$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e9a00e-aef9-48c7-88f3-d63013d1afa8.roa File: e9e9a00e-aef9-48c7-88f3-d63013d1afa8.roa (raw, json) Hash identifier: 8ucxI86W5QlU2H+VCBx8222T2RkP93CSRwwS0B2XJUk= Subject key identifier: 74:2A:6C:44:63:88:5E:10:1D:38:14:EB:36:BF:4F:38:32:4A:98:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 670AFED15F9DB414CDE0FFD45276B400BCC4AF52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e9a00e-aef9-48c7-88f3-d63013d1afa8.roa Signing time: Sat 03 May 2025 00:50:12 +0000 ROA not before: Sat 03 May 2025 00:50:12 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:fe:d1:5f:9d:b4:14:cd:e0:ff:d4:52:76:b4:00:bc:c4:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:50:12 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=e6b5022a78a6d68ab5adcb16a8dfef537b8df8813ac0f163ceadf934023416ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:c9:87:6b:e9:60:d5:71:29:e9:b9:29:db: b5:dc:6a:73:94:5c:f1:37:5e:6c:63:5b:a3:ea:a8: e0:03:b5:7f:f4:06:28:65:37:e3:7c:b1:91:bd:6b: 8f:4b:3d:12:3d:87:84:bf:7f:ef:9e:a4:0c:e3:d2: b3:61:1e:7b:6c:67:68:7d:ad:9e:41:87:11:74:6d: f8:2b:38:01:4a:9a:28:fb:a2:c0:43:3c:c4:e3:c2: f9:2a:4c:6b:2c:8e:25:08:d9:7d:3f:c6:a4:20:2a: d2:32:a5:03:41:81:35:b7:42:a1:0d:76:1d:e6:36: 40:d0:b7:e7:4a:72:65:33:70:6f:f9:c7:47:90:53: 31:cd:5e:b1:32:b5:04:23:af:d8:26:ab:26:ae:28: a7:b0:3e:52:d3:dc:91:f3:8f:9a:ae:af:bb:92:9e: ac:c2:ab:2b:ee:93:68:f0:61:f4:ac:c6:05:4e:6d: 52:2c:3a:91:73:57:b5:0e:3f:33:33:89:12:88:8d: b2:cd:48:2f:a3:cf:6b:15:a7:35:13:59:0e:0e:f7: 76:1a:cc:78:a4:69:d7:cf:9c:cf:0f:b7:e0:46:e6: d2:43:2a:26:80:51:47:65:2f:ee:99:f7:60:e1:54: 49:88:d7:95:0d:1c:ad:28:42:84:45:28:1e:23:69: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:6C:44:63:88:5E:10:1D:38:14:EB:36:BF:4F:38:32:4A:98:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e9a00e-aef9-48c7-88f3-d63013d1afa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.104.0/22 Signature Algorithm: sha256WithRSAEncryption 07:8f:d5:14:29:e7:d8:78:2f:47:ff:04:1f:ec:e1:fa:30:f0: 75:bc:0b:83:96:1a:5a:c3:53:df:9b:fe:89:05:32:7b:d9:1d: ec:fc:88:bc:8b:8e:3c:86:66:17:bc:ea:36:f8:a8:b5:1d:ba: 86:12:e2:bc:f5:39:22:16:1d:c0:80:eb:dd:73:aa:2b:5c:4c: 5e:bd:30:e5:66:de:53:55:da:12:85:29:01:a6:1d:37:f8:65: 5f:65:95:81:b0:2d:98:ec:39:6a:58:d6:c0:f2:bd:b0:5c:a0: 46:3e:c5:b3:3c:b5:a1:b5:50:6d:22:c5:02:fb:22:d1:7f:ee: 22:47:91:4b:a2:a6:d0:2b:37:53:c6:91:7e:a3:0b:a6:41:92: cf:01:8f:cd:c9:3b:82:00:f9:62:6c:66:ff:2d:28:1a:8d:fc: 27:5e:fb:26:03:a6:5a:eb:75:3c:19:d7:c0:9a:25:64:46:d0: 40:d2:b9:3a:de:ef:06:0c:fc:34:3e:4e:5d:d2:d1:f2:7e:ed: 19:9c:39:5e:53:f9:7f:86:92:bb:eb:03:30:76:27:e7:ca:a5: 25:91:4f:13:26:fa:d7:a2:af:fc:a3:9d:d1:43:3d:12:09:8b: ff:bd:ab:32:be:a8:eb:78:19:9a:81:20:52:7f:42:1f:47:d3: 1e:dd:bb:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZwr+0V+dtBTN4P/UUna0ALzEr1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA1MDEyWhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmI1MDIyYTc4YTZkNjhhYjVhZGNiMTZhOGRmZWY1Mzdi OGRmODgxM2FjMGYxNjNjZWFkZjkzNDAyMzQxNmFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5rcmHa+lg1XEp6bkp27XcanOUXPE3XmxjW6PqqOADtX/0 BihlN+N8sZG9a49LPRI9h4S/f++epAzj0rNhHntsZ2h9rZ5BhxF0bfgrOAFKmij7 osBDPMTjwvkqTGssjiUI2X0/xqQgKtIypQNBgTW3QqENdh3mNkDQt+dKcmUzcG/5 x0eQUzHNXrEytQQjr9gmqyauKKewPlLT3JHzj5qur7uSnqzCqyvuk2jwYfSsxgVO bVIsOpFzV7UOPzMziRKIjbLNSC+jz2sVpzUTWQ4O93YazHikadfPnM8Pt+BG5tJD KiaAUUdlL+6Z92DhVEmI15UNHK0oQoRFKB4jaWwbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdCpsRGOIXhAdOBTrNr9PODJKmCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5ZTlhMDBlLWFlZjktNDhjNy04OGYzLWQ2MzAxM2QxYWZhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAGgwDQYJKoZIhvcNAQELBQADggEBAAeP1RQp59h4L0f/BB/s4fow8HW8 C4OWGlrDU9+b/okFMnvZHez8iLyLjjyGZhe86jb4qLUduoYS4rz1OSIWHcCA691z qitcTF69MOVm3lNV2hKFKQGmHTf4ZV9llYGwLZjsOWpY1sDyvbBcoEY+xbM8taG1 UG0ixQL7ItF/7iJHkUuiptArN1PGkX6jC6ZBks8Bj83JO4IA+WJsZv8tKBqN/Cde +yYDplrrdTwZ18CaJWRG0EDSuTre7wYM/DQ+Tl3S0fJ+7RmcOV5T+X+GkrvrAzB2 J+fKpSWRTxMm+teir/yjndFDPRIJi/+9qzK+qOt4GZqBIFJ/Qh9H0x7du3E= -----END CERTIFICATE-----Generated at Mon May 5 14:45:24 2025 by rpki-client