$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa File: 3cbc6787-d399-4def-9a56-fbcef999e554.roa (raw, json) Hash identifier: YFvAgU6+5C+CrG1s5Oo7Dzf3IOl6PY+MDk7EVDhp3bU= Subject key identifier: A0:67:98:DF:5A:D6:EE:84:F7:28:46:CC:33:FD:CF:88:80:3D:82:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FC27EE2541ABBBBB1937F859D5A2F6AFE110759 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa Signing time: Wed 09 Apr 2025 00:31:16 +0000 ROA not before: Wed 09 Apr 2025 00:31:16 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.242.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:7e:e2:54:1a:bb:bb:b1:93:7f:85:9d:5a:2f:6a:fe:11:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:31:16 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=efe55b4192729cef75f51169c82c9035535aa96bfbd3b67c97d03836a75f8333, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1b:24:1e:53:ec:64:64:4d:3f:7d:c6:dc:83: 38:22:01:a0:74:8d:34:20:49:0a:9a:b1:3d:fb:04: e6:b6:1a:5b:24:84:a0:5b:fc:71:29:39:1b:88:56: fc:cb:b0:a1:29:51:fa:73:33:c8:e3:dc:17:5a:ef: a2:d3:4c:5c:d8:96:be:12:40:d1:8e:b7:45:93:8f: d7:7e:97:03:7b:36:e6:48:9f:a1:3c:5d:09:bd:9f: 23:5d:53:bc:7b:bf:78:52:8f:9c:08:6e:0a:df:a9: f4:53:c4:30:40:22:7a:bb:da:cf:f2:87:b9:72:f0: 7e:35:9e:f7:e1:36:e1:86:46:b5:dd:a2:26:5f:e3: dd:69:db:95:d5:b6:d6:9c:63:f0:64:01:58:0d:d3: fd:63:1b:1d:16:3f:10:84:fe:e0:ae:d5:f4:82:52: 77:8a:2f:7a:36:bb:51:ac:be:33:3a:12:ce:e4:83: cf:5d:3d:31:4a:8d:e3:9c:71:c6:2d:38:0a:37:37: b2:f1:8a:73:04:d9:5c:62:80:75:90:ec:cd:41:65: 11:ca:68:fb:8b:b8:d5:bb:0d:b3:c0:6b:c2:ef:ad: b0:dc:c6:a7:f7:0f:9c:ec:60:5e:91:fd:ce:f8:40: 3c:f2:90:95:ff:80:06:f6:ea:0b:f6:31:29:46:3e: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:98:DF:5A:D6:EE:84:F7:28:46:CC:33:FD:CF:88:80:3D:82:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbc6787-d399-4def-9a56-fbcef999e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.242.0.0/15 Signature Algorithm: sha256WithRSAEncryption 11:a3:ac:e1:86:40:ef:e6:8c:87:e9:dc:47:e0:0b:7f:7f:51: 91:f4:65:1b:a9:6d:e4:91:3c:c3:e7:3c:f6:10:c3:b7:ab:f4: 48:e1:bd:91:d4:1b:32:2a:c1:e2:7e:31:82:2a:12:6a:3c:5d: 66:c2:8b:7c:3a:b7:d8:67:9e:e2:f0:ea:b4:30:cc:1d:e3:79: 02:14:c2:16:ea:4b:6a:e4:12:fb:13:71:6a:6b:39:7f:52:d5: 63:e4:f9:4c:6c:8f:a4:38:88:ca:67:32:44:58:d6:b5:ce:3d: 3c:55:6a:6f:3e:42:08:fd:b3:bc:c5:33:9d:81:80:bd:d1:2f: da:3e:7d:00:ad:7f:4f:43:68:14:4c:c8:84:16:31:a8:94:c9: ac:1f:87:b8:6d:8c:14:87:dd:d1:7a:7e:13:0a:33:5c:9b:b5: 1a:d0:06:fe:5a:f2:d1:54:ed:90:83:41:6e:15:30:24:d2:f3: 9b:fd:02:41:ca:fc:8b:c1:bf:a4:3c:75:95:dd:9f:50:60:b7: 43:f6:6b:48:94:79:5b:7c:ba:b3:ca:15:fd:90:1f:97:68:62: ab:cf:70:ab:d4:d0:f0:58:75:27:45:d0:4c:a7:fe:97:5a:12: e5:3b:db:e7:6f:60:6a:e4:45:b3:b1:32:11:c5:36:17:c5:dd: 0c:a2:c1:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb8J+4lQau7uxk3+FnVovav4RB1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMTE2WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmU1NWI0MTkyNzI5Y2VmNzVmNTExNjljODJjOTAzNTUz NWFhOTZiZmJkM2I2N2M5N2QwMzgzNmE3NWY4MzMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZGyQeU+xkZE0/fcbcgzgiAaB0jTQgSQqasT37BOa2Glsk hKBb/HEpORuIVvzLsKEpUfpzM8jj3Bda76LTTFzYlr4SQNGOt0WTj9d+lwN7NuZI n6E8XQm9nyNdU7x7v3hSj5wIbgrfqfRTxDBAInq72s/yh7ly8H41nvfhNuGGRrXd oiZf491p25XVttacY/BkAVgN0/1jGx0WPxCE/uCu1fSCUneKL3o2u1GsvjM6Es7k g89dPTFKjeOcccYtOAo3N7LxinME2VxigHWQ7M1BZRHKaPuLuNW7DbPAa8LvrbDc xqf3D5zsYF6R/c74QDzykJX/gAb26gv2MSlGPo1JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoGeY31rW7oT3KEbMM/3PiIA9gpQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjYmM2Nzg3LWQzOTktNGRlZi05YTU2LWZiY2VmOTk5ZTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFI8jANBgkqhkiG9w0BAQsFAAOCAQEAEaOs4YZA7+aMh+ncR+ALf39RkfRl G6lt5JE8w+c89hDDt6v0SOG9kdQbMirB4n4xgioSajxdZsKLfDq32Gee4vDqtDDM HeN5AhTCFupLauQS+xNxams5f1LVY+T5TGyPpDiIymcyRFjWtc49PFVqbz5CCP2z vMUznYGAvdEv2j59AK1/T0NoFEzIhBYxqJTJrB+HuG2MFIfd0Xp+EwozXJu1GtAG /lry0VTtkINBbhUwJNLzm/0CQcr8i8G/pDx1ld2fUGC3Q/ZrSJR5W3y6s8oV/ZAf l2hiq89wq9TQ8Fh1J0XQTKf+l1oS5Tvb529gauRFs7EyEcU2F8XdDKLBng== -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:34 2025 by rpki-client