$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa File: b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa (raw, json) Hash identifier: 5ZgV4GNoEN/V3Kh94gknkXMza3RzOONpH0wBRda7W00= Subject key identifier: CD:CE:6A:50:92:60:B9:81:B6:46:7E:C9:41:3E:98:BC:59:D9:D2:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B21ED644B4CC84589C0CA51BC43D4C4320ABDD2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa Signing time: Thu 08 May 2025 17:21:53 +0000 ROA not before: Thu 08 May 2025 17:21:53 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:ed:64:4b:4c:c8:45:89:c0:ca:51:bc:43:d4:c4:32:0a:bd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 17:21:53 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=f3882cb91ff8a7a001950bc96edcb392172ca70e6e4a28dd457ea3fda05bc673, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:3b:c8:80:95:5f:e1:3b:60:35:17:90:4e: 44:45:44:9c:68:32:65:9a:7b:bd:ee:db:38:bc:21: b4:71:85:05:98:43:6f:fa:49:71:51:b6:f0:15:45: 47:4b:d3:57:2c:93:c7:db:e3:d1:b6:fa:e8:9f:6d: 33:78:93:8e:3f:90:7c:9e:a3:24:b4:46:52:d8:e0: b5:b7:58:12:4c:c5:18:30:13:ee:a3:9f:64:0b:8b: 49:6c:e2:07:8f:c3:1d:9a:cb:f8:a0:19:3d:08:70: 74:1c:6a:56:36:8c:86:64:1a:60:8f:e9:b1:c7:9e: fe:36:ce:c1:d5:59:0a:b7:9a:0f:e7:34:0e:d1:b0: 32:cc:71:0e:a5:cf:de:2f:60:05:fe:29:25:06:e3: 67:9e:ae:46:f1:9c:72:5c:70:f8:83:a5:8d:49:8c: ed:18:7f:51:e6:57:76:ab:a9:76:53:ad:ce:3c:71: 1c:49:c2:e2:bf:8b:a7:3d:06:4e:70:8c:ce:b8:f9: 95:96:8e:a8:a4:61:73:ab:5b:8d:b1:63:dd:86:ea: 02:41:7e:72:b8:ba:49:41:09:e8:69:5a:fd:19:c9: 92:05:56:d1:d0:65:9f:ab:d9:10:3b:38:4c:b9:aa: 04:78:50:6a:47:15:59:e1:17:54:e3:79:11:03:6f: 69:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:6A:50:92:60:B9:81:B6:46:7E:C9:41:3E:98:BC:59:D9:D2:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b99d5c17-1441-4cdb-9576-0d9f7eb58477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.160.0/19 Signature Algorithm: sha256WithRSAEncryption 56:b3:c0:3b:a4:14:1a:dd:75:bb:b1:d2:91:0a:ca:fa:5e:8c: cc:b1:82:0c:f3:7c:0c:3e:29:2b:f8:cc:52:b7:81:c4:eb:d6: 7e:d1:97:44:69:70:29:fb:46:42:e1:3e:53:c7:94:b7:dd:27: c8:87:c1:5b:4a:16:2f:b2:f2:d4:b7:01:4b:1b:a6:e9:33:b5: 8f:fe:97:af:23:a5:4d:f1:bc:ee:69:f2:a7:a0:52:c8:5a:da: e1:13:17:40:89:a9:38:7b:02:17:bf:86:a9:e9:cb:80:db:ca: 7f:69:ef:0f:40:d7:8f:a5:ab:e6:9a:7e:f3:3c:06:87:ed:65: 03:f3:bd:11:39:10:d0:4a:c5:51:51:16:53:85:7f:87:28:55: 8f:07:c7:3b:df:85:5c:be:63:19:c7:72:ca:89:7c:c7:b4:2a: 4e:7c:16:e5:e3:00:11:51:ad:d5:7f:8a:bd:80:0d:f5:03:78: 56:d1:33:4a:68:af:75:11:ba:fa:98:4b:78:d9:bb:64:8c:d7: 99:91:ca:bd:a1:6b:21:79:9f:9a:63:eb:0d:54:a7:7f:74:ff: 31:c4:2b:d9:cc:7b:ca:51:0a:c4:49:b2:cd:45:33:f2:d5:42: d0:7e:ee:4b:8a:6e:45:84:f7:b5:d5:07:e4:2f:e2:9b:8d:02: bb:13:a9:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSyHtZEtMyEWJwMpRvEPUxDIKvdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTcyMTUzWhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzg4MmNiOTFmZjhhN2EwMDE5NTBiYzk2ZWRjYjM5MjE3 MmNhNzBlNmU0YTI4ZGQ0NTdlYTNmZGEwNWJjNjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ETvIgJVf4TtgNReQTkRFRJxoMmWae73u2zi8IbRxhQWY Q2/6SXFRtvAVRUdL01csk8fb49G2+uifbTN4k44/kHyeoyS0RlLY4LW3WBJMxRgw E+6jn2QLi0ls4gePwx2ay/igGT0IcHQcalY2jIZkGmCP6bHHnv42zsHVWQq3mg/n NA7RsDLMcQ6lz94vYAX+KSUG42eerkbxnHJccPiDpY1JjO0Yf1HmV3arqXZTrc48 cRxJwuK/i6c9Bk5wjM64+ZWWjqikYXOrW42xY92G6gJBfnK4uklBCehpWv0ZyZIF VtHQZZ+r2RA7OEy5qgR4UGpHFVnhF1TjeREDb2kRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzc5qUJJguYG2Rn7JQT6YvFnZ0kswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5OWQ1YzE3LTE0NDEtNGNkYi05NTc2LTBkOWY3ZWI1ODQ3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUNgKAwDQYJKoZIhvcNAQELBQADggEBAFazwDukFBrddbux0pEKyvpejMyx ggzzfAw+KSv4zFK3gcTr1n7Rl0RpcCn7RkLhPlPHlLfdJ8iHwVtKFi+y8tS3AUsb pukztY/+l68jpU3xvO5p8qegUsha2uETF0CJqTh7Ahe/hqnpy4Dbyn9p7w9A14+l q+aafvM8BoftZQPzvRE5ENBKxVFRFlOFf4coVY8HxzvfhVy+YxnHcsqJfMe0Kk58 FuXjABFRrdV/ir2ADfUDeFbRM0por3URuvqYS3jZu2SM15mRyr2hayF5n5pj6w1U p390/zHEK9nMe8pRCsRJss1FM/LVQtB+7kuKbkWE97XVB+Qv4puNArsTqfw= -----END CERTIFICATE-----Generated at Sun May 11 17:59:14 2025 by rpki-client