$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa File: 93717bbd-2280-4d38-95e7-0e0e917814f8.roa (raw, json) Hash identifier: lyNBXQYR0PJsc7/y+PehsOyPOkFF9aO/g/YdUbMBl7U= Subject key identifier: DF:59:3E:6C:8F:CC:73:5B:F9:3C:41:CD:EF:3E:68:1F:9A:93:E0:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AC602A402BA769E3D6934F30225751E503D6E90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa Signing time: Sat 03 May 2025 00:42:07 +0000 ROA not before: Sat 03 May 2025 00:42:07 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.66.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c6:02:a4:02:ba:76:9e:3d:69:34:f3:02:25:75:1e:50:3d:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:42:07 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=93c346b8db93a161fd3f2b9974ff29e8507aa81b3d263bd0621fc8f6d0cc6314, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:b3:f5:e8:6e:6f:0f:9b:c3:c2:5a:ac:9a: c0:cd:80:fb:60:1d:6a:3c:27:dc:51:53:1d:50:29: 62:7f:80:e4:95:aa:93:b6:c7:db:40:36:1f:d3:ab: ca:2a:3f:e3:16:ce:fa:48:89:de:f8:21:53:4e:4f: a1:7e:cb:af:4d:19:5c:a6:1c:04:44:2b:43:e8:dd: 5a:51:25:54:e5:1e:ec:99:df:ff:8d:35:ce:e8:b6: 91:68:6a:99:9a:cb:e8:dd:ba:bc:2d:72:47:b9:0c: e1:12:22:15:20:cf:c9:cb:31:d2:18:4b:61:aa:fc: 6e:e1:90:3b:c8:95:7d:02:ae:c3:1d:fb:c7:6a:7b: f8:1e:43:22:a1:ae:96:cf:f3:f9:3b:e6:80:69:ce: df:d7:d0:0f:45:20:10:0b:f9:f5:93:90:f3:bc:25: a8:50:5d:24:fb:c3:9d:84:66:06:f6:e3:b6:4e:66: fe:13:da:13:ee:cc:50:4a:77:07:1c:17:07:58:da: d1:bc:61:c4:df:1a:35:33:c2:5b:a0:df:68:f5:74: f9:f2:ab:4f:21:70:9f:66:7d:4f:52:08:85:0e:84: 94:a8:9b:d2:0e:86:44:42:4e:a5:5e:cd:8a:a1:30: bc:77:80:db:db:d9:02:a4:2b:aa:a7:45:66:cf:14: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:59:3E:6C:8F:CC:73:5B:F9:3C:41:CD:EF:3E:68:1F:9A:93:E0:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 19:40:c8:5a:18:6b:13:06:95:66:68:e3:27:49:25:80:8b:51: c0:44:b7:7f:22:97:75:47:a3:39:26:5a:7b:87:7d:50:c9:43: 33:fd:3a:78:43:30:55:ef:95:0c:4a:2b:aa:7b:99:79:78:93: d5:09:ed:cf:04:5c:7c:7c:2a:02:c8:ed:ec:dd:d0:59:92:90: 86:43:f7:07:e2:78:b3:e3:f0:c3:47:17:cc:ca:db:87:29:e4: fe:a3:7a:dd:57:6c:ef:4d:ab:7f:08:1d:92:53:cc:0d:dc:e7: ca:c7:86:63:f8:39:8a:29:41:77:d8:a8:44:c9:27:52:db:f4: 31:ce:bb:33:f7:ad:52:ec:31:32:43:02:3c:33:e9:b7:b4:5f: 85:8b:32:17:dd:8e:aa:8b:c3:c1:4f:cc:44:ea:81:63:f9:04: 7e:61:2d:cb:2b:6e:22:b6:ac:fa:07:e8:00:61:c7:2e:b7:87: 2f:ba:bc:ee:74:63:c9:09:ff:94:47:20:59:3a:80:45:54:91: 82:14:71:51:b0:59:30:28:4c:55:1f:34:24:96:59:95:7d:7a: 11:aa:14:2c:37:ec:35:ea:dc:3b:61:93:f6:cd:42:c7:a7:95: a5:5c:0c:06:35:12:d3:fb:03:12:40:75:8a:e4:1d:38:a2:02: e8:79:cc:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKsYCpAK6dp49aTTzAiV1HlA9bpAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA0MjA3WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5M2MzNDZiOGRiOTNhMTYxZmQzZjJiOTk3NGZmMjllODUw N2FhODFiM2QyNjNiZDA2MjFmYzhmNmQwY2M2MzE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLWbP16G5vD5vDwlqsmsDNgPtgHWo8J9xRUx1QKWJ/gOSV qpO2x9tANh/Tq8oqP+MWzvpIid74IVNOT6F+y69NGVymHAREK0Po3VpRJVTlHuyZ 3/+NNc7otpFoapmay+jdurwtcke5DOESIhUgz8nLMdIYS2Gq/G7hkDvIlX0CrsMd +8dqe/geQyKhrpbP8/k75oBpzt/X0A9FIBAL+fWTkPO8JahQXST7w52EZgb247ZO Zv4T2hPuzFBKdwccFwdY2tG8YcTfGjUzwlug32j1dPnyq08hcJ9mfU9SCIUOhJSo m9IOhkRCTqVezYqhMLx3gNvb2QKkK6qnRWbPFFbjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU31k+bI/Mc1v5PEHN7z5oH5qT4IAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNzE3YmJkLTIyODAtNGQzOC05NWU3LTBlMGU5MTc4MTRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAREQnAwDQYJKoZIhvcNAQELBQADggEBABlAyFoYaxMGlWZo4ydJJYCLUcBE t38il3VHozkmWnuHfVDJQzP9OnhDMFXvlQxKK6p7mXl4k9UJ7c8EXHx8KgLI7ezd 0FmSkIZD9wfieLPj8MNHF8zK24cp5P6jet1XbO9Nq38IHZJTzA3c58rHhmP4OYop QXfYqETJJ1Lb9DHOuzP3rVLsMTJDAjwz6be0X4WLMhfdjqqLw8FPzETqgWP5BH5h LcsrbiK2rPoH6ABhxy63hy+6vO50Y8kJ/5RHIFk6gEVUkYIUcVGwWTAoTFUfNCSW WZV9ehGqFCw37DXq3Dthk/bNQsenlaVcDAY1EtP7AxJAdYrkHTiiAuh5zFI= -----END CERTIFICATE-----Generated at Sat May 10 21:50:39 2025 by rpki-client