$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa File: 9f840d4b-6625-430f-9982-054181947ab2.roa (raw, json) Hash identifier: SLUtZc/cX5Jp3gUgm+zeoGLkwBmhuCL+mBWIKikGLbo= Subject key identifier: AD:35:A8:DC:FF:55:6B:07:A8:4C:21:B9:00:46:97:B0:36:64:6F:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 029DA019A3D2878978039BB36F3C592626EFF926 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa Signing time: Fri 13 Jun 2025 00:30:32 +0000 ROA not before: Fri 13 Jun 2025 00:30:32 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.184.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9d:a0:19:a3:d2:87:89:78:03:9b:b3:6f:3c:59:26:26:ef:f9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:30:32 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=e13cc527e3f5e409c79bb57b503215f386c84fb271c3fa7d74480af1494240e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:bd:b5:bb:22:18:cd:86:05:02:d7:14:75: 4d:16:55:58:28:81:1b:e1:62:08:e6:d2:8c:50:c5: 45:de:70:ee:fb:33:f1:be:4b:4d:6d:00:e2:dd:98: cc:c5:4f:10:76:f3:4b:ec:5f:01:e3:c2:a9:af:95: 06:7e:a4:0b:ca:2c:ca:31:bb:56:c9:0f:1e:ec:7b: 03:fa:ce:d7:9e:be:2d:0c:0a:af:c7:74:ac:96:4e: db:e3:3b:48:8b:33:57:75:cf:1c:1c:ab:93:00:ff: 0d:0b:3c:38:04:c9:73:1a:e4:96:61:92:a5:c7:74: 2f:80:9f:93:f9:c0:5f:86:02:6a:5f:f9:af:49:4f: 54:dd:32:f9:7f:6a:3c:7f:e9:78:30:3a:e4:c8:1d: 01:50:84:a5:db:d5:14:a3:98:57:60:92:88:72:e1: 78:f2:09:3f:bc:f0:93:95:9e:63:47:ee:b2:15:53: 9d:81:85:75:1a:ea:88:45:20:3e:4d:6f:92:7f:c8: b5:c8:08:97:91:23:72:7e:27:e8:25:b7:49:1b:b7: b4:a9:87:cd:5c:a4:d2:63:c4:27:67:da:ea:f0:cd: 40:1d:be:c2:a0:da:ce:cb:d5:c7:8e:5c:dd:3e:51: 3c:97:10:ad:87:d8:fc:4c:42:bc:43:2d:3c:70:cb: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:A8:DC:FF:55:6B:07:A8:4C:21:B9:00:46:97:B0:36:64:6F:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.184.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:6f:82:5a:e5:be:30:1c:d3:9c:78:75:ff:e5:0b:df:2a:55: 45:ad:f6:82:ee:35:41:c7:8c:9b:a6:a0:08:b7:18:05:dd:61: 20:5d:52:5b:41:40:aa:8c:90:12:e7:68:08:b3:61:ca:8b:7a: 52:fd:0f:84:57:45:90:ab:2c:1f:fa:c6:b4:72:de:02:d1:47: 53:55:2e:aa:ba:59:91:44:2b:e4:ba:47:b5:fe:c0:fa:20:28: 6d:4c:d8:86:64:9b:36:ba:4f:94:a6:a3:38:a2:2a:94:5d:99: 87:25:16:5c:0b:42:11:9d:57:b8:86:47:a5:10:03:58:2d:dd: 98:a4:47:60:47:e0:ff:95:76:d9:d7:f6:33:93:ae:89:31:7c: df:68:8f:d5:a9:58:66:1d:44:04:18:2e:e3:67:a4:6c:7e:7a: 72:fe:61:ae:47:a4:29:64:7d:e4:3d:4b:69:f2:c2:e4:f6:54: 22:43:f1:c7:01:33:70:77:e4:b8:42:f5:bb:14:d0:ae:89:a7: c8:ef:6c:10:9a:af:b3:44:d8:57:68:1d:50:e5:cd:e0:f1:63: 62:26:d2:eb:fb:4c:d4:b0:00:78:ee:23:43:31:c0:2a:b0:fd: ed:11:99:84:78:40:fe:05:33:7d:41:4f:cd:4b:de:bd:a6:57: ec:b9:fc:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAp2gGaPSh4l4A5uzbzxZJibv+SYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDAzMDMyWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTNjYzUyN2UzZjVlNDA5Yzc5YmI1N2I1MDMyMTVmMzg2 Yzg0ZmIyNzFjM2ZhN2Q3NDQ4MGFmMTQ5NDI0MGU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWcL21uyIYzYYFAtcUdU0WVVgogRvhYgjm0oxQxUXecO77 M/G+S01tAOLdmMzFTxB280vsXwHjwqmvlQZ+pAvKLMoxu1bJDx7sewP6zteevi0M Cq/HdKyWTtvjO0iLM1d1zxwcq5MA/w0LPDgEyXMa5JZhkqXHdC+An5P5wF+GAmpf +a9JT1TdMvl/ajx/6XgwOuTIHQFQhKXb1RSjmFdgkohy4XjyCT+88JOVnmNH7rIV U52BhXUa6ohFID5Nb5J/yLXICJeRI3J+J+glt0kbt7Sph81cpNJjxCdn2urwzUAd vsKg2s7L1ceOXN0+UTyXEK2H2PxMQrxDLTxwy4AfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrTWo3P9VaweoTCG5AEaXsDZkb1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmODQwZDRiLTY2MjUtNDMwZi05OTgyLTA1NDE4MTk0N2FiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQuAAwDQYJKoZIhvcNAQELBQADggEBAD9vglrlvjAc05x4df/lC98qVUWt 9oLuNUHHjJumoAi3GAXdYSBdUltBQKqMkBLnaAizYcqLelL9D4RXRZCrLB/6xrRy 3gLRR1NVLqq6WZFEK+S6R7X+wPogKG1M2IZkmza6T5SmoziiKpRdmYclFlwLQhGd V7iGR6UQA1gt3ZikR2BH4P+VdtnX9jOTrokxfN9oj9WpWGYdRAQYLuNnpGx+enL+ Ya5HpClkfeQ9S2nywuT2VCJD8ccBM3B35LhC9bsU0K6Jp8jvbBCar7NE2FdoHVDl zeDxY2Im0uv7TNSwAHjuI0MxwCqw/e0RmYR4QP4FM31BT81L3r2mV+y5/BI= -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:23 2025 by rpki-client