$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fae613-f78e-4b9c-a30a-0e78ff6090a1.roa File: 06fae613-f78e-4b9c-a30a-0e78ff6090a1.roa (raw, json) Hash identifier: UhOpRRxAYzb9HV5xtgpL29lijispwHJNvqMIsJxocpk= Subject key identifier: 18:5E:28:12:98:1D:54:E1:0E:66:11:F9:3C:B9:55:E7:35:29:F1:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D81EE728DE99A91776396024F6DD58BF6D1C5B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fae613-f78e-4b9c-a30a-0e78ff6090a1.roa Signing time: Wed 23 Apr 2025 00:41:29 +0000 ROA not before: Wed 23 Apr 2025 00:41:29 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:81:ee:72:8d:e9:9a:91:77:63:96:02:4f:6d:d5:8b:f6:d1:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:29 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=0ebc198e5ca0b2353259be47e85905f1f2fa3fc330764acc7a06ba3ce600f45e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:1c:89:6a:35:65:ae:4b:53:f5:17:45:07: 88:0b:db:9b:aa:c4:7b:10:4f:d3:57:87:e9:d5:5b: 79:4b:ce:79:d6:10:21:de:e2:b2:bc:38:e2:97:56: 62:5e:2b:69:50:3f:3e:b5:f6:c5:ac:2f:08:21:11: 5a:6d:c9:ca:8d:35:2e:01:d9:ee:18:cf:43:16:1f: 2e:b2:33:98:ca:e0:8f:e0:f9:d6:1e:af:cf:60:79: 0a:57:bb:79:3c:11:a2:eb:8a:9c:78:42:99:43:70: 01:52:12:15:c0:15:12:e8:4b:ec:2b:ee:c3:42:0c: fd:47:41:0a:5c:28:1d:90:a0:1e:ca:d1:bb:2d:6a: 5f:7e:48:66:e3:8d:c7:03:7a:b0:ad:2b:7d:1c:88: 93:95:bf:46:87:88:7b:59:17:df:66:4d:66:c2:f0: ac:2d:a0:7c:30:d2:7d:7f:39:6d:4b:0b:09:c9:fd: 33:2c:cf:c4:cc:b2:7b:4b:7b:0a:30:61:06:9b:aa: 19:8b:2c:25:be:d3:5f:42:b5:39:1d:df:d4:63:6d: 47:b2:0d:c4:31:be:83:71:92:fe:29:fd:bc:b2:5f: d5:38:5f:42:3c:83:bc:45:0a:5c:7f:76:70:90:95: b1:e0:6f:9b:56:68:a4:87:ae:9d:c7:82:56:b4:94: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5E:28:12:98:1D:54:E1:0E:66:11:F9:3C:B9:55:E7:35:29:F1:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fae613-f78e-4b9c-a30a-0e78ff6090a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9b:41:cf:49:9b:33:93:fa:94:d0:eb:f8:e1:7a:d6:11:ad:79: 59:39:f8:f9:3e:f1:d4:bb:37:71:42:f6:be:3f:f5:0c:61:45: 0b:fd:31:10:0e:73:81:e0:1f:fb:b6:06:17:b6:c3:fd:ba:b5: 99:f1:1c:61:5a:63:f4:4e:c2:fa:f1:c6:c2:e1:f4:18:d9:95: d8:0b:26:82:3d:63:0d:4b:3a:c1:da:ef:38:0a:e7:79:d0:a3: 63:72:71:f5:a1:e4:1a:ab:13:8a:d2:d2:fa:8d:16:65:85:9c: a1:1a:3a:cd:f7:d8:ce:95:26:da:8d:ed:0f:15:e6:fa:9b:dc: 27:89:dc:18:dc:30:2a:28:e2:7a:b4:0a:a0:02:c8:65:73:77: 52:86:87:a8:ae:61:2b:87:27:90:11:82:06:ba:c9:c1:6b:e2: ab:d0:fb:9e:19:3f:89:cf:dc:67:26:74:90:a3:ea:12:24:e9: 7d:6a:75:70:c5:b3:3f:35:cb:6b:d0:77:b8:c0:f6:91:a4:b2: 75:4d:8c:94:52:f4:43:d1:c9:6b:d6:4a:32:42:b8:48:d1:6e: 57:c0:32:7e:e2:92:9a:3d:19:5a:c1:5d:69:27:6e:51:ed:ff: 0e:02:14:bb:a8:da:79:f8:44:57:86:4e:bd:5d:8e:cc:36:42: e2:08:83:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbYHuco3pmpF3Y5YCT23Vi/bRxbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTI5WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWJjMTk4ZTVjYTBiMjM1MzI1OWJlNDdlODU5MDVmMWYy ZmEzZmMzMzA3NjRhY2M3YTA2YmEzY2U2MDBmNDVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqYxyJajVlrktT9RdFB4gL25uqxHsQT9NXh+nVW3lLznnW ECHe4rK8OOKXVmJeK2lQPz619sWsLwghEVptycqNNS4B2e4Yz0MWHy6yM5jK4I/g +dYer89geQpXu3k8EaLripx4QplDcAFSEhXAFRLoS+wr7sNCDP1HQQpcKB2QoB7K 0bstal9+SGbjjccDerCtK30ciJOVv0aHiHtZF99mTWbC8KwtoHww0n1/OW1LCwnJ /TMsz8TMsntLewowYQabqhmLLCW+019CtTkd39RjbUeyDcQxvoNxkv4p/byyX9U4 X0I8g7xFClx/dnCQlbHgb5tWaKSHrp3Hgla0lAcpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGF4oEpgdVOEOZhH5PLlV5zUp8eMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZmFlNjEzLWY3OGUtNGI5Yy1hMzBhLTBlNzhmZjYwOTBhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOIAwDQYJKoZIhvcNAQELBQADggEBAJtBz0mbM5P6lNDr+OF61hGteVk5 +Pk+8dS7N3FC9r4/9QxhRQv9MRAOc4HgH/u2Bhe2w/26tZnxHGFaY/ROwvrxxsLh 9BjZldgLJoI9Yw1LOsHa7zgK53nQo2NycfWh5BqrE4rS0vqNFmWFnKEaOs332M6V JtqN7Q8V5vqb3CeJ3BjcMCoo4nq0CqACyGVzd1KGh6iuYSuHJ5ARgga6ycFr4qvQ +54ZP4nP3GcmdJCj6hIk6X1qdXDFsz81y2vQd7jA9pGksnVNjJRS9EPRyWvWSjJC uEjRblfAMn7ikpo9GVrBXWknblHt/w4CFLuo2nn4RFeGTr1djsw2QuIIg6I= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:12 2025 by rpki-client