$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa File: bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa (raw, json) Hash identifier: Z9M99x7mm6/J6NM2Zp1oX7ksNbMyd46hLag9QICBCzA= Subject key identifier: 22:17:35:66:61:65:7E:FC:55:2B:47:6C:12:63:51:00:AD:22:52:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E94AFCE32D4339B73E1ECB9E46F28C721FF83EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa Signing time: Sat 26 Apr 2025 00:10:13 +0000 ROA not before: Sat 26 Apr 2025 00:10:13 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:af:ce:32:d4:33:9b:73:e1:ec:b9:e4:6f:28:c7:21:ff:83:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:10:13 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=e6072e8947359f8f1341769a5c7081398c4e5189d6226320da2ca0f9f2faca58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:0c:a9:80:9e:19:40:10:25:40:d9:16:35: 62:0d:66:85:b6:30:48:ce:08:f5:6f:44:5d:8d:67: 03:02:88:65:6a:ff:9a:11:74:6f:46:ea:e4:1d:b2: 6c:3a:b0:11:13:77:df:ef:18:d4:38:f3:c9:3e:b2: 5e:cf:da:09:e2:ad:62:a3:bb:2e:0d:63:ef:86:bc: 0c:dc:7e:64:c8:4c:82:73:91:28:ed:9e:0d:15:06: c0:9c:63:b4:d9:0a:fd:77:4e:2e:28:fe:9f:f6:e9: 5a:a2:49:72:78:19:eb:ad:dd:12:62:cd:db:10:85: 9c:c0:48:66:57:9b:86:3f:31:c2:93:48:e1:67:5a: 17:14:b4:dc:23:68:9d:d7:23:73:ec:a7:d8:7d:5d: 11:d2:da:00:8f:f3:2d:dc:d3:c2:c2:96:9b:40:08: 70:5f:03:6d:66:5c:23:3d:31:3b:a4:62:1e:44:2e: bc:47:cf:10:24:6b:31:0c:6a:88:ae:1c:f5:9c:3d: 52:0f:61:4a:a0:92:03:b1:44:36:56:cb:96:37:f0: 4e:80:6a:b6:a4:bd:1f:7f:d7:df:60:22:91:b2:07: cf:da:44:c6:5e:e3:38:97:2e:21:0d:44:58:e6:91: d0:c7:38:9b:3b:73:0f:4e:80:b7:b6:ea:42:82:c1: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:35:66:61:65:7E:FC:55:2B:47:6C:12:63:51:00:AD:22:52:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.12.0/24 Signature Algorithm: sha256WithRSAEncryption 80:df:0d:eb:d7:91:39:a4:11:17:73:18:07:37:44:84:d5:9d: 30:34:08:08:42:27:b2:0b:28:84:08:05:24:54:63:41:b6:18: a2:91:82:41:9f:e9:15:b9:da:78:3c:b3:31:37:1e:ea:65:7d: d7:55:1a:36:60:d6:a0:44:f7:43:2d:30:7d:3b:3b:13:e9:e2: b2:27:99:2e:8f:50:da:8a:55:5c:cf:64:fe:4a:ba:70:45:66: 54:c5:12:b3:78:e7:c8:15:e0:57:50:35:e9:3a:06:61:dd:9a: d6:a9:e4:50:c5:9f:78:5d:78:50:6d:00:db:27:e6:fe:d4:e4: 20:08:02:05:61:6c:3a:41:fa:16:83:89:b8:e8:e7:1d:b5:7c: 0e:b7:a5:c9:19:c4:07:71:48:34:43:fd:97:80:77:73:d5:9e: 5d:22:5a:b1:df:88:6d:74:2d:3f:a6:1a:64:21:e0:58:17:6e: fc:91:ee:93:cd:15:ff:cf:86:ea:79:49:ed:24:f3:84:da:57: 39:d8:c6:61:0e:78:37:08:2e:34:37:de:d5:dc:55:e5:a3:4c: 12:c5:65:80:73:51:b0:30:31:b6:ca:59:ce:36:05:a1:0b:52: fa:1b:44:88:b0:e2:4e:15:15:73:8b:73:49:05:53:f9:51:9e: f0:79:9c:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPpSvzjLUM5tz4ey55G8oxyH/g+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAxMDEzWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjA3MmU4OTQ3MzU5ZjhmMTM0MTc2OWE1YzcwODEzOThj NGU1MTg5ZDYyMjYzMjBkYTJjYTBmOWYyZmFjYTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDStwypgJ4ZQBAlQNkWNWINZoW2MEjOCPVvRF2NZwMCiGVq /5oRdG9G6uQdsmw6sBETd9/vGNQ488k+sl7P2gnirWKjuy4NY++GvAzcfmTITIJz kSjtng0VBsCcY7TZCv13Ti4o/p/26VqiSXJ4Geut3RJizdsQhZzASGZXm4Y/McKT SOFnWhcUtNwjaJ3XI3Psp9h9XRHS2gCP8y3c08LClptACHBfA21mXCM9MTukYh5E LrxHzxAkazEMaoiuHPWcPVIPYUqgkgOxRDZWy5Y38E6AarakvR9/199gIpGyB8/a RMZe4ziXLiENRFjmkdDHOJs7cw9OgLe26kKCwfQHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIhc1ZmFlfvxVK0dsEmNRAK0iUqUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQ3MDkxLWYxMDAtNGFmZi05NDk0LWM3YjdhNGJiOWNiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX/gwwDQYJKoZIhvcNAQELBQADggEBAIDfDevXkTmkERdzGAc3RITVnTA0 CAhCJ7ILKIQIBSRUY0G2GKKRgkGf6RW52ng8szE3HuplfddVGjZg1qBE90MtMH07 OxPp4rInmS6PUNqKVVzPZP5KunBFZlTFErN458gV4FdQNek6BmHdmtap5FDFn3hd eFBtANsn5v7U5CAIAgVhbDpB+haDibjo5x21fA63pckZxAdxSDRD/ZeAd3PVnl0i WrHfiG10LT+mGmQh4FgXbvyR7pPNFf/Phup5Se0k84TaVznYxmEOeDcILjQ33tXc VeWjTBLFZYBzUbAwMbbKWc42BaELUvobRIiw4k4VFXOLc0kFU/lRnvB5nFo= -----END CERTIFICATE-----Generated at Mon May 12 19:57:02 2025 by rpki-client