$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa File: 28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa (raw, json) Hash identifier: 4GhVxvtHHVLjO/ic8k94BIuaMmKTeprHyGfZ0PUqJDA= Subject key identifier: BB:E2:BE:27:F2:7E:B9:3F:F7:BA:CB:15:82:C3:98:DD:97:E4:7F:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23098E494E7B953F5EA95E95FB518283A4A590A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa Signing time: Mon 02 Jun 2025 15:11:04 +0000 ROA not before: Mon 02 Jun 2025 15:11:04 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:09:8e:49:4e:7b:95:3f:5e:a9:5e:95:fb:51:82:83:a4:a5:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:11:04 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=fd0edec36366d59ddb029b044a7442db966d1abd670c5571d11dbf2b32ccd895, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:cc:1e:7f:a4:be:76:3d:69:5f:2b:23:65: 8a:53:4d:99:ad:f5:e7:85:a1:47:8f:e6:31:e0:69: c0:d6:ed:8d:05:fc:02:45:ab:1d:54:84:bb:dd:92: 7d:29:c1:80:23:a2:96:05:37:40:74:80:5d:a1:2b: de:7d:23:97:32:4b:5f:5f:15:16:1f:df:8e:78:9d: f0:19:52:8f:45:a9:42:3d:63:15:51:db:74:69:de: 64:03:b4:e0:d0:37:6b:4e:1a:38:99:1a:c3:76:e8: cd:1c:b0:df:6e:32:3a:61:36:73:9b:d3:77:e7:6e: 26:86:b1:81:85:e9:38:cb:00:9c:29:4d:02:82:28: 1f:6b:88:78:0f:fe:14:17:21:d6:2f:c3:4c:e1:ed: a5:3e:af:68:56:12:b5:99:73:bd:44:89:23:d0:80: c0:af:17:58:15:6f:88:43:1a:d2:31:82:ca:62:79: f9:27:44:db:f6:c7:19:57:8a:33:7e:87:37:e0:32: b2:18:45:14:e0:16:93:7d:f4:b4:6a:07:73:fd:ba: 64:5c:08:7a:c7:92:21:a3:48:78:f6:80:e0:a9:ae: a7:d7:2d:45:81:65:62:7a:16:80:ec:ac:b9:ca:4a: e6:43:a7:9e:1a:1c:8e:69:b0:79:67:1b:89:9d:de: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:BE:27:F2:7E:B9:3F:F7:BA:CB:15:82:C3:98:DD:97:E4:7F:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.0.0/20 Signature Algorithm: sha256WithRSAEncryption d7:cd:9f:ed:bb:35:28:d9:69:93:12:15:66:2b:0e:ef:54:17: b6:aa:15:74:3e:a9:5f:89:82:4c:e7:81:fc:6e:a7:4c:db:fc: bc:01:a5:b9:c1:ac:d8:7e:8e:2a:35:73:48:68:62:ab:46:34: d0:49:41:39:ab:81:40:6d:c5:99:42:19:71:0a:9b:5e:c8:4c: 86:bb:08:62:cb:a9:5b:9e:1d:18:a3:60:91:0a:8d:3b:af:41: d4:90:d6:eb:37:fb:8b:c7:6c:5d:51:03:95:da:77:a9:8a:92: 0f:62:31:57:ec:26:dc:43:8a:4b:03:10:bb:ec:be:be:38:07: 32:52:30:08:03:1c:3e:4a:90:4c:07:23:ea:4a:eb:c3:75:c3: 07:71:3a:af:60:65:11:57:64:a5:b3:42:1a:3a:8e:75:c2:d1: be:33:7e:c4:fe:c6:08:f9:27:35:7f:32:29:16:54:ab:c6:09: 20:b5:2b:a4:48:a1:86:89:77:10:4b:7c:2d:d5:9c:55:00:61: 4c:b0:b3:ea:c0:1d:1e:ad:6f:5e:9c:b2:c2:0e:d9:e5:12:1c: 98:7d:14:eb:76:27:15:3b:7b:cf:7f:f0:5e:5c:13:62:bf:28: 17:4f:eb:0c:9e:9c:b0:a0:d3:91:67:5c:fd:24:61:89:0d:7f: 28:d9:0e:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIwmOSU57lT9eqV6V+1GCg6SlkKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMTA0WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDBlZGVjMzYzNjZkNTlkZGIwMjliMDQ0YTc0NDJkYjk2 NmQxYWJkNjcwYzU1NzFkMTFkYmYyYjMyY2NkODk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh6cwef6S+dj1pXysjZYpTTZmt9eeFoUeP5jHgacDW7Y0F /AJFqx1UhLvdkn0pwYAjopYFN0B0gF2hK959I5cyS19fFRYf3454nfAZUo9FqUI9 YxVR23Rp3mQDtODQN2tOGjiZGsN26M0csN9uMjphNnOb03fnbiaGsYGF6TjLAJwp TQKCKB9riHgP/hQXIdYvw0zh7aU+r2hWErWZc71EiSPQgMCvF1gVb4hDGtIxgspi efknRNv2xxlXijN+hzfgMrIYRRTgFpN99LRqB3P9umRcCHrHkiGjSHj2gOCprqfX LUWBZWJ6FoDsrLnKSuZDp54aHI5psHlnG4md3rhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu+K+J/J+uT/3ussVgsOY3Zfkf34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4YWU3YjdkLWM0MzgtNGMyZS1iOWQ0LTFhOGQ5ZTM1ZmFlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmgAwDQYJKoZIhvcNAQELBQADggEBANfNn+27NSjZaZMSFWYrDu9UF7aq FXQ+qV+Jgkzngfxup0zb/LwBpbnBrNh+jio1c0hoYqtGNNBJQTmrgUBtxZlCGXEK m17ITIa7CGLLqVueHRijYJEKjTuvQdSQ1us3+4vHbF1RA5Xad6mKkg9iMVfsJtxD iksDELvsvr44BzJSMAgDHD5KkEwHI+pK68N1wwdxOq9gZRFXZKWzQho6jnXC0b4z fsT+xgj5JzV/MikWVKvGCSC1K6RIoYaJdxBLfC3VnFUAYUyws+rAHR6tb16cssIO 2eUSHJh9FOt2JxU7e89/8F5cE2K/KBdP6wyenLCg05FnXP0kYYkNfyjZDn8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:15 2025 by rpki-client