$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594992aa-cf2d-47e4-a972-604ac2a7bde6.roa File: 594992aa-cf2d-47e4-a972-604ac2a7bde6.roa (raw, json) Hash identifier: fshtGycxLr6TFJUYTsw/4vNycq192iElZ9nM9u5Aygo= Subject key identifier: 7E:23:B9:B4:8F:34:D4:03:79:EF:11:12:3F:FC:84:35:27:46:1E:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BABDCE66EA1BF017E325F755C3ECA59B1004BAE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594992aa-cf2d-47e4-a972-604ac2a7bde6.roa Signing time: Sat 14 Jun 2025 00:30:26 +0000 ROA not before: Sat 14 Jun 2025 00:30:26 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ab:dc:e6:6e:a1:bf:01:7e:32:5f:75:5c:3e:ca:59:b1:00:4b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:26 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=76ca735dc1c6b7559bba5771bb661e623e15975a44dcc04c4417b9c1660ae879, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:2e:a7:07:85:cc:bd:31:76:fc:d9:af:ee: aa:be:c1:b8:92:55:a1:8d:b1:ae:8a:56:58:19:a1: 5c:dc:43:7d:f1:2f:63:74:0b:3b:d1:5b:17:7f:3f: ff:6c:6b:a3:d6:01:d4:5f:54:ee:1f:f8:14:3e:11: af:9a:23:23:f0:c2:b3:62:87:64:c2:b8:bb:ec:54: be:13:dc:43:b8:64:e7:bd:55:f3:09:46:df:84:fd: 76:0b:60:b0:5a:88:05:63:d9:8c:79:4a:b3:9e:32: c1:56:65:ca:98:b1:0f:3e:d7:03:51:53:37:c8:39: d4:9c:9d:ba:9a:d6:05:cb:3c:b6:6a:a4:07:a6:58: 4c:a9:d0:2b:7c:b3:5e:ab:92:cb:15:65:51:7e:f4: ce:c0:6f:10:e4:82:f5:47:9d:4d:95:62:2a:6a:07: 5d:fd:0b:eb:e0:13:86:d8:31:29:1b:6b:ef:44:cd: 30:12:79:ae:28:d9:fd:69:87:b0:71:b7:37:2f:91: ec:0d:55:dd:05:fe:c9:80:df:d8:af:8e:b0:15:57: a6:90:04:e2:9e:1e:5a:55:61:94:ce:95:00:43:96: 1e:05:e5:8c:e6:ce:04:9f:21:3a:1d:71:9d:89:cc: 6a:59:90:77:22:bb:4f:78:1e:3c:12:b1:b6:a6:db: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:B9:B4:8F:34:D4:03:79:EF:11:12:3F:FC:84:35:27:46:1E:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594992aa-cf2d-47e4-a972-604ac2a7bde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption d4:20:5e:11:97:84:eb:00:5c:3d:88:dd:3b:42:2a:cd:be:e4: c6:ec:4e:f3:c5:68:d2:70:05:5b:d0:c2:7d:2d:b7:5e:23:3f: 01:ad:3f:e3:29:08:a2:79:bb:30:ca:a2:17:57:94:23:9d:8a: 46:10:9c:80:b4:bf:9e:52:21:fa:71:46:30:07:28:d1:f2:40: 49:5b:da:6a:37:23:7e:3e:26:41:17:ca:3e:64:9b:5b:47:16: 27:ff:e2:82:3b:ba:3b:8f:8a:de:21:4c:7a:39:6c:3b:25:d2: 93:bd:d9:e6:b3:89:08:81:03:98:8c:28:d1:66:bd:db:d4:87: c4:6c:76:be:7f:fd:a7:c7:1c:4d:15:2e:11:b5:cb:8b:c2:62: 04:f2:b8:23:46:7b:30:85:e3:7f:e7:35:33:92:d6:99:b8:f3: a6:e2:40:e6:7b:77:a5:75:f9:49:c1:a7:99:34:86:83:ce:04: a5:cf:61:61:19:31:da:bd:34:93:d5:77:8b:2c:c3:7f:9f:39: c3:28:f2:60:c3:1d:58:bc:a9:1e:7f:ab:16:5c:88:6d:41:df: 79:10:df:3a:27:ab:d7:e3:2e:fd:1b:b4:f6:a5:14:c5:b1:0c: 46:07:76:2b:86:f7:a4:d7:74:25:64:77:01:db:2f:d7:94:04: b3:b5:34:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK6vc5m6hvwF+Ml91XD7KWbEAS64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDI2WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmNhNzM1ZGMxYzZiNzU1OWJiYTU3NzFiYjY2MWU2MjNl MTU5NzVhNDRkY2MwNGM0NDE3YjljMTY2MGFlODc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzgS6nB4XMvTF2/Nmv7qq+wbiSVaGNsa6KVlgZoVzcQ33x L2N0CzvRWxd/P/9sa6PWAdRfVO4f+BQ+Ea+aIyPwwrNih2TCuLvsVL4T3EO4ZOe9 VfMJRt+E/XYLYLBaiAVj2Yx5SrOeMsFWZcqYsQ8+1wNRUzfIOdScnbqa1gXLPLZq pAemWEyp0Ct8s16rkssVZVF+9M7AbxDkgvVHnU2VYipqB139C+vgE4bYMSkba+9E zTASea4o2f1ph7BxtzcvkewNVd0F/smA39ivjrAVV6aQBOKeHlpVYZTOlQBDlh4F 5YzmzgSfITodcZ2JzGpZkHciu094HjwSsbam23lLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfiO5tI801AN57xESP/yENSdGHk8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5NDk5MmFhLWNmMmQtNDdlNC1hOTcyLTYwNGFjMmE3YmRlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAXFDANBgkqhkiG9w0BAQsFAAOCAQEA1CBeEZeE6wBcPYjdO0Iqzb7kxuxO 88Vo0nAFW9DCfS23XiM/Aa0/4ykIonm7MMqiF1eUI52KRhCcgLS/nlIh+nFGMAco 0fJASVvaajcjfj4mQRfKPmSbW0cWJ//igju6O4+K3iFMejlsOyXSk73Z5rOJCIED mIwo0Wa929SHxGx2vn/9p8ccTRUuEbXLi8JiBPK4I0Z7MIXjf+c1M5LWmbjzpuJA 5nt3pXX5ScGnmTSGg84Epc9hYRkx2r00k9V3iyzDf585wyjyYMMdWLypHn+rFlyI bUHfeRDfOier1+Mu/Ru09qUUxbEMRgd2K4b3pNd0JWR3Adsv15QEs7U00w== -----END CERTIFICATE-----Generated at Sat Jun 14 06:45:40 2025 by rpki-client