: 47:bf:98:62:7d:a2:af:05:68:31:a5:33:69:d2:a1:ed:74:4c: dc:99:ec:db:c9:4f:95:81:88:10:4f:41:01:24:b4:62:9a:d0: bb:c4:9e:e7:8a:9d:72:92:2b:c0:1c:4e:30:34:5f:c0:62:87: ca:18:d4:38:97:65:6d:3f:e9:6a:a4:c2:56:35:b0:19:79:6c: 51:7d:e8:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIkEMHP/kBjs0C9yDazNZ0MPNqmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAyMTUxWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmZmY2E3ZThjZWJiZGFhNzAxNWExZTE0MTY5MjM0MGFm MDdlMWU3ZjYyNzQ1Y2JhZTc5YTE0MjU1NDc5OWM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzHmcEpjUGXaumdPT6kpdKYuS8iLOxdMjwFuLdeKRQ7Ue3 emmmsqWWI9w9ETH9Ynh0hKS+h1Hz2MSaweZ1EBz932zPSAPClGuonXEYbIY/Vi1s HkM3hJFHPC3z9qSvBGRMiGw9iLxGD+xjHCkmJE6bKRMUTNV6pP9/KZLfZuC9Cv3R 9XMYT0JpPjc2V6R7Ia66tenojHdZ0oCR8vB0na5S+r/AsGKwwIQgpP+j7odKbgtH vzbX2QV4QKy2blKXvBGehCm1mfSfAqPzHNnS0jdcUHV9kJ2NnwJUR0JFUzUG1BSx UprPFY1hyebSh5rgZV8IjPg+IHGs9JOMmkhHU2lvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXtfzQqY48Nk+RpVq3E12Pns8lLIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlZjk5MjEyLTM1YmQtNDczOC1iODRhLWU3NWM0MjEyMjFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHkYAwDQYJKoZIhvcNAQELBQADggEBAHEyztHcqUJtMnJaaSedp/pvV2Vc g6kWsUz3PYvTZsPi5rzI59wD7d53by09ZdvkTpPd9dn3TOsm/7Al+1OgC2x1DSNr pv/oVF+sWwJreucpPMfbUnk4bbdbBrU+HUJigeW1Mfq4zj5Sut+yVsWzOw7XGEwe tjPNsBRr8VMZeh0H0LZEXSQkqDUUAMi3golckFj/2SQ5pBB/lwPp4rcm+12s9F5U MbchFxhLREp9zTrU88rSDEe/mGJ9oq8FaDGlM2nSoe10TNyZ7NvJT5WBiBBPQQEk tGKa0LvEnueKnXKSK8AcTjA0X8Bih8oY1DiXZW0/6WqkwlY1sBl5bFF96Ok= -----END CERTIFICATE-----Generated at Tue May 13 04:50:53 2025 by rpki-client