$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa File: 4e472895-b434-4391-8576-749405dc5ab2.roa (raw, json) Hash identifier: zZTxEq+0dXA+3Vhz61ROMIW5P9H1E78VSOmh5PArNJw= Subject key identifier: 52:B4:0E:F7:3F:39:F1:95:82:22:C7:99:EC:89:30:9B:6E:7A:76:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E3977596B250FCBBA955E22B445E21C041BBF26 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa Signing time: Wed 28 May 2025 00:31:36 +0000 ROA not before: Wed 28 May 2025 00:31:36 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:39:77:59:6b:25:0f:cb:ba:95:5e:22:b4:45:e2:1c:04:1b:bf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:31:36 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=20434b28198690144bd042c0519bc2929206f01077987d1992152f84309fcc9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:45:e0:d3:7e:f7:58:51:e6:26:04:c6:90: 99:56:eb:a5:46:78:08:ca:7d:af:dd:2a:6f:1a:76: 0b:5e:c4:67:c2:1d:c3:8a:ec:63:87:03:f4:dd:6c: f6:59:46:c0:af:4b:c6:18:0d:8d:52:2c:8c:36:f9: 75:54:0c:80:a8:a0:36:7b:80:39:b3:c1:b5:15:44: 75:65:38:30:d6:c3:e0:d4:ad:aa:e1:1c:b4:11:48: 7f:47:9a:b9:24:9e:41:82:42:aa:fb:d6:d1:8e:93: 4e:bc:c9:0d:85:c7:a1:cc:44:e5:d6:7f:ac:08:b1: da:1d:85:c1:2d:4c:2a:63:7d:f8:cc:72:11:7c:28: 5a:a4:06:44:cb:e3:b1:39:2a:c5:94:16:1e:22:90: f4:e0:46:8a:ec:e9:eb:e4:9d:64:c9:10:f3:ee:81: 75:c8:6f:b7:99:c5:e7:17:44:6e:79:4a:ec:68:96: d9:88:3e:f6:b0:93:6b:a1:97:e3:c6:ad:36:ed:af: 19:50:84:a2:58:ef:9a:98:bd:4f:06:99:25:fd:b8: 66:74:09:74:b8:77:3c:7c:5e:d5:b5:8c:41:30:92: 52:f7:7a:b4:27:1f:8e:d1:06:2f:a6:9c:b4:ce:b6: bf:ea:b1:77:a9:38:35:3f:82:e5:2b:4e:a4:23:f0: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:0E:F7:3F:39:F1:95:82:22:C7:99:EC:89:30:9B:6E:7A:76:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:ee:46:4b:ed:50:6b:4c:38:c0:8c:a7:01:a9:4e:ad:9c:da: c3:31:9b:d3:db:15:a4:9e:ae:7c:96:d6:b0:3e:db:1a:9e:1e: 81:d1:4e:56:b4:e9:4e:d1:34:e6:bb:ac:22:15:8a:13:19:d1: d8:70:c9:58:51:8c:5d:8f:6b:4a:03:0a:e5:e5:9f:f9:89:9d: d7:af:76:6c:67:26:bc:dd:e1:62:74:da:48:0f:f5:fe:63:59: 55:1a:8e:60:39:a5:e8:54:06:fe:dd:3c:88:53:91:4e:a6:11: 33:23:cd:42:55:7c:67:c3:dd:36:6c:79:38:a1:86:62:7d:a4: a7:ad:21:4f:ff:26:6b:13:98:f2:bc:22:ab:fd:3e:f8:9a:c8: b7:36:55:8a:14:cd:01:7b:99:22:88:ac:7f:5e:d2:7d:70:24: 32:ed:fc:50:b0:ac:c9:22:e0:a9:a1:f4:75:7f:62:16:8e:40: 79:1e:91:86:b6:cf:05:63:69:35:bf:e6:ed:b8:1f:54:b5:c2: 2f:9d:cb:e2:84:d8:6e:38:39:5d:6a:8e:18:66:30:0a:9e:35: dd:f8:2d:3e:7e:f4:0e:74:22:b8:a3:b1:ce:b7:0c:14:6d:1a: 78:3d:0f:7c:2a:ac:0f:da:a0:b0:50:42:d6:44:96:48:15:56: e8:db:cb:f8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDjl3WWslD8u6lV4itEXiHAQbvyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAzMTM2WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDQzNGIyODE5ODY5MDE0NGJkMDQyYzA1MTliYzI5Mjky MDZmMDEwNzc5ODdkMTk5MjE1MmY4NDMwOWZjYzlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmXEXg0373WFHmJgTGkJlW66VGeAjKfa/dKm8adgtexGfC HcOK7GOHA/TdbPZZRsCvS8YYDY1SLIw2+XVUDICooDZ7gDmzwbUVRHVlODDWw+DU rarhHLQRSH9HmrkknkGCQqr71tGOk068yQ2Fx6HMROXWf6wIsdodhcEtTCpjffjM chF8KFqkBkTL47E5KsWUFh4ikPTgRors6evknWTJEPPugXXIb7eZxecXRG55Suxo ltmIPvawk2uhl+PGrTbtrxlQhKJY75qYvU8GmSX9uGZ0CXS4dzx8XtW1jEEwklL3 erQnH47RBi+mnLTOtr/qsXepODU/guUrTqQj8DfLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUrQO9z858ZWCIseZ7Ikwm256dvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlNDcyODk1LWI0MzQtNDM5MS04NTc2LTc0OTQwNWRjNWFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4aDANBgkqhkiG9w0BAQsFAAOCAQEAQO5GS+1Qa0w4wIynAalOrZzawzGb 09sVpJ6ufJbWsD7bGp4egdFOVrTpTtE05rusIhWKExnR2HDJWFGMXY9rSgMK5eWf +Ymd1692bGcmvN3hYnTaSA/1/mNZVRqOYDml6FQG/t08iFORTqYRMyPNQlV8Z8Pd Nmx5OKGGYn2kp60hT/8maxOY8rwiq/0++JrItzZVihTNAXuZIoisf17SfXAkMu38 ULCsySLgqaH0dX9iFo5AeR6RhrbPBWNpNb/m7bgfVLXCL53L4oTYbjg5XWqOGGYw Cp413fgtPn70DnQiuKOxzrcMFG0aeD0PfCqsD9qgsFBC1kSWSBVW6NvL+A== -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:35 2025 by rpki-client