$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa File: c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa (raw, json) Hash identifier: Q8wZEPMbUqoxLyylwKsYWLmsLhokUf6tUyHHqwa/t2w= Subject key identifier: 28:69:69:EC:E5:BA:BB:48:0C:DE:67:5B:BB:E9:F4:CD:D4:83:71:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C9DD741BFA281581DC36E7F97D3E60C35140220 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa Signing time: Tue 17 Jun 2025 00:10:30 +0000 ROA not before: Tue 17 Jun 2025 00:10:30 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 182.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9d:d7:41:bf:a2:81:58:1d:c3:6e:7f:97:d3:e6:0c:35:14:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:10:30 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=c99209e84e0e2e03eca66266819b428ce6dd0a2178c21ede97ecc7ba75ff117d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:6b:a5:93:4a:b3:29:a0:07:08:5d:23:fc: 83:45:da:7f:fe:08:ee:15:83:cd:00:de:e5:9b:f3: e1:dc:4c:22:dd:55:c0:e3:b2:3d:d3:27:4a:5c:b5: 90:9a:a8:ca:a8:ab:95:30:6b:c1:ef:65:da:57:a3: ce:93:54:e7:db:b6:73:fb:90:88:d4:3e:18:cb:be: 07:ad:40:cf:d9:88:81:14:45:ff:6f:22:21:64:01: 11:a3:c6:dc:b0:20:f7:97:e5:82:79:e9:36:e5:2c: 7f:7b:be:77:cc:8c:a9:10:42:57:9e:39:82:fa:81: 86:89:0e:2f:1b:51:ed:02:e5:08:c0:16:14:ef:0d: 41:c2:0a:89:5b:7b:99:76:9a:3b:70:8d:59:c8:2d: 19:f4:02:d1:a5:b7:e3:8c:8e:9e:47:fb:21:00:a0: d4:d0:4d:ac:17:0c:86:04:06:7c:d7:ef:1e:dc:b4: 3a:93:c7:10:20:73:04:b6:19:b8:1b:05:71:1d:79: 50:25:b8:f1:6b:ba:27:21:77:8e:c3:17:ff:32:83: 93:5b:56:e9:a1:1b:ae:99:2e:1b:2a:f4:6a:fb:b0: f5:23:99:79:10:6b:e4:ab:bc:d0:6c:2a:dc:6f:aa: 5a:e6:85:12:9f:89:76:f9:f6:c5:53:0f:8b:5f:1a: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:69:69:EC:E5:BA:BB:48:0C:DE:67:5B:BB:E9:F4:CD:D4:83:71:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption be:78:d6:ee:b1:2e:d6:6f:5a:0d:f1:0d:d0:bf:f0:b0:be:80: fb:1b:f3:0b:47:81:39:cf:02:fc:55:c8:ab:5a:52:e4:f7:62: 94:72:30:48:50:fc:5f:ba:66:73:8f:c4:59:f4:55:16:ee:28: 03:0c:ca:7a:d0:4e:0e:96:a4:fb:1c:01:e9:97:6c:4c:13:e7: 87:57:24:dc:bf:fc:ac:34:3a:49:7c:d6:d2:ea:8e:27:46:f0: d8:50:17:67:1e:91:0f:46:28:5d:b3:fc:ee:ca:ee:73:c7:ed: 3e:3d:90:f4:ce:33:66:0a:b8:ef:e5:4f:f9:a2:1e:8c:52:95: 03:7f:42:d6:81:9f:66:56:5a:89:36:30:33:e9:bc:c6:88:8e: b1:21:88:c4:30:98:2c:f4:76:3b:fd:4f:c3:11:a1:52:fb:2f: bd:c8:4d:86:14:94:83:b7:a2:31:4a:75:c0:c1:4d:5b:44:e8: d1:67:06:bf:0f:8a:79:83:43:6c:db:37:7c:64:ec:f8:84:14: 90:b2:f2:77:1a:fb:c4:9b:79:d1:44:ac:f5:e8:36:fd:3a:1c: 01:d0:1b:78:cc:ee:be:cd:a6:d8:dc:9f:a3:04:d8:7c:91:46: 35:64:7c:a3:9a:6c:95:69:16:2c:32:35:9e:73:2f:b3:38:0d: 98:39:c8:83 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHJ3XQb+igVgdw25/l9PmDDUUAiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMDMwWhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTkyMDllODRlMGUyZTAzZWNhNjYyNjY4MTliNDI4Y2U2 ZGQwYTIxNzhjMjFlZGU5N2VjYzdiYTc1ZmYxMTdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+kWulk0qzKaAHCF0j/INF2n/+CO4Vg80A3uWb8+HcTCLd VcDjsj3TJ0pctZCaqMqoq5Uwa8HvZdpXo86TVOfbtnP7kIjUPhjLvgetQM/ZiIEU Rf9vIiFkARGjxtywIPeX5YJ56TblLH97vnfMjKkQQleeOYL6gYaJDi8bUe0C5QjA FhTvDUHCColbe5l2mjtwjVnILRn0AtGlt+OMjp5H+yEAoNTQTawXDIYEBnzX7x7c tDqTxxAgcwS2GbgbBXEdeVAluPFruichd47DF/8yg5NbVumhG66ZLhsq9Gr7sPUj mXkQa+SrvNBsKtxvqlrmhRKfiXb59sVTD4tfGmpDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKGlp7OW6u0gM3mdbu+n0zdSDcfYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMGVlMTEwLTk3ODItNDQ5YS1hNGUwLTZiMmE2Y2VmZmEyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwC2HDANBgkqhkiG9w0BAQsFAAOCAQEAvnjW7rEu1m9aDfEN0L/wsL6A+xvz C0eBOc8C/FXIq1pS5PdilHIwSFD8X7pmc4/EWfRVFu4oAwzKetBODpak+xwB6Zds TBPnh1ck3L/8rDQ6SXzW0uqOJ0bw2FAXZx6RD0YoXbP87sruc8ftPj2Q9M4zZgq4 7+VP+aIejFKVA39C1oGfZlZaiTYwM+m8xoiOsSGIxDCYLPR2O/1PwxGhUvsvvchN hhSUg7eiMUp1wMFNW0To0WcGvw+KeYNDbNs3fGTs+IQUkLLydxr7xJt50USs9eg2 /TocAdAbeMzuvs2m2NyfowTYfJFGNWR8o5pslWkWLDI1nnMvszgNmDnIgw== -----END CERTIFICATE-----Generated at Sun Jun 29 21:10:36 2025 by rpki-client