$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa File: 7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json) Hash identifier: aJyvcZ7RjxDEhUAjIEvDfjjiD4jr36pEGaXzf1KI+OQ= Subject key identifier: BE:74:32:FD:C2:F6:F0:D0:37:DB:CA:05:61:3C:19:72:2E:ED:A6:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CC917C59FF0C6A8B529C909B04B78B3F4A4780D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa Signing time: Sat 14 Jun 2025 00:30:13 +0000 ROA not before: Sat 14 Jun 2025 00:30:13 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c9:17:c5:9f:f0:c6:a8:b5:29:c9:09:b0:4b:78:b3:f4:a4:78:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:13 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=9fa7c9dcd46e7de57dc5b496d20f4af8e8e7523ad74b676d26ab9e408af19c03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:6b:82:1b:87:f7:0d:cb:7e:e9:7d:91:f1: 37:9b:50:35:14:9c:5e:ec:a5:42:3e:e3:39:c4:9f: 33:c6:d6:10:c3:ed:a9:01:33:85:d7:9c:e3:b6:88: 83:7e:3d:e7:1b:07:51:6c:2c:4d:cc:32:5c:da:1c: fe:88:59:ea:b5:74:7d:7c:4b:30:be:8d:99:66:82: 90:a3:13:5e:ad:13:49:87:ed:14:f4:24:29:2d:a0: e0:25:9c:1e:6d:79:7c:b2:ff:8a:82:64:05:8f:22: 05:cd:7f:db:8c:90:40:db:60:d6:ec:70:85:95:4a: 60:c4:5e:b4:5d:24:9b:69:40:26:3d:d4:53:2a:2a: 2b:d1:40:7d:61:3c:67:85:6b:86:79:11:51:2d:40: 09:51:05:79:63:97:1a:79:27:62:7c:c0:0a:73:32: 75:8f:34:03:18:aa:e8:92:88:2d:39:80:b8:31:3b: b2:47:2d:c4:47:58:84:86:92:8f:a2:b3:af:f6:ac: 7c:a5:77:08:f7:4b:1e:c0:0a:b6:a7:e3:60:a4:3b: 81:fc:b9:35:4b:d9:72:de:44:85:79:2d:3b:48:f4: ee:76:de:d6:19:4d:64:b8:ea:81:45:96:0b:b7:78: ab:f8:42:16:9a:5a:d6:8f:92:19:1d:d6:ba:b5:0c: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:74:32:FD:C2:F6:F0:D0:37:DB:CA:05:61:3C:19:72:2E:ED:A6:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0b:ae:1b:4f:8b:c1:9e:49:39:04:43:33:d3:ba:5e:ce:11:60: 32:71:d1:a9:99:bb:50:f2:66:19:c7:30:4a:25:e9:88:af:4b: 89:a4:04:7c:39:81:2a:f5:9a:b1:e9:24:a5:40:c6:74:f9:7d: 87:aa:a2:5f:eb:1f:ab:b4:f7:f9:84:a2:17:17:dd:00:6a:62: 66:ca:55:f8:9b:1c:a2:e7:b2:d7:fa:cf:68:f8:46:97:66:6a: b5:54:7f:8a:d0:12:b7:bc:31:b8:c4:89:e2:3c:29:c0:8f:7d: c0:cb:9c:5a:ed:bb:8b:9b:02:5e:88:2d:ec:95:93:83:b5:3b: 32:1f:ed:57:af:25:7c:96:0d:d2:16:d7:e0:80:d0:d6:c5:68: 82:56:5d:26:82:e5:5c:96:fb:c1:36:5f:4d:73:9e:fe:e1:5c: 07:1d:4b:00:59:dd:92:58:e3:b9:b6:09:e2:b6:9b:93:19:26: fc:b4:79:d5:a7:7c:c2:b3:d3:e8:5b:e4:f8:34:1b:99:aa:af: 11:03:9f:4e:f2:cc:f8:3a:55:e2:a7:ca:d8:e4:4f:5d:c1:33: 36:db:ad:7d:50:47:8c:fa:69:b7:b3:af:b6:59:df:35:4f:35: e8:ef:fa:71:38:1f:b7:c6:05:e3:37:f3:c2:02:7e:04:96:7b: 97:19:29:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXMkXxZ/wxqi1KckJsEt4s/SkeA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDEzWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmE3YzlkY2Q0NmU3ZGU1N2RjNWI0OTZkMjBmNGFmOGU4 ZTc1MjNhZDc0YjY3NmQyNmFiOWU0MDhhZjE5YzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9R2uCG4f3Dct+6X2R8TebUDUUnF7spUI+4znEnzPG1hDD 7akBM4XXnOO2iIN+PecbB1FsLE3MMlzaHP6IWeq1dH18SzC+jZlmgpCjE16tE0mH 7RT0JCktoOAlnB5teXyy/4qCZAWPIgXNf9uMkEDbYNbscIWVSmDEXrRdJJtpQCY9 1FMqKivRQH1hPGeFa4Z5EVEtQAlRBXljlxp5J2J8wApzMnWPNAMYquiSiC05gLgx O7JHLcRHWISGko+is6/2rHyldwj3Sx7ACran42CkO4H8uTVL2XLeRIV5LTtI9O52 3tYZTWS46oFFlgu3eKv4QhaaWtaPkhkd1rq1DD+RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvnQy/cL28NA328oFYTwZci7tpikwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBAAuuG0+LwZ5JOQRDM9O6Xs4RYDJx 0amZu1DyZhnHMEol6YivS4mkBHw5gSr1mrHpJKVAxnT5fYeqol/rH6u09/mEohcX 3QBqYmbKVfibHKLnstf6z2j4RpdmarVUf4rQEre8MbjEieI8KcCPfcDLnFrtu4ub Al6ILeyVk4O1OzIf7VevJXyWDdIW1+CA0NbFaIJWXSaC5VyW+8E2X01znv7hXAcd SwBZ3ZJY47m2CeK2m5MZJvy0edWnfMKz0+hb5Pg0G5mqrxEDn07yzPg6VeKnytjk T13BMzbbrX1QR4z6abezr7ZZ3zVPNejv+nE4H7fGBeM388ICfgSWe5cZKa0= -----END CERTIFICATE-----Generated at Sun Jun 15 11:43:29 2025 by rpki-client