$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa File: ffe12830-146b-4ace-aa76-00c674bbaa36.roa (raw, json) Hash identifier: qcqTmBogTvBkvoUi2Up4U22ziI6sD3xtEYo41x6vD34= Subject key identifier: B8:17:A3:C2:0B:09:93:B2:6F:1D:BC:2F:83:29:92:3E:FE:05:6A:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27C3C652F2743DB8F37D5D746EA758EFBB2BD41C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa Signing time: Wed 18 Jun 2025 00:11:38 +0000 ROA not before: Wed 18 Jun 2025 00:11:38 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 45.72.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c3:c6:52:f2:74:3d:b8:f3:7d:5d:74:6e:a7:58:ef:bb:2b:d4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 18 00:11:38 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=c226e2d1dc99c1336e09e56cb01718a63e1837ba7052f792be2e490cee902d0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:0a:83:6d:27:88:4b:64:e0:a5:20:17:d9: c0:15:56:b0:04:80:c6:63:66:a8:08:27:d8:bf:b1: e9:eb:8d:8a:e5:2a:c6:22:21:93:41:8d:2d:aa:4f: c4:93:ac:93:3b:aa:65:76:a4:38:3a:af:d5:bf:9b: 64:32:58:0c:db:73:07:51:db:9a:cc:82:f3:61:3c: 89:2b:27:10:5f:e2:b7:0f:f4:9f:e8:95:64:23:f4: e9:60:0e:f7:e5:36:14:af:61:67:5f:77:64:32:46: ac:64:d1:a1:7d:d2:3e:17:04:56:60:5d:72:86:33: db:da:2a:5d:89:cd:e4:cd:1a:16:62:2a:78:32:bb: 3d:9f:ae:b1:c7:1d:43:1d:59:2a:2c:b6:b3:c7:94: a2:c3:b7:0f:7c:7e:9b:c7:bc:bc:d9:cd:00:03:6c: 37:5b:f6:b9:c9:92:84:f3:66:7e:55:d5:ba:7e:85: 9b:ee:3b:3b:db:30:d0:65:59:b9:29:a0:e1:49:17: 58:56:29:8d:51:53:d3:66:d2:92:30:f8:8f:59:11: 07:b5:90:5b:b4:3f:ae:f3:00:b2:aa:d8:bd:ad:9c: a8:c6:6e:45:ce:52:74:d1:cf:6c:23:f2:b6:14:1c: 35:f7:9c:93:34:52:1c:5b:1f:2a:98:99:63:c6:11: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:A3:C2:0B:09:93:B2:6F:1D:BC:2F:83:29:92:3E:FE:05:6A:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.72.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6c:a0:b1:39:67:48:ba:87:3d:63:3c:bd:46:2e:2b:7b:76:1d: b4:00:35:04:75:b0:98:0f:91:9c:ec:8a:a9:40:96:d0:fc:03: 10:42:76:4a:d7:58:48:f8:ba:65:a9:4a:a0:eb:ae:41:26:b8: a4:6b:a0:75:76:e8:06:84:7d:10:66:73:df:ff:28:0b:8f:80: 17:9f:38:0b:df:c2:bc:9a:e7:fd:5d:30:fc:3e:03:2e:91:df: 57:f1:67:cb:67:cf:93:6f:e8:3d:85:35:fe:8d:5c:16:7f:5e: bd:b7:54:cd:e6:f5:ea:85:8a:f9:55:a4:0a:5c:7b:99:1d:f8: f8:37:3d:13:3a:9c:2d:59:34:cc:54:89:58:dc:70:72:13:0e: b6:0f:9b:a2:85:fc:15:fe:9b:a8:14:25:f2:d6:b4:f6:87:42: 92:2a:16:bd:b2:3e:53:ce:bc:79:07:4f:9b:ee:0a:e4:50:61: 10:f7:a2:93:dc:df:3e:26:e9:29:a5:e4:07:8f:60:a7:27:08: 71:bb:36:57:ab:fc:77:fe:ac:ec:0e:68:b2:1e:3c:40:96:cd: 8c:5d:a2:e8:92:5e:bf:72:a4:76:5c:af:d9:46:ef:37:3f:1e: 24:61:40:cc:3a:25:b3:25:82:0a:df:53:e1:a4:1f:c5:6d:4f: 5f:c4:7d:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ8PGUvJ0PbjzfV10bqdY77sr1BwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE4MDAxMTM4WhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjI2ZTJkMWRjOTljMTMzNmUwOWU1NmNiMDE3MThhNjNl MTgzN2JhNzA1MmY3OTJiZTJlNDkwY2VlOTAyZDBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpmgqDbSeIS2TgpSAX2cAVVrAEgMZjZqgIJ9i/senrjYrl KsYiIZNBjS2qT8STrJM7qmV2pDg6r9W/m2QyWAzbcwdR25rMgvNhPIkrJxBf4rcP 9J/olWQj9OlgDvflNhSvYWdfd2QyRqxk0aF90j4XBFZgXXKGM9vaKl2JzeTNGhZi Kngyuz2frrHHHUMdWSostrPHlKLDtw98fpvHvLzZzQADbDdb9rnJkoTzZn5V1bp+ hZvuOzvbMNBlWbkpoOFJF1hWKY1RU9Nm0pIw+I9ZEQe1kFu0P67zALKq2L2tnKjG bkXOUnTRz2wj8rYUHDX3nJM0UhxbHyqYmWPGERlpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuBejwgsJk7JvHbwvgymSPv4FaqUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmZTEyODMwLTE0NmItNGFjZS1hYTc2LTAwYzY3NGJiYWEzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBActSAAwDQYJKoZIhvcNAQELBQADggEBAGygsTlnSLqHPWM8vUYuK3t2HbQA NQR1sJgPkZzsiqlAltD8AxBCdkrXWEj4umWpSqDrrkEmuKRroHV26AaEfRBmc9// KAuPgBefOAvfwrya5/1dMPw+Ay6R31fxZ8tnz5Nv6D2FNf6NXBZ/Xr23VM3m9eqF ivlVpApce5kd+Pg3PRM6nC1ZNMxUiVjccHITDrYPm6KF/BX+m6gUJfLWtPaHQpIq Fr2yPlPOvHkHT5vuCuRQYRD3opPc3z4m6Sml5AePYKcnCHG7Nler/Hf+rOwOaLIe PECWzYxdouiSXr9ypHZcr9lG7zc/HiRhQMw6JbMlggrfU+GkH8VtT1/EfZI= -----END CERTIFICATE-----Generated at Thu Jul 3 05:23:41 2025 by rpki-client