$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2b12345-104a-4e98-ae2a-6da7a7ccc683.roa File: a2b12345-104a-4e98-ae2a-6da7a7ccc683.roa (raw, json) Hash identifier: tXiVQlv6JUfxfSf1lOQdHsEWW8YJlYzd2QjHuk+Pn5Q= Subject key identifier: 3B:E2:B0:71:33:D9:49:EA:E6:FF:66:D2:36:72:AE:47:59:7A:80:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: F66EDE459225A3A87C3344BFBC6CCDA6B5705F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2b12345-104a-4e98-ae2a-6da7a7ccc683.roa Signing time: Mon 28 Apr 2025 15:00:25 +0000 ROA not before: Mon 28 Apr 2025 15:00:25 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 108.175.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f6:6e:de:45:92:25:a3:a8:7c:33:44:bf:bc:6c:cd:a6:b5:70:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:00:25 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=2cc25d6ec29b1a9dcff366c0f0f7717a56a7e7b8233df286ab27b3f24f680644, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:c9:f4:c6:90:26:39:33:2a:2b:4e:ab:43: b0:82:7b:32:28:c9:72:d6:f3:f6:2d:34:5a:7c:bf: bc:aa:5f:0b:97:e1:70:9b:79:27:0b:5e:2b:37:73: d1:a0:4e:28:bc:bc:b2:cd:bf:b5:bd:87:31:38:ef: 52:72:05:fb:c5:cf:bd:c9:d9:d5:40:6c:0c:8b:55: 9f:f6:e4:40:20:7e:ed:f5:06:2f:72:dc:e8:14:4c: 81:dd:a1:18:c5:70:ef:66:05:3a:3d:3c:a6:fa:36: 13:75:2e:25:42:e7:80:d7:5a:cd:9c:ac:38:c9:b6: 06:55:4f:d9:79:be:37:1b:0f:2b:f5:ee:6d:65:2f: 5f:bc:d6:76:cc:b0:3a:b7:ef:fc:44:ab:60:8a:e8: aa:4e:92:a8:fc:02:62:10:44:ab:8d:9c:27:3d:39: d7:cf:8b:92:e6:39:80:be:45:f1:9b:5a:cb:e9:99: 20:77:8e:c6:53:bc:e8:06:8d:b1:5e:66:56:83:0a: 96:00:56:2f:5b:a2:37:fe:ec:26:c4:22:da:41:c4: ac:26:8a:f8:6a:5b:a2:9b:7d:1a:30:0d:ba:ce:71: f2:90:ac:2e:99:d3:4f:6b:70:f9:2f:35:6b:7a:90: a1:16:31:0c:a2:40:98:19:97:74:99:ad:78:20:42: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:B0:71:33:D9:49:EA:E6:FF:66:D2:36:72:AE:47:59:7A:80:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2b12345-104a-4e98-ae2a-6da7a7ccc683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.48.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:cc:3c:f1:67:b5:85:fa:1b:bc:39:89:69:97:39:a7:29:59: fa:12:f9:24:86:d9:e7:73:29:a6:86:ef:26:f5:56:3a:1a:90: f1:51:78:3a:0e:ca:12:a2:92:50:26:dd:11:c4:56:59:d5:9d: c8:10:67:08:47:47:b0:8a:0c:37:1d:34:62:ef:b2:91:e8:5e: a9:bc:e1:af:cf:14:e4:33:20:e1:d2:0d:85:44:27:64:77:59: 8e:4f:ed:b6:b9:68:23:8c:44:91:7a:c7:1f:a7:96:62:4f:69: b1:ec:1c:b8:9c:e3:13:4b:72:a3:c0:92:ab:97:5e:a2:61:9f: c4:b5:92:58:ba:12:7d:eb:bc:0a:14:30:a3:b5:af:34:ad:12: e4:a9:08:07:bb:9d:6b:31:d1:1f:92:60:80:53:36:c1:76:a8: d6:a8:1c:69:b4:d6:d1:23:fa:aa:21:97:11:76:cf:37:a0:a4: e2:84:f2:b9:76:a1:49:46:0c:a1:a8:ff:9d:bf:ed:66:cc:dc: 9d:c3:1a:3e:76:2b:e5:8d:c1:5a:b1:da:1d:59:04:7d:f8:63: 30:30:c6:80:38:30:b3:b6:4a:9c:d8:28:ae:fa:02:80:9c:29: 4c:37:23:1a:35:bf:5c:d5:fe:4d:07:c7:63:8c:d3:eb:3f:9b: 94:3e:9c:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAPZu3kWSJaOofDNEv7xszaa1cF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUwMDI1WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2MyNWQ2ZWMyOWIxYTlkY2ZmMzY2YzBmMGY3NzE3YTU2 YTdlN2I4MjMzZGYyODZhYjI3YjNmMjRmNjgwNjQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCciMn0xpAmOTMqK06rQ7CCezIoyXLW8/YtNFp8v7yqXwuX 4XCbeScLXis3c9GgTii8vLLNv7W9hzE471JyBfvFz73J2dVAbAyLVZ/25EAgfu31 Bi9y3OgUTIHdoRjFcO9mBTo9PKb6NhN1LiVC54DXWs2crDjJtgZVT9l5vjcbDyv1 7m1lL1+81nbMsDq37/xEq2CK6KpOkqj8AmIQRKuNnCc9OdfPi5LmOYC+RfGbWsvp mSB3jsZTvOgGjbFeZlaDCpYAVi9bojf+7CbEItpBxKwmivhqW6KbfRowDbrOcfKQ rC6Z009rcPkvNWt6kKEWMQyiQJgZl3SZrXggQoprAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO+KwcTPZSerm/2bSNnKuR1l6gGYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyYjEyMzQ1LTEwNGEtNGU5OC1hZTJhLTZkYTdhN2NjYzY4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzAwDQYJKoZIhvcNAQELBQADggEBAG/MPPFntYX6G7w5iWmXOacpWfoS +SSG2edzKaaG7yb1VjoakPFReDoOyhKiklAm3RHEVlnVncgQZwhHR7CKDDcdNGLv spHoXqm84a/PFOQzIOHSDYVEJ2R3WY5P7ba5aCOMRJF6xx+nlmJPabHsHLic4xNL cqPAkquXXqJhn8S1kli6En3rvAoUMKO1rzStEuSpCAe7nWsx0R+SYIBTNsF2qNao HGm01tEj+qohlxF2zzegpOKE8rl2oUlGDKGo/52/7WbM3J3DGj52K+WNwVqx2h1Z BH34YzAwxoA4MLO2SpzYKK76AoCcKUw3Ixo1v1zV/k0Hx2OM0+s/m5Q+nLg= -----END CERTIFICATE-----Generated at Sun May 11 04:21:53 2025 by rpki-client