$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62834460-bfe6-41c2-bb6f-f601a88d56ca.roa File: 62834460-bfe6-41c2-bb6f-f601a88d56ca.roa (raw, json) Hash identifier: rKLaTl4Op5Yt0rW5DyEPLXUBYcWkgqZshiFb1oc2s/I= Subject key identifier: 5C:0B:83:7B:9D:A6:89:94:92:80:44:BC:CC:79:4D:81:47:87:9A:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BDA96AAC6D662049108078BDA3EBCFD3AA478B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62834460-bfe6-41c2-bb6f-f601a88d56ca.roa Signing time: Mon 02 Jun 2025 15:00:58 +0000 ROA not before: Mon 02 Jun 2025 15:00:58 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:da:96:aa:c6:d6:62:04:91:08:07:8b:da:3e:bc:fd:3a:a4:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:00:58 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=a6bddadbd56ef2775a4fe06e3cbad401df44864195a12c01dc3ed83f78735028, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:63:68:13:7f:35:8e:b3:a5:9c:61:a9:42: a1:8a:71:40:65:fd:93:fa:3e:a6:e6:e5:fa:60:ba: e4:95:99:ce:c7:7a:b3:74:26:c1:6f:de:8c:96:6f: 74:0a:58:44:b4:88:79:b8:b0:8d:1e:5e:63:7e:f0: fa:62:e1:d0:da:e3:0b:b1:dd:19:2a:07:b9:2a:7f: f3:54:22:05:ea:b2:57:d4:72:ac:a3:d7:72:49:0c: 75:c5:06:fe:97:28:fe:2f:9a:2d:16:69:d3:07:05: 24:51:40:92:b8:ea:f9:58:21:9b:1e:67:82:ce:6a: 15:ea:ca:f5:25:8b:a2:91:e2:75:09:e4:86:e3:6e: 13:8c:a2:ea:4c:fd:91:94:6a:8c:de:8f:67:f4:b7: 50:eb:a8:09:cf:f0:e2:a9:5d:59:c0:98:4c:92:37: 08:26:55:08:63:00:2a:02:e5:83:53:44:86:9f:21: c5:d8:9e:93:3d:16:72:cf:84:4e:f1:86:52:1c:80: b7:5b:b4:45:73:52:e8:e0:e4:cb:3d:61:ff:7e:1c: 1a:e9:31:8c:c6:e8:96:c5:de:2c:b9:d9:60:1a:61: 78:ce:ba:1e:00:1a:8c:18:72:e6:88:a4:49:c7:6d: fb:1c:d9:d9:2e:ea:dc:95:45:85:9b:50:9d:b0:6e: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0B:83:7B:9D:A6:89:94:92:80:44:BC:CC:79:4D:81:47:87:9A:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62834460-bfe6-41c2-bb6f-f601a88d56ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.224.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:dc:36:7e:79:81:c9:0d:f0:dc:a7:fc:57:d9:b4:1d:26:75: bf:58:f0:a4:3e:e7:76:71:b4:71:ef:65:2f:ee:15:06:fa:b2: b6:c5:62:7c:ad:ec:3a:07:0d:d4:1b:b7:75:0b:7c:e2:52:6c: 20:63:95:d0:20:76:12:b2:c9:02:d0:f6:df:22:f4:b8:0c:a3: 7c:a2:98:df:30:8a:63:d3:87:3e:dc:e2:11:a4:81:ed:81:c9: cd:b7:9c:20:5e:f8:3d:d2:ec:ac:49:ef:71:dc:42:4b:bc:1c: e6:d5:43:0a:39:f3:51:f7:d9:e6:34:23:19:34:69:d6:de:a2: 6b:7f:e6:e0:1e:79:da:ac:88:a4:2e:33:23:95:c9:21:41:f5: 59:1b:63:98:da:6f:00:17:dc:2c:d9:1f:44:22:04:cf:4c:c5: 37:cd:44:0d:74:0c:55:b6:59:86:c1:24:a0:fa:31:b9:dd:86: da:4a:93:a9:cc:de:12:c0:95:28:f0:a8:50:f3:0f:df:e8:e7: a6:3b:0a:76:96:23:69:b2:ea:72:5b:9f:e7:6b:f0:ff:d5:39: e5:13:4a:17:22:db:fe:16:5a:c5:5c:ff:f0:95:5d:aa:20:a2: 0a:a5:0f:b2:83:5f:68:36:9a:e5:a2:4f:8f:68:b9:91:c5:19: 7d:b8:af:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW9qWqsbWYgSRCAeL2j68/TqkeLkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUwMDU4WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmJkZGFkYmQ1NmVmMjc3NWE0ZmUwNmUzY2JhZDQwMWRm NDQ4NjQxOTVhMTJjMDFkYzNlZDgzZjc4NzM1MDI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX/2NoE381jrOlnGGpQqGKcUBl/ZP6Pqbm5fpguuSVmc7H erN0JsFv3oyWb3QKWES0iHm4sI0eXmN+8Ppi4dDa4wux3RkqB7kqf/NUIgXqslfU cqyj13JJDHXFBv6XKP4vmi0WadMHBSRRQJK46vlYIZseZ4LOahXqyvUli6KR4nUJ 5IbjbhOMoupM/ZGUaozej2f0t1DrqAnP8OKpXVnAmEySNwgmVQhjACoC5YNTRIaf IcXYnpM9FnLPhE7xhlIcgLdbtEVzUujg5Ms9Yf9+HBrpMYzG6JbF3iy52WAaYXjO uh4AGowYcuaIpEnHbfsc2dku6tyVRYWbUJ2wbkCLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXAuDe52miZSSgES8zHlNgUeHmnQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyODM0NDYwLWJmZTYtNDFjMi1iYjZmLWY2MDFhODhkNTZjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgOAwDQYJKoZIhvcNAQELBQADggEBAD/cNn55gckN8Nyn/FfZtB0mdb9Y 8KQ+53ZxtHHvZS/uFQb6srbFYnyt7DoHDdQbt3ULfOJSbCBjldAgdhKyyQLQ9t8i 9LgMo3yimN8wimPThz7c4hGkge2Byc23nCBe+D3S7KxJ73HcQku8HObVQwo581H3 2eY0Ixk0adbeomt/5uAeedqsiKQuMyOVySFB9VkbY5jabwAX3CzZH0QiBM9MxTfN RA10DFW2WYbBJKD6MbndhtpKk6nM3hLAlSjwqFDzD9/o56Y7CnaWI2my6nJbn+dr 8P/VOeUTShci2/4WWsVc//CVXaogogqlD7KDX2g2muWiT49ouZHFGX24r40= -----END CERTIFICATE-----Generated at Sun Jun 15 01:12:00 2025 by rpki-client