$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa File: aa9b2c74-44be-4506-8c26-0e262e9213ae.roa (raw, json) Hash identifier: jd3N0XULKRcaZGqMAGwq2C0+8N0wUlcr5X3HhhauGNo= Subject key identifier: 63:D3:D5:F8:29:D5:A3:66:6A:20:51:B0:F8:21:65:F1:FA:5B:B7:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 632DD07C6DA46DA170709612BF60D9FB7F8638E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa Signing time: Fri 18 Apr 2025 00:31:08 +0000 ROA not before: Fri 18 Apr 2025 00:31:08 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2d:d0:7c:6d:a4:6d:a1:70:70:96:12:bf:60:d9:fb:7f:86:38:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:31:08 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=de606edcbb7246bebab2845c8519dc1381203fd10de874c758bc186691c5ac70, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:96:34:e3:64:71:89:e1:03:db:5f:48:f8: 7a:2c:36:1f:a5:32:4c:69:0d:42:9e:0e:77:39:b2: 2b:14:fb:a5:11:3c:41:97:34:29:71:06:cd:38:12: b5:b2:0d:f7:77:b0:59:54:50:80:25:28:fe:58:a5: d7:62:88:2f:70:71:19:b0:dd:0e:9d:33:f5:0e:18: ba:06:ac:1c:aa:6a:7c:d3:ed:f2:32:72:94:06:49: 6e:4f:91:12:59:f1:cc:d4:a6:96:d8:51:d9:bc:eb: 6f:3d:01:71:10:32:dd:f3:49:03:b2:5b:e6:7d:81: 02:f8:fb:99:da:aa:65:1d:e7:6b:7e:40:07:a5:d9: b1:0f:35:c5:2d:fb:73:34:4c:bc:2f:b0:e1:48:22: bc:4b:af:9d:b8:df:a7:00:95:8c:33:d4:da:8b:f8: c9:af:0a:0d:f1:f3:a3:08:d7:33:1f:80:1a:eb:f7: 54:3c:65:e6:38:5c:27:c2:a8:9f:fe:87:4b:aa:16: 58:dd:eb:94:02:2d:e2:a4:c8:54:cc:73:d0:a6:a2: 03:05:c4:f5:2f:69:ed:99:5d:b1:23:3c:cd:28:09: e2:1f:a0:ce:5a:b8:bf:c3:d5:13:0d:6f:08:0b:dd: 25:ba:0c:2c:eb:d2:0c:ac:3a:0a:d0:02:42:26:3d: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D3:D5:F8:29:D5:A3:66:6A:20:51:B0:F8:21:65:F1:FA:5B:B7:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.248.0/21 Signature Algorithm: sha256WithRSAEncryption 28:25:ab:d1:5a:e8:35:70:e2:b0:a8:84:4b:8a:e1:67:85:0c: 5d:dd:da:f9:3d:b6:8e:c9:45:50:78:2c:d3:37:b3:f1:41:65: 05:e1:5e:7d:7c:6d:c2:a8:f3:72:8f:dc:85:4a:d1:b2:18:87: 23:22:44:73:6b:72:b3:99:7d:90:54:d9:a6:32:91:19:aa:9b: e7:32:52:4b:91:13:73:e7:12:13:5c:93:61:ba:dd:23:2f:fa: a5:98:fc:95:68:10:6d:a2:09:c9:33:c1:dd:08:c5:fa:3a:25: fd:54:c4:76:1a:d2:d1:a0:80:ae:99:f5:f5:2d:1f:35:cb:37: c0:c7:54:c8:2b:ce:e4:f2:4b:93:9c:65:81:9a:ea:2b:7e:57: d1:8b:b2:43:44:c3:1b:7d:9f:7f:7d:00:54:ca:c0:6d:94:42: e1:d8:d3:39:88:4a:4c:90:18:63:9e:9d:ab:d9:f4:fc:92:ee: 05:5a:be:03:da:d4:d1:46:06:e2:05:74:23:f7:0c:99:01:65: 66:da:ec:23:ad:db:46:15:a7:1c:ec:5f:a9:04:19:3f:89:20: dd:fd:fd:8a:0b:7b:87:f4:4f:57:7d:27:83:56:48:8d:17:5c: 68:f6:8f:09:ae:60:ed:bb:b1:46:a3:d1:4d:78:35:74:0e:ed: e3:22:3c:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYy3QfG2kbaFwcJYSv2DZ+3+GOOIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDAzMTA4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTYwNmVkY2JiNzI0NmJlYmFiMjg0NWM4NTE5ZGMxMzgx MjAzZmQxMGRlODc0Yzc1OGJjMTg2NjkxYzVhYzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc7ZY042RxieED219I+HosNh+lMkxpDUKeDnc5sisU+6UR PEGXNClxBs04ErWyDfd3sFlUUIAlKP5YpddiiC9wcRmw3Q6dM/UOGLoGrByqanzT 7fIycpQGSW5PkRJZ8czUppbYUdm86289AXEQMt3zSQOyW+Z9gQL4+5naqmUd52t+ QAel2bEPNcUt+3M0TLwvsOFIIrxLr52436cAlYwz1NqL+MmvCg3x86MI1zMfgBrr 91Q8ZeY4XCfCqJ/+h0uqFljd65QCLeKkyFTMc9CmogMFxPUvae2ZXbEjPM0oCeIf oM5auL/D1RMNbwgL3SW6DCzr0gysOgrQAkImPdm3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY9PV+CnVo2ZqIFGw+CFl8fpbt8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhOWIyYzc0LTQ0YmUtNDUwNi04YzI2LTBlMjYyZTkyMTNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPPFfgwDQYJKoZIhvcNAQELBQADggEBACglq9Fa6DVw4rCohEuK4WeFDF3d 2vk9to7JRVB4LNM3s/FBZQXhXn18bcKo83KP3IVK0bIYhyMiRHNrcrOZfZBU2aYy kRmqm+cyUkuRE3PnEhNck2G63SMv+qWY/JVoEG2iCckzwd0Ixfo6Jf1UxHYa0tGg gK6Z9fUtHzXLN8DHVMgrzuTyS5OcZYGa6it+V9GLskNEwxt9n399AFTKwG2UQuHY 0zmISkyQGGOenavZ9PyS7gVavgPa1NFGBuIFdCP3DJkBZWba7COt20YVpxzsX6kE GT+JIN39/YoLe4f0T1d9J4NWSI0XXGj2jwmuYO27sUaj0U14NXQO7eMiPEI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:45:53 2025 by rpki-client