$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa File: d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa (raw, json) Hash identifier: N0+/uyIPJDUj6kKDrujNIF/SmRkYAjx47xC9prCTz4A= Subject key identifier: DA:91:24:5E:E4:97:34:9E:D1:63:0E:F8:9D:53:46:C6:BD:E5:43:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14A850F4378EA4D3D698EC7A1D57128E7AA727BC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa Signing time: Mon 16 Jun 2025 15:21:29 +0000 ROA not before: Mon 16 Jun 2025 15:21:29 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a8:50:f4:37:8e:a4:d3:d6:98:ec:7a:1d:57:12:8e:7a:a7:27:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:21:29 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=4e8fb36cb1a0a6aad81910ce74f72876e29d4f0f868e29520482448a6e71874b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:86:1f:27:1d:0e:ec:71:12:93:b2:8a:b9: 38:76:56:7e:f8:04:a3:e2:24:9c:ef:4c:cd:ed:b9: b0:67:34:bb:84:a7:95:3e:05:a4:6c:96:b7:01:b3: 9a:3a:02:d2:dd:3b:9b:f6:39:3f:c9:38:6b:d6:07: 7c:4c:b4:ba:1f:e5:1b:85:9c:65:6c:37:ca:69:dd: 0d:09:41:c6:23:30:46:a6:d0:9f:a1:ea:a0:ab:98: 25:cf:9c:18:4e:2f:b7:87:cb:c6:29:4d:da:2f:fb: 6c:5f:30:d0:aa:38:73:01:81:13:ac:ec:cc:46:b8: b9:7c:ae:e7:dd:39:99:da:3d:22:2a:e5:40:02:47: d5:07:7a:a1:67:5b:67:c0:9f:71:a6:20:93:42:63: c8:11:3a:0e:a7:21:5a:c5:84:88:4e:29:5d:d6:46: d4:f9:31:55:0b:b9:ef:d6:48:27:b7:8e:69:15:5c: f8:fe:7d:ed:fc:33:e0:fa:99:0b:df:ab:dd:4f:7f: ef:a8:4f:8c:75:7e:af:ad:27:25:74:28:95:2b:cc: 69:08:b8:3d:54:b9:b9:59:ef:fc:5d:09:64:e2:f5: 2c:3d:d4:d4:fd:a4:45:5f:67:1d:3b:e5:60:41:35: 9b:b0:99:4d:39:90:3f:f8:df:6d:70:78:4e:93:e0: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:24:5E:E4:97:34:9E:D1:63:0E:F8:9D:53:46:C6:BD:E5:43:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d65e4b0d-a594-4fe5-a8f5-a6caf62234da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption d7:0c:bd:d1:42:b8:b4:d8:a1:a6:b5:52:d2:8d:fd:c4:76:24: 84:da:f5:9e:30:7d:16:0d:c8:85:0c:d2:83:d0:5c:9f:2e:6c: 22:97:2b:ac:30:c1:00:35:06:63:04:6b:81:48:b8:5d:c3:e8: 3d:ac:ef:a6:26:83:29:a0:ae:a6:e1:45:d2:8d:7e:ac:84:2f: 0d:ad:e6:a0:5a:f5:86:d5:62:fa:d0:d0:36:0f:f4:15:0e:4a: c9:0c:9d:98:b2:f1:e9:62:c0:c8:42:ca:68:28:08:d4:93:26: dc:f0:27:8e:fe:33:ed:f4:66:d8:6f:86:ab:87:af:44:e1:b5: 7a:38:7c:24:53:ba:c6:4a:1a:a7:c1:f9:ae:4c:28:20:3e:0f: 00:c2:62:41:ce:c8:c7:96:0f:92:44:d0:56:05:3e:f4:bc:db: b2:2d:66:0d:32:46:ce:28:eb:fc:6d:10:3e:ce:5e:6d:85:fa: 82:80:4c:23:b1:b5:dc:05:3c:49:01:e6:4b:96:69:44:3b:df: 64:8c:be:92:24:50:17:93:74:4e:db:63:67:e1:ad:1e:62:53: ed:ae:8d:6c:9a:f9:8e:6f:24:5a:59:22:73:d0:1d:5b:b4:38: 7c:72:35:8f:dc:6a:eb:a0:12:a6:75:2d:c4:1d:71:2c:58:32: b7:d0:8f:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFKhQ9DeOpNPWmOx6HVcSjnqnJ7wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUyMTI5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZThmYjM2Y2IxYTBhNmFhZDgxOTEwY2U3NGY3Mjg3NmUy OWQ0ZjBmODY4ZTI5NTIwNDgyNDQ4YTZlNzE4NzRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoRIYfJx0O7HESk7KKuTh2Vn74BKPiJJzvTM3tubBnNLuE p5U+BaRslrcBs5o6AtLdO5v2OT/JOGvWB3xMtLof5RuFnGVsN8pp3Q0JQcYjMEam 0J+h6qCrmCXPnBhOL7eHy8YpTdov+2xfMNCqOHMBgROs7MxGuLl8rufdOZnaPSIq 5UACR9UHeqFnW2fAn3GmIJNCY8gROg6nIVrFhIhOKV3WRtT5MVULue/WSCe3jmkV XPj+fe38M+D6mQvfq91Pf++oT4x1fq+tJyV0KJUrzGkIuD1UublZ7/xdCWTi9Sw9 1NT9pEVfZx075WBBNZuwmU05kD/4321weE6T4EtNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2pEkXuSXNJ7RYw74nVNGxr3lQ4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2NWU0YjBkLWE1OTQtNGZlNS1hOGY1LWE2Y2FmNjIyMzRkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA46DANBgkqhkiG9w0BAQsFAAOCAQEA1wy90UK4tNihprVS0o39xHYkhNr1 njB9Fg3IhQzSg9Bcny5sIpcrrDDBADUGYwRrgUi4XcPoPazvpiaDKaCupuFF0o1+ rIQvDa3moFr1htVi+tDQNg/0FQ5KyQydmLLx6WLAyELKaCgI1JMm3PAnjv4z7fRm 2G+Gq4evROG1ejh8JFO6xkoap8H5rkwoID4PAMJiQc7Ix5YPkkTQVgU+9Lzbsi1m DTJGzijr/G0QPs5ebYX6goBMI7G13AU8SQHmS5ZpRDvfZIy+kiRQF5N0TttjZ+Gt HmJT7a6NbJr5jm8kWlkic9AdW7Q4fHI1j9xq66ASpnUtxB1xLFgyt9CPGQ== -----END CERTIFICATE-----Generated at Sun Jun 29 07:19:34 2025 by rpki-client