$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa File: b78a5c1b-8121-4a01-905a-9948723914f0.roa (raw, json) Hash identifier: We/DFbyctZY35VUgpTPRIdNLqP3fOlssTlrOJMxY/dI= Subject key identifier: E9:2A:B8:4C:36:AD:EF:79:90:10:A0:E7:8F:4B:B0:25:65:30:A6:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 558B10C17AD2E1463A15D9FB0B4A539346AF727C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa Signing time: Fri 18 Apr 2025 00:42:03 +0000 ROA not before: Fri 18 Apr 2025 00:42:03 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8b:10:c1:7a:d2:e1:46:3a:15:d9:fb:0b:4a:53:93:46:af:72:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:42:03 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=b1fc6fbc991c0f13929ec1cb58601a9c51ceee0dd97440e89867ea7923c9fe24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:b6:7e:27:e7:49:5c:83:a6:66:2e:04:da: 45:fb:54:29:15:7f:2c:b6:ed:59:b2:fb:b7:53:ba: d0:84:5e:c7:84:08:41:49:3f:18:d4:b4:e1:6e:3c: b3:33:be:23:b4:ec:95:e0:96:35:19:b7:b4:5f:cf: 41:19:d6:1a:be:75:b9:c6:3e:45:ee:e3:0c:34:29: bf:c1:b4:b1:3b:c9:90:1d:e9:b0:18:b6:bd:03:7e: 0e:48:f1:a0:75:4d:1f:9c:64:c8:52:1a:33:a8:71: af:42:af:b7:bd:e6:3e:12:da:53:39:79:63:41:24: fb:b1:4e:31:23:8b:7e:68:c7:94:31:10:63:14:af: 10:d8:2d:a7:82:cd:9f:ba:de:a7:d2:9b:b4:3a:f3: 00:a5:f0:7e:0f:0a:52:69:85:15:10:be:d6:db:df: 0c:d0:36:bc:6b:89:c7:bf:7f:82:67:d7:44:d5:a5: 2c:08:74:d3:66:b1:e2:97:af:85:77:94:5a:2a:f2: 68:17:ed:1b:7b:bf:7d:bc:b9:d0:01:ed:f8:f6:0b: dc:ba:06:fe:21:81:1c:41:d0:80:b8:64:7e:16:f4: 09:6d:81:1f:1c:56:6f:20:14:21:39:37:58:70:e4: 70:b9:36:95:69:80:e9:bc:ad:4a:12:47:b1:26:22: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:B8:4C:36:AD:EF:79:90:10:A0:E7:8F:4B:B0:25:65:30:A6:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.224.0/23 Signature Algorithm: sha256WithRSAEncryption 50:0e:4a:24:0b:87:53:fa:e2:1e:1f:47:33:79:48:c5:bd:af: 63:a2:b3:a2:c6:58:6b:64:3d:3e:b6:05:70:e4:bb:ad:89:e4: a6:ee:2e:f8:85:97:e7:c6:ae:1a:fa:70:60:88:68:70:da:fd: 47:87:b0:c8:03:b2:02:70:e6:ab:f8:fc:23:f2:76:09:e7:3a: a6:c8:23:d1:0e:c1:b3:bb:f9:fd:4e:36:d5:d8:a3:16:41:d0: cf:1d:b1:b2:8f:1d:e4:64:0a:cf:2a:17:ea:fd:d8:00:b2:98: ee:aa:eb:06:fc:10:b5:fc:57:2e:12:18:b3:29:d6:71:db:c8: dc:58:6f:1c:4c:a0:c4:49:22:d0:73:74:77:9d:4b:f4:77:61: 79:f3:08:df:f4:fe:90:de:95:be:49:00:b8:b3:89:3b:ed:d5: 47:de:6f:54:70:d3:a2:ab:59:b6:1f:f0:b4:eb:08:10:69:25: 4f:53:57:c0:97:4d:3b:6c:7d:6b:4a:fe:8e:c4:91:bd:6f:92: 73:49:cb:7d:bd:89:9d:5b:7e:33:37:51:48:89:57:38:c4:23: 74:65:59:b9:08:77:58:b1:35:fb:c7:ad:c2:f6:a1:de:81:99: 12:82:db:37:c1:f9:1f:11:8c:56:da:ff:f0:86:5b:e1:7c:09: e5:b1:e5:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVYsQwXrS4UY6Fdn7C0pTk0avcnwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MjAzWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWZjNmZiYzk5MWMwZjEzOTI5ZWMxY2I1ODYwMWE5YzUx Y2VlZTBkZDk3NDQwZTg5ODY3ZWE3OTIzYzlmZTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO3LZ+J+dJXIOmZi4E2kX7VCkVfyy27Vmy+7dTutCEXseE CEFJPxjUtOFuPLMzviO07JXgljUZt7Rfz0EZ1hq+dbnGPkXu4ww0Kb/BtLE7yZAd 6bAYtr0Dfg5I8aB1TR+cZMhSGjOoca9Cr7e95j4S2lM5eWNBJPuxTjEji35ox5Qx EGMUrxDYLaeCzZ+63qfSm7Q68wCl8H4PClJphRUQvtbb3wzQNrxrice/f4Jn10TV pSwIdNNmseKXr4V3lFoq8mgX7Rt7v328udAB7fj2C9y6Bv4hgRxB0IC4ZH4W9Alt gR8cVm8gFCE5N1hw5HC5NpVpgOm8rUoSR7EmIoQVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Sq4TDat73mQEKDnj0uwJWUwpnswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3OGE1YzFiLTgxMjEtNGEwMS05MDVhLTk5NDg3MjM5MTRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFA4uAwDQYJKoZIhvcNAQELBQADggEBAFAOSiQLh1P64h4fRzN5SMW9r2Oi s6LGWGtkPT62BXDku62J5KbuLviFl+fGrhr6cGCIaHDa/UeHsMgDsgJw5qv4/CPy dgnnOqbII9EOwbO7+f1ONtXYoxZB0M8dsbKPHeRkCs8qF+r92ACymO6q6wb8ELX8 Vy4SGLMp1nHbyNxYbxxMoMRJItBzdHedS/R3YXnzCN/0/pDelb5JALiziTvt1Ufe b1Rw06KrWbYf8LTrCBBpJU9TV8CXTTtsfWtK/o7Ekb1vknNJy329iZ1bfjM3UUiJ VzjEI3RlWbkId1ixNfvHrcL2od6BmRKC2zfB+R8RjFba//CGW+F8CeWx5eE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:45 2025 by rpki-client