$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf4c0d6a-87e1-4500-994c-6d67c6dffa61.roa File: cf4c0d6a-87e1-4500-994c-6d67c6dffa61.roa (raw, json) Hash identifier: lMOi1Wa/Z8BY3QhSfVazl9wtahbzYQfrhlZ2D5NzESc= Subject key identifier: D8:F9:A8:47:10:30:A5:C6:44:78:AC:FE:19:F2:2D:0D:29:7B:64:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DF6BD0AEF82DA93F5C3C9420CDDA047DB00CD01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf4c0d6a-87e1-4500-994c-6d67c6dffa61.roa Signing time: Tue 03 Jun 2025 00:01:35 +0000 ROA not before: Tue 03 Jun 2025 00:01:35 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.171.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f6:bd:0a:ef:82:da:93:f5:c3:c9:42:0c:dd:a0:47:db:00:cd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:01:35 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=2e4419a7df716ff43528909e23de252cc98bf1c165d8958d329365800c9395c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:1e:6e:2d:58:7d:51:41:1a:f3:66:55:90: 25:92:40:1f:d2:fb:bd:01:f6:00:cf:38:71:d2:57: 1a:dc:f4:1b:fb:71:c3:fb:65:c3:0e:cb:c4:a8:cd: b9:ce:68:cc:11:5a:8a:ad:ad:13:1c:d3:01:ba:ba: f0:0f:74:ce:7a:25:5d:cb:21:17:af:f5:70:a2:7f: ad:e4:40:a8:65:d2:f8:18:ac:b4:ff:07:f4:10:c5: 63:87:1d:13:c4:c8:d5:8b:98:0b:c2:81:63:bc:c0: 9f:64:40:08:10:75:6f:c8:bf:40:96:71:1a:b6:6f: 42:9a:12:f2:4a:1f:3a:e1:3a:f0:f1:e9:4f:a4:b7: e5:3e:e4:fc:1d:40:11:8d:87:86:12:45:42:ae:77: 39:3a:8e:a7:c1:93:9e:ef:7b:17:f5:0a:e8:71:ac: 65:ee:52:0e:be:8c:da:99:c8:ea:b9:e6:ef:a6:10: bf:c1:ca:80:8c:7b:ae:a7:3f:e3:37:d8:73:d9:a8: fc:ab:95:00:85:26:39:49:9c:dc:ef:e4:7a:5d:c9: cb:2e:70:ff:e8:34:06:96:33:38:bd:b2:b7:84:7e: ff:a5:3d:ce:f8:18:19:75:69:5b:ee:b9:6f:11:d9: 49:bf:a5:7e:92:ac:b9:ed:f2:f4:4f:04:e7:10:70: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:A8:47:10:30:A5:C6:44:78:AC:FE:19:F2:2D:0D:29:7B:64:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf4c0d6a-87e1-4500-994c-6d67c6dffa61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.171.240.0/20 Signature Algorithm: sha256WithRSAEncryption ae:ab:c4:9f:ac:17:a0:96:e1:98:59:97:69:4c:94:11:49:5c: 7a:e8:38:21:e6:ef:d4:2b:75:af:46:30:98:fe:da:c4:de:d7: bf:e5:a8:29:31:d8:49:b3:ba:6c:3a:74:48:03:85:bd:b8:1c: 6d:d2:a8:d8:e4:1f:2e:66:47:84:b5:f7:07:09:16:20:cc:ff: e1:2b:08:97:67:45:10:fa:33:06:e8:e9:ef:fb:aa:46:fb:5e: 35:82:f4:d8:62:35:f2:f2:08:dd:fe:ee:92:5b:d0:3a:0e:04: 20:29:2e:6c:2b:dc:a6:22:21:68:7a:24:8b:6a:47:89:9e:e9: 26:22:1a:22:7f:b3:b1:54:51:67:bb:a4:bb:82:9b:f9:63:a2: 02:ea:29:65:1d:86:20:36:b0:4c:3f:c8:57:5e:cd:a3:17:f6: a1:89:9f:97:3c:6b:d1:50:8a:24:59:f7:4c:f9:f6:42:c5:f7: 22:16:c8:58:d9:6c:bc:e6:04:7f:81:6f:c6:fd:77:e7:29:61: 24:1b:4b:ad:ef:da:ba:1b:0f:1f:d7:d3:31:e6:2e:96:74:f8: 9e:ff:d7:fd:fc:90:12:5d:96:57:38:9b:c1:95:85:1c:8e:9a: 76:32:41:2a:87:7d:cd:57:d0:fd:15:d6:de:fc:11:ce:66:0a: eb:85:5f:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTfa9Cu+C2pP1w8lCDN2gR9sAzQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAwMTM1WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTQ0MTlhN2RmNzE2ZmY0MzUyODkwOWUyM2RlMjUyY2M5 OGJmMWMxNjVkODk1OGQzMjkzNjU4MDBjOTM5NWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC36B5uLVh9UUEa82ZVkCWSQB/S+70B9gDPOHHSVxrc9Bv7 ccP7ZcMOy8SozbnOaMwRWoqtrRMc0wG6uvAPdM56JV3LIRev9XCif63kQKhl0vgY rLT/B/QQxWOHHRPEyNWLmAvCgWO8wJ9kQAgQdW/Iv0CWcRq2b0KaEvJKHzrhOvDx 6U+kt+U+5PwdQBGNh4YSRUKudzk6jqfBk57vexf1CuhxrGXuUg6+jNqZyOq55u+m EL/ByoCMe66nP+M32HPZqPyrlQCFJjlJnNzv5HpdycsucP/oNAaWMzi9sreEfv+l Pc74GBl1aVvuuW8R2Um/pX6SrLnt8vRPBOcQcGszAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2PmoRxAwpcZEeKz+GfItDSl7ZIcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNGMwZDZhLTg3ZTEtNDUwMC05OTRjLTZkNjdjNmRmZmE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARsq/AwDQYJKoZIhvcNAQELBQADggEBAK6rxJ+sF6CW4ZhZl2lMlBFJXHro OCHm79Qrda9GMJj+2sTe17/lqCkx2Emzumw6dEgDhb24HG3SqNjkHy5mR4S19wcJ FiDM/+ErCJdnRRD6Mwbo6e/7qkb7XjWC9NhiNfLyCN3+7pJb0DoOBCApLmwr3KYi IWh6JItqR4me6SYiGiJ/s7FUUWe7pLuCm/ljogLqKWUdhiA2sEw/yFdezaMX9qGJ n5c8a9FQiiRZ90z59kLF9yIWyFjZbLzmBH+Bb8b9d+cpYSQbS63v2robDx/X0zHm LpZ0+J7/1/38kBJdllc4m8GVhRyOmnYyQSqHfc1X0P0V1t78Ec5mCuuFX2I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:53:46 2025 by rpki-client