$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c1a18f2-6db7-414e-af5f-943e93d34d77.roa File: 8c1a18f2-6db7-414e-af5f-943e93d34d77.roa (raw, json) Hash identifier: ftZbMpHqYQCFmF0Yq0WnUR8EJOGAKvI82t/zx1oLuww= Subject key identifier: C5:49:4C:8C:BD:34:3D:36:F8:E3:4A:71:FC:68:35:51:1C:2E:E7:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B81207F950151133F2A14AE6B6D0029C7334145 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c1a18f2-6db7-414e-af5f-943e93d34d77.roa Signing time: Fri 20 Jun 2025 00:01:54 +0000 ROA not before: Fri 20 Jun 2025 00:01:54 +0000 ROA not after: Fri 25 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:81:20:7f:95:01:51:13:3f:2a:14:ae:6b:6d:00:29:c7:33:41:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 20 00:01:54 2025 GMT Not After : Jul 25 23:59:59 2025 GMT Subject: serialNumber=f5da62f573836725cf95284016b1cb99025e2e8c2dda629424868db1f0181982, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:4e:e6:3f:68:21:1e:0d:33:0a:8d:5c:24: c7:71:a7:51:c4:98:2f:95:92:86:f6:1a:4c:ba:76: c5:35:f5:b8:6e:3b:01:77:58:e9:e1:e0:9e:31:6e: 4d:16:95:6f:73:86:51:6e:e7:30:7c:90:c0:d5:89: 66:f3:1e:41:09:dd:7c:53:9c:bf:a2:44:d4:c5:57: 5e:16:4a:da:4d:94:86:8d:04:eb:a8:96:30:f8:17: b0:a2:32:bd:f8:bb:49:d3:1a:75:0a:bc:73:3e:b2: b5:25:ef:da:b8:60:9d:ae:2a:3c:21:a2:88:4e:93: 75:05:70:2e:ae:8e:79:ed:44:a5:92:45:62:88:e6: 50:50:66:db:f9:bb:32:e3:1f:e3:47:6f:97:23:d0: 5b:1c:a0:57:01:6d:e2:51:1d:1a:93:e5:8f:22:b5: 53:b2:a6:f9:ba:55:a3:eb:c8:37:be:35:a1:97:29: 43:cb:d7:aa:c7:bb:08:be:59:76:1a:d3:0f:bd:12: 59:66:9b:af:9e:e5:17:5a:e6:f5:15:c1:f5:3e:7d: 3a:64:a3:3f:98:55:c7:93:bf:a0:24:33:06:49:07: db:62:53:b6:da:0a:99:83:80:cb:79:16:74:cf:f7: e4:59:00:91:26:7c:ef:4f:ea:fb:88:81:ec:0a:c1: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:4C:8C:BD:34:3D:36:F8:E3:4A:71:FC:68:35:51:1C:2E:E7:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c1a18f2-6db7-414e-af5f-943e93d34d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:0d:3e:f8:2a:e4:26:6e:ee:66:98:2f:a0:50:1d:1d:e6:e1: 8e:af:1e:67:99:64:bb:f3:48:05:93:cc:bc:8c:6b:14:0d:ff: cd:58:e9:04:48:48:8a:7c:f4:9b:d7:bd:5b:42:f5:2f:3b:70: 0a:29:4e:1e:39:61:ab:93:4f:78:12:da:03:6e:6b:89:64:a6: de:91:21:3f:b7:69:2a:01:61:e7:03:c8:ba:b5:c2:31:e4:80: 47:e6:5d:c3:23:bc:3d:92:32:e9:df:3b:9e:c8:bf:4d:da:6c: b6:94:85:4f:79:e1:db:86:15:72:bc:3f:80:6f:80:12:8d:12: 48:e3:e4:83:cc:d1:3d:14:1d:e9:72:db:a4:73:c2:98:32:e1: b5:4b:9d:0e:4b:4f:1d:d7:a3:5a:ab:5a:43:c1:37:57:9d:06: 17:21:ca:e7:99:53:ca:d7:36:ef:f1:11:67:85:e1:de:f3:47: 11:7f:fd:d1:0c:68:6d:e7:d5:c0:5c:af:67:72:01:1a:57:04: 48:b3:f5:65:96:ea:9d:18:5f:09:5f:b8:32:68:b2:a9:b8:6d: c8:e3:9e:1a:bf:1c:25:61:8a:06:db:24:2d:82:ee:7c:5e:62: a9:78:c3:88:c6:89:d0:a7:30:0f:91:45:ee:63:c9:74:e3:12: cc:58:11:9a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS4Egf5UBURM/KhSua20AKcczQUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIwMDAwMTU0WhcNMjUwNzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWRhNjJmNTczODM2NzI1Y2Y5NTI4NDAxNmIxY2I5OTAy NWUyZThjMmRkYTYyOTQyNDg2OGRiMWYwMTgxOTgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiNk7mP2ghHg0zCo1cJMdxp1HEmC+Vkob2Gky6dsU19bhu OwF3WOnh4J4xbk0WlW9zhlFu5zB8kMDViWbzHkEJ3XxTnL+iRNTFV14WStpNlIaN BOuoljD4F7CiMr34u0nTGnUKvHM+srUl79q4YJ2uKjwhoohOk3UFcC6ujnntRKWS RWKI5lBQZtv5uzLjH+NHb5cj0FscoFcBbeJRHRqT5Y8itVOypvm6VaPryDe+NaGX KUPL16rHuwi+WXYa0w+9Ellmm6+e5Rda5vUVwfU+fTpkoz+YVceTv6AkMwZJB9ti U7baCpmDgMt5FnTP9+RZAJEmfO9P6vuIgewKwdEZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxUlMjL00PTb440px/Gg1URwu5wcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjMWExOGYyLTZkYjctNDE0ZS1hZjVmLTk0M2U5M2QzNGQ3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCXhjANBgkqhkiG9w0BAQsFAAOCAQEAkg0++CrkJm7uZpgvoFAdHebhjq8e Z5lku/NIBZPMvIxrFA3/zVjpBEhIinz0m9e9W0L1LztwCilOHjlhq5NPeBLaA25r iWSm3pEhP7dpKgFh5wPIurXCMeSAR+ZdwyO8PZIy6d87nsi/TdpstpSFT3nh24YV crw/gG+AEo0SSOPkg8zRPRQd6XLbpHPCmDLhtUudDktPHdejWqtaQ8E3V50GFyHK 55lTytc27/ERZ4Xh3vNHEX/90QxobefVwFyvZ3IBGlcESLP1ZZbqnRhfCV+4Mmiy qbhtyOOeGr8cJWGKBtskLYLufF5iqXjDiMaJ0KcwD5FF7mPJdOMSzFgRmg== -----END CERTIFICATE-----Generated at Sun Jun 29 04:02:42 2025 by rpki-client