$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb1032f-e55f-4832-b59d-8ffedcb224a1.roa File: aeb1032f-e55f-4832-b59d-8ffedcb224a1.roa (raw, json) Hash identifier: MyUBN68g5Oq5+OoVdtBB7BkS31PsHSrVvNZACaF5en8= Subject key identifier: E3:8A:E1:4D:2E:C0:B5:BC:E5:7C:8C:F4:22:5F:8E:B2:6D:04:48:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74731BE296A1F4F7B6D0C237F24373551B94F635 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb1032f-e55f-4832-b59d-8ffedcb224a1.roa Signing time: Mon 16 Jun 2025 15:21:55 +0000 ROA not before: Mon 16 Jun 2025 15:21:55 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.182.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:73:1b:e2:96:a1:f4:f7:b6:d0:c2:37:f2:43:73:55:1b:94:f6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:21:55 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=36aff15e21d28f4d30b6351c45b6273aad737a423c7944008013326f25038b07, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:d3:12:e3:ef:8c:84:e7:46:7b:02:1e:c7: 94:96:25:78:2a:d1:d2:27:e8:30:d2:a9:ad:52:04: 5a:e7:98:f9:97:79:00:3b:58:58:ea:a2:a9:50:4c: 8a:c5:4e:8b:59:7e:0c:c7:6b:32:6c:55:7a:7a:cc: 44:77:39:a7:60:71:62:82:23:94:d5:de:53:18:ce: e2:c9:d3:41:b3:0a:e8:5f:fc:39:f3:05:13:d3:a8: 15:0e:f6:e2:3f:bd:11:1e:6f:6c:72:46:a0:f3:44: 16:e7:33:7a:7c:28:9b:61:37:7f:e6:4a:e9:92:91: ae:51:ca:f2:67:7b:96:cb:80:ee:69:05:62:da:4d: 95:47:b2:38:12:11:a8:19:49:2f:77:76:1e:7c:93: 32:45:e1:81:77:fe:3a:b0:39:7e:9c:88:d4:a4:45: 16:63:f3:10:27:9c:34:d2:90:30:02:9a:17:e8:5b: 72:dd:00:e8:e5:76:30:28:47:42:30:c6:85:30:44: a9:bc:2f:17:e9:b7:e8:38:25:91:a9:4e:46:bc:a3: b7:ab:74:de:1e:d9:b7:19:c5:52:28:ab:a8:23:4d: 0d:30:3d:7b:3a:af:8a:5a:c6:00:4a:83:48:d4:8c: 1e:f4:df:88:e1:70:1b:9e:21:47:b2:eb:9d:a6:3e: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8A:E1:4D:2E:C0:B5:BC:E5:7C:8C:F4:22:5F:8E:B2:6D:04:48:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb1032f-e55f-4832-b59d-8ffedcb224a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:a8:74:6e:cd:f4:36:2b:f2:f8:25:bc:01:89:c5:9e:79:0e: f6:b4:62:6e:bc:c0:7d:97:62:97:11:c4:ba:73:aa:ca:4e:64: 1e:7a:80:f9:2c:8a:97:1f:fa:f2:46:f6:97:08:77:de:b0:51: b9:6b:99:68:f8:42:bb:cc:42:00:b3:da:cd:79:97:77:ea:2d: b0:25:8c:1e:e1:db:88:c6:3a:30:8f:40:56:26:2d:d5:32:bb: bd:27:d5:30:e8:f0:50:89:70:3b:c9:2e:24:c4:96:48:b1:82: 57:71:5a:35:8e:b6:7d:03:ca:5a:e8:b0:cb:27:5a:b7:96:3d: 5b:35:21:d6:41:1e:d0:fd:9e:19:ce:61:c7:7e:f0:03:60:fb: 8e:cb:f3:41:65:47:dd:1d:d1:ae:0d:8b:db:72:91:15:43:75: f0:c3:1f:c0:1a:c6:7c:b9:05:a2:84:1f:e5:f4:d3:82:90:7c: 8b:7c:fe:af:e7:8d:2b:1d:38:5a:9a:57:88:5d:f9:2a:32:a3: 4d:c0:4c:ed:c2:a1:8e:a9:c3:17:ca:68:f2:4e:4b:4c:fd:34: 20:a1:cb:20:64:3e:62:85:f6:6d:50:08:ef:a5:8c:5f:7f:2f: 30:d2:70:be:bc:6c:6d:d3:d4:4b:e5:2b:a6:70:93:53:1a:2c: df:c1:93:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdHMb4pah9Pe20MI38kNzVRuU9jUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUyMTU1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmFmZjE1ZTIxZDI4ZjRkMzBiNjM1MWM0NWI2MjczYWFk NzM3YTQyM2M3OTQ0MDA4MDEzMzI2ZjI1MDM4YjA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMhtMS4++MhOdGewIex5SWJXgq0dIn6DDSqa1SBFrnmPmX eQA7WFjqoqlQTIrFTotZfgzHazJsVXp6zER3OadgcWKCI5TV3lMYzuLJ00GzCuhf /DnzBRPTqBUO9uI/vREeb2xyRqDzRBbnM3p8KJthN3/mSumSka5RyvJne5bLgO5p BWLaTZVHsjgSEagZSS93dh58kzJF4YF3/jqwOX6ciNSkRRZj8xAnnDTSkDACmhfo W3LdAOjldjAoR0IwxoUwRKm8Lxfpt+g4JZGpTka8o7erdN4e2bcZxVIoq6gjTQ0w PXs6r4paxgBKg0jUjB7034jhcBueIUey652mPhrZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU44rhTS7AtbzlfIz0Il+Osm0ESGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYjEwMzJmLWU1NWYtNDgzMi1iNTlkLThmZmVkY2IyMjRhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4tjANBgkqhkiG9w0BAQsFAAOCAQEAxah0bs30Nivy+CW8AYnFnnkO9rRi brzAfZdilxHEunOqyk5kHnqA+SyKlx/68kb2lwh33rBRuWuZaPhCu8xCALPazXmX d+otsCWMHuHbiMY6MI9AViYt1TK7vSfVMOjwUIlwO8kuJMSWSLGCV3FaNY62fQPK Wuiwyydat5Y9WzUh1kEe0P2eGc5hx37wA2D7jsvzQWVH3R3Rrg2L23KRFUN18MMf wBrGfLkFooQf5fTTgpB8i3z+r+eNKx04WppXiF35KjKjTcBM7cKhjqnDF8po8k5L TP00IKHLIGQ+YoX2bVAI76WMX38vMNJwvrxsbdPUS+UrpnCTUxos38GTtw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:12:00 2025 by rpki-client