$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa File: 408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa (raw, json) Hash identifier: YHVrAMofq/Y1pXOqFRg8eIMZ9vmKGCz2QVjIbOb+uYg= Subject key identifier: C5:04:7C:33:F4:72:00:2D:71:B4:B3:14:68:C3:97:92:3A:34:1F:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4493FACFE66D5095BA7343EB995882ED84B4C1F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa Signing time: Mon 02 Jun 2025 15:11:00 +0000 ROA not before: Mon 02 Jun 2025 15:11:00 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.152.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:93:fa:cf:e6:6d:50:95:ba:73:43:eb:99:58:82:ed:84:b4:c1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:11:00 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=6a000ae832943e1ea217030c2203f86f8daf59e3b79ee31508a3ef7fa1788852, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:6a:b7:2d:98:5e:4b:31:f7:f1:75:bb:5a: b8:3d:8a:13:d5:5e:0c:be:b5:b2:d6:d2:e0:6b:3f: 9f:28:a1:46:de:39:4e:aa:01:3a:3b:8f:90:c1:8b: a8:a4:6e:93:e2:04:72:5a:4c:e2:69:00:60:e4:4a: 68:bc:a9:61:7e:50:b0:6d:9c:7b:86:21:19:a3:bb: 78:45:97:73:82:70:6b:9e:d8:36:31:d4:a3:a8:9b: 43:8b:60:f5:d2:ac:03:06:13:bd:ea:45:45:b8:a3: a8:08:32:b1:c7:7c:10:0d:8c:22:2c:1c:0e:9d:1a: 9f:57:f3:ab:0f:8c:52:89:9e:05:38:5b:2a:c6:21: b2:8b:0d:fa:da:71:93:6a:b5:8e:d3:52:80:a6:75: 0c:4c:a7:b3:50:51:9a:7b:f0:a3:60:d8:13:24:76: ca:b5:86:e8:d9:84:6b:56:37:83:c1:c1:2e:cb:d6: 79:0f:28:47:25:89:85:ca:dc:18:b8:c5:36:be:ab: d6:ef:ec:be:95:dc:36:fd:c8:29:05:be:80:b8:fe: 58:ad:80:de:40:8d:1a:e6:e8:2d:36:a3:c6:b9:dc: 5f:fd:48:e6:95:b8:d9:5e:f2:51:65:db:6b:c9:19: 16:a4:83:c7:44:fd:fb:66:57:96:74:e0:e3:1e:08: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:7C:33:F4:72:00:2D:71:B4:B3:14:68:C3:97:92:3A:34:1F:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/408bfdaa-b91c-4b0b-b2cc-d19587d1ff46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.152.0.0/20 Signature Algorithm: sha256WithRSAEncryption 50:43:3e:c4:c9:98:06:7e:5b:32:47:95:1c:59:87:c5:1b:b3: 98:f0:c9:91:2b:b4:17:5c:22:11:9f:2d:67:a6:5b:94:3b:d4: 7b:dc:6c:bf:4a:fd:e0:1e:25:71:5c:4d:1c:19:55:b1:e1:32: 0c:6e:7d:bc:e3:60:8c:7b:1c:01:34:21:b0:e6:0f:a3:8b:8d: 87:25:f9:cd:28:11:38:84:38:06:ad:52:04:6c:31:83:07:16: 11:90:01:3d:94:3b:ee:1c:0b:27:a1:46:77:ee:0e:47:3e:e0: 05:4a:a4:d2:43:35:30:bb:66:da:2e:24:8a:ef:ad:13:4a:c1: 49:cc:3e:fc:8a:56:70:af:49:81:9e:d6:c4:93:fd:19:d8:de: a6:7e:51:bf:eb:77:c4:47:88:c5:6d:e3:71:de:e4:c2:b4:9e: af:56:33:78:d1:98:f8:54:85:7d:ff:dd:95:6c:3a:ad:c6:87: 01:ee:73:29:4c:ea:50:8b:b4:46:4e:4c:df:38:09:0e:57:65: e2:60:5c:cf:07:5d:b0:ca:b4:73:78:46:ce:1d:c6:13:d0:e0: 15:9f:b1:98:1c:7c:30:39:9f:18:23:e4:e2:6a:62:be:2e:5c: 62:75:fc:34:31:9a:da:9c:2f:0d:bc:89:5e:e6:53:58:62:8e: aa:15:03:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURJP6z+ZtUJW6c0PrmViC7YS0wfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMTAwWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTAwMGFlODMyOTQzZTFlYTIxNzAzMGMyMjAzZjg2Zjhk YWY1OWUzYjc5ZWUzMTUwOGEzZWY3ZmExNzg4ODUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2XWq3LZheSzH38XW7Wrg9ihPVXgy+tbLW0uBrP58ooUbe OU6qATo7j5DBi6ikbpPiBHJaTOJpAGDkSmi8qWF+ULBtnHuGIRmju3hFl3OCcGue 2DYx1KOom0OLYPXSrAMGE73qRUW4o6gIMrHHfBANjCIsHA6dGp9X86sPjFKJngU4 WyrGIbKLDfracZNqtY7TUoCmdQxMp7NQUZp78KNg2BMkdsq1hujZhGtWN4PBwS7L 1nkPKEcliYXK3Bi4xTa+q9bv7L6V3Db9yCkFvoC4/litgN5AjRrm6C02o8a53F/9 SOaVuNle8lFl22vJGRakg8dE/ftmV5Z04OMeCEmLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxQR8M/RyAC1xtLMUaMOXkjo0H7YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwOGJmZGFhLWI5MWMtNGIwYi1iMmNjLWQxOTU4N2QxZmY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmAAwDQYJKoZIhvcNAQELBQADggEBAFBDPsTJmAZ+WzJHlRxZh8Ubs5jw yZErtBdcIhGfLWemW5Q71HvcbL9K/eAeJXFcTRwZVbHhMgxufbzjYIx7HAE0IbDm D6OLjYcl+c0oETiEOAatUgRsMYMHFhGQAT2UO+4cCyehRnfuDkc+4AVKpNJDNTC7 ZtouJIrvrRNKwUnMPvyKVnCvSYGe1sST/RnY3qZ+Ub/rd8RHiMVt43He5MK0nq9W M3jRmPhUhX3/3ZVsOq3GhwHucylM6lCLtEZOTN84CQ5XZeJgXM8HXbDKtHN4Rs4d xhPQ4BWfsZgcfDA5nxgj5OJqYr4uXGJ1/DQxmtqcLw28iV7mU1hijqoVA3s= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:17 2025 by rpki-client