$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa File: 9296230d-b510-447f-8d60-91a5403453bc.roa (raw, json) Hash identifier: mN9GWSwlceUj/dV7nONzOnzs9Z3hIPtAaKde6gb0yvQ= Subject key identifier: F8:3C:75:08:98:D2:87:E1:5F:E3:F5:5B:55:B8:21:C4:E6:3C:4E:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 683387C350A424AFD05B36D39648BC52B97FF627 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa Signing time: Wed 23 Apr 2025 00:21:48 +0000 ROA not before: Wed 23 Apr 2025 00:21:48 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:33:87:c3:50:a4:24:af:d0:5b:36:d3:96:48:bc:52:b9:7f:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:21:48 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=168019a0a354e7d609d84b502f5bd9f29247ab37417822d83e111b16e02b718c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:63:4b:a0:62:c3:f4:1b:3b:3c:a6:99:25: e1:43:e8:b3:1c:98:e0:85:ea:a0:27:9b:75:b6:9b: bd:93:76:95:6b:e2:94:11:bd:55:41:d7:f8:63:e3: 3f:24:bd:b4:8d:d6:cf:c5:8c:a9:e8:c4:1c:88:76: d9:2d:a6:80:86:29:0f:c8:a4:3f:89:28:c5:20:6c: 04:f4:05:df:b9:c0:9d:44:21:af:72:81:bc:f6:f9: 51:ac:64:31:ac:c5:26:db:79:d4:77:8f:e6:33:ac: 68:f5:64:6a:52:b1:82:f6:d7:d8:e6:ee:49:ad:23: 0c:64:a4:05:1c:5d:3c:04:1d:9b:0b:d6:bc:03:00: 76:e1:87:17:71:99:21:b3:05:b7:3f:10:03:0c:ac: f1:2b:d5:02:e0:cf:b8:86:cd:4c:00:7a:0b:57:41: 02:4b:ef:ad:43:b3:df:9b:d1:87:e8:73:82:79:29: af:46:82:83:68:5b:5f:fa:dd:b7:81:99:8a:18:b0: 6f:f5:82:fe:c2:f9:26:b6:8e:16:a2:60:6a:9d:83: 04:06:84:72:4b:9f:8e:d6:8a:6b:c4:27:0c:d0:f7: 33:0e:2f:9c:db:06:f6:d4:05:e9:2b:ac:8d:87:40: 63:37:b6:6c:f4:d3:fd:97:56:d4:85:0c:08:38:f6: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:75:08:98:D2:87:E1:5F:E3:F5:5B:55:B8:21:C4:E6:3C:4E:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/20 Signature Algorithm: sha256WithRSAEncryption 68:e5:ff:08:c4:7a:de:ce:5a:bd:e5:c5:82:b9:47:bd:09:4d: bf:95:ac:4a:5b:10:57:c0:7d:4a:3c:8c:01:b4:f0:e6:24:4f: 80:9f:43:0a:0d:ea:ce:0d:76:d9:22:3e:39:2a:34:a1:fa:8d: 28:c1:b2:79:d1:63:0e:bf:49:25:ba:5e:bf:3f:5d:76:a2:f9: 02:92:a5:2e:f0:72:f1:21:c6:33:65:91:c0:71:8f:e2:ad:b2: 3c:95:bc:b1:56:a0:64:0a:67:bb:6d:ea:4e:4d:80:e5:a6:dc: 73:ba:15:49:15:43:94:85:e1:c3:aa:4c:0c:1d:60:fc:60:c6: 39:7e:c3:3f:79:93:34:33:8e:90:b5:29:9c:f8:84:c7:51:62: 9b:79:68:5c:be:32:7b:f7:00:fc:12:a4:ec:9e:a5:ad:ac:d9: ea:5a:37:1b:aa:98:a1:54:c6:5b:29:58:40:92:dd:2f:d0:b1: e2:0e:12:90:63:47:d8:13:77:92:d5:e7:10:82:28:03:08:35: 0f:fa:b9:ae:2e:c4:9b:d5:ce:5e:76:4d:ea:d7:07:d9:f6:7d: 6b:eb:fb:dc:a3:b5:df:06:12:4f:cd:4e:34:5c:e6:7e:01:94: 30:61:74:f3:22:80:95:27:48:d2:96:de:b1:fb:e4:14:82:ba: cd:7e:e3:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaDOHw1CkJK/QWzbTlki8Url/9icwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAyMTQ4WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjgwMTlhMGEzNTRlN2Q2MDlkODRiNTAyZjViZDlmMjky NDdhYjM3NDE3ODIyZDgzZTExMWIxNmUwMmI3MThjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQmmNLoGLD9Bs7PKaZJeFD6LMcmOCF6qAnm3W2m72TdpVr 4pQRvVVB1/hj4z8kvbSN1s/FjKnoxByIdtktpoCGKQ/IpD+JKMUgbAT0Bd+5wJ1E Ia9ygbz2+VGsZDGsxSbbedR3j+YzrGj1ZGpSsYL219jm7kmtIwxkpAUcXTwEHZsL 1rwDAHbhhxdxmSGzBbc/EAMMrPEr1QLgz7iGzUwAegtXQQJL761Ds9+b0Yfoc4J5 Ka9GgoNoW1/63beBmYoYsG/1gv7C+Sa2jhaiYGqdgwQGhHJLn47WimvEJwzQ9zMO L5zbBvbUBekrrI2HQGM3tmz00/2XVtSFDAg49stfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+Dx1CJjSh+Ff4/VbVbghxOY8ThwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyOTYyMzBkLWI1MTAtNDQ3Zi04ZDYwLTkxYTU0MDM0NTNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFUAwDQYJKoZIhvcNAQELBQADggEBAGjl/wjEet7OWr3lxYK5R70JTb+V rEpbEFfAfUo8jAG08OYkT4CfQwoN6s4NdtkiPjkqNKH6jSjBsnnRYw6/SSW6Xr8/ XXai+QKSpS7wcvEhxjNlkcBxj+KtsjyVvLFWoGQKZ7tt6k5NgOWm3HO6FUkVQ5SF 4cOqTAwdYPxgxjl+wz95kzQzjpC1KZz4hMdRYpt5aFy+Mnv3APwSpOyepa2s2epa NxuqmKFUxlspWECS3S/QseIOEpBjR9gTd5LV5xCCKAMINQ/6ua4uxJvVzl52TerX B9n2fWvr+9yjtd8GEk/NTjRc5n4BlDBhdPMigJUnSNKW3rH75BSCus1+41o= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:37 2025 by rpki-client