$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa File: a180719e-5fd3-4143-88a0-9cbf81c0885d.roa (raw, json) Hash identifier: 7AeGC7vMsv1Eey0a8/Sbag2mpmaKQJHOD2/fZFB8HF4= Subject key identifier: 42:E0:22:92:A8:98:93:64:91:1B:33:5B:D5:98:9E:38:FA:5B:C8:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2ED8DED0C0EEB984A21EFB8F052F5D3E8DD43F84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa Signing time: Wed 09 Apr 2025 00:31:56 +0000 ROA not before: Wed 09 Apr 2025 00:31:56 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:de:d0:c0:ee:b9:84:a2:1e:fb:8f:05:2f:5d:3e:8d:d4:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:31:56 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=7e401856ebf597db711bfc022dfc1db550ce5eff8980c61c9664bc71076177f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:f5:38:0f:b2:d8:8f:75:02:d7:46:7e:92: ad:51:10:8b:7e:ca:82:6a:5b:ad:f0:af:ea:5a:9d: 38:c3:37:a1:8c:d5:5c:bb:93:c0:04:72:af:8b:1b: b0:5e:9c:fe:2c:af:ae:05:34:1f:00:02:06:62:9d: 35:6d:a0:1a:ac:40:bc:28:41:29:3f:87:f7:09:9e: e2:60:db:5e:8b:4d:77:82:ac:f5:ad:f9:ee:5d:85: 5c:c6:6e:09:ad:0b:fa:f8:9a:c3:41:46:c5:42:b8: 13:28:25:a8:eb:ab:12:85:90:91:49:3f:9c:77:54: 60:7a:74:40:d2:62:59:65:b7:92:9c:4b:c2:b0:da: 86:b3:b4:3f:22:d1:81:6d:e5:5a:c9:1e:58:49:84: cf:6c:76:6e:a2:f4:64:3b:ed:3d:16:2c:35:34:8a: 13:63:b4:f1:41:05:ab:04:54:31:be:f0:fa:ea:1c: fe:5c:5d:c6:e9:c0:64:4c:9a:81:89:96:fd:d0:b3: 26:31:73:2e:ff:af:5b:3f:cd:fa:4a:a8:57:f4:f1: b8:04:e7:95:f1:06:1d:9c:d8:7a:ea:81:2a:c4:ea: 1b:fa:59:b2:84:47:b8:50:6e:99:99:c8:11:dd:35: 82:9d:3a:ce:02:1d:d2:5b:15:e9:bc:18:4b:6a:9c: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:22:92:A8:98:93:64:91:1B:33:5B:D5:98:9E:38:FA:5B:C8:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.77.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ef:39:69:b6:7e:27:26:9a:72:ce:20:f9:c1:6b:9d:cb:6a: 64:6f:e2:4c:56:88:04:97:ae:a1:01:9f:61:46:d3:29:9a:f4: b8:7d:c6:05:52:ef:59:a1:5e:b4:78:db:89:0d:99:a2:de:8c: 51:1c:57:df:e4:e0:f0:0c:6e:03:5c:40:9d:d3:a1:74:51:35: b5:6b:e7:fb:f4:a1:26:f9:e8:76:b9:34:ff:ab:e0:8c:66:9f: 5c:6b:e8:4a:1c:b2:5a:6c:c7:07:f6:10:80:ee:fc:b9:7b:b6: b1:25:51:ee:7d:c8:d5:04:af:85:b3:b4:7f:87:9e:8a:4a:3d: ec:c0:31:b9:a9:81:c4:74:21:4a:38:f9:0d:48:54:df:fc:88: 64:a1:5b:0f:3c:a9:f4:a6:6e:94:3d:96:f2:a4:a5:40:98:30: 88:e1:f8:ae:f5:95:3d:7e:f8:33:59:56:0e:cb:cf:4b:17:a7: 98:92:34:18:60:af:90:45:75:44:71:29:67:25:28:26:fd:52: 55:14:71:d0:7a:90:e2:c2:78:4c:17:0c:60:24:43:bf:48:43: 37:8d:08:df:34:b2:5c:2d:e8:c9:82:ff:e0:37:32:e8:7a:6d: 50:1e:06:a7:f5:4e:d5:36:a6:90:9e:a4:3c:36:0a:03:94:c8: ee:1f:80:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULtje0MDuuYSiHvuPBS9dPo3UP4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMTU2WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTQwMTg1NmViZjU5N2RiNzExYmZjMDIyZGZjMWRiNTUw Y2U1ZWZmODk4MGM2MWM5NjY0YmM3MTA3NjE3N2YzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyFvU4D7LYj3UC10Z+kq1REIt+yoJqW63wr+panTjDN6GM 1Vy7k8AEcq+LG7BenP4sr64FNB8AAgZinTVtoBqsQLwoQSk/h/cJnuJg216LTXeC rPWt+e5dhVzGbgmtC/r4msNBRsVCuBMoJajrqxKFkJFJP5x3VGB6dEDSYlllt5Kc S8Kw2oaztD8i0YFt5VrJHlhJhM9sdm6i9GQ77T0WLDU0ihNjtPFBBasEVDG+8Prq HP5cXcbpwGRMmoGJlv3QsyYxcy7/r1s/zfpKqFf08bgE55XxBh2c2HrqgSrE6hv6 WbKER7hQbpmZyBHdNYKdOs4CHdJbFem8GEtqnEBBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQuAikqiYk2SRGzNb1ZieOPpbyCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExODA3MTllLTVmZDMtNDE0My04OGEwLTljYmY4MWMwODg1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/E0wDQYJKoZIhvcNAQELBQADggEBAF/vOWm2ficmmnLOIPnBa53LamRv 4kxWiASXrqEBn2FG0yma9Lh9xgVS71mhXrR424kNmaLejFEcV9/k4PAMbgNcQJ3T oXRRNbVr5/v0oSb56Ha5NP+r4Ixmn1xr6Eocslpsxwf2EIDu/Ll7trElUe59yNUE r4WztH+HnopKPezAMbmpgcR0IUo4+Q1IVN/8iGShWw88qfSmbpQ9lvKkpUCYMIjh +K71lT1++DNZVg7Lz0sXp5iSNBhgr5BFdURxKWclKCb9UlUUcdB6kOLCeEwXDGAk Q79IQzeNCN80slwt6MmC/+A3Muh6bVAeBqf1TtU2ppCepDw2CgOUyO4fgNw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:56 2025 by rpki-client