$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa File: d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa (raw, json) Hash identifier: MjMcEC/ojgOZKom90OqttQ+p7vEBuMVnnidaYuBonOs= Subject key identifier: 58:94:B2:C5:3A:F3:51:0C:79:0D:29:F1:8E:65:71:2F:1E:35:14:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D41F696411C1859311ABD843DF6BDC1047D5F40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa Signing time: Sat 03 May 2025 00:01:18 +0000 ROA not before: Sat 03 May 2025 00:01:18 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 158.56.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:41:f6:96:41:1c:18:59:31:1a:bd:84:3d:f6:bd:c1:04:7d:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:01:18 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=4187c0ba5d9a40a787446edf7f96782c4e00f5e4363a6553ebd2df025182678d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:bd:c4:a1:50:a2:19:5f:79:3f:80:b9:12: db:fb:19:b2:58:79:f2:3b:4d:e5:6e:2e:c8:6f:38: 19:80:82:b0:47:a2:ac:49:2d:f9:4b:e6:a1:c1:6d: 82:17:f4:52:a5:75:d6:88:c7:a6:0d:1e:9f:c1:79: 03:c0:b8:67:ac:73:37:e5:11:dd:33:df:d8:79:55: af:d8:d0:9f:6b:86:38:24:71:d3:d2:c3:d7:94:63: 98:41:d0:96:84:72:e4:3b:24:c9:77:cb:fe:41:3a: 01:98:db:96:ad:cf:ed:a1:0a:12:d4:91:ff:37:9f: 59:78:43:51:d8:e8:17:2b:a9:df:b3:36:22:f2:27: 2f:61:72:d6:48:7b:7e:8d:a9:12:9d:98:4e:12:2d: 3b:02:80:a0:24:57:ab:56:34:2e:31:33:45:6b:e1: 8d:ef:c3:29:98:bc:a6:4f:32:36:08:cc:dd:be:02: a4:dd:55:24:c6:47:01:bb:86:13:3d:7f:ac:03:5f: ee:25:95:1a:ff:44:f5:a9:b1:46:33:8b:16:03:ff: 0a:db:93:dd:61:25:e6:82:df:a4:8d:13:70:7c:d0: 9c:cc:e9:1b:16:ed:2c:6c:c8:50:15:ba:33:b2:be: db:a1:71:4f:97:c3:27:50:f0:c1:d1:fe:b5:82:80: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:B2:C5:3A:F3:51:0C:79:0D:29:F1:8E:65:71:2F:1E:35:14:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2c:1e:2f:ef:7f:4a:39:b8:b1:e8:f0:5a:51:c6:06:f8:84:ad: ff:ab:6b:fc:90:11:01:2f:a1:53:e8:af:bd:24:5e:74:5d:42: 0e:5b:a0:a1:3f:f4:b4:be:dc:5b:1d:f3:25:79:a2:9d:a6:61: 88:03:0d:c8:84:c1:c6:e0:92:9c:a6:7c:f0:3e:ac:67:c7:a6: cb:4a:e4:7f:4b:06:9b:4f:74:37:07:d4:49:a5:ac:86:2d:5d: e3:31:57:7d:40:bf:1f:f2:f9:05:36:e2:1f:c6:5d:29:fa:91: 1c:d7:a3:74:b5:7e:85:35:ee:87:0d:e0:25:48:bc:50:a9:51: 7c:15:09:21:5a:08:40:69:40:22:90:af:a5:47:92:ce:0f:e6: a9:30:f7:13:d1:55:cf:57:07:d9:4b:24:5c:45:f0:e0:ef:98: 82:10:10:9f:41:1d:ac:14:6d:73:5c:e8:be:48:e0:0a:25:9d: 34:f4:35:e6:28:24:b1:ac:e8:6d:73:5a:c8:1c:dd:93:1c:82: 66:34:e3:25:df:93:91:22:b7:15:bc:a4:f2:07:43:be:ea:ca: b2:0e:e6:2b:1d:b6:4b:fa:d2:b2:b7:7a:35:9d:1a:d3:98:88: e3:ee:c7:39:16:10:56:4f:c8:22:b9:6c:9d:f2:5d:a6:8a:8f: fa:c3:88:9c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfUH2lkEcGFkxGr2EPfa9wQR9X0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMTE4WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTg3YzBiYTVkOWE0MGE3ODc0NDZlZGY3Zjk2NzgyYzRl MDBmNWU0MzYzYTY1NTNlYmQyZGYwMjUxODI2NzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7uL3EoVCiGV95P4C5Etv7GbJYefI7TeVuLshvOBmAgrBH oqxJLflL5qHBbYIX9FKlddaIx6YNHp/BeQPAuGesczflEd0z39h5Va/Y0J9rhjgk cdPSw9eUY5hB0JaEcuQ7JMl3y/5BOgGY25atz+2hChLUkf83n1l4Q1HY6Bcrqd+z NiLyJy9hctZIe36NqRKdmE4SLTsCgKAkV6tWNC4xM0Vr4Y3vwymYvKZPMjYIzN2+ AqTdVSTGRwG7hhM9f6wDX+4llRr/RPWpsUYzixYD/wrbk91hJeaC36SNE3B80JzM 6RsW7SxsyFAVujOyvtuhcU+XwydQ8MHR/rWCgDz9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWJSyxTrzUQx5DSnxjmVxLx41FLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyNTg3ZjU1LTZmZGEtNGUwNC05OTY4LTllNGU5NWQ2ZmNlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCeODANBgkqhkiG9w0BAQsFAAOCAQEALB4v739KObix6PBaUcYG+ISt/6tr /JARAS+hU+ivvSRedF1CDlugoT/0tL7cWx3zJXminaZhiAMNyITBxuCSnKZ88D6s Z8emy0rkf0sGm090NwfUSaWshi1d4zFXfUC/H/L5BTbiH8ZdKfqRHNejdLV+hTXu hw3gJUi8UKlRfBUJIVoIQGlAIpCvpUeSzg/mqTD3E9FVz1cH2UskXEXw4O+YghAQ n0EdrBRtc1zovkjgCiWdNPQ15igksazobXNayBzdkxyCZjTjJd+TkSK3Fbyk8gdD vurKsg7mKx22S/rSsrd6NZ0a05iI4+7HORYQVk/IIrlsnfJdpoqP+sOInA== -----END CERTIFICATE-----Generated at Mon May 5 17:23:04 2025 by rpki-client