$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa File: 5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa (raw, json) Hash identifier: LP/VYLL1Ig0CkZb4ZnEdSOoR3K5lfuYsJMRRaBUmmqw= Subject key identifier: 5D:0A:43:B5:16:D2:4E:01:2B:8E:07:E2:1A:C6:B8:8C:47:A7:31:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DF5FED54C1153F8C13DA302231C11BF9CE14F46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa Signing time: Tue 03 Jun 2025 00:20:21 +0000 ROA not before: Tue 03 Jun 2025 00:20:21 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f5:fe:d5:4c:11:53:f8:c1:3d:a3:02:23:1c:11:bf:9c:e1:4f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:20:21 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=5ba2a4fc7a8a9cb3c7a86001409af5562751efc830338b371a1e816af1addd7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:e0:6c:6a:b5:47:68:dc:d9:66:de:c6:8b: b2:c4:0c:46:18:9f:90:dc:5c:2f:cb:15:35:6f:aa: c7:97:ba:58:75:80:f2:02:44:6f:88:f6:bd:5e:e3: 61:20:93:08:2a:f7:9f:f5:38:69:ee:cb:ec:26:d1: 4a:f5:f1:0b:04:70:4f:f9:9d:7a:4c:41:2e:2f:d0: cb:46:6a:40:27:f6:7c:8d:31:e5:58:2c:3a:8e:f0: 47:25:f0:5b:fc:fe:91:94:79:1d:04:65:8f:c4:ae: 5f:c5:fd:c6:8f:57:e9:be:a4:67:0f:69:de:2d:29: df:56:a6:59:84:04:3a:4a:de:6b:e5:03:cf:12:bf: 08:c1:8c:4e:d8:70:01:fd:ce:d1:de:b4:ed:55:d2: 58:7b:fa:e5:5c:42:be:78:6f:c2:03:1e:73:72:a6: 75:8b:f6:50:50:f6:8a:b8:89:27:04:6a:90:4e:e2: f0:41:ee:58:8f:db:0c:7f:e7:4e:dc:e0:ca:48:d1: b1:3a:aa:37:d1:88:35:35:94:22:8e:f7:c9:3b:b5: 9e:da:eb:e7:cd:8f:c1:2d:70:63:e5:5b:30:6c:70: 1a:7d:1c:2d:58:a5:80:40:3e:6f:68:98:b1:af:13: 79:7e:73:1d:00:e7:8d:03:dc:12:bd:71:83:3c:fe: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0A:43:B5:16:D2:4E:01:2B:8E:07:E2:1A:C6:B8:8C:47:A7:31:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.128.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:3b:21:db:13:58:1f:29:1e:c2:35:5b:23:c1:07:ef:3f:92: c1:2f:03:9c:91:3d:bb:2a:0e:d3:8f:d3:40:f0:7b:34:25:cd: 01:56:e2:1a:6b:0a:68:57:8e:90:e9:ce:8e:35:bb:08:c2:b6: 23:54:00:6f:8c:54:a7:c6:80:6b:64:16:3c:69:c3:97:3c:08: 85:1c:cd:c4:ca:c3:4c:5e:f1:91:78:57:33:e9:8b:95:f1:24: 93:ad:f0:47:be:67:b1:94:56:8e:57:54:a0:4d:42:2d:74:b6: aa:7b:dd:07:b9:09:40:ae:6d:af:98:f0:ed:9f:6e:f8:22:41: 87:66:5b:2e:2b:c5:7a:63:71:ab:64:9e:5f:37:3e:cf:a5:e6: 4a:b5:f2:80:7e:29:11:27:c5:48:96:6c:40:1a:b5:04:4a:9b: 75:c2:68:58:4a:00:78:b4:e4:eb:54:42:32:ec:05:54:83:50: 90:90:6e:68:b1:85:07:ad:bd:2d:01:ef:d4:66:c9:c7:93:12: 60:d6:57:7d:c3:86:f6:97:f6:ba:f8:8e:b6:1d:5b:c9:fd:fb: 6d:bd:b3:b4:f5:6c:cc:c7:0c:1c:be:7a:0b:20:0a:0c:ac:71: b3:15:58:b8:97:e3:37:87:9b:73:67:6e:90:87:03:9f:7f:f1: 4b:cd:51:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPfX+1UwRU/jBPaMCIxwRv5zhT0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAyMDIxWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmEyYTRmYzdhOGE5Y2IzYzdhODYwMDE0MDlhZjU1NjI3 NTFlZmM4MzAzMzhiMzcxYTFlODE2YWYxYWRkZDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtgOBsarVHaNzZZt7Gi7LEDEYYn5DcXC/LFTVvqseXulh1 gPICRG+I9r1e42Egkwgq95/1OGnuy+wm0Ur18QsEcE/5nXpMQS4v0MtGakAn9nyN MeVYLDqO8Ecl8Fv8/pGUeR0EZY/Erl/F/caPV+m+pGcPad4tKd9WplmEBDpK3mvl A88SvwjBjE7YcAH9ztHetO1V0lh7+uVcQr54b8IDHnNypnWL9lBQ9oq4iScEapBO 4vBB7liP2wx/507c4MpI0bE6qjfRiDU1lCKO98k7tZ7a6+fNj8EtcGPlWzBscBp9 HC1YpYBAPm9omLGvE3l+cx0A540D3BK9cYM8/nMnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXQpDtRbSTgErjgfiGsa4jEenMbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYzNkOWZiLTk3YWYtNGQ1YS05NTA1LWJhYmFkN2QzYjA0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPRXIAwDQYJKoZIhvcNAQELBQADggEBAH47IdsTWB8pHsI1WyPBB+8/ksEv A5yRPbsqDtOP00DwezQlzQFW4hprCmhXjpDpzo41uwjCtiNUAG+MVKfGgGtkFjxp w5c8CIUczcTKw0xe8ZF4VzPpi5XxJJOt8Ee+Z7GUVo5XVKBNQi10tqp73Qe5CUCu ba+Y8O2fbvgiQYdmWy4rxXpjcatknl83Ps+l5kq18oB+KREnxUiWbEAatQRKm3XC aFhKAHi05OtUQjLsBVSDUJCQbmixhQetvS0B79RmyceTEmDWV33DhvaX9rr4jrYd W8n9+229s7T1bMzHDBy+egsgCgyscbMVWLiX4zeHm3NnbpCHA59/8UvNUXk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:26 2025 by rpki-client