$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa File: c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa (raw, json) Hash identifier: pkPzgmn+shTQqdETx0kVte+fXn2LWzhI8tpJSmPJlv8= Subject key identifier: D4:74:E7:04:82:83:9F:C1:42:0D:32:E5:AF:BC:60:D7:CB:CE:9D:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4984387383833FE60EBB5294AC6F2A31660C7330 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa Signing time: Tue 10 Jun 2025 16:11:55 +0000 ROA not before: Tue 10 Jun 2025 16:11:55 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:84:38:73:83:83:3f:e6:0e:bb:52:94:ac:6f:2a:31:66:0c:73:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:11:55 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=980c392391b08768196ea267265f9e7dd0f22090bd122ef0ebd1a1e0d561473d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:db:28:75:6e:cf:56:e7:b3:9c:44:cb:99: 92:fc:78:4d:cc:63:d5:fc:b6:5f:ee:ef:87:11:cc: 09:2c:18:e5:d0:00:0d:45:29:21:5b:cc:1b:32:8c: 2f:33:7b:bd:fa:cf:40:31:d5:ba:fc:10:4d:63:9b: 41:e5:30:c1:34:14:a6:c2:5a:69:d1:e8:16:36:d3: 9a:07:76:0b:32:64:b1:b7:31:53:1f:90:5d:d6:ba: 14:c7:6d:55:fd:b0:c7:9e:da:39:4a:60:29:36:35: a7:83:36:23:5a:91:bd:02:46:4b:78:51:a0:c9:ee: ba:28:f2:a7:5b:6e:5f:6a:a4:64:23:15:b4:0a:5f: 6f:ef:25:7e:f6:3e:53:a2:6c:15:2d:77:9a:bb:31: 19:f5:37:78:1f:06:ba:ec:8d:4c:fd:92:db:f3:69: 30:74:4d:0b:60:da:11:e2:8e:94:ab:cb:fa:6d:cb: c1:4c:3d:36:17:e1:b9:6f:70:de:2c:bd:cb:30:84: 44:37:4a:39:93:03:8f:04:5c:a6:9e:7a:27:50:f8: 2e:f2:88:a2:15:86:55:05:e7:5d:fc:a2:5b:ac:00: 40:27:8d:2e:e2:36:78:e0:44:82:e7:47:1a:0e:40: 28:a5:35:8a:d7:32:e0:02:ca:8e:75:73:67:71:62: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:74:E7:04:82:83:9F:C1:42:0D:32:E5:AF:BC:60:D7:CB:CE:9D:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:86:8f:60:e1:c5:a5:66:71:fe:21:39:6b:c2:e7:23:d6:67: 1d:b1:ca:56:8a:a8:c6:e8:aa:68:0f:5e:96:7a:24:e1:35:04: c7:fd:84:50:07:24:a5:99:28:9c:01:f4:f2:7a:8a:70:5c:3c: b1:9d:44:34:92:b5:ae:89:70:55:6c:58:8d:f5:61:57:04:e1: 90:7b:59:ab:a5:d0:0c:1e:bc:49:19:bc:69:f4:4c:84:a8:df: 29:62:44:06:ab:e9:5a:6f:c4:f7:33:90:9c:2d:72:e3:36:35: 62:d4:d2:9a:5a:cb:56:61:b7:28:33:d2:5f:9c:28:09:78:63: 36:c1:2f:63:b9:6e:49:eb:78:b4:90:f7:94:92:5f:59:bb:51: f3:39:93:64:73:0d:fa:a5:62:2a:c5:c1:41:aa:c4:59:5f:95: dc:fb:af:62:c0:0e:31:2b:b5:f0:e5:f5:ad:91:06:b8:b0:5e: 83:d1:be:cc:63:ed:eb:01:85:cb:4d:e8:56:58:1b:bd:8f:c9: f7:32:6d:07:10:14:9e:74:c1:93:3d:f2:2a:d3:93:25:94:99: c6:4b:93:8d:db:a4:bc:15:de:10:ba:18:f5:fc:8d:7d:35:04: 81:d0:a6:e1:68:02:0e:42:b3:e5:10:48:a6:4e:c2:9f:3b:18: 2e:a1:8b:50 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSYQ4c4ODP+YOu1KUrG8qMWYMczAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYxMTU1WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODBjMzkyMzkxYjA4NzY4MTk2ZWEyNjcyNjVmOWU3ZGQw ZjIyMDkwYmQxMjJlZjBlYmQxYTFlMGQ1NjE0NzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvKdsodW7PVueznETLmZL8eE3MY9X8tl/u74cRzAksGOXQ AA1FKSFbzBsyjC8ze736z0Ax1br8EE1jm0HlMME0FKbCWmnR6BY205oHdgsyZLG3 MVMfkF3WuhTHbVX9sMee2jlKYCk2NaeDNiNakb0CRkt4UaDJ7roo8qdbbl9qpGQj FbQKX2/vJX72PlOibBUtd5q7MRn1N3gfBrrsjUz9ktvzaTB0TQtg2hHijpSry/pt y8FMPTYX4blvcN4svcswhEQ3SjmTA48EXKaeeidQ+C7yiKIVhlUF5138olusAEAn jS7iNnjgRILnRxoOQCilNYrXMuACyo51c2dxYiQjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1HTnBIKDn8FCDTLlr7xg18vOnWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzY2M1NGRiLTJjNTctNGFlMS05ZDlkLWFkNDI5MzU1MDkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDYSDANBgkqhkiG9w0BAQsFAAOCAQEAnYaPYOHFpWZx/iE5a8LnI9ZnHbHK VoqoxuiqaA9elnok4TUEx/2EUAckpZkonAH08nqKcFw8sZ1ENJK1rolwVWxYjfVh VwThkHtZq6XQDB68SRm8afRMhKjfKWJEBqvpWm/E9zOQnC1y4zY1YtTSmlrLVmG3 KDPSX5woCXhjNsEvY7luSet4tJD3lJJfWbtR8zmTZHMN+qViKsXBQarEWV+V3Puv YsAOMSu18OX1rZEGuLBeg9G+zGPt6wGFy03oVlgbvY/J9zJtBxAUnnTBkz3yKtOT JZSZxkuTjdukvBXeELoY9fyNfTUEgdCm4WgCDkKz5RBIpk7CnzsYLqGLUA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:13 2025 by rpki-client