$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa File: b624d9cc-a7a2-4009-8cac-c0856276648d.roa (raw, json) Hash identifier: r+UT8dI9kC3UeqQ2be8ithg+RFwyXz5wcF3PQPBihfo= Subject key identifier: D3:1D:5A:50:E3:2B:90:42:82:6E:1B:DE:97:F9:9A:7D:5E:65:FF:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71C121993F736220442E48C76F67E03B025C683D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa Signing time: Tue 03 Jun 2025 00:20:11 +0000 ROA not before: Tue 03 Jun 2025 00:20:11 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.114.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:21:99:3f:73:62:20:44:2e:48:c7:6f:67:e0:3b:02:5c:68:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:20:11 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=5fded51348a03078c2af57e1e8477007bec070fb658c128050dbf45cce58b583, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:58:cc:3d:88:9f:c0:d4:f1:b4:a5:c3:2c: b3:54:45:2d:ec:65:a9:ed:4f:21:de:59:d8:7e:4c: e5:43:d4:99:e1:38:6e:63:b0:3b:c4:ed:8b:6c:c8: 6a:57:06:4d:05:95:2b:2a:25:ae:d2:85:17:06:9e: 76:16:88:5f:c7:40:b0:f6:21:24:41:7b:88:ae:63: 42:7a:48:fe:da:06:93:13:b0:2a:bf:93:b6:43:3c: 94:d4:75:18:b0:51:be:c4:bf:ec:57:d3:1d:50:7a: 80:8b:76:85:f8:00:23:87:08:8c:a0:7a:7d:af:24: 2b:32:48:d5:60:60:41:9a:47:6d:ec:d7:59:1f:ba: 90:19:0b:85:7f:7e:4f:3d:d8:8a:6d:53:8b:b8:73: 09:50:c4:64:cb:bd:6d:b6:b8:eb:4b:1e:73:c4:f4: 51:3b:41:38:3f:57:15:d9:7d:97:c7:d0:57:59:5d: 98:ed:e2:e3:ee:46:7b:31:80:3f:b4:cc:61:94:08: 43:3b:b6:73:0c:73:7b:f7:c6:29:43:15:a7:57:b1: b3:dc:6d:fc:96:ee:25:8f:d7:69:63:12:d4:66:9c: da:93:ea:1a:8e:c3:e2:61:ef:17:ba:b7:da:c1:f4: f7:9c:14:99:6a:16:04:ea:09:13:11:46:14:2c:8f: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:5A:50:E3:2B:90:42:82:6E:1B:DE:97:F9:9A:7D:5E:65:FF:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.114.224.0/19 Signature Algorithm: sha256WithRSAEncryption 03:b4:56:f1:92:de:d5:37:d5:f2:d4:98:8b:96:bc:50:4f:d3: 4b:c2:45:81:3a:0a:84:cd:73:5b:44:b7:40:6e:08:80:34:ec: b8:85:2b:04:8a:e7:f8:8a:bc:c2:99:4a:97:46:3b:b7:67:75: ac:6a:7d:05:44:4e:8b:b5:93:d7:75:1b:47:77:ce:9a:89:a7: 60:f7:ca:c9:53:74:5a:1f:4e:59:c7:aa:42:ea:03:aa:5d:80: a1:10:03:71:9b:fc:29:9b:40:c1:86:a2:bd:ae:40:18:e1:6b: bb:1a:ef:f1:c0:66:32:5e:fc:10:45:8b:ca:bd:05:9e:21:2e: 9e:85:44:76:76:c8:aa:c6:97:56:4d:9b:16:c4:37:d4:7c:4e: 69:63:fe:11:40:24:83:3b:d3:e5:59:6d:a2:b7:37:9a:55:4e: 2e:c3:56:f3:3c:eb:9c:77:09:00:b2:ac:78:59:24:83:52:e6: d2:d1:1d:33:5f:85:99:74:4f:25:bd:51:a6:48:30:a7:2f:50: 09:08:24:16:64:78:09:21:36:65:37:bd:6c:6f:22:7c:0e:7b: a4:13:10:57:91:bd:0d:c4:8c:fb:8b:92:fe:03:97:5e:94:6a: 3c:a2:fc:64:25:7c:35:53:8a:31:f7:d7:58:d3:1d:d7:17:23: d5:18:5e:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUccEhmT9zYiBELkjHb2fgOwJcaD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAyMDExWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmRlZDUxMzQ4YTAzMDc4YzJhZjU3ZTFlODQ3NzAwN2Jl YzA3MGZiNjU4YzEyODA1MGRiZjQ1Y2NlNThiNTgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj4VjMPYifwNTxtKXDLLNURS3sZantTyHeWdh+TOVD1Jnh OG5jsDvE7YtsyGpXBk0FlSsqJa7ShRcGnnYWiF/HQLD2ISRBe4iuY0J6SP7aBpMT sCq/k7ZDPJTUdRiwUb7Ev+xX0x1QeoCLdoX4ACOHCIygen2vJCsySNVgYEGaR23s 11kfupAZC4V/fk892IptU4u4cwlQxGTLvW22uOtLHnPE9FE7QTg/VxXZfZfH0FdZ XZjt4uPuRnsxgD+0zGGUCEM7tnMMc3v3xilDFadXsbPcbfyW7iWP12ljEtRmnNqT 6hqOw+Jh7xe6t9rB9PecFJlqFgTqCRMRRhQsj1jxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0x1aUOMrkEKCbhvel/mafV5l/7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2MjRkOWNjLWE3YTItNDAwOS04Y2FjLWMwODU2Mjc2NjQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRcuAwDQYJKoZIhvcNAQELBQADggEBAAO0VvGS3tU31fLUmIuWvFBP00vC RYE6CoTNc1tEt0BuCIA07LiFKwSK5/iKvMKZSpdGO7dndaxqfQVETou1k9d1G0d3 zpqJp2D3yslTdFofTlnHqkLqA6pdgKEQA3Gb/CmbQMGGor2uQBjha7sa7/HAZjJe /BBFi8q9BZ4hLp6FRHZ2yKrGl1ZNmxbEN9R8Tmlj/hFAJIM70+VZbaK3N5pVTi7D VvM865x3CQCyrHhZJINS5tLRHTNfhZl0TyW9UaZIMKcvUAkIJBZkeAkhNmU3vWxv InwOe6QTEFeRvQ3EjPuLkv4Dl16Uajyi/GQlfDVTijH311jTHdcXI9UYXvE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:25 2025 by rpki-client