$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82a71f6b-0548-4e76-b7ed-70367c7fe714.roa File: 82a71f6b-0548-4e76-b7ed-70367c7fe714.roa (raw, json) Hash identifier: ZQ8c1m/TnMP0/nN+q9RWihDTxN02JKjqt2jyET1mleU= Subject key identifier: C1:FF:3C:EA:B6:C5:69:D0:18:06:D8:68:4B:1D:0A:7F:5F:94:67:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 381B04FB829359DB9764AD72B09DA1A2580381DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82a71f6b-0548-4e76-b7ed-70367c7fe714.roa Signing time: Fri 20 Jun 2025 00:01:18 +0000 ROA not before: Fri 20 Jun 2025 00:01:18 +0000 ROA not after: Fri 25 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.60.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:04:fb:82:93:59:db:97:64:ad:72:b0:9d:a1:a2:58:03:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 20 00:01:18 2025 GMT Not After : Jul 25 23:59:59 2025 GMT Subject: serialNumber=3d3c51d9d7f8c87a757f7732285baa489c4df0ad8198e0f5ae6fe746e725f22c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:c4:c1:da:c1:af:3c:5e:0e:81:89:25:1c: b6:04:35:39:d1:3a:a8:c2:a6:d3:18:12:24:24:0b: c8:d2:69:cc:b1:17:73:51:18:3b:ea:8d:7d:36:8e: 21:f4:a5:56:d2:bb:9d:53:82:ff:8a:46:f8:c8:cc: 2e:16:c4:c9:5c:1a:51:4c:dd:c2:d2:cb:d7:d7:30: 30:0e:61:4d:cc:01:67:97:17:76:58:ff:07:0d:01: da:56:98:a0:ac:db:43:26:16:73:ea:cb:87:9a:91: 8c:6f:ad:e3:c4:d6:b4:05:5b:93:7f:b3:ed:33:5c: cb:d1:ad:80:9b:2c:93:17:5c:ab:62:ad:c7:66:d6: 06:88:44:c0:9a:2e:63:b0:80:85:8b:9b:3d:71:4c: 57:6c:6c:fa:61:d0:01:52:7b:d9:18:81:67:1e:2d: 31:23:c8:5c:16:95:01:f7:61:63:28:bd:9a:64:77: 30:ce:d2:a3:a0:64:c3:d8:e1:12:11:3f:af:da:9e: 26:69:72:1e:36:a4:49:14:fb:c3:b0:4b:24:2c:91: 23:5d:78:9d:26:a3:28:81:db:5e:ab:19:22:dc:ac: 49:4c:eb:c4:2e:d9:d7:d7:50:71:04:69:14:74:62: bf:87:10:01:1b:cf:66:2a:e3:91:6f:ea:79:5a:25: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FF:3C:EA:B6:C5:69:D0:18:06:D8:68:4B:1D:0A:7F:5F:94:67:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82a71f6b-0548-4e76-b7ed-70367c7fe714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.60.0.0/14 Signature Algorithm: sha256WithRSAEncryption 56:72:f4:4b:62:1c:74:ca:56:7c:eb:1e:da:3d:a3:b5:85:e6: d5:bb:2e:79:b8:3d:0a:76:39:a1:a2:6c:5b:3a:c7:d4:47:aa: 19:c1:e6:52:d1:b0:1d:38:52:b9:9e:bf:32:96:f1:9b:09:93: e5:d9:22:a4:4d:47:c5:95:f9:46:d8:d2:78:f6:82:32:00:9f: 51:9a:78:bb:df:2c:b1:8b:05:2a:b1:cd:86:66:0b:fb:dd:48: 40:6b:8e:6a:7b:12:26:3f:0f:fc:7e:97:fc:1b:e0:07:11:78: 09:8a:98:46:f4:7e:17:34:3b:61:cf:97:80:98:3a:9e:df:15: 42:9a:1b:2a:12:98:ba:17:ce:2f:fb:97:25:80:05:bb:3c:f7: 96:05:6d:7b:c2:21:ec:86:af:f2:c6:11:46:7b:4a:f9:8f:c3: 5b:ed:01:c8:b0:c9:94:91:92:c6:98:b2:64:55:d1:96:16:26: 78:58:61:37:17:82:90:0b:55:c5:d9:f4:2f:8e:9e:e4:9e:0b: 4e:9b:59:40:36:98:b8:f1:ea:dd:e4:9c:e0:a3:41:b3:f2:1d: de:54:03:17:7f:e4:a3:f4:9a:d8:24:4c:77:76:20:44:44:15: 21:8a:75:c8:9b:65:42:77:34:53:91:fe:e2:c0:15:f4:fd:7e: a1:9a:af:48 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOBsE+4KTWduXZK1ysJ2holgDgd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIwMDAwMTE4WhcNMjUwNzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDNjNTFkOWQ3ZjhjODdhNzU3Zjc3MzIyODViYWE0ODlj NGRmMGFkODE5OGUwZjVhZTZmZTc0NmU3MjVmMjJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6CcTB2sGvPF4OgYklHLYENTnROqjCptMYEiQkC8jSacyx F3NRGDvqjX02jiH0pVbSu51Tgv+KRvjIzC4WxMlcGlFM3cLSy9fXMDAOYU3MAWeX F3ZY/wcNAdpWmKCs20MmFnPqy4eakYxvrePE1rQFW5N/s+0zXMvRrYCbLJMXXKti rcdm1gaIRMCaLmOwgIWLmz1xTFdsbPph0AFSe9kYgWceLTEjyFwWlQH3YWMovZpk dzDO0qOgZMPY4RIRP6/aniZpch42pEkU+8OwSyQskSNdeJ0moyiB216rGSLcrElM 68Qu2dfXUHEEaRR0Yr+HEAEbz2Yq45Fv6nlaJU53AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwf886rbFadAYBthoSx0Kf1+UZ6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyYTcxZjZiLTA1NDgtNGU3Ni1iN2VkLTcwMzY3YzdmZTcxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINPDANBgkqhkiG9w0BAQsFAAOCAQEAVnL0S2IcdMpWfOse2j2jtYXm1bsu ebg9CnY5oaJsWzrH1EeqGcHmUtGwHThSuZ6/MpbxmwmT5dkipE1HxZX5RtjSePaC MgCfUZp4u98ssYsFKrHNhmYL+91IQGuOansSJj8P/H6X/BvgBxF4CYqYRvR+FzQ7 Yc+XgJg6nt8VQpobKhKYuhfOL/uXJYAFuzz3lgVte8Ih7Iav8sYRRntK+Y/DW+0B yLDJlJGSxpiyZFXRlhYmeFhhNxeCkAtVxdn0L46e5J4LTptZQDaYuPHq3eSc4KNB s/Id3lQDF3/ko/Sa2CRMd3YgREQVIYp1yJtlQnc0U5H+4sAV9P1+oZqvSA== -----END CERTIFICATE-----Generated at Tue Jul 1 21:03:59 2025 by rpki-client