$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d2c06d-5355-465b-8d51-dfef82b5d000.roa File: c1d2c06d-5355-465b-8d51-dfef82b5d000.roa (raw, json) Hash identifier: y3B6O40/xDqDuVbSn2ozaCTUhz5jayxVvJvaRT78ayk= Subject key identifier: 65:88:C3:0F:87:0E:7C:98:C4:C4:FA:48:AD:A1:8A:8A:5B:13:55:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4090E7E104F054A705B36082FA9B65EE34F3DBE7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d2c06d-5355-465b-8d51-dfef82b5d000.roa Signing time: Mon 28 Apr 2025 15:10:20 +0000 ROA not before: Mon 28 Apr 2025 15:10:20 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.99.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:90:e7:e1:04:f0:54:a7:05:b3:60:82:fa:9b:65:ee:34:f3:db:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:10:20 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=1d10438708b076a0d410b24b9d9b88d4a31cdeb558e3c7cb7bf7be6f7a0501ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:8b:50:6a:1a:36:6b:80:72:f3:bf:7f:61: 91:6c:c1:ad:27:ad:02:db:f8:c5:07:54:d1:82:1d: 42:63:a5:fd:d0:0e:86:bb:95:23:4c:35:b8:33:2b: 9e:1e:8d:bb:61:81:55:d9:62:e0:42:4a:07:8c:b0: 86:81:de:22:90:5e:f7:9d:42:4c:96:34:64:a8:c6: c6:b5:a8:0c:54:20:90:b5:d9:cc:98:9e:9f:50:61: 1b:ce:fa:3c:89:0c:92:7e:f8:02:01:53:32:14:33: 3c:27:68:b2:21:46:a4:7d:56:47:00:eb:77:9e:6e: e1:64:db:33:6a:77:e5:0e:5d:f2:df:1b:d1:bd:f6: 7b:71:14:a2:3c:76:31:df:87:78:01:8f:a4:2a:63: bb:98:d9:8d:cc:bd:c5:f1:42:f0:0d:29:5e:35:b9: 6d:9c:9d:ae:12:0b:f9:95:86:2e:38:9b:8c:f8:61: 88:81:e4:f8:ab:65:22:56:80:56:ed:eb:60:75:ec: 11:e0:8f:d0:7f:47:65:7f:0d:60:9a:3d:b1:ae:36: df:da:78:a5:3f:51:b4:91:f8:1a:75:c0:e3:7e:c3: a1:56:67:93:23:24:84:ba:fb:d4:7a:74:8b:c8:f8: 7c:e3:3e:e3:0b:64:ca:77:b4:74:9a:30:33:3e:b8: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:88:C3:0F:87:0E:7C:98:C4:C4:FA:48:AD:A1:8A:8A:5B:13:55:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d2c06d-5355-465b-8d51-dfef82b5d000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption 38:49:41:d0:ce:4d:be:ee:e4:97:d3:a2:82:35:8b:da:3d:85: 26:9d:ce:a2:df:a8:ee:20:f4:2a:d7:85:f3:f7:c1:5d:b2:e5: 46:73:93:0f:12:91:2f:54:3e:d4:da:19:b1:69:e1:ed:71:40: 01:78:d3:93:4b:49:7f:50:64:8b:3f:7e:b4:e6:06:34:75:20: 8b:f2:a5:82:c1:ae:aa:65:17:bd:c4:4b:3e:2b:bd:f4:f9:1d: 22:9d:3c:04:73:bc:ca:cd:8b:9d:73:da:65:84:4e:72:36:54: f4:fa:a1:82:d0:99:c2:ff:6f:44:e3:9b:da:9a:6c:ce:c5:84: a2:d8:c9:5c:06:33:0d:d6:d8:7f:ce:0a:20:f1:c9:7a:53:b5: f0:68:fe:b9:df:a9:e7:f1:2b:fe:6e:7e:29:6a:72:61:e1:89: a4:52:59:ce:74:01:e0:af:a7:38:70:5f:e0:5e:58:10:cf:2d: 6d:72:6b:dc:4d:00:a4:a8:19:ac:9e:b8:16:36:c6:5f:15:4a: 2b:f7:c4:ee:45:c8:ec:ef:49:18:50:54:ff:39:8e:50:bf:d8: 85:77:49:ee:23:9e:26:d4:e3:c6:c1:2e:dc:c5:64:a8:29:53: 2e:77:72:f2:f3:ae:ea:75:1e:a3:3a:c4:d5:eb:8f:76:bb:89: fc:ab:59:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQJDn4QTwVKcFs2CC+ptl7jTz2+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMDIwWhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDEwNDM4NzA4YjA3NmEwZDQxMGIyNGI5ZDliODhkNGEz MWNkZWI1NThlM2M3Y2I3YmY3YmU2ZjdhMDUwMWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLu4tQaho2a4By879/YZFswa0nrQLb+MUHVNGCHUJjpf3Q Doa7lSNMNbgzK54ejbthgVXZYuBCSgeMsIaB3iKQXvedQkyWNGSoxsa1qAxUIJC1 2cyYnp9QYRvO+jyJDJJ++AIBUzIUMzwnaLIhRqR9VkcA63eebuFk2zNqd+UOXfLf G9G99ntxFKI8djHfh3gBj6QqY7uY2Y3MvcXxQvANKV41uW2cna4SC/mVhi44m4z4 YYiB5PirZSJWgFbt62B17BHgj9B/R2V/DWCaPbGuNt/aeKU/UbSR+Bp1wON+w6FW Z5MjJIS6+9R6dIvI+HzjPuMLZMp3tHSaMDM+uGrXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZYjDD4cOfJjExPpIraGKilsTVQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxZDJjMDZkLTUzNTUtNDY1Yi04ZDUxLWRmZWY4MmI1ZDAwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAehY4AwDQYJKoZIhvcNAQELBQADggEBADhJQdDOTb7u5JfTooI1i9o9hSad zqLfqO4g9CrXhfP3wV2y5UZzkw8SkS9UPtTaGbFp4e1xQAF405NLSX9QZIs/frTm BjR1IIvypYLBrqplF73ESz4rvfT5HSKdPARzvMrNi51z2mWETnI2VPT6oYLQmcL/ b0Tjm9qabM7FhKLYyVwGMw3W2H/OCiDxyXpTtfBo/rnfqefxK/5ufilqcmHhiaRS Wc50AeCvpzhwX+BeWBDPLW1ya9xNAKSoGayeuBY2xl8VSiv3xO5FyOzvSRhQVP85 jlC/2IV3Se4jnibU48bBLtzFZKgpUy53cvLzrup1HqM6xNXrj3a7ifyrWXU= -----END CERTIFICATE-----Generated at Mon May 5 05:03:50 2025 by rpki-client