$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa File: b8997655-16da-44c4-b39e-dcdc8d70704f.roa (raw, json) Hash identifier: utSVTKh1OHIWyUMtbh9ObG4a7FoD4JPwp1cgMk+NgDA= Subject key identifier: 50:6E:E4:0A:50:2B:4F:64:97:58:57:72:A6:61:EA:B0:1F:AB:E0:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D638A70B9A1980D0A6F01868881617D76314297 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa Signing time: Fri 09 May 2025 00:21:37 +0000 ROA not before: Fri 09 May 2025 00:21:37 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 199.83.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:63:8a:70:b9:a1:98:0d:0a:6f:01:86:88:81:61:7d:76:31:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:21:37 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=31723a14c50843f1c03b3d21087b0f6147860ccd84878dbbef9db1aeea0033a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:e7:6d:2e:de:f6:6c:11:fe:23:50:87:08: 52:0e:ce:77:26:db:3c:f0:b9:50:39:93:9c:09:3c: 18:1b:dc:0a:23:c6:57:5f:06:5f:ea:47:85:b3:b2: aa:7a:ef:7d:cc:1c:23:d5:d5:75:8c:ec:4f:9c:1e: be:1e:85:06:b3:b3:94:9d:bb:0c:5b:ab:28:9c:86: 8b:fe:01:5d:f8:23:b0:0b:22:69:b0:d6:c2:3f:9f: 9a:11:8b:8b:49:c4:ee:75:2e:1b:25:0a:28:34:35: dd:34:bb:9f:7a:41:af:e3:44:2a:bf:08:ca:23:26: 1c:58:97:1d:86:ef:fb:36:76:b0:e4:cb:02:be:c8: f6:3b:30:bd:db:55:d5:48:9c:b8:c9:fe:71:6b:30: af:b3:ae:35:78:2c:26:dd:26:fd:a8:2d:64:45:8c: 54:49:25:ae:f4:73:82:75:8b:36:b8:9d:f8:ea:94: 3f:64:c4:85:e1:b6:1b:b9:e3:7d:cc:a8:c3:95:be: 51:68:50:6b:38:a3:3e:fb:2a:bc:33:49:d9:b7:ba: 3a:c9:0f:1a:47:08:87:bf:70:b8:83:3c:b2:bf:ea: 9d:78:d1:70:f5:ac:83:81:00:82:35:d7:e9:b0:54: f0:a1:b2:d0:4d:28:ed:50:1c:59:b5:76:de:9e:11: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:E4:0A:50:2B:4F:64:97:58:57:72:A6:61:EA:B0:1F:AB:E0:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.83.88.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:f4:b4:4e:29:14:2d:f6:8f:13:98:b5:b1:6d:23:58:70:ba: 17:c0:dc:78:cf:04:11:07:ed:55:de:ac:c6:9a:fb:e3:18:8f: 06:1c:c6:0f:82:21:3b:23:0b:48:e5:2d:1d:fa:d6:38:ad:6d: 01:35:d4:dc:26:94:76:d8:41:aa:3e:c3:6f:f3:f1:cb:8b:84: ed:31:01:cf:9f:ea:0a:f2:70:54:fd:d3:54:3e:01:48:45:2e: 7e:53:17:4c:57:cd:bb:81:0e:19:97:ea:30:d1:61:03:e6:7c: 8f:ab:fe:8a:fb:81:7f:ff:45:50:7c:86:3f:d9:aa:5b:95:15: a1:7c:39:b9:21:8b:5c:a1:2c:85:af:51:e3:1c:00:e5:25:36: 80:f0:19:24:6a:4b:b5:c4:36:12:0f:af:43:e4:cf:55:33:b2: c2:f7:97:d0:91:e9:b3:33:51:8d:49:cf:85:f2:5d:3e:fe:38: 32:1f:44:c7:35:0e:e0:89:65:3e:cf:9a:86:e5:34:15:00:e0: e7:8e:d9:9a:e4:03:8e:bb:be:02:99:a9:4b:27:e8:68:97:50: 80:82:45:e0:c7:ca:9d:27:3f:eb:6e:a4:4e:26:62:7b:d9:67: b0:a8:c1:1d:ca:63:c1:c7:64:64:ad:49:a8:23:b1:64:74:87: a3:4a:96:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfWOKcLmhmA0KbwGGiIFhfXYxQpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAyMTM3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTcyM2ExNGM1MDg0M2YxYzAzYjNkMjEwODdiMGY2MTQ3 ODYwY2NkODQ4NzhkYmJlZjlkYjFhZWVhMDAzM2E4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRS+dtLt72bBH+I1CHCFIOzncm2zzwuVA5k5wJPBgb3Aoj xldfBl/qR4Wzsqp6733MHCPV1XWM7E+cHr4ehQazs5Sduwxbqyichov+AV34I7AL Immw1sI/n5oRi4tJxO51LhslCig0Nd00u596Qa/jRCq/CMojJhxYlx2G7/s2drDk ywK+yPY7ML3bVdVInLjJ/nFrMK+zrjV4LCbdJv2oLWRFjFRJJa70c4J1iza4nfjq lD9kxIXhthu5433MqMOVvlFoUGs4oz77KrwzSdm3ujrJDxpHCIe/cLiDPLK/6p14 0XD1rIOBAII11+mwVPChstBNKO1QHFm1dt6eEYclAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUG7kClArT2SXWFdypmHqsB+r4NMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4OTk3NjU1LTE2ZGEtNDRjNC1iMzllLWRjZGM4ZDcwNzA0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPHU1gwDQYJKoZIhvcNAQELBQADggEBAJr0tE4pFC32jxOYtbFtI1hwuhfA 3HjPBBEH7VXerMaa++MYjwYcxg+CITsjC0jlLR361jitbQE11NwmlHbYQao+w2/z 8cuLhO0xAc+f6grycFT901Q+AUhFLn5TF0xXzbuBDhmX6jDRYQPmfI+r/or7gX// RVB8hj/ZqluVFaF8Obkhi1yhLIWvUeMcAOUlNoDwGSRqS7XENhIPr0Pkz1UzssL3 l9CR6bMzUY1Jz4XyXT7+ODIfRMc1DuCJZT7PmoblNBUA4OeO2ZrkA467vgKZqUsn 6GiXUICCReDHyp0nP+tupE4mYnvZZ7CowR3KY8HHZGStSagjsWR0h6NKlnI= -----END CERTIFICATE-----Generated at Sun May 11 03:49:47 2025 by rpki-client