$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35eb116f-ce9f-43b4-8402-4ed7cc3d2d83.roa File: 35eb116f-ce9f-43b4-8402-4ed7cc3d2d83.roa (raw, json) Hash identifier: GRjWXtlHC66zrjV/cKbTKQOywGK4VVBWK+sLrsf20iw= Subject key identifier: F5:84:DB:D0:3E:08:46:C0:92:97:2A:A9:21:B7:6D:B0:6E:30:B5:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A94C7513F8B40490D89FC0A79D7EC3CEE49F2AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35eb116f-ce9f-43b4-8402-4ed7cc3d2d83.roa Signing time: Sat 14 Jun 2025 00:30:31 +0000 ROA not before: Sat 14 Jun 2025 00:30:31 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:c7:51:3f:8b:40:49:0d:89:fc:0a:79:d7:ec:3c:ee:49:f2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:31 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=4aeef6f5301088e947a6753c56b50d9360678e7dbf60959dcfd20f0859691b0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:32:28:22:7a:84:cc:94:78:39:d3:c4:fe: 33:dd:74:bb:38:77:e5:ad:9c:76:11:70:ab:f1:8e: bd:ea:0a:a5:c1:55:95:6c:c9:4c:2a:56:26:3c:b9: 55:44:df:44:a7:c7:f7:a7:9b:ba:c3:63:fb:17:5c: e5:9a:f6:cc:cc:a5:39:26:94:ab:aa:89:ad:01:cb: a8:4c:09:eb:8d:e7:42:c9:3c:97:6e:93:7e:68:e1: 12:5f:9e:e0:67:8a:0c:df:3f:40:3a:e0:43:18:79: c0:d7:1f:2f:d2:53:2d:84:43:97:89:5d:c0:79:a8: b1:28:bf:6a:60:ac:65:2f:d9:ef:c2:ee:28:34:52: d4:17:b2:9d:46:ce:a9:5a:22:b9:93:43:d4:fa:ce: 9f:09:0e:2d:8e:9c:07:13:a7:20:2b:7d:61:a1:0e: 2e:38:0a:8a:39:2d:07:f9:6d:62:c8:4d:e7:7c:f3: 19:a3:22:64:a9:66:e2:9a:b6:5f:b1:73:2b:f1:38: 44:b0:74:f4:8a:c5:e3:58:52:56:c6:19:1a:42:83: 63:88:56:61:ab:0f:67:3d:af:32:0a:dc:a9:5a:01: e4:0a:aa:f5:5a:74:cb:a9:f2:e9:1f:6a:96:3d:26: cd:43:dd:fc:54:cc:4e:94:5c:02:87:e2:c0:d0:da: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:84:DB:D0:3E:08:46:C0:92:97:2A:A9:21:B7:6D:B0:6E:30:B5:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35eb116f-ce9f-43b4-8402-4ed7cc3d2d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.8.0/21 Signature Algorithm: sha256WithRSAEncryption d7:2b:26:17:d9:be:e0:23:84:24:70:bb:65:50:13:ce:26:9b: 05:e8:ba:b3:58:87:7f:4d:23:41:3b:b0:89:a9:ca:c0:9d:c1: 1d:92:5b:24:d6:7e:e3:fc:61:03:e2:ff:ed:71:e5:b2:e7:c3: 7c:e2:de:69:4b:0e:f0:5f:6f:b1:bd:02:98:a5:00:56:cb:c0: 0e:2b:4d:d7:71:74:7a:27:b9:c4:6a:28:e4:57:9e:ba:69:5f: c5:c6:27:b6:60:12:17:eb:53:66:b4:01:20:f1:70:1c:43:ba: 5a:02:1c:63:f3:e8:f7:55:84:fc:3d:7b:f0:ed:c0:b5:dd:bd: 00:a4:b5:71:60:91:87:01:90:48:04:92:65:da:6f:b4:de:fb: ef:53:1f:51:cf:83:fd:8f:3e:63:62:b7:a6:0f:31:8b:3b:15: 19:d7:69:36:f7:ef:02:0f:32:f3:f6:15:a3:06:5e:34:58:0e: 07:a6:e9:61:3d:36:27:97:5d:d9:4b:08:9e:14:7e:20:f7:d8: cf:9b:ef:a9:1f:96:c4:76:14:b3:fc:b6:9c:7f:4e:62:94:65: 74:ab:f3:7e:f2:6a:0b:69:88:c9:d0:f9:74:a5:b1:2d:e8:e7: 07:e9:18:bb:17:b2:32:68:2f:77:08:6b:5d:23:75:53:68:35: 95:67:6e:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWpTHUT+LQEkNifwKedfsPO5J8q0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDMxWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWVlZjZmNTMwMTA4OGU5NDdhNjc1M2M1NmI1MGQ5MzYw Njc4ZTdkYmY2MDk1OWRjZmQyMGYwODU5NjkxYjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTtDIoInqEzJR4OdPE/jPddLs4d+WtnHYRcKvxjr3qCqXB VZVsyUwqViY8uVVE30Snx/enm7rDY/sXXOWa9szMpTkmlKuqia0By6hMCeuN50LJ PJduk35o4RJfnuBnigzfP0A64EMYecDXHy/SUy2EQ5eJXcB5qLEov2pgrGUv2e/C 7ig0UtQXsp1GzqlaIrmTQ9T6zp8JDi2OnAcTpyArfWGhDi44Coo5LQf5bWLITed8 8xmjImSpZuKatl+xcyvxOESwdPSKxeNYUlbGGRpCg2OIVmGrD2c9rzIK3KlaAeQK qvVadMup8ukfapY9Js1D3fxUzE6UXAKH4sDQ2pvPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9YTb0D4IRsCSlyqpIbdtsG4wtcQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1ZWIxMTZmLWNlOWYtNDNiNC04NDAyLTRlZDdjYzNkMmQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMX/ggwDQYJKoZIhvcNAQELBQADggEBANcrJhfZvuAjhCRwu2VQE84mmwXo urNYh39NI0E7sImpysCdwR2SWyTWfuP8YQPi/+1x5bLnw3zi3mlLDvBfb7G9Apil AFbLwA4rTddxdHonucRqKORXnrppX8XGJ7ZgEhfrU2a0ASDxcBxDuloCHGPz6PdV hPw9e/DtwLXdvQCktXFgkYcBkEgEkmXab7Te++9TH1HPg/2PPmNit6YPMYs7FRnX aTb37wIPMvP2FaMGXjRYDgem6WE9NieXXdlLCJ4UfiD32M+b76kflsR2FLP8tpx/ TmKUZXSr837yagtpiMnQ+XSlsS3o5wfpGLsXsjJoL3cIa10jdVNoNZVnbq4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:47 2025 by rpki-client