$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa File: 0f893b02-709b-4a20-ab74-f859a710b1be.roa (raw, json) Hash identifier: mrIeiqBOUYAUILlx7hwqdTwZREo5VylJcLe5XG3uAL0= Subject key identifier: FF:DD:1B:F3:63:05:B9:48:0F:F9:EF:A4:B9:BA:3C:67:B1:C2:45:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2569780FAFDBAD3FB90C4F137B3E6C1CD7A75608 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa Signing time: Sat 24 May 2025 00:10:11 +0000 ROA not before: Sat 24 May 2025 00:10:11 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:69:78:0f:af:db:ad:3f:b9:0c:4f:13:7b:3e:6c:1c:d7:a7:56:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:10:11 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=37673344b4c687cb27757c67beca76829421d2f40172165b898763e8de15b8aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:d2:f6:97:87:7c:d4:3b:f1:d1:70:1b:0f: 88:e7:0a:e9:9d:42:f7:f9:28:01:0c:7a:26:9d:d0: 06:09:8a:c8:28:66:76:c4:62:5e:cc:6d:7a:be:af: e6:08:c2:ee:a4:95:3c:b5:93:2a:04:dd:3b:82:92: a1:5d:7f:7e:16:d7:a7:64:c5:32:98:eb:c7:e4:0b: a1:1b:d2:53:d3:40:59:29:e3:a8:f9:00:6a:19:91: 92:40:2a:e1:e8:01:71:50:07:5d:ec:4b:a4:34:44: 05:03:a5:74:6f:37:c9:cd:0f:9f:19:12:ae:a7:64: e0:56:b0:ca:c1:ee:17:85:35:3a:96:1d:74:31:43: 98:c4:da:92:38:7a:ef:91:14:8f:cf:28:2c:4e:57: 16:eb:11:1b:fb:10:c8:17:0b:57:8e:9c:b8:72:20: 99:2d:f6:8b:da:39:8a:19:ed:92:ee:e3:47:2e:19: 64:ce:8a:50:b3:0b:88:1b:64:dd:2c:66:34:a4:a8: 24:0e:d5:86:08:99:5a:27:2e:87:fb:03:b3:97:0d: 68:3f:fb:cd:8e:49:28:53:40:82:18:5c:00:30:96: 6e:52:d2:cd:5f:78:bb:a9:6d:bf:59:0f:0d:b6:c1: 8f:3c:d6:0a:1a:bb:73:dd:6f:f2:f1:45:df:5a:f3: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:1B:F3:63:05:B9:48:0F:F9:EF:A4:B9:BA:3C:67:B1:C2:45:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption d9:16:8c:ad:c6:b8:39:02:ca:d6:4d:ac:13:56:9a:85:b1:88: 0e:26:84:4e:8d:2f:3c:bd:8d:cf:92:81:4a:1e:e2:7b:17:67: c5:7b:08:e6:e6:f4:9f:95:b1:b4:09:95:2f:b8:13:cf:14:60: 52:85:2a:fd:c8:7a:38:8d:60:fd:e7:4c:e1:41:c5:82:1a:f5: 4b:a3:3e:31:1d:80:f3:9c:ad:a8:7e:ac:e7:0a:dd:98:e0:68: 54:b2:c3:de:3e:fc:1a:92:ed:69:59:ab:cd:68:f8:1b:d8:fd: 56:3b:3d:74:77:de:d4:d0:f9:8f:09:7f:cc:a5:18:b4:93:5c: 2a:d3:5f:a3:55:5d:af:70:4e:a6:00:b6:13:89:96:37:1f:d7: b4:56:8b:32:3c:a6:bb:d5:1a:f3:b9:e8:9d:f1:a3:93:44:30: 02:f5:f2:a4:6d:29:76:4e:27:81:04:ee:cf:69:3a:99:a9:81: cc:1a:36:18:e8:93:83:0c:23:71:ed:5a:95:1c:e7:50:e4:8d: ac:44:6a:27:36:7d:28:3f:b7:f1:f8:1b:9a:ef:88:b6:a0:38: 65:88:2e:05:4b:23:6d:21:35:9d:0b:31:3f:03:6c:a9:9d:71: af:49:e1:c6:62:3b:58:e8:14:d6:24:1a:e9:54:89:7c:84:5c: d8:bf:27:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJWl4D6/brT+5DE8Tez5sHNenVggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAxMDExWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzY3MzM0NGI0YzY4N2NiMjc3NTdjNjdiZWNhNzY4Mjk0 MjFkMmY0MDE3MjE2NWI4OTg3NjNlOGRlMTViOGFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaI9L2l4d81Dvx0XAbD4jnCumdQvf5KAEMeiad0AYJisgo ZnbEYl7MbXq+r+YIwu6klTy1kyoE3TuCkqFdf34W16dkxTKY68fkC6Eb0lPTQFkp 46j5AGoZkZJAKuHoAXFQB13sS6Q0RAUDpXRvN8nND58ZEq6nZOBWsMrB7heFNTqW HXQxQ5jE2pI4eu+RFI/PKCxOVxbrERv7EMgXC1eOnLhyIJkt9ovaOYoZ7ZLu40cu GWTOilCzC4gbZN0sZjSkqCQO1YYImVonLof7A7OXDWg/+82OSShTQIIYXAAwlm5S 0s1feLupbb9ZDw22wY881goau3Pdb/LxRd9a83yDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/90b82MFuUgP+e+kubo8Z7HCRacwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmODkzYjAyLTcwOWItNGEyMC1hYjc0LWY4NTlhNzEwYjFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYjgEAwDQYJKoZIhvcNAQELBQADggEBANkWjK3GuDkCytZNrBNWmoWxiA4m hE6NLzy9jc+SgUoe4nsXZ8V7CObm9J+VsbQJlS+4E88UYFKFKv3IejiNYP3nTOFB xYIa9UujPjEdgPOcrah+rOcK3ZjgaFSyw94+/BqS7WlZq81o+BvY/VY7PXR33tTQ +Y8Jf8ylGLSTXCrTX6NVXa9wTqYAthOJljcf17RWizI8prvVGvO56J3xo5NEMAL1 8qRtKXZOJ4EE7s9pOpmpgcwaNhjok4MMI3HtWpUc51DkjaxEaic2fSg/t/H4G5rv iLagOGWILgVLI20hNZ0LMT8DbKmdca9J4cZiO1joFNYkGulUiXyEXNi/Jyo= -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:41 2025 by rpki-client